@hasna/todos 0.11.53 → 0.11.54

package/dist/cli/index.js

@@ -1011,7 +1011,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
         this._exitCallback = (err) => {
           if (err.code !== "commander.executeSubCommandAsync") {
             throw err;
-          } else {}
+          }
         };
       }
       return this;
@@ -2119,15 +2119,15 @@ var init_esm = __esm(() => {
 });
 
 // src/lib/package-version.ts
-import { existsSync, readFileSync } from "fs";
-import { dirname, join } from "path";
+import { existsSync as existsSync2, readFileSync } from "fs";
+import { dirname, join as join2 } from "path";
 import { fileURLToPath } from "url";
 function getPackageVersion(fromUrl = import.meta.url) {
   try {
     let dir = dirname(fileURLToPath(fromUrl));
     for (let i = 0;i < 5; i++) {
-      const pkgPath = join(dir, "package.json");
-      if (existsSync(pkgPath)) {
+      const pkgPath = join2(dir, "package.json");
+      if (existsSync2(pkgPath)) {
         return JSON.parse(readFileSync(pkgPath, "utf-8")).version || "0.0.0";
       }
       const parent = dirname(dir);
@@ -4285,7 +4285,7 @@ var init_schema = __esm(() => {
 });
 
 // src/db/machines.ts
-import { existsSync as existsSync2 } from "fs";
+import { existsSync as existsSync3 } from "fs";
 import { hostname as osHostname, platform as osPlatform, arch as osArch } from "os";
 import { resolve } from "path";
 import { spawnSync } from "child_process";
@@ -4351,11 +4351,11 @@ function getOrCreateLocalMachine(db) {
   const plat = osPlatform();
   const existing = d.query("SELECT * FROM machines WHERE name = ?").get(name);
   if (existing) {
-    d.run("UPDATE machines SET hostname = ?, platform = ?, last_seen_at = ? WHERE id = ?", [host, plat, now(), existing.id]);
-    return rowToMachine({ ...existing, hostname: host, platform: plat, last_seen_at: now() });
+    d.run("UPDATE machines SET hostname = ?, platform = ?, last_seen_at = ? WHERE id = ?", [host, plat, now2(), existing.id]);
+    return rowToMachine({ ...existing, hostname: host, platform: plat, last_seen_at: now2() });
   }
   const id = uuid();
-  const ts = now();
+  const ts = now2();
   d.run("INSERT INTO machines (id, name, hostname, platform, last_seen_at, metadata, created_at) VALUES (?, ?, ?, ?, ?, '{}', ?)", [id, name, host, plat, ts, ts]);
   return { id, name, hostname: host, platform: plat, ssh_address: null, is_primary: false, last_seen_at: ts, archived_at: null, metadata: {}, created_at: ts };
 }
@@ -4391,7 +4391,7 @@ function registerMachine(name, opts, db) {
       opts.hostname ?? existing.hostname,
       opts.platform ?? existing.platform,
       opts.ssh_address ?? existing.ssh_address,
-      now(),
+      now2(),
       JSON.stringify(metadata),
       existing.id
     ]);
@@ -4401,7 +4401,7 @@ function registerMachine(name, opts, db) {
     return getMachine(existing.id, d);
   }
   const id = uuid();
-  const ts = now();
+  const ts = now2();
   const host = opts.hostname || osHostname();
   const plat = opts.platform || osPlatform();
   d.run("INSERT INTO machines (id, name, hostname, platform, ssh_address, last_seen_at, is_primary, metadata, created_at) VALUES (?, ?, ?, ?, ?, ?, 0, ?, ?)", [id, name, host, plat, opts.ssh_address ?? null, ts, JSON.stringify(metadata), ts]);
@@ -4423,7 +4423,7 @@ function updateMachineHeartbeat(idOrName, opts = {}, db) {
     }, d);
   }
   const metadata = topologyMetadata({ arch: osArch(), ...opts }, parseMetadata(row.metadata));
-  const ts = now();
+  const ts = now2();
   d.run("UPDATE machines SET hostname = ?, platform = ?, ssh_address = ?, last_seen_at = ?, metadata = ? WHERE id = ?", [
     opts.hostname ?? row.hostname ?? osHostname(),
     opts.platform ?? row.platform ?? osPlatform(),
@@ -4492,7 +4492,7 @@ function getMachineTopologyDiagnostics(opts = {}, db, at = new Date) {
         message: `${project.name} has ${distinctPaths.length} different machine-local paths`
       });
     }
-    if (localRow && !existsSync2(localRow.path)) {
+    if (localRow && !existsSync3(localRow.path)) {
       pathIssues.push({
         type: "path_missing",
         project_id: project.id,
@@ -4503,7 +4503,7 @@ function getMachineTopologyDiagnostics(opts = {}, db, at = new Date) {
         message: `Local path does not exist on this machine: ${localRow.path}`
       });
     }
-    if (!localRow && project.path && machineById.has(localMachine.id) && !existsSync2(project.path)) {
+    if (!localRow && project.path && machineById.has(localMachine.id) && !existsSync3(project.path)) {
       pathIssues.push({
         type: "path_missing",
         project_id: project.id,
@@ -4551,7 +4551,7 @@ function archiveMachine(id, db) {
   if (activeCount.cnt > 0) {
     throw new Error(`Cannot archive machine with ${activeCount.cnt} active/pending tasks`);
   }
-  d.run("UPDATE machines SET archived_at = ? WHERE id = ?", [now(), id]);
+  d.run("UPDATE machines SET archived_at = ? WHERE id = ?", [now2(), id]);
 }
 function unarchiveMachine(id, db) {
   const d = db || getDatabase();
@@ -4616,7 +4616,7 @@ __export(exports_database, {
   uuid: () => uuid,
   resolvePartialId: () => resolvePartialId,
   resetDatabase: () => resetDatabase,
-  now: () => now,
+  now: () => now2,
   lockExpiryCutoff: () => lockExpiryCutoff,
   isLockExpired: () => isLockExpired,
   getDatabasePath: () => getDatabasePath,
@@ -4626,8 +4626,8 @@ __export(exports_database, {
   LOCK_EXPIRY_MINUTES: () => LOCK_EXPIRY_MINUTES
 });
 import { Database } from "bun:sqlite";
-import { existsSync as existsSync3, mkdirSync } from "fs";
-import { dirname as dirname2, join as join2, resolve as resolve2 } from "path";
+import { existsSync as existsSync4, mkdirSync } from "fs";
+import { dirname as dirname2, join as join3, resolve as resolve2 } from "path";
 function isInMemoryDb(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
@@ -4636,8 +4636,8 @@ function findNearestProjectDb(startDir) {
   const stopAt = gitRoot ? resolve2(gitRoot) : resolve2(startDir);
   let dir = resolve2(startDir);
   while (true) {
-    const candidate = join2(dir, ".hasna", "todos", "todos.db");
-    if (existsSync3(candidate))
+    const candidate = join3(dir, ".hasna", "todos", "todos.db");
+    if (existsSync4(candidate))
       return candidate;
     if (dir === stopAt)
       break;
@@ -4651,7 +4651,7 @@ function findNearestProjectDb(startDir) {
 function findGitRoot(startDir) {
   let dir = resolve2(startDir);
   while (true) {
-    if (existsSync3(join2(dir, ".git")))
+    if (existsSync4(join3(dir, ".git")))
       return dir;
     const parent = dirname2(dir);
     if (parent === dir)
@@ -4674,11 +4674,11 @@ function getDbPath() {
   if (process.env["TODOS_DB_SCOPE"] === "project") {
     const gitRoot = findGitRoot(cwd);
     if (gitRoot) {
-      return join2(gitRoot, ".hasna", "todos", "todos.db");
+      return join3(gitRoot, ".hasna", "todos", "todos.db");
     }
   }
   const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-  return join2(home, ".hasna", "todos", "todos.db");
+  return join3(home, ".hasna", "todos", "todos.db");
 }
 function getDatabasePath() {
   return getDbPath();
@@ -4687,7 +4687,7 @@ function ensureDir(filePath) {
   if (isInMemoryDb(filePath))
     return;
   const dir = dirname2(resolve2(filePath));
-  if (!existsSync3(dir)) {
+  if (!existsSync4(dir)) {
     mkdirSync(dir, { recursive: true });
   }
 }
@@ -4722,7 +4722,7 @@ function resetDatabase() {
   _db = null;
   _dbPath = null;
 }
-function now() {
+function now2() {
   return new Date().toISOString();
 }
 function uuid() {
@@ -4958,7 +4958,7 @@ function generatePrefix(name, db) {
 function createProject(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   const taskListId = input.task_list_id ?? `todos-${slugify(input.name)}`;
   const taskPrefix = input.task_prefix || generatePrefix(input.name, d);
   d.run(`INSERT INTO projects (id, name, path, description, task_list_id, task_prefix, task_counter, created_at, updated_at)
@@ -4992,7 +4992,7 @@ function updateProject(id, input, db) {
   if (!project)
     throw new ProjectNotFoundError(id);
   const sets = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.name !== undefined) {
     sets.push("name = ?");
     params.push(input.name);
@@ -5019,7 +5019,7 @@ function renameProject(id, input, db) {
   if (!project)
     throw new ProjectNotFoundError(id);
   let taskListsUpdated = 0;
-  const ts = now();
+  const ts = now2();
   if (input.new_slug !== undefined) {
     const normalised = input.new_slug.toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-|-$/g, "");
     if (!normalised)
@@ -5053,7 +5053,7 @@ function rowToSource(row) {
 function addProjectSource(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO project_sources (id, project_id, type, name, uri, description, metadata, created_at, updated_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -5091,7 +5091,7 @@ function nextTaskShortId(projectId, db) {
   const project = getProject(projectId, d);
   if (!project || !project.task_prefix)
     return null;
-  d.run("UPDATE projects SET task_counter = task_counter + 1, updated_at = ? WHERE id = ?", [now(), projectId]);
+  d.run("UPDATE projects SET task_counter = task_counter + 1, updated_at = ? WHERE id = ?", [now2(), projectId]);
   const updated = getProject(projectId, d);
   const padded = String(updated.task_counter).padStart(5, "0");
   return `${updated.task_prefix}-${padded}`;
@@ -5102,7 +5102,7 @@ function ensureProject(name, path, db) {
   if (existing) {
     if (!existing.task_prefix) {
       const prefix = generatePrefix(existing.name, d);
-      d.run("UPDATE projects SET task_prefix = ?, updated_at = ? WHERE id = ?", [prefix, now(), existing.id]);
+      d.run("UPDATE projects SET task_prefix = ?, updated_at = ? WHERE id = ?", [prefix, now2(), existing.id]);
       return getProject(existing.id, d);
     }
     setMachineLocalPath(existing.id, path, d);
@@ -5115,7 +5115,7 @@ function ensureProject(name, path, db) {
 function setMachineLocalPath(projectId, path, db) {
   const d = db || getDatabase();
   const machineId = getMachineId(d);
-  const ts = now();
+  const ts = now2();
   const existing = d.query("SELECT * FROM project_machine_paths WHERE project_id = ? AND machine_id = ?").get(projectId, machineId);
   if (existing) {
     if (existing.path !== path) {
@@ -5155,20 +5155,20 @@ var init_projects = __esm(() => {
 });
 
 // src/lib/sync-utils.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync2, readdirSync, statSync, writeFileSync } from "fs";
-import { join as join3 } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync2, readdirSync, statSync, writeFileSync } from "fs";
+import { join as join4 } from "path";
 function getHomeDir() {
   return process.env["HOME"] || process.env["USERPROFILE"] || "~";
 }
 function getTodosGlobalDir() {
-  return join3(getHomeDir(), ".hasna", "todos");
+  return join4(getHomeDir(), ".hasna", "todos");
 }
 function ensureDir2(dir) {
-  if (!existsSync4(dir))
+  if (!existsSync5(dir))
     mkdirSync2(dir, { recursive: true });
 }
 function listJsonFiles(dir) {
-  if (!existsSync4(dir))
+  if (!existsSync5(dir))
     return [];
   return readdirSync(dir).filter((f) => f.endsWith(".json"));
 }
@@ -5184,14 +5184,14 @@ function writeJsonFile(path, data) {
 `);
 }
 function readHighWaterMark(dir) {
-  const path = join3(dir, ".highwatermark");
-  if (!existsSync4(path))
+  const path = join4(dir, ".highwatermark");
+  if (!existsSync5(path))
     return 1;
   const val = parseInt(readFileSync2(path, "utf-8").trim(), 10);
   return isNaN(val) ? 1 : val;
 }
 function writeHighWaterMark(dir, value) {
-  writeFileSync(join3(dir, ".highwatermark"), String(value));
+  writeFileSync(join4(dir, ".highwatermark"), String(value));
 }
 function getFileMtimeMs(path) {
   try {
@@ -5233,10 +5233,10 @@ __export(exports_config, {
   getAgentTaskListId: () => getAgentTaskListId,
   getAgentPoolForProject: () => getAgentPoolForProject
 });
-import { existsSync as existsSync5 } from "fs";
-import { dirname as dirname3, join as join4 } from "path";
+import { existsSync as existsSync6 } from "fs";
+import { dirname as dirname3, join as join5 } from "path";
 function getConfigPath() {
-  return join4(getTodosGlobalDir(), "config.json");
+  return join5(getTodosGlobalDir(), "config.json");
 }
 function resetConfig() {
   cached = null;
@@ -5247,7 +5247,7 @@ function normalizeAgent(agent) {
 function loadConfig() {
   if (cached)
     return cached;
-  if (!existsSync5(getConfigPath())) {
+  if (!existsSync6(getConfigPath())) {
     cached = {};
     return cached;
   }
@@ -5400,7 +5400,7 @@ var init_completion_guard = __esm(() => {
 var exports_redaction = {};
 __export(exports_redaction, {
   upsertSecretSafetyConfig: () => upsertSecretSafetyConfig,
-  redactValue: () => redactValue,
+  redactValue: () => redactValue2,
   redactEvidenceText: () => redactEvidenceText,
   listSecretFindings: () => listSecretFindings,
   hasSecretFindings: () => hasSecretFindings,
@@ -5440,18 +5440,18 @@ function redactEvidenceText(value) {
   }
   return redacted;
 }
-function redactValue(value) {
+function redactValue2(value) {
   if (typeof value === "string")
     return redactEvidenceText(value);
   if (Array.isArray(value))
-    return value.map(redactValue);
+    return value.map(redactValue2);
   if (value && typeof value === "object") {
     const redacted = {};
     for (const [key, child] of Object.entries(value)) {
       if (isSecretKey(key)) {
         redacted[key] = "[REDACTED]";
       } else {
-        redacted[key] = redactValue(child);
+        redacted[key] = redactValue2(child);
       }
     }
     return redacted;
@@ -5913,7 +5913,7 @@ __export(exports_event_hooks, {
   emitLocalEventHooks: () => emitLocalEventHooks,
   LOCAL_EVENT_TYPES: () => LOCAL_EVENT_TYPES
 });
-import { createHash, randomUUID } from "crypto";
+import { createHash, randomUUID as randomUUID3 } from "crypto";
 import { appendFileSync, mkdirSync as mkdirSync3 } from "fs";
 import { dirname as dirname4, resolve as resolve5 } from "path";
 import { createConnection } from "net";
@@ -5974,10 +5974,10 @@ function canonicalEvent(input) {
 }
 function buildEnvelope(type, payload, timestamp = new Date().toISOString()) {
   const base = {
-    id: randomUUID(),
+    id: randomUUID3(),
     type,
     timestamp,
-    payload: redactValue(payload ?? {}),
+    payload: redactValue2(payload ?? {}),
     source: { package: "@hasna/todos", local_only: true }
   };
   const digest = createHash("sha256").update(canonicalEvent(base)).digest("hex");
@@ -6191,7 +6191,7 @@ function redactText(text, options = {}) {
   return out;
 }
 function redactExportRecord(record) {
-  const base = redactValue(record);
+  const base = redactValue2(record);
   for (const [key, value] of Object.entries(base)) {
     if (typeof value === "string") {
       base[key] = redactText(value);
@@ -6269,7 +6269,7 @@ function redactActivityRecord(record) {
 function logActivity(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const ts = input.created_at ?? now();
+  const ts = input.created_at ?? now2();
   const machineId = input.machine_id ?? getMachineId2();
   d.run(`INSERT INTO activity_log (
       id, entity_type, entity_id, action, field, old_value, new_value,
@@ -6337,7 +6337,7 @@ function exportActivityLog(filter = {}, db) {
   const records = listActivity({ ...filter, limit: filter.limit ?? 1000, order: "asc" }, db).map(redactActivityRecord);
   return {
     schema_version: ACTIVITY_LOG_SCHEMA,
-    exported_at: now(),
+    exported_at: now2(),
     records
   };
 }
@@ -6418,7 +6418,7 @@ __export(exports_audit, {
 function logTaskChange(taskId, action, field, oldValue, newValue, agentId, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO task_history (id, task_id, action, field, old_value, new_value, agent_id, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, [id, taskId, action, field || null, oldValue ?? null, newValue ?? null, agentId || null, timestamp]);
   try {
@@ -6577,7 +6577,7 @@ function createWebhook(input, db) {
     input.task_list_id || null,
     input.agent_id || null,
     input.task_id || null,
-    now()
+    now2()
   ]);
   return getWebhook(id, d);
 }
@@ -6596,7 +6596,7 @@ function deleteWebhook(id, db) {
 }
 function logDelivery(d, webhookId, event, payload, statusCode, response, attempt) {
   const id = uuid();
-  d.run(`INSERT INTO webhook_deliveries (id, webhook_id, event, payload, status_code, response, attempt, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, [id, webhookId, event, payload, statusCode, response, attempt, now()]);
+  d.run(`INSERT INTO webhook_deliveries (id, webhook_id, event, payload, status_code, response, attempt, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, [id, webhookId, event, payload, statusCode, response, attempt, now2()]);
 }
 function matchesScope(wh, payload) {
   if (wh.project_id && payload.project_id !== wh.project_id)
@@ -6666,14 +6666,14 @@ async function deliverWebhook(wh, event, body, attempt, db) {
     activeDeliveries--;
   }
 }
-async function dispatchWebhook(event, payload, db) {
+async function dispatchWebhook2(event, payload, db) {
   const d = db || getDatabase();
   const webhooks = listWebhooks(d).filter((w) => w.active && (w.events.length === 0 || w.events.includes(event)));
   const payloadObj = typeof payload === "object" && payload !== null ? payload : {};
   for (const wh of webhooks) {
     if (!matchesScope(wh, payloadObj))
       continue;
-    const body = JSON.stringify({ event, payload, timestamp: now() });
+    const body = JSON.stringify({ event, payload, timestamp: now2() });
     deliverWebhook(wh, event, body, 1, d).catch((err) => {
       console.error(`[webhook] Dispatch failed for webhook ${wh.id}:`, err);
     });
@@ -6723,7 +6723,7 @@ function replaceTaskTags(taskId, tags, db) {
 }
 function createTask(input, db) {
   const d = db || getDatabase();
-  const timestamp = now();
+  const timestamp = now2();
   const tags = input.tags || [];
   const assignedBy = input.assigned_by || input.agent_id;
   const assignedFromProject = input.assigned_from_project || null;
@@ -6783,7 +6783,7 @@ function createTask(input, db) {
     insertTaskTags(id, tags, d);
   }
   const task = getTask(id, d);
-  dispatchWebhook("task.created", { id: task.id, short_id: task.short_id, title: task.title, status: task.status, priority: task.priority, project_id: task.project_id, assigned_to: task.assigned_to }, d).catch(() => {});
+  dispatchWebhook2("task.created", { id: task.id, short_id: task.short_id, title: task.title, status: task.status, priority: task.priority, project_id: task.project_id, assigned_to: task.assigned_to }, d).catch(() => {});
   return task;
 }
 function getTask(id, db) {
@@ -7002,7 +7002,7 @@ function updateTask(id, input, db) {
   if (task.version !== input.version) {
     throw new VersionConflictError(id, input.version, task.version);
   }
-  const timestamp = now();
+  const timestamp = now2();
   const completionTimestamp = input.completed_at ?? timestamp;
   const sets = ["version = version + 1", "updated_at = ?"];
   const params = [timestamp];
@@ -7097,7 +7097,7 @@ function updateTask(id, input, db) {
     sets.push("approved_by = ?");
     params.push(input.approved_by);
     sets.push("approved_at = ?");
-    params.push(now());
+    params.push(now2());
   }
   if (input.recurrence_rule !== undefined) {
     sets.push("recurrence_rule = ?");
@@ -7128,11 +7128,11 @@ function updateTask(id, input, db) {
   if (input.approved_by !== undefined)
     logTaskChange(id, "approve", "approved_by", null, input.approved_by, agentId, d);
   if (input.assigned_to !== undefined && input.assigned_to !== task.assigned_to) {
-    dispatchWebhook("task.assigned", { id, assigned_to: input.assigned_to, title: task.title }, d).catch(() => {});
+    dispatchWebhook2("task.assigned", { id, assigned_to: input.assigned_to, title: task.title }, d).catch(() => {});
     emitLocalEventHooksQuiet({ type: "task.assigned", payload: { id, assigned_to: input.assigned_to, title: task.title } });
   }
   if (input.status !== undefined && input.status !== task.status) {
-    dispatchWebhook("task.status_changed", { id, old_status: task.status, new_status: input.status, title: task.title }, d).catch(() => {});
+    dispatchWebhook2("task.status_changed", { id, old_status: task.status, new_status: input.status, title: task.title }, d).catch(() => {});
     emitLocalEventHooksQuiet({ type: "task.status_changed", payload: { id, old_status: task.status, new_status: input.status, title: task.title } });
   }
   if (input.approved_by !== undefined) {
@@ -7330,7 +7330,7 @@ function createTemplate(input, db) {
     input.project_id || null,
     input.plan_id || null,
     JSON.stringify(input.metadata || {}),
-    now()
+    now2()
   ]);
   if (input.tasks && input.tasks.length > 0) {
     addTemplateTasks(id, input.tasks, d);
@@ -7375,7 +7375,7 @@ function updateTemplate(id, updates, db) {
       metadata: current.metadata,
       tasks: current.tasks
     });
-    d.run(`INSERT INTO template_versions (id, template_id, version, snapshot, created_at) VALUES (?, ?, ?, ?, ?)`, [uuid(), resolved, current.version, snapshot, now()]);
+    d.run(`INSERT INTO template_versions (id, template_id, version, snapshot, created_at) VALUES (?, ?, ?, ?, ?)`, [uuid(), resolved, current.version, snapshot, now2()]);
   }
   const sets = ["version = version + 1"];
   const values = [];
@@ -7459,7 +7459,7 @@ function addTemplateTasks(templateId, tasks, db) {
       task.include_template_id || null,
       JSON.stringify(task.depends_on || []),
       JSON.stringify(task.metadata || {}),
-      now()
+      now2()
     ]);
     const row = d.query("SELECT * FROM template_tasks WHERE id = ?").get(id);
     if (row)
@@ -7821,7 +7821,7 @@ function moveTask(taskId, target, db) {
   if (!task)
     throw new TaskNotFoundError(taskId);
   const sets = ["updated_at = ?", "version = version + 1"];
-  const params = [now()];
+  const params = [now2()];
   if (target.task_list_id !== undefined) {
     sets.push("task_list_id = ?");
     params.push(target.task_list_id);
@@ -7908,7 +7908,7 @@ function startTask(id, agentId, db) {
     throw new Error(`Task is blocked by ${blocking.length} unfinished dependency(ies): ${blockerIds}`);
   }
   const cutoff = lockExpiryCutoff();
-  const timestamp = now();
+  const timestamp = now2();
   const result = d.run(`UPDATE tasks SET status = 'in_progress', assigned_to = ?, locked_by = ?, locked_at = ?, started_at = COALESCE(started_at, ?), version = version + 1, updated_at = ?
      WHERE id = ? AND status IN ('pending', 'in_progress') AND (locked_by IS NULL OR locked_by = ? OR locked_at < ?)`, [agentId, agentId, timestamp, timestamp, timestamp, id, agentId, cutoff]);
   if (result.changes === 0) {
@@ -7922,7 +7922,7 @@ function startTask(id, agentId, db) {
     throw new Error(`Task ${id} could not be started because it changed during claim`);
   }
   logTaskChange(id, "start", "status", "pending", "in_progress", agentId, d);
-  dispatchWebhook("task.started", { id, agent_id: agentId, title: task.title }, d).catch(() => {});
+  dispatchWebhook2("task.started", { id, agent_id: agentId, title: task.title }, d).catch(() => {});
   emitLocalEventHooksQuiet({ type: "task.started", payload: { id, agent_id: agentId, title: task.title } });
   return { ...task, status: "in_progress", assigned_to: agentId, locked_by: agentId, locked_at: timestamp, started_at: task.started_at || timestamp, version: task.version + 1, updated_at: timestamp };
 }
@@ -7944,7 +7944,7 @@ function completeTask(id, agentId, db, options) {
     completionMeta._completion = { confidence: options.confidence };
   }
   const hasMeta = Object.keys(completionMeta).length > 0;
-  const timestamp = options?.completed_at || now();
+  const timestamp = options?.completed_at || now2();
   const confidence = options?.confidence !== undefined ? options.confidence : null;
   const tx = d.transaction(() => {
     if (hasMeta) {
@@ -7960,7 +7960,7 @@ function completeTask(id, agentId, db, options) {
   });
   tx();
   logTaskChange(id, "complete", "status", task.status, "completed", agentId || null, d);
-  dispatchWebhook("task.completed", { id, agent_id: agentId, title: task.title, completed_at: timestamp }, d).catch(() => {});
+  dispatchWebhook2("task.completed", { id, agent_id: agentId, title: task.title, completed_at: timestamp }, d).catch(() => {});
   emitLocalEventHooksQuiet({ type: "task.completed", payload: { id, agent_id: agentId, title: task.title, completed_at: timestamp } });
   let spawnedTask = null;
   if (task.recurrence_rule && !options?.skip_recurrence) {
@@ -8002,7 +8002,7 @@ function completeTask(id, agentId, db, options) {
   if (unblockedDeps.length > 0) {
     meta._unblocked = unblockedDeps.map((d2) => ({ id: d2.id, short_id: d2.short_id, title: d2.title }));
     for (const dep of unblockedDeps) {
-      dispatchWebhook("task.unblocked", { id: dep.id, unblocked_by: id, title: dep.title }, d).catch(() => {});
+      dispatchWebhook2("task.unblocked", { id: dep.id, unblocked_by: id, title: dep.title }, d).catch(() => {});
       emitLocalEventHooksQuiet({ type: "task.unblocked", payload: { id: dep.id, unblocked_by: id, title: dep.title } });
     }
   }
@@ -8020,13 +8020,13 @@ function lockTask(id, agentId, db) {
     };
   }
   if (task.locked_by === agentId && !isLockExpired(task.locked_at)) {
-    const timestamp2 = now();
+    const timestamp2 = now2();
     d.run(`UPDATE tasks SET locked_at = ?, updated_at = ?, version = version + 1 WHERE id = ? AND locked_by = ?`, [timestamp2, timestamp2, id, agentId]);
     logTaskChange(id, "lock_renew", "locked_by", agentId, agentId, agentId, d);
     return { success: true, locked_by: agentId, locked_at: timestamp2, expires_at: lockExpiresAt(timestamp2) };
   }
   const cutoff = lockExpiryCutoff();
-  const timestamp = now();
+  const timestamp = now2();
   const result = d.run(`UPDATE tasks SET locked_by = ?, locked_at = ?, version = version + 1, updated_at = ?
      WHERE id = ? AND status NOT IN ('completed', 'cancelled') AND (locked_by IS NULL OR locked_by = ? OR locked_at < ?)`, [agentId, timestamp, timestamp, id, agentId, cutoff]);
   if (result.changes === 0) {
@@ -8063,7 +8063,7 @@ function unlockTask(id, agentId, db) {
   if (agentId && task.locked_by && task.locked_by !== agentId) {
     throw new LockError(id, task.locked_by);
   }
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`UPDATE tasks SET locked_by = NULL, locked_at = NULL, version = version + 1, updated_at = ?
      WHERE id = ?`, [timestamp, id]);
   return true;
@@ -8182,15 +8182,15 @@ function failTask(id, agentId, reason, options, db) {
       reason: reason || "Unknown failure",
       error_code: options?.error_code || null,
       failed_by: agentId || null,
-      failed_at: now(),
+      failed_at: now2(),
       retry_requested: options?.retry || false
     }
   };
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`UPDATE tasks SET status = 'failed', locked_by = NULL, locked_at = NULL, metadata = ?, version = version + 1, updated_at = ?
      WHERE id = ?`, [JSON.stringify(meta), timestamp, id]);
   logTaskChange(id, "fail", "status", task.status, "failed", agentId || null, d);
-  dispatchWebhook("task.failed", { id, reason, error_code: options?.error_code, agent_id: agentId, title: task.title }, d).catch(() => {});
+  dispatchWebhook2("task.failed", { id, reason, error_code: options?.error_code, agent_id: agentId, title: task.title }, d).catch(() => {});
   emitLocalEventHooksQuiet({ type: "task.failed", payload: { id, reason, error_code: options?.error_code, agent_id: agentId, title: task.title } });
   const failedTask = {
     ...task,
@@ -8267,7 +8267,7 @@ function stealTask(agentId, opts, db) {
   const priorityOrder = { critical: 0, high: 1, medium: 2, low: 3 };
   staleTasks.sort((a, b) => (priorityOrder[a.priority] ?? 9) - (priorityOrder[b.priority] ?? 9));
   const target = staleTasks[0];
-  const timestamp = now();
+  const timestamp = now2();
   const cutoff = new Date(Date.now() - staleMinutes * 60 * 1000).toISOString();
   const result = d.run(`UPDATE tasks SET assigned_to = ?, locked_by = ?, locked_at = ?, updated_at = ?, version = version + 1
      WHERE id = ? AND status = 'in_progress' AND (updated_at < ? OR (locked_at IS NOT NULL AND locked_at < ?))`, [agentId, agentId, timestamp, timestamp, target.id, cutoff, cutoff]);
@@ -8275,7 +8275,7 @@ function stealTask(agentId, opts, db) {
     return null;
   logTaskChange(target.id, "steal", "assigned_to", target.assigned_to, agentId, agentId, d);
   logTaskChange(target.id, "steal", "locked_by", target.locked_by, agentId, agentId, d);
-  dispatchWebhook("task.assigned", { id: target.id, agent_id: agentId, title: target.title, stolen_from: target.assigned_to }, d).catch(() => {});
+  dispatchWebhook2("task.assigned", { id: target.id, agent_id: agentId, title: target.title, stolen_from: target.assigned_to }, d).catch(() => {});
   emitLocalEventHooksQuiet({ type: "task.assigned", payload: { id: target.id, agent_id: agentId, title: target.title, stolen_from: target.assigned_to } });
   return { ...target, assigned_to: agentId, locked_by: agentId, locked_at: timestamp, updated_at: timestamp, version: target.version + 1 };
 }
@@ -8344,7 +8344,7 @@ function getStatus(filters, agentId, options, db) {
   const next_task = getNextTask(agentId, filters, d);
   const stale = getStaleTasks(30, filters, d);
   const conditions = ["recurrence_rule IS NOT NULL", "status = 'pending'", "due_at < ?"];
-  const params = [now()];
+  const params = [now2()];
   if (filters?.project_id) {
     conditions.push("project_id = ?");
     params.push(filters.project_id);
@@ -8453,7 +8453,7 @@ function redistributeStaleTasks(agentId, options, db) {
   const maxAge = options?.max_age_minutes ?? 60;
   const stale = getStaleTasks(maxAge, options?.project_id ? { project_id: options.project_id } : undefined, d);
   const limited = options?.limit ? stale.slice(0, options.limit) : stale;
-  const timestamp = now();
+  const timestamp = now2();
   const released = [];
   for (const t of limited) {
     d.run(`UPDATE tasks SET locked_by = NULL, locked_at = NULL, status = 'pending', version = version + 1, updated_at = ? WHERE id = ?`, [timestamp, t.id]);
@@ -8600,7 +8600,7 @@ function archiveTasks(options, db) {
     conditions.push("updated_at < ?");
     params.push(cutoff);
   }
-  const ts = now();
+  const ts = now2();
   const result = d.run(`UPDATE tasks SET archived_at = ? WHERE ${conditions.join(" AND ")}`, [ts, ...params]);
   return { archived: result.changes };
 }
@@ -8787,7 +8787,7 @@ function assertPositiveMinutes(minutes) {
 function recalculateTaskActualMinutes(taskId, db) {
   const row = db.query("SELECT COALESCE(SUM(minutes), 0) as total FROM task_time_logs WHERE task_id = ?").get(taskId);
   const total = Number(row.total || 0);
-  db.run("UPDATE tasks SET actual_minutes = ?, updated_at = ? WHERE id = ?", [total, now(), taskId]);
+  db.run("UPDATE tasks SET actual_minutes = ?, updated_at = ? WHERE id = ?", [total, now2(), taskId]);
   return total;
 }
 function logTime(input, db) {
@@ -8795,7 +8795,7 @@ function logTime(input, db) {
   if (!getTask(input.task_id, d))
     throw new Error(`Task not found: ${input.task_id}`);
   const id = uuid();
-  const ts = now();
+  const ts = now2();
   const minutes = assertPositiveMinutes(input.minutes);
   d.run(`INSERT INTO task_time_logs (id, task_id, run_id, focus_session_id, agent_id, minutes, started_at, ended_at, notes, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [id, input.task_id, input.run_id || null, input.focus_session_id || null, input.agent_id || null, minutes, input.started_at || null, input.ended_at || null, input.notes || null, ts]);
@@ -8822,7 +8822,7 @@ function startFocusSession(input, db) {
   if (input.task_id && !getTask(input.task_id, d))
     throw new Error(`Task not found: ${input.task_id}`);
   const id = uuid();
-  const ts = now();
+  const ts = now2();
   const startedAt = input.started_at || ts;
   d.run(`INSERT INTO focus_sessions (
       id, task_id, plan_id, run_id, agent_id, title, status, started_at, last_resumed_at,
@@ -8892,7 +8892,7 @@ function pauseFocusSession(id, pausedAt, db) {
     throw new Error(`Focus session not found: ${id}`);
   if (session.status !== "active")
     throw new Error(`Focus session is ${session.status}, not active`);
-  const ts = now();
+  const ts = now2();
   const pauseAt = pausedAt || ts;
   const minutes = session.actual_minutes + minutesBetween(session.last_resumed_at, pauseAt);
   d.run("UPDATE focus_sessions SET status = 'paused', actual_minutes = ?, paused_at = ?, last_resumed_at = NULL, updated_at = ? WHERE id = ?", [minutes, pauseAt, ts, id]);
@@ -8905,7 +8905,7 @@ function resumeFocusSession(id, resumedAt, db) {
     throw new Error(`Focus session not found: ${id}`);
   if (session.status !== "paused")
     throw new Error(`Focus session is ${session.status}, not paused`);
-  const ts = now();
+  const ts = now2();
   const resumed = resumedAt || ts;
   d.run("UPDATE focus_sessions SET status = 'active', paused_at = NULL, last_resumed_at = ?, updated_at = ? WHERE id = ?", [resumed, ts, id]);
   return getFocusSession(id, d);
@@ -8917,7 +8917,7 @@ function stopFocusSession(input, db) {
     throw new Error(`Focus session not found: ${input.id}`);
   if (session.status === "completed" || session.status === "cancelled")
     return session;
-  const ts = now();
+  const ts = now2();
   const endedAt = input.ended_at || ts;
   const finalMinutes = session.status === "active" ? session.actual_minutes + minutesBetween(session.last_resumed_at, endedAt) : session.actual_minutes;
   const finalStatus = input.status || "completed";
@@ -8996,7 +8996,7 @@ function getTimeReport(opts, db) {
 function watchTask(taskId, agentId, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const ts = now();
+  const ts = now2();
   d.run(`INSERT OR IGNORE INTO task_watchers (id, task_id, agent_id, created_at) VALUES (?, ?, ?, ?)`, [id, taskId, agentId, ts]);
   const existing = d.query(`SELECT * FROM task_watchers WHERE task_id = ? AND agent_id = ?`).get(taskId, agentId);
   return existing;
@@ -9012,11 +9012,11 @@ function getTaskWatchers(taskId, db) {
 }
 function notifyWatchers(taskId, event, data, db) {
   const watchers = getTaskWatchers(taskId, db);
-  dispatchWebhook(`task.watcher.${event}`, { task_id: taskId, watchers: watchers.map((w) => w.agent_id), ...data }, db).catch(() => {});
+  dispatchWebhook2(`task.watcher.${event}`, { task_id: taskId, watchers: watchers.map((w) => w.agent_id), ...data }, db).catch(() => {});
 }
 function logCost(taskId, tokens, usd, db) {
   const d = db || getDatabase();
-  d.run("UPDATE tasks SET cost_tokens = cost_tokens + ?, cost_usd = cost_usd + ?, updated_at = ? WHERE id = ?", [tokens, usd, now(), taskId]);
+  d.run("UPDATE tasks SET cost_tokens = cost_tokens + ?, cost_usd = cost_usd + ?, updated_at = ? WHERE id = ?", [tokens, usd, now2(), taskId]);
 }
 var init_task_relations = __esm(() => {
   init_database();
@@ -9029,7 +9029,7 @@ var init_task_relations = __esm(() => {
 function createPlan(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO plans (id, project_id, task_list_id, agent_id, name, description, status, created_at, updated_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -9062,7 +9062,7 @@ function updatePlan(id, input, db) {
   if (!plan)
     throw new PlanNotFoundError(id);
   const sets = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.name !== undefined) {
     sets.push("name = ?");
     params.push(input.name);
@@ -9104,7 +9104,7 @@ var init_plans = __esm(() => {
 });
 
 // src/db/boards.ts
-function parseJsonObject(value) {
+function parseJsonObject2(value) {
   if (!value)
     return {};
   if (typeof value === "object" && !Array.isArray(value))
@@ -9147,7 +9147,7 @@ function rowToTaskBoard(row) {
   return {
     ...row,
     lanes: normalizeLanes(row.scope, parseJsonArray(row.lanes)),
-    filters: parseJsonObject(row.filters)
+    filters: parseJsonObject2(row.filters)
   };
 }
 function maybeFilter(value) {
@@ -9156,7 +9156,7 @@ function maybeFilter(value) {
 function createTaskBoard(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   const scope = input.scope || "tasks";
   const lanes = normalizeLanes(scope, input.lanes);
   d.run(`INSERT INTO task_boards (id, name, scope, project_id, task_list_id, plan_id, agent_id, lanes, filters, created_at, updated_at)
@@ -9220,7 +9220,7 @@ function updateTaskBoard(idOrName, input, db) {
   if (!board)
     throw new Error(`Board not found: ${idOrName}`);
   const sets = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.name !== undefined) {
     sets.push("name = ?");
     params.push(input.name);
@@ -9375,7 +9375,7 @@ function buildTaskBoardSnapshot(idOrBoard, db) {
   const lanes = buildLaneSnapshots(board, cards);
   return {
     board,
-    generated_at: now(),
+    generated_at: now2(),
     lanes,
     totals: {
       cards: cards.length,
@@ -9442,7 +9442,7 @@ function exportTaskBoardBundle(idOrName, db) {
   return {
     kind: "hasna.todos.task-board",
     schemaVersion: 1,
-    exportedAt: now(),
+    exportedAt: now2(),
     boards
   };
 }
@@ -9506,8 +9506,8 @@ var init_boards = __esm(() => {
 
 // src/lib/artifact-store.ts
 import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync3, rmSync, statSync as statSync2, writeFileSync as writeFileSync2 } from "fs";
-import { basename, dirname as dirname5, join as join5, resolve as resolve6 } from "path";
+import { existsSync as existsSync7, mkdirSync as mkdirSync4, readFileSync as readFileSync3, rmSync, statSync as statSync2, writeFileSync as writeFileSync2 } from "fs";
+import { basename, dirname as dirname5, join as join6, resolve as resolve6 } from "path";
 import { tmpdir } from "os";
 function isInMemoryDb2(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
@@ -9519,15 +9519,15 @@ function artifactStoreRoot() {
     return resolve6(process.env["TODOS_ARTIFACTS_DIR"]);
   const dbPath = getDatabasePath();
   if (isInMemoryDb2(dbPath))
-    return join5(tmpdir(), "hasna-todos-artifacts");
-  return join5(dirname5(resolve6(dbPath)), "artifacts");
+    return join6(tmpdir(), "hasna-todos-artifacts");
+  return join6(dirname5(resolve6(dbPath)), "artifacts");
 }
 function artifactStorePath(relativePath) {
   const normalized = relativePath.replace(/\\/g, "/");
   if (normalized.includes("..") || normalized.startsWith("/") || normalized.length === 0) {
     throw new Error("Invalid artifact store path");
   }
-  return join5(artifactStoreRoot(), normalized);
+  return join6(artifactStoreRoot(), normalized);
 }
 function sha256(buffer) {
   return createHash2("sha256").update(buffer).digest("hex");
@@ -9568,7 +9568,7 @@ function mediaTypeFor(path, textLike) {
 }
 function storeArtifactContent(input) {
   const sourcePath = resolve6(input.path);
-  if (!existsSync6(sourcePath))
+  if (!existsSync7(sourcePath))
     return null;
   const sourceStat = statSync2(sourcePath);
   if (!sourceStat.isFile())
@@ -9585,9 +9585,9 @@ function storeArtifactContent(input) {
       redactionStatus = "redacted";
   }
   const storedSha = sha256(storedBuffer);
-  const relativePath = join5("sha256", storedSha.slice(0, 2), storedSha).replace(/\\/g, "/");
+  const relativePath = join6("sha256", storedSha.slice(0, 2), storedSha).replace(/\\/g, "/");
   const destination = artifactStorePath(relativePath);
-  if (!existsSync6(destination)) {
+  if (!existsSync7(destination)) {
     mkdirSync4(dirname5(destination), { recursive: true });
     writeFileSync2(destination, storedBuffer);
   }
@@ -9647,7 +9647,7 @@ function verifyStoredArtifact(input) {
     };
   }
   const storedPath = artifactStorePath(store.relative_path);
-  if (!existsSync6(storedPath)) {
+  if (!existsSync7(storedPath)) {
     return {
       id: input.id,
       path: input.path,
@@ -9741,7 +9741,7 @@ function addComment(input, db) {
     throw new TaskNotFoundError(input.task_id);
   }
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO task_comments (id, task_id, agent_id, session_id, content, type, progress_pct, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -9805,7 +9805,7 @@ __export(exports_task_files, {
 function addTaskFile(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   const existing = d.query("SELECT id FROM task_files WHERE task_id = ? AND path = ?").get(input.task_id, input.path);
   if (existing) {
     d.run("UPDATE task_files SET status = ?, agent_id = ?, note = ?, updated_at = ? WHERE id = ?", [input.status || "active", input.agent_id || null, input.note || null, timestamp, existing.id]);
@@ -9829,7 +9829,7 @@ function findTasksByFile(path, db) {
 }
 function updateTaskFileStatus(taskId, path, status, agentId, db) {
   const d = db || getDatabase();
-  const timestamp = now();
+  const timestamp = now2();
   d.run("UPDATE task_files SET status = ?, agent_id = COALESCE(?, agent_id), updated_at = ? WHERE task_id = ? AND path = ?", [status, agentId || null, timestamp, taskId, path]);
   const row = d.query("SELECT * FROM task_files WHERE task_id = ? AND path = ?").get(taskId, path);
   return row;
@@ -10040,7 +10040,7 @@ function linkTaskToCommit(input, db) {
     input.release_tag ?? null,
     input.repo_path ?? null,
     traceJson ?? "{}",
-    now()
+    now2()
   ]);
   return rowToCommit(d.query("SELECT * FROM task_commits WHERE id = ?").get(id));
 }
@@ -10061,7 +10061,7 @@ function unlinkTaskCommit(taskId, sha, db) {
 }
 function linkTaskGitRef(input, db) {
   const d = db || getDatabase();
-  const timestamp = now();
+  const timestamp = now2();
   const metadata = JSON.stringify(input.metadata || {});
   const existing = d.query("SELECT * FROM task_git_refs WHERE task_id = ? AND ref_type = ? AND name = ?").get(input.task_id, input.ref_type, input.name);
   if (existing) {
@@ -10083,7 +10083,7 @@ function findTasksByGitRef(ref, db) {
 function addTaskVerification(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const runAt = input.run_at || now();
+  const runAt = input.run_at || now2();
   d.run("INSERT INTO task_verifications (id, task_id, command, status, output_summary, artifact_path, agent_id, run_at, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)", [
     id,
     input.task_id,
@@ -10093,7 +10093,7 @@ function addTaskVerification(input, db) {
     input.artifact_path ?? null,
     input.agent_id ?? null,
     runAt,
-    now()
+    now2()
   ]);
   return rowToVerification(d.query("SELECT * FROM task_verifications WHERE id = ?").get(id));
 }
@@ -10179,7 +10179,7 @@ function startTaskRun(input, db) {
   if (!getTask(input.task_id, d))
     throw new TaskNotFoundError(input.task_id);
   const id = uuid();
-  const timestamp = input.started_at || now();
+  const timestamp = input.started_at || now2();
   if (input.claim && input.agent_id) {
     startTask(input.task_id, input.agent_id, d);
   }
@@ -10189,7 +10189,7 @@ function startTaskRun(input, db) {
     input.agent_id ?? null,
     input.title ? redactEvidenceText(input.title) : null,
     input.summary ? redactEvidenceText(input.summary) : null,
-    JSON.stringify(redactValue(input.metadata || {})),
+    JSON.stringify(redactValue2(input.metadata || {})),
     timestamp,
     timestamp,
     timestamp
@@ -10223,14 +10223,14 @@ function addTaskRunEvent(input, db) {
   if (!run)
     throw new Error(`Run not found: ${input.run_id}`);
   const id = uuid();
-  const timestamp = input.created_at || now();
+  const timestamp = input.created_at || now2();
   d.run("INSERT INTO task_run_events (id, run_id, task_id, event_type, message, data, agent_id, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)", [
     id,
     run.id,
     run.task_id,
     input.event_type,
     input.message ? redactEvidenceText(input.message) : null,
-    JSON.stringify(redactValue(input.data || {})),
+    JSON.stringify(redactValue2(input.data || {})),
     input.agent_id ?? run.agent_id,
     timestamp
   ]);
@@ -10247,7 +10247,7 @@ function addTaskRunCommand(input, db) {
     throw new Error(`Run not found: ${input.run_id}`);
   const id = uuid();
   const status = input.status || "unknown";
-  const timestamp = now();
+  const timestamp = now2();
   const command = redactEvidenceText(input.command);
   const outputSummary = input.output_summary ? redactEvidenceText(input.output_summary) : null;
   const artifactPath = input.artifact_path ? redactEvidenceText(input.artifact_path) : null;
@@ -10324,10 +10324,10 @@ function addTaskRunArtifact(input, db) {
   if (!run)
     throw new Error(`Run not found: ${input.run_id}`);
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   const path = redactEvidenceText(input.path);
   const description = input.description ? redactEvidenceText(input.description) : null;
-  const metadata = redactValue(input.metadata || {});
+  const metadata = redactValue2(input.metadata || {});
   let sizeBytes = input.size_bytes ?? null;
   let digest = input.sha256 ?? null;
   const stored = input.store_content !== false ? storeArtifactContent({ path: input.path, metadata, retention_days: input.retention_days, created_at: timestamp }) : null;
@@ -10377,7 +10377,7 @@ function finishTaskRun(input, db) {
   const run = getTaskRun(runId, d);
   if (!run)
     throw new Error(`Run not found: ${input.run_id}`);
-  const timestamp = input.completed_at || now();
+  const timestamp = input.completed_at || now2();
   const summary = input.summary ? redactEvidenceText(input.summary) : null;
   d.run("UPDATE task_runs SET status = ?, summary = COALESCE(?, summary), completed_at = ?, updated_at = ? WHERE id = ?", [input.status, summary, timestamp, timestamp, run.id]);
   addTaskRunEvent({
@@ -10427,7 +10427,7 @@ var init_task_runs = __esm(() => {
 });
 
 // src/db/calendar.ts
-function parseJsonObject2(value) {
+function parseJsonObject3(value) {
   if (!value)
     return {};
   if (typeof value === "object" && !Array.isArray(value))
@@ -10442,7 +10442,7 @@ function parseJsonObject2(value) {
   }
 }
 function rowToCalendarItem(row) {
-  return { ...row, metadata: parseJsonObject2(row.metadata) };
+  return { ...row, metadata: parseJsonObject3(row.metadata) };
 }
 function eventFromLocal(item) {
   return {
@@ -10543,7 +10543,7 @@ function inWindow(event, query) {
 function createCalendarItem(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   const kind = input.kind || "work_block";
   d.run(`INSERT INTO local_calendar_items (
       id, kind, title, description, starts_at, ends_at, timezone, project_id, task_id, plan_id, run_id,
@@ -10702,7 +10702,7 @@ function recurrenceToRrule(rule) {
 }
 function exportCalendarIcs(options = {}, db) {
   const events = listCalendarEvents(options, db);
-  const generatedAt = options.generated_at || now();
+  const generatedAt = options.generated_at || now2();
   const lines = [
     "BEGIN:VCALENDAR",
     "VERSION:2.0",
@@ -11202,8 +11202,8 @@ function registerTaskCommands(program2) {
       tasks = tasks.filter((t) => t.due_at && t.due_at <= todayEnd.toISOString());
     }
     if (opts.overdue) {
-      const now2 = new Date().toISOString();
-      tasks = tasks.filter((t) => t.due_at && t.due_at < now2 && t.status !== "completed");
+      const now3 = new Date().toISOString();
+      tasks = tasks.filter((t) => t.due_at && t.due_at < now3 && t.status !== "completed");
     }
     if (opts.sort) {
       const priorityOrder = { critical: 0, high: 1, medium: 2, low: 3 };
@@ -11776,7 +11776,7 @@ __export(exports_builtin_templates, {
   BUILTIN_TEMPLATES: () => BUILTIN_TEMPLATES
 });
 import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync3 } from "fs";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 function templateMetadata(template) {
   return {
     source: BUILTIN_TEMPLATE_LIBRARY_SOURCE,
@@ -11835,7 +11835,7 @@ function writeBuiltinTemplateFiles(directory) {
   mkdirSync5(directory, { recursive: true });
   const files = [];
   for (const entry of exportBuiltinTemplateFiles()) {
-    const path = join6(directory, entry.filename);
+    const path = join7(directory, entry.filename);
     writeFileSync3(path, `${JSON.stringify(entry.template, null, 2)}
 `, "utf-8");
     files.push(path);
@@ -12560,7 +12560,7 @@ function setTaskLocalFields(taskId, input, db) {
     throw new TaskNotFoundError(taskId);
   const currentFields = getTaskLocalFields(taskId, d);
   const labels = input.labels !== undefined ? normalizeList(input.labels) : currentFields.labels;
-  const custom = input.custom !== undefined ? redactValue(input.merge_custom === false ? input.custom : { ...currentFields.custom, ...input.custom }) : currentFields.custom;
+  const custom = input.custom !== undefined ? redactValue2(input.merge_custom === false ? input.custom : { ...currentFields.custom, ...input.custom }) : currentFields.custom;
   const nextFields = {
     labels,
     priority: input.priority || task.priority,
@@ -12804,7 +12804,7 @@ function likePattern(query) {
     return null;
   return `%${trimmed}%`;
 }
-function parseJsonObject3(value) {
+function parseJsonObject4(value) {
   if (!value)
     return {};
   if (typeof value === "object" && !Array.isArray(value))
@@ -12819,7 +12819,7 @@ function parseJsonObject3(value) {
   }
 }
 function rowToTaskRun(row) {
-  return { ...row, metadata: parseJsonObject3(row.metadata) };
+  return { ...row, metadata: parseJsonObject4(row.metadata) };
 }
 function taskMatchesSavedFilters(task, filters, db) {
   if (filters.plan_id && task.plan_id !== filters.plan_id)
@@ -13020,7 +13020,7 @@ function runSavedSearch(filters = {}, scope = "tasks", db) {
 function saveSearchView(input, db) {
   const d = db || getDatabase();
   const name = normalizeName(input.name);
-  const timestamp = now();
+  const timestamp = now2();
   const existing = getSearchView(name, d);
   if (existing) {
     d.run(`UPDATE saved_search_views
@@ -13077,16 +13077,16 @@ var init_saved_search_views = __esm(() => {
 });
 
 // src/lib/claude-tasks.ts
-import { existsSync as existsSync7, readFileSync as readFileSync4, readdirSync as readdirSync2, writeFileSync as writeFileSync4 } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync8, readFileSync as readFileSync4, readdirSync as readdirSync2, writeFileSync as writeFileSync4 } from "fs";
+import { join as join8 } from "path";
 function getTaskListDir(taskListId) {
-  return join7(HOME, ".claude", "tasks", taskListId);
+  return join8(HOME, ".claude", "tasks", taskListId);
 }
 function readClaudeTask(dir, filename) {
-  return readJsonFile(join7(dir, filename));
+  return readJsonFile(join8(dir, filename));
 }
 function writeClaudeTask(dir, task) {
-  writeJsonFile(join7(dir, `${task.id}.json`), task);
+  writeJsonFile(join8(dir, `${task.id}.json`), task);
 }
 function toClaudeStatus(status) {
   if (status === "pending" || status === "in_progress" || status === "completed") {
@@ -13098,14 +13098,14 @@ function toSqliteStatus(status) {
   return status;
 }
 function readPrefixCounter(dir) {
-  const path = join7(dir, ".prefix-counter");
-  if (!existsSync7(path))
+  const path = join8(dir, ".prefix-counter");
+  if (!existsSync8(path))
     return 0;
   const val = parseInt(readFileSync4(path, "utf-8").trim(), 10);
   return isNaN(val) ? 0 : val;
 }
 function writePrefixCounter(dir, value) {
-  writeFileSync4(join7(dir, ".prefix-counter"), String(value));
+  writeFileSync4(join8(dir, ".prefix-counter"), String(value));
 }
 function formatPrefixedSubject(title, prefix, counter) {
   const padded = String(counter).padStart(5, "0");
@@ -13132,7 +13132,7 @@ function taskToClaudeTask(task, claudeTaskId, existingMeta) {
 }
 function pushToClaudeTaskList(taskListId, projectId, options = {}) {
   const dir = getTaskListDir(taskListId);
-  if (!existsSync7(dir))
+  if (!existsSync8(dir))
     ensureDir2(dir);
   const filter = {};
   if (projectId)
@@ -13141,7 +13141,7 @@ function pushToClaudeTaskList(taskListId, projectId, options = {}) {
   const existingByTodosId = new Map;
   const files = listJsonFiles(dir);
   for (const f of files) {
-    const path = join7(dir, f);
+    const path = join8(dir, f);
     const ct = readClaudeTask(dir, f);
     if (ct?.metadata?.["todos_id"]) {
       existingByTodosId.set(ct.metadata["todos_id"], { task: ct, mtimeMs: getFileMtimeMs(path) });
@@ -13228,7 +13228,7 @@ function pushToClaudeTaskList(taskListId, projectId, options = {}) {
 }
 function pullFromClaudeTaskList(taskListId, projectId, options = {}) {
   const dir = getTaskListDir(taskListId);
-  if (!existsSync7(dir)) {
+  if (!existsSync8(dir)) {
     return { pushed: 0, pulled: 0, errors: [`Task list directory not found: ${dir}`] };
   }
   const files = readdirSync2(dir).filter((f) => f.endsWith(".json"));
@@ -13248,7 +13248,7 @@ function pullFromClaudeTaskList(taskListId, projectId, options = {}) {
   }
   for (const f of files) {
     try {
-      const filePath = join7(dir, f);
+      const filePath = join8(dir, f);
       const ct = readClaudeTask(dir, f);
       if (!ct)
         continue;
@@ -13321,20 +13321,20 @@ var init_claude_tasks = __esm(() => {
 });
 
 // src/lib/agent-tasks.ts
-import { existsSync as existsSync8 } from "fs";
-import { join as join8 } from "path";
+import { existsSync as existsSync9 } from "fs";
+import { join as join9 } from "path";
 function agentBaseDir(agent) {
   const key = `TODOS_${agent.toUpperCase()}_TASKS_DIR`;
-  return process.env[key] || getAgentTasksDir(agent) || process.env["TODOS_AGENT_TASKS_DIR"] || join8(getTodosGlobalDir(), "agents");
+  return process.env[key] || getAgentTasksDir(agent) || process.env["TODOS_AGENT_TASKS_DIR"] || join9(getTodosGlobalDir(), "agents");
 }
 function getTaskListDir2(agent, taskListId) {
-  return join8(agentBaseDir(agent), agent, taskListId);
+  return join9(agentBaseDir(agent), agent, taskListId);
 }
 function readAgentTask(dir, filename) {
-  return readJsonFile(join8(dir, filename));
+  return readJsonFile(join9(dir, filename));
 }
 function writeAgentTask(dir, task) {
-  writeJsonFile(join8(dir, `${task.id}.json`), task);
+  writeJsonFile(join9(dir, `${task.id}.json`), task);
 }
 function taskToAgentTask(task, externalId, existingMeta) {
   return {
@@ -13359,7 +13359,7 @@ function metadataKey(agent) {
 }
 function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
   const dir = getTaskListDir2(agent, taskListId);
-  if (!existsSync8(dir))
+  if (!existsSync9(dir))
     ensureDir2(dir);
   const filter = {};
   if (projectId)
@@ -13368,7 +13368,7 @@ function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
   const existingByTodosId = new Map;
   const files = listJsonFiles(dir);
   for (const f of files) {
-    const path = join8(dir, f);
+    const path = join9(dir, f);
     const at = readAgentTask(dir, f);
     if (at?.metadata?.["todos_id"]) {
       existingByTodosId.set(at.metadata["todos_id"], { task: at, mtimeMs: getFileMtimeMs(path) });
@@ -13442,7 +13442,7 @@ function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
 }
 function pullFromAgentTaskList(agent, taskListId, projectId, options = {}) {
   const dir = getTaskListDir2(agent, taskListId);
-  if (!existsSync8(dir)) {
+  if (!existsSync9(dir)) {
     return { pushed: 0, pulled: 0, errors: [`Task list directory not found: ${dir}`] };
   }
   const files = listJsonFiles(dir);
@@ -13461,7 +13461,7 @@ function pullFromAgentTaskList(agent, taskListId, projectId, options = {}) {
   }
   for (const f of files) {
     try {
-      const filePath = join8(dir, f);
+      const filePath = join9(dir, f);
       const at = readAgentTask(dir, f);
       if (!at)
         continue;
@@ -13618,7 +13618,7 @@ function rowToTaskList(row) {
 function createTaskList(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   const slug = input.slug || slugify(input.name);
   if (!input.project_id) {
     const existing = d.query("SELECT id FROM task_lists WHERE project_id IS NULL AND slug = ?").get(slug);
@@ -13658,7 +13658,7 @@ function updateTaskList(id, input, db) {
   if (!existing)
     throw new TaskListNotFoundError(id);
   const sets = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.name !== undefined) {
     sets.push("name = ?");
     params.push(input.name);
@@ -13698,7 +13698,7 @@ __export(exports_project_bootstrap, {
   discoverProjectWorkspace: () => discoverProjectWorkspace,
   bootstrapProject: () => bootstrapProject
 });
-import { existsSync as existsSync9, readFileSync as readFileSync5, statSync as statSync3 } from "fs";
+import { existsSync as existsSync10, readFileSync as readFileSync5, statSync as statSync3 } from "fs";
 import { basename as basename4, dirname as dirname6, resolve as resolve9 } from "path";
 function safeStat(path) {
   try {
@@ -13717,7 +13717,7 @@ function canonicalPath(input) {
 function findUp(start, marker) {
   let current = canonicalPath(start);
   while (true) {
-    if (existsSync9(resolve9(current, marker)))
+    if (existsSync10(resolve9(current, marker)))
       return current;
     const parent = dirname6(current);
     if (parent === current)
@@ -13729,7 +13729,7 @@ function readPackageJson(path) {
   if (!path)
     return null;
   const file = resolve9(path, "package.json");
-  if (!existsSync9(file))
+  if (!existsSync10(file))
     return null;
   try {
     const parsed = JSON.parse(readFileSync5(file, "utf-8"));
@@ -13751,7 +13751,7 @@ function workspaceMarker(root, rootPackage) {
   if (rootPackage?.workspaces)
     markers.push("package.json#workspaces");
   for (const marker of ["pnpm-workspace.yaml", "turbo.json", "nx.json", "lerna.json", "rush.json", "bun.lock", "bun.lockb"]) {
-    if (existsSync9(resolve9(root, marker)))
+    if (existsSync10(resolve9(root, marker)))
       markers.push(marker);
   }
   const kind = markers.find((marker) => marker !== "bun.lock" && marker !== "bun.lockb") ?? null;
@@ -13873,9 +13873,9 @@ __export(exports_extract, {
   buildCodebaseIndex: () => buildCodebaseIndex,
   EXTRACT_TAGS: () => EXTRACT_TAGS
 });
-import { existsSync as existsSync10, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
 import { createHash as createHash3 } from "crypto";
-import { relative as relative3, resolve as resolve10, join as join9 } from "path";
+import { relative as relative3, resolve as resolve10, join as join10 } from "path";
 function stableHash(value) {
   return createHash3("sha256").update(value).digest("hex");
 }
@@ -13884,8 +13884,8 @@ function normalizePathForMatch(value) {
 }
 function readGitignorePatterns(basePath) {
   const root = statSync4(basePath).isFile() ? resolve10(basePath, "..") : basePath;
-  const gitignorePath = join9(root, ".gitignore");
-  if (!existsSync10(gitignorePath))
+  const gitignorePath = join10(root, ".gitignore");
+  if (!existsSync11(gitignorePath))
     return [];
   try {
     return readFileSync6(gitignorePath, "utf-8").split(`
@@ -14027,7 +14027,7 @@ function buildCodebaseIndex(options) {
   const files = collectFiles(basePath, extensions, excludes, respectGitignore);
   const indexed = [];
   for (const file of files) {
-    const fullPath = statSync4(basePath).isFile() ? basePath : join9(basePath, file);
+    const fullPath = statSync4(basePath).isFile() ? basePath : join10(basePath, file);
     try {
       const source = readFileSync6(fullPath, "utf-8");
       const relPath = statSync4(basePath).isFile() ? relative3(resolve10(basePath, ".."), fullPath) : file;
@@ -14058,7 +14058,7 @@ function extractTodos(options, db) {
   const files = collectFiles(basePath, extensions, excludes, respectGitignore);
   const allComments = [];
   for (const file of files) {
-    const fullPath = statSync4(basePath).isFile() ? basePath : join9(basePath, file);
+    const fullPath = statSync4(basePath).isFile() ? basePath : join10(basePath, file);
     try {
       const source = readFileSync6(fullPath, "utf-8");
       const relPath = statSync4(basePath).isFile() ? relative3(resolve10(basePath, ".."), fullPath) : file;
@@ -14266,7 +14266,7 @@ function packageSource(version) {
 function emptyCounts() {
   return Object.fromEntries(dataKeys.map((key) => [key, 0]));
 }
-function parseJsonObject4(value) {
+function parseJsonObject5(value) {
   if (!value)
     return {};
   if (typeof value === "object" && !Array.isArray(value))
@@ -14312,34 +14312,34 @@ function rowToTask3(row) {
   return {
     ...row,
     tags: parseJsonArray2(row.tags),
-    metadata: parseJsonObject4(row.metadata),
+    metadata: parseJsonObject5(row.metadata),
     requires_approval: Boolean(row.requires_approval)
   };
 }
 function rowToTaskList2(row) {
-  return { ...row, metadata: parseJsonObject4(row.metadata) };
+  return { ...row, metadata: parseJsonObject5(row.metadata) };
 }
 function rowWithMetadata(row) {
-  return { ...row, metadata: parseJsonObject4(row.metadata) };
+  return { ...row, metadata: parseJsonObject5(row.metadata) };
 }
 function rowToRunEvent(row) {
-  return { ...row, data: parseJsonObject4(row.data) };
+  return { ...row, data: parseJsonObject5(row.data) };
 }
 function rowToCommit2(row) {
   return { ...row, files_changed: row.files_changed ? parseJsonArray2(row.files_changed) : null };
 }
 function rowToSavedView(row) {
-  return { ...row, filters: parseJsonObject4(row.filters) };
+  return { ...row, filters: parseJsonObject5(row.filters) };
 }
 function rowToTaskBoard2(row) {
   return {
     ...row,
     lanes: parseJsonArray2(row.lanes),
-    filters: parseJsonObject4(row.filters)
+    filters: parseJsonObject5(row.filters)
   };
 }
 function rowToCalendarItem2(row) {
-  return { ...row, metadata: parseJsonObject4(row.metadata) };
+  return { ...row, metadata: parseJsonObject5(row.metadata) };
 }
 function bridgeStats(data) {
   return Object.fromEntries(dataKeys.map((key) => [key, data[key].length]));
@@ -14350,7 +14350,7 @@ function createLocalBridgeBundle(options = {}, db) {
   const runRows = queryByTaskIds(d, "SELECT * FROM task_runs WHERE task_id IN (__TASK_IDS__) ORDER BY started_at, created_at", taskIds);
   const runIds = runRows.map((row) => String(row.id));
   const project = options.project_id ? d.query("SELECT * FROM projects WHERE id = ?").get(options.project_id) : null;
-  const data = redactValue({
+  const data = redactValue2({
     projects: options.project_id ? project ? [project] : [] : d.query("SELECT * FROM projects ORDER BY name").all(),
     task_lists: (options.project_id ? d.query("SELECT * FROM task_lists WHERE project_id = ? ORDER BY name").all(options.project_id) : d.query("SELECT * FROM task_lists ORDER BY name").all()).map(rowToTaskList2),
     plans: options.project_id ? d.query("SELECT * FROM plans WHERE project_id = ? ORDER BY created_at").all(options.project_id) : d.query("SELECT * FROM plans ORDER BY created_at").all(),
@@ -14379,7 +14379,7 @@ function createLocalBridgeBundle(options = {}, db) {
   return {
     schemaVersion: TODOS_LOCAL_BRIDGE_SCHEMA_VERSION,
     kind: TODOS_LOCAL_BRIDGE_KIND,
-    exportedAt: options.generatedAt ?? now(),
+    exportedAt: options.generatedAt ?? now2(),
     package: packageSource(options.version ?? getPackageVersion(import.meta.url)),
     source: {
       project_id: options.project_id ?? null,
@@ -14565,7 +14565,7 @@ function safeMergeTask(db, incoming, options) {
       prefer: "local",
       local_updated_at: current.updated_at,
       remote_updated_at: incoming.updated_at,
-      detected_at: now(),
+      detected_at: now2(),
       notes: buildDivergenceNotes(unresolvedFields)
     }, 10);
   }
@@ -14798,8 +14798,8 @@ __export(exports_local_encryption, {
   DEFAULT_ENCRYPTION_PROFILE: () => DEFAULT_ENCRYPTION_PROFILE,
   DEFAULT_ENCRYPTION_KEY_ENV: () => DEFAULT_ENCRYPTION_KEY_ENV
 });
-import { createCipheriv, createDecipheriv, createHash as createHash4, randomBytes, scryptSync, timingSafeEqual } from "crypto";
-function now2() {
+import { createCipheriv, createDecipheriv, createHash as createHash4, randomBytes, scryptSync, timingSafeEqual as timingSafeEqual2 } from "crypto";
+function now3() {
   return new Date().toISOString();
 }
 function sha2562(value) {
@@ -14836,7 +14836,7 @@ function upsertEncryptionProfile(input) {
   const name = normalizeProfileName(input.name);
   const config = loadConfig();
   const existing = config.encryption_profiles?.[name];
-  const timestamp = now2();
+  const timestamp = now3();
   const profile = {
     name,
     algorithm: "aes-256-gcm",
@@ -14871,7 +14871,7 @@ function removeEncryptionProfile(name) {
 function encryptionProfileStatus(name = DEFAULT_ENCRYPTION_PROFILE, env = process.env) {
   const profile = ensureEncryptionProfile(name);
   return {
-    profile: redactValue(profile),
+    profile: redactValue2(profile),
     locked: !env[profile.key_env],
     key_env: profile.key_env,
     key_present: Boolean(env[profile.key_env])
@@ -14893,7 +14893,7 @@ function encryptString(plaintext, options = {}) {
   return {
     schemaVersion: TODOS_ENCRYPTION_SCHEMA_VERSION,
     kind: TODOS_ENCRYPTED_VALUE_KIND,
-    encryptedAt: options.encryptedAt ?? now2(),
+    encryptedAt: options.encryptedAt ?? now3(),
     profile: profile.name,
     key_env: profile.key_env,
     algorithm: "aes-256-gcm",
@@ -14928,7 +14928,7 @@ function decryptString(envelope, env = process.env) {
   ]).toString("utf8");
   const expected = Buffer.from(envelope.plaintext_sha256, "hex");
   const actual = Buffer.from(sha2562(plaintext), "hex");
-  if (expected.length !== actual.length || !timingSafeEqual(expected, actual)) {
+  if (expected.length !== actual.length || !timingSafeEqual2(expected, actual)) {
     throw new EncryptedPayloadError("decrypted payload checksum mismatch");
   }
   return plaintext;
@@ -15028,7 +15028,7 @@ function applyExportProfile(data, options = {}) {
   if (profile === "encrypted") {
     return { profile, data: encryptSensitiveFields(data, { profile: DEFAULT_ENCRYPTION_PROFILE, env: options.env }), warnings };
   }
-  return { profile, data: redactValue(data), warnings };
+  return { profile, data: redactValue2(data), warnings };
 }
 var TODOS_ENCRYPTED_VALUE_KIND = "hasna.todos.encrypted-value", TODOS_ENCRYPTED_BRIDGE_KIND = "hasna.todos.encrypted-bridge", TODOS_ENCRYPTION_SCHEMA_VERSION = 1, DEFAULT_ENCRYPTION_PROFILE = "default", DEFAULT_ENCRYPTION_KEY_ENV = "TODOS_ENCRYPTION_KEY", EncryptionKeyUnavailableError, EncryptedPayloadError;
 var init_local_encryption = __esm(() => {
@@ -15279,7 +15279,7 @@ function importTodosMarkdown(markdown, options = {}, db) {
       assigned_to: item.assigned_to,
       project_id: project?.id,
       plan_id: item.planName ? planByName.get(item.planName) : undefined,
-      metadata: { imported_from: TODOS_MARKDOWN_SCHEMA, imported_at: now() }
+      metadata: { imported_from: TODOS_MARKDOWN_SCHEMA, imported_at: now2() }
     }, d);
     taskByTitle.set(item.title, task.id);
     inserted.tasks++;
@@ -16166,7 +16166,7 @@ function normalizeGeneratedAgentNames(db) {
     }
     existing.delete(oldName);
     existing.add(replacement);
-    db.run("UPDATE agents SET name = ?, last_seen_at = ? WHERE id = ?", [replacement, now(), agent.id]);
+    db.run("UPDATE agents SET name = ?, last_seen_at = ? WHERE id = ?", [replacement, now2(), agent.id]);
     const referenceUpdates = updateReferences(db, oldName, replacement);
     renamed.push({
       id: agent.id,
@@ -16475,7 +16475,7 @@ function registerAgent(input, db) {
       }
     }
     const updates = ["last_seen_at = ?", "status = 'active'"];
-    const params = [now()];
+    const params = [now2()];
     if (input.session_id && !sameSession) {
       updates.push("session_id = ?");
       params.push(input.session_id);
@@ -16497,7 +16497,7 @@ function registerAgent(input, db) {
     return getAgent(existing.id, d);
   }
   const id = shortUuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO agents (id, name, description, role, title, level, permissions, capabilities, reports_to, org_id, metadata, created_at, last_seen_at, session_id, working_dir, active_project_id)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -16576,7 +16576,7 @@ function listAgents(opts, db) {
 }
 function updateAgentActivity(id, db) {
   const d = db || getDatabase();
-  d.run("UPDATE agents SET last_seen_at = ? WHERE id = ?", [now(), id]);
+  d.run("UPDATE agents SET last_seen_at = ? WHERE id = ?", [now2(), id]);
 }
 function updateAgent(id, input, db) {
   const d = db || getDatabase();
@@ -16584,7 +16584,7 @@ function updateAgent(id, input, db) {
   if (!agent)
     throw new Error(`Agent not found: ${id}`);
   const sets = ["last_seen_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.name !== undefined) {
     const existingNames = d.query("SELECT name FROM agents WHERE id != ?").all(id).map((row) => row.name);
     const newName = validateAgentName(input.name, existingNames);
@@ -16643,16 +16643,16 @@ function updateAgent(id, input, db) {
 }
 function deleteAgent(id, db) {
   const d = db || getDatabase();
-  return d.run("UPDATE agents SET status = 'archived', last_seen_at = ? WHERE id = ?", [now(), id]).changes > 0;
+  return d.run("UPDATE agents SET status = 'archived', last_seen_at = ? WHERE id = ?", [now2(), id]).changes > 0;
 }
 function archiveAgent(id, db) {
   const d = db || getDatabase();
-  d.run("UPDATE agents SET status = 'archived', last_seen_at = ? WHERE id = ?", [now(), id]);
+  d.run("UPDATE agents SET status = 'archived', last_seen_at = ? WHERE id = ?", [now2(), id]);
   return getAgent(id, d);
 }
 function unarchiveAgent(id, db) {
   const d = db || getDatabase();
-  d.run("UPDATE agents SET status = 'active', last_seen_at = ? WHERE id = ?", [now(), id]);
+  d.run("UPDATE agents SET status = 'active', last_seen_at = ? WHERE id = ?", [now2(), id]);
   return getAgent(id, d);
 }
 function getDirectReports(agentId, db) {
@@ -17078,7 +17078,7 @@ __export(exports_retention_cleanup, {
   applyRetentionCleanup: () => applyRetentionCleanup,
   RETENTION_CLEANUP_CONFIRMATION: () => RETENTION_CLEANUP_CONFIRMATION
 });
-import { existsSync as existsSync11, unlinkSync } from "fs";
+import { existsSync as existsSync12, unlinkSync } from "fs";
 function normalizeScopes(scopes) {
   if (!scopes || scopes.length === 0)
     return [...ALL_SCOPES];
@@ -17281,7 +17281,7 @@ function applyRetentionCleanup(input, db) {
   for (const artifact of report.candidates.artifact_files) {
     try {
       const path = artifactStorePath(artifact.relative_path);
-      if (!existsSync11(path)) {
+      if (!existsSync12(path)) {
         report.warnings.push(`stored artifact already missing: ${artifact.relative_path}`);
         continue;
       }
@@ -17948,8 +17948,8 @@ __export(exports_local_extensions, {
   discoverLocalExtensions: () => discoverLocalExtensions
 });
 import { createHash as createHash5, createVerify } from "crypto";
-import { existsSync as existsSync12, readdirSync as readdirSync3, readFileSync as readFileSync7, statSync as statSync5 } from "fs";
-import { basename as basename6, join as join10, resolve as resolve12 } from "path";
+import { existsSync as existsSync13, readdirSync as readdirSync3, readFileSync as readFileSync7, statSync as statSync5 } from "fs";
+import { basename as basename6, join as join11, resolve as resolve12 } from "path";
 function isObject(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
@@ -18208,10 +18208,10 @@ function verifyExtensionSignature(input) {
 }
 function inspectExtensionSource(source2) {
   const resolved = resolve12(source2);
-  if (!existsSync12(resolved))
+  if (!existsSync13(resolved))
     throw new Error(`extension source not found: ${source2}`);
   const stat = statSync5(resolved);
-  const manifestPath = stat.isDirectory() ? [join10(resolved, "todos.extension.json"), join10(resolved, "extension.json")].find(existsSync12) : resolved;
+  const manifestPath = stat.isDirectory() ? [join11(resolved, "todos.extension.json"), join11(resolved, "extension.json")].find(existsSync13) : resolved;
   if (!manifestPath)
     throw new Error(`extension directory ${source2} is missing todos.extension.json`);
   const raw = readFileSync7(manifestPath);
@@ -18307,20 +18307,20 @@ function projectExtensionSources(projectPath) {
     return [];
   const root = resolve12(projectPath);
   const candidates = [
-    join10(root, "todos.extension.json"),
-    join10(root, ".todos", "todos.extension.json")
+    join11(root, "todos.extension.json"),
+    join11(root, ".todos", "todos.extension.json")
   ];
-  const extensionDir = join10(root, ".todos", "extensions");
-  if (existsSync12(extensionDir)) {
+  const extensionDir = join11(root, ".todos", "extensions");
+  if (existsSync13(extensionDir)) {
     for (const entry of readdirSync3(extensionDir)) {
       if (entry.startsWith("."))
         continue;
-      const full = join10(extensionDir, entry);
+      const full = join11(extensionDir, entry);
       if (statSync5(full).isDirectory() || entry.endsWith(".json"))
         candidates.push(full);
     }
   }
-  return candidates.filter(existsSync12);
+  return candidates.filter(existsSync13);
 }
 function discoverLocalExtensions(options = {}) {
   const config = loadConfig();
@@ -18374,7 +18374,7 @@ function installLocalExtension(input) {
     version: inspected.manifest.version,
     source: inspected.source,
     source_type: inspected.source_type,
-    manifest: redactValue(inspected.manifest),
+    manifest: redactValue2(inspected.manifest),
     checksum: inspected.checksum,
     signature_verified: signatureVerified,
     trusted,
@@ -18856,7 +18856,7 @@ var init_policy_packs = __esm(() => {
 // src/db/checkpoints.ts
 function upsertCheckpoint(task_id, step, updates, db) {
   const d = db || getDatabase();
-  const timestamp = now();
+  const timestamp = now2();
   const existing = d.query("SELECT id FROM task_checkpoints WHERE task_id = ? AND step = ?").get(task_id, step);
   const id = existing?.id ?? uuid();
   const agentId = updates.agent_id ?? null;
@@ -19016,7 +19016,7 @@ function writeGate(input, status, decision, db) {
   const step = stepForGate(input.gate);
   const existing = getCheckpoint(input.task_id, step, d);
   const existingData = existing?.data || {};
-  const timestamp = decision?.decided_at || now();
+  const timestamp = decision?.decided_at || now2();
   const existingRunId = typeof existingData["run_id"] === "string" ? existingData["run_id"] : undefined;
   const runId = input.run_id ? resolveTaskRunId(input.run_id, d) : existingRunId;
   const data = {
@@ -19077,7 +19077,7 @@ function approveApprovalGate(input, db) {
     plan_id: existing.plan_id || undefined,
     run_id: existing.run_id || undefined,
     expires_at: existing.expires_at || undefined
-  }, "approved", { decided_by: input.reviewer, decided_at: now(), note: input.note }, d);
+  }, "approved", { decided_by: input.reviewer, decided_at: now2(), note: input.note }, d);
   logApprovalEvent(input.task_id, "approved", gate, input.reviewer, d);
   return gate;
 }
@@ -19097,7 +19097,7 @@ function rejectApprovalGate(input, db) {
     plan_id: existing.plan_id || undefined,
     run_id: existing.run_id || undefined,
     expires_at: existing.expires_at || undefined
-  }, "rejected", { decided_by: input.reviewer, decided_at: now(), note: input.note, reason: input.reason || input.note }, d);
+  }, "rejected", { decided_by: input.reviewer, decided_at: now2(), note: input.note, reason: input.reason || input.note }, d);
   logApprovalEvent(input.task_id, "rejected", gate, input.reviewer, d);
   return gate;
 }
@@ -19117,7 +19117,7 @@ function expireApprovalGate(input, db) {
     plan_id: existing.plan_id || undefined,
     run_id: existing.run_id || undefined,
     expires_at: existing.expires_at || undefined
-  }, "expired", { decided_by: input.reviewer, decided_at: now(), reason: input.reason || "expired" }, d);
+  }, "expired", { decided_by: input.reviewer, decided_at: now2(), reason: input.reason || "expired" }, d);
   logApprovalEvent(input.task_id, "expired", gate, input.reviewer, d);
   return gate;
 }
@@ -19302,7 +19302,7 @@ function removeTerminalNotificationRule(name) {
 }
 function evaluateTerminalWatchRules(input, rules = listTerminalNotificationRules()) {
   const timestamp = input.timestamp || new Date().toISOString();
-  const payload = redactValue(input.payload || {});
+  const payload = redactValue2(input.payload || {});
   return rules.map((rule) => {
     const skipped = [];
     const severity = eventSeverity(input.type);
@@ -19388,7 +19388,7 @@ var init_terminal_notifications = __esm(() => {
 });
 
 // src/db/api-keys.ts
-import { createHash as createHash6, randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual2 } from "crypto";
+import { createHash as createHash6, randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual3 } from "crypto";
 function rowToRecord(row) {
   return {
     id: row.id,
@@ -19407,7 +19407,7 @@ function hashApiKey(key) {
 function safeEqualHex(a, b) {
   if (a.length !== b.length)
     return false;
-  return timingSafeEqual2(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
+  return timingSafeEqual3(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
 }
 function generatePlaintextKey() {
   return `tdos_${randomBytes2(32).toString("base64url")}`;
@@ -19418,7 +19418,7 @@ function createApiKey(input, db) {
   if (!name)
     throw new Error("API key name is required");
   const key = generatePlaintextKey();
-  const timestamp = now();
+  const timestamp = now2();
   const id = uuid();
   const prefix = key.slice(0, 12);
   d.run(`INSERT INTO api_keys (id, name, key_hash, prefix, permissions, created_at, expires_at)
@@ -19442,18 +19442,18 @@ function listApiKeys(opts, db) {
 }
 function hasActiveApiKeys(db) {
   const d = db || getDatabase();
-  const row = d.query("SELECT COUNT(*) AS count FROM api_keys WHERE revoked_at IS NULL AND (expires_at IS NULL OR expires_at > ?)").get(now());
+  const row = d.query("SELECT COUNT(*) AS count FROM api_keys WHERE revoked_at IS NULL AND (expires_at IS NULL OR expires_at > ?)").get(now2());
   return (row?.count ?? 0) > 0;
 }
 function verifyApiKey(key, db) {
   const d = db || getDatabase();
   const candidateHash = hashApiKey(key);
-  const rows = d.query("SELECT * FROM api_keys WHERE revoked_at IS NULL AND (expires_at IS NULL OR expires_at > ?)").all(now());
+  const rows = d.query("SELECT * FROM api_keys WHERE revoked_at IS NULL AND (expires_at IS NULL OR expires_at > ?)").all(now2());
   for (const row of rows) {
     if (!safeEqualHex(candidateHash, row.key_hash))
       continue;
-    d.run("UPDATE api_keys SET last_used_at = ? WHERE id = ?", [now(), row.id]);
-    return rowToRecord({ ...row, last_used_at: now() });
+    d.run("UPDATE api_keys SET last_used_at = ? WHERE id = ?", [now2(), row.id]);
+    return rowToRecord({ ...row, last_used_at: now2() });
   }
   return null;
 }
@@ -19463,7 +19463,7 @@ function revokeApiKey(idOrPrefix, db) {
   const row = d.query("SELECT * FROM api_keys WHERE id = ? OR prefix = ?").get(identifier, identifier);
   if (!row)
     return null;
-  d.run("UPDATE api_keys SET revoked_at = ? WHERE id = ?", [now(), row.id]);
+  d.run("UPDATE api_keys SET revoked_at = ? WHERE id = ?", [now2(), row.id]);
   const updated = d.query("SELECT * FROM api_keys WHERE id = ?").get(row.id);
   return rowToRecord(updated);
 }
@@ -19478,7 +19478,7 @@ function rowToOrg(row) {
 function createOrg(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO orgs (id, name, description, metadata, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)`, [id, input.name, input.description || null, JSON.stringify(input.metadata || {}), timestamp, timestamp]);
   return getOrg(id, d);
 }
@@ -19497,7 +19497,7 @@ function updateOrg(id, input, db) {
   if (!org)
     throw new Error(`Org not found: ${id}`);
   const sets = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.name !== undefined) {
     sets.push("name = ?");
     params.push(input.name);
@@ -19613,8 +19613,8 @@ var exports_doctor = {};
 __export(exports_doctor, {
   runTodosDoctor: () => runTodosDoctor
 });
-import { chmodSync, copyFileSync, existsSync as existsSync13, mkdirSync as mkdirSync6, statSync as statSync6 } from "fs";
-import { basename as basename7, dirname as dirname7, join as join11 } from "path";
+import { chmodSync, copyFileSync, existsSync as existsSync14, mkdirSync as mkdirSync6, statSync as statSync6 } from "fs";
+import { basename as basename7, dirname as dirname7, join as join12 } from "path";
 function tableExists(db, table) {
   return Boolean(db.query("SELECT name FROM sqlite_master WHERE type='table' AND name=?").get(table));
 }
@@ -19708,7 +19708,7 @@ function findMissingProjectRoots(db) {
       continue;
     if (!row.path.startsWith("/"))
       continue;
-    if (!existsSync13(row.path))
+    if (!existsSync14(row.path))
       missing++;
   }
   return missing;
@@ -19768,16 +19768,16 @@ function databasePermissionsAreUnsafe(dbPath) {
 function createBackup(dbPath) {
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
     return;
-  if (!existsSync13(dbPath))
+  if (!existsSync14(dbPath))
     return;
-  const stamp = now().replace(/[:.]/g, "-");
-  const backupDir = join11(dirname7(dbPath), `${basename7(dbPath)}.backup-${stamp}`);
+  const stamp = now2().replace(/[:.]/g, "-");
+  const backupDir = join12(dirname7(dbPath), `${basename7(dbPath)}.backup-${stamp}`);
   const files = [];
   mkdirSync6(backupDir, { recursive: true });
   for (const source2 of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {
-    if (!existsSync13(source2))
+    if (!existsSync14(source2))
       continue;
-    const target = join11(backupDir, basename7(source2));
+    const target = join12(backupDir, basename7(source2));
     copyFileSync(source2, target);
     files.push(target);
   }
@@ -20003,7 +20003,7 @@ var init_doctor = __esm(() => {
 });
 
 // src/server/routes.ts
-import { join as join12, resolve as resolve14, sep } from "path";
+import { join as join13, resolve as resolve14, sep } from "path";
 function parseFieldsParam(url) {
   const fieldsParam = url.searchParams.get("fields");
   return fieldsParam ? fieldsParam.split(",").map((f) => f.trim()).filter(Boolean) : undefined;
@@ -20707,7 +20707,7 @@ function handleStaticFiles(path, method, ctx, json2, serveStaticFile2) {
   if (!ctx.dashboardExists || method !== "GET" && method !== "HEAD")
     return null;
   if (path !== "/") {
-    const filePath = join12(ctx.dashboardDir, path);
+    const filePath = join13(ctx.dashboardDir, path);
     const resolvedFile = resolve14(filePath);
     const resolvedBase = resolve14(ctx.dashboardDir);
     if (!resolvedFile.startsWith(resolvedBase + sep) && resolvedFile !== resolvedBase) {
@@ -20717,7 +20717,7 @@ function handleStaticFiles(path, method, ctx, json2, serveStaticFile2) {
     if (res2)
       return res2;
   }
-  const indexPath = join12(ctx.dashboardDir, "index.html");
+  const indexPath = join13(ctx.dashboardDir, "index.html");
   const res = serveStaticFile2(indexPath);
   if (res)
     return res;
@@ -24745,7 +24745,7 @@ function createDispatch(input, db) {
     input.message ?? null,
     input.delay_ms ?? null,
     input.scheduled_at ?? null,
-    now()
+    now2()
   ]);
   const row = _db2.query("SELECT * FROM dispatches WHERE id = ?").get(id);
   return rowToDispatch(row);
@@ -24788,7 +24788,7 @@ function updateDispatchStatus(id, status, opts = {}, db) {
 function createDispatchLog(log, db) {
   const _db2 = db ?? getDatabase();
   const id = uuid();
-  const created_at = now();
+  const created_at = now2();
   _db2.run(`INSERT INTO dispatch_logs (id, dispatch_id, target_window, message, delay_ms, status, error, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, [id, log.dispatch_id, log.target_window, log.message, log.delay_ms, log.status, log.error ?? null, created_at]);
   return { ...log, id, created_at };
@@ -24802,7 +24802,7 @@ function getDueDispatches(db) {
   const rows = _db2.query(`SELECT * FROM dispatches
        WHERE status = 'pending'
          AND (scheduled_at IS NULL OR scheduled_at <= ?)
-       ORDER BY created_at ASC`).all(now());
+       ORDER BY created_at ASC`).all(now2());
   return rows.map(rowToDispatch);
 }
 var init_dispatches = __esm(() => {
@@ -24926,7 +24926,7 @@ async function executeDispatch(dispatch, opts = {}, db) {
       error: null
     }, _db2);
     if (!opts.dryRun) {
-      updateDispatchStatus(dispatch.id, "sent", { sent_at: now() }, _db2);
+      updateDispatchStatus(dispatch.id, "sent", { sent_at: now2() }, _db2);
     }
   } catch (err) {
     const error = err instanceof Error ? err.message : String(err);
@@ -25394,7 +25394,7 @@ function normalizeName3(name) {
 function createLabel(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const ts = now();
+  const ts = now2();
   d.run(`INSERT INTO labels (id, project_id, name, color, description, created_at, updated_at)
      VALUES (?, ?, ?, ?, ?, ?, ?)`, [id, input.project_id ?? null, input.name.trim(), input.color ?? null, input.description ?? null, ts, ts]);
   return rowToLabel(d.query("SELECT * FROM labels WHERE id = ?").get(id));
@@ -25419,7 +25419,7 @@ function updateLabel(idOrName, input, db) {
   const existing = getLabel(idOrName, d);
   if (!existing)
     throw new Error(`Label not found: ${idOrName}`);
-  const ts = now();
+  const ts = now2();
   d.run(`UPDATE labels SET
       name = COALESCE(?, name),
       color = COALESCE(?, color),
@@ -25480,7 +25480,7 @@ function getTagRow(idOrName, db) {
 function updateTaskTagJson(oldName, newName, db) {
   const rows = db.query("SELECT id, tags FROM tasks WHERE tags IS NOT NULL AND tags != '[]'").all();
   const update = db.prepare("UPDATE tasks SET tags = ?, updated_at = ? WHERE id = ?");
-  const ts = now();
+  const ts = now2();
   for (const row of rows) {
     if (!row.tags)
       continue;
@@ -25509,7 +25509,7 @@ function createTag(input, db) {
   if (!name)
     throw new Error("Tag name is required");
   const id = uuid();
-  const ts = now();
+  const ts = now2();
   d.run(`INSERT INTO tags (id, name, color, description, created_at, updated_at)
      VALUES (?, ?, ?, ?, ?, ?)`, [id, name, input.color ?? null, input.description ?? null, ts, ts]);
   return rowToTag(d.query("SELECT * FROM tags WHERE id = ?").get(id), d);
@@ -25555,7 +25555,7 @@ function updateTag(idOrName, input, db) {
     renameTaskTagRows(stored.name, nextName, d);
     updateTaskTagJson(stored.name, nextName, d);
   }
-  d.run(`UPDATE tags SET name = ?, color = COALESCE(?, color), description = COALESCE(?, description), updated_at = ? WHERE id = ?`, [nextName, input.color ?? null, input.description ?? null, now(), stored.id]);
+  d.run(`UPDATE tags SET name = ?, color = COALESCE(?, color), description = COALESCE(?, description), updated_at = ? WHERE id = ?`, [nextName, input.color ?? null, input.description ?? null, now2(), stored.id]);
   return getTag(stored.id, d);
 }
 function deleteTag(idOrName, db) {
@@ -25577,8 +25577,8 @@ var exports_mention_resolver = {};
 __export(exports_mention_resolver, {
   resolveMentions: () => resolveMentions
 });
-import { existsSync as existsSync14, readdirSync as readdirSync4, readFileSync as readFileSync8, statSync as statSync7 } from "fs";
-import { basename as basename8, isAbsolute, join as join13, relative as relative5, resolve as resolve15, sep as sep2 } from "path";
+import { existsSync as existsSync15, readdirSync as readdirSync4, readFileSync as readFileSync8, statSync as statSync7 } from "fs";
+import { basename as basename8, isAbsolute, join as join14, relative as relative5, resolve as resolve15, sep as sep2 } from "path";
 function blankResolution(parsed) {
   return {
     input: parsed.input,
@@ -25676,7 +25676,7 @@ function resolveFile(parsed, workspace) {
     return resolution;
   }
   resolution.path = relPath;
-  if (!existsSync14(absolutePath)) {
+  if (!existsSync15(absolutePath)) {
     resolution.warnings.push("file does not exist in the local workspace");
     return resolution;
   }
@@ -25709,7 +25709,7 @@ function walkSourceFiles(root, current = root, files = []) {
       if (SKIP_DIRS2.has(entry.name))
         continue;
     }
-    const absolutePath = join13(current, entry.name);
+    const absolutePath = join14(current, entry.name);
     if (entry.isDirectory()) {
       if (!SKIP_DIRS2.has(entry.name))
         walkSourceFiles(root, absolutePath, files);
@@ -26052,7 +26052,7 @@ function alertId(kind, id, suffix = "") {
   return `${kind}:${id}${suffix ? `:${suffix}` : ""}`;
 }
 function taskPayload(task, extra = {}) {
-  return redactValue({
+  return redactValue2({
     id: task.id,
     task_id: task.id,
     title: task.title,
@@ -26098,7 +26098,7 @@ function calendarAlert(event, triggeredAt, quieted) {
     due_at: event.starts_at,
     triggered_at: triggeredAt,
     quieted,
-    payload: redactValue({ ...event, severity: event.kind === "milestone" ? "warning" : "info" })
+    payload: redactValue2({ ...event, severity: event.kind === "milestone" ? "warning" : "info" })
   };
 }
 function runAlerts(input, db, checkedAt, quieted) {
@@ -26126,7 +26126,7 @@ function runAlerts(input, db, checkedAt, quieted) {
       due_at: null,
       triggered_at: run.completed_at || checkedAt,
       quieted,
-      payload: redactValue({ ...run, task_title: task?.title, project_id: task?.project_id, severity: failed ? "critical" : "info" })
+      payload: redactValue2({ ...run, task_title: task?.title, project_id: task?.project_id, severity: failed ? "critical" : "info" })
     };
   }).filter((alert) => alert !== null);
 }
@@ -26146,7 +26146,7 @@ function countAlerts(alerts) {
 }
 async function checkLocalNotifications(input = {}, db) {
   const d = db || getDatabase();
-  const checkedAt = input.now || now();
+  const checkedAt = input.now || now2();
   const checkedMs = Date.parse(checkedAt);
   const dueWithin = minutes(input.due_within_minutes, 60);
   const staleMinutes = minutes(input.stale_minutes, 30);
@@ -26265,7 +26265,7 @@ function toEntry(row) {
     created_at: row.created_at,
     title: redactEvidenceText(row.title),
     message: row.message ? redactEvidenceText(row.message) : null,
-    metadata: redactValue(parseMetadata2(row.metadata_json))
+    metadata: redactValue2(parseMetadata2(row.metadata_json))
   };
 }
 function sourceRank(source2) {
@@ -27022,7 +27022,7 @@ function rowToRelationship(row) {
 function addTaskRelationship(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   if (input.source_task_id === input.target_task_id) {
     throw new Error("Cannot create a relationship between a task and itself");
   }
@@ -27345,10 +27345,10 @@ function moveFiles(db, primaryId, duplicateId) {
     if (existing) {
       const note = [existing.note, row.note].filter(Boolean).join(`
 `);
-      db.run("UPDATE task_files SET status = ?, agent_id = COALESCE(?, agent_id), note = ?, updated_at = ? WHERE id = ?", [row.status, row.agent_id, note || null, now(), existing.id]);
+      db.run("UPDATE task_files SET status = ?, agent_id = COALESCE(?, agent_id), note = ?, updated_at = ? WHERE id = ?", [row.status, row.agent_id, note || null, now2(), existing.id]);
       db.run("DELETE FROM task_files WHERE id = ?", [row.id]);
     } else {
-      db.run("UPDATE task_files SET task_id = ?, updated_at = ? WHERE id = ?", [primaryId, now(), row.id]);
+      db.run("UPDATE task_files SET task_id = ?, updated_at = ? WHERE id = ?", [primaryId, now2(), row.id]);
     }
     moved++;
   }
@@ -27381,7 +27381,7 @@ function moveGitRefs(db, primaryId, duplicateId) {
     const exists = db.query("SELECT id FROM task_git_refs WHERE task_id = ? AND ref_type = ? AND name = ?").get(primaryId, row.ref_type, row.name);
     if (exists)
       continue;
-    db.run("UPDATE task_git_refs SET task_id = ?, updated_at = ? WHERE id = ?", [primaryId, now(), row.id]);
+    db.run("UPDATE task_git_refs SET task_id = ?, updated_at = ? WHERE id = ?", [primaryId, now2(), row.id]);
     moved++;
   }
   return moved;
@@ -27391,7 +27391,7 @@ function moveChecklists(db, primaryId, duplicateId) {
   const rows = db.query("SELECT id, position FROM task_checklists WHERE task_id = ? ORDER BY position, created_at").all(duplicateId);
   let moved = 0;
   for (const [index, row] of rows.entries()) {
-    db.run("UPDATE task_checklists SET task_id = ?, position = ?, updated_at = ? WHERE id = ?", [primaryId, max.position + index + 1, now(), row.id]);
+    db.run("UPDATE task_checklists SET task_id = ?, position = ?, updated_at = ? WHERE id = ?", [primaryId, max.position + index + 1, now2(), row.id]);
     moved++;
   }
   return moved;
@@ -27441,7 +27441,7 @@ function mergeDuplicateTask(input, db) {
       throw new Error(`Primary task not found: ${input.primary_task_id}`);
     if (!duplicate)
       throw new Error(`Duplicate task not found: ${input.duplicate_task_id}`);
-    const mergedAt = now();
+    const mergedAt = now2();
     const moved = {
       comments: 0,
       dependencies: 0,
@@ -27668,7 +27668,7 @@ function createRoadmap(input) {
   if (!name)
     throw new Error("Roadmap name is required");
   const store = readStore();
-  const now3 = timestamp();
+  const now4 = timestamp();
   const roadmap = {
     id: newId("roadmap"),
     name,
@@ -27679,8 +27679,8 @@ function createRoadmap(input) {
     agent_id: cleanString(input.agent_id),
     release: cleanString(input.release),
     milestone_ids: [],
-    created_at: now3,
-    updated_at: now3
+    created_at: now4,
+    updated_at: now4
   };
   store.roadmaps[roadmap.id] = roadmap;
   writeStore(store);
@@ -27740,7 +27740,7 @@ function createMilestone(input) {
   const title = input.title.trim();
   if (!title)
     throw new Error("Milestone title is required");
-  const now3 = timestamp();
+  const now4 = timestamp();
   const milestone = {
     id: newId("milestone"),
     roadmap_id: roadmapId,
@@ -27755,11 +27755,11 @@ function createMilestone(input) {
     run_ids: cleanList(input.run_ids),
     release: cleanString(input.release ?? roadmap.release ?? undefined),
     tags: cleanList(input.tags),
-    created_at: now3,
-    updated_at: now3
+    created_at: now4,
+    updated_at: now4
   };
   store.milestones[milestone.id] = milestone;
-  store.roadmaps[roadmapId] = { ...roadmap, milestone_ids: cleanList([...roadmap.milestone_ids, milestone.id]), updated_at: now3 };
+  store.roadmaps[roadmapId] = { ...roadmap, milestone_ids: cleanList([...roadmap.milestone_ids, milestone.id]), updated_at: now4 };
   writeStore(store);
   return milestone;
 }
@@ -27819,7 +27819,7 @@ function upsertReleaseGroup(input) {
     throw new Error("Release group name is required");
   const key = releaseKey(roadmapId, name);
   const existing = store.releases[key];
-  const now3 = timestamp();
+  const now4 = timestamp();
   const release = {
     name,
     version: input.version === undefined ? existing?.version ?? null : cleanString(input.version),
@@ -27830,8 +27830,8 @@ function upsertReleaseGroup(input) {
     plan_ids: input.plan_ids === undefined ? existing?.plan_ids ?? [] : cleanList(input.plan_ids),
     run_ids: input.run_ids === undefined ? existing?.run_ids ?? [] : cleanList(input.run_ids),
     notes: input.notes === undefined ? existing?.notes ?? null : cleanString(input.notes),
-    created_at: existing?.created_at ?? now3,
-    updated_at: now3
+    created_at: existing?.created_at ?? now4,
+    updated_at: now4
   };
   store.releases[key] = release;
   writeStore(store);
@@ -28039,7 +28039,7 @@ function upsertCapacityProfile(input) {
   const store = readStore2();
   const key = profileKey(agentId, projectId);
   const existing = store.profiles[key];
-  const now3 = timestamp2();
+  const now4 = timestamp2();
   const profile = {
     id: existing?.id ?? key,
     agent_id: agentId,
@@ -28047,8 +28047,8 @@ function upsertCapacityProfile(input) {
     minutes_per_day: assertMinutes(input.minutes_per_day),
     working_days: normalizeWorkingDays(input.working_days),
     effective_from: cleanString2(input.effective_from),
-    created_at: existing?.created_at ?? now3,
-    updated_at: now3
+    created_at: existing?.created_at ?? now4,
+    updated_at: now4
   };
   store.profiles[key] = profile;
   writeStore2(store);
@@ -28201,7 +28201,7 @@ function parsePayload(value) {
     return {};
   try {
     const parsed = JSON.parse(value);
-    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? redactValue(parsed) : {};
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? redactValue2(parsed) : {};
   } catch {
     return {};
   }
@@ -28372,7 +28372,7 @@ function getLocalAuditLedger(input = {}, db) {
     first_entry_hash: entries[0]?.chain_hash ?? null,
     last_entry_hash: entries.at(-1)?.chain_hash ?? null,
     source_counts: sourceCounts,
-    generated_at: now(),
+    generated_at: now2(),
     ...input.include_entries === false ? {} : { entries }
   };
 }
@@ -28393,7 +28393,7 @@ function sealLocalAuditLedger(input, db) {
     first_entry_hash: ledger.first_entry_hash,
     last_entry_hash: ledger.last_entry_hash,
     source_counts: ledger.source_counts,
-    created_at: now()
+    created_at: now2()
   };
   saveConfig({
     ...config,
@@ -28474,7 +28474,7 @@ __export(exports_release_compatibility, {
   LOCAL_RELEASE_COMPATIBILITY_SCHEMA_VERSION: () => LOCAL_RELEASE_COMPATIBILITY_SCHEMA_VERSION
 });
 import { readFileSync as readFileSync9 } from "fs";
-import { join as join14, resolve as resolve16 } from "path";
+import { join as join15, resolve as resolve16 } from "path";
 import { Database as Database2 } from "bun:sqlite";
 function pass(id, message, details) {
   return { id, status: "passed", message, details };
@@ -28486,7 +28486,7 @@ function warn(id, message, details) {
   return { id, status: "warning", message, details };
 }
 function readPackageJson2(root) {
-  return JSON.parse(readFileSync9(join14(root, "package.json"), "utf8"));
+  return JSON.parse(readFileSync9(join15(root, "package.json"), "utf8"));
 }
 function sortedKeys(value) {
   return Object.keys(value ?? {}).sort((left, right) => left.localeCompare(right));
@@ -30942,7 +30942,7 @@ __export(exports_handoffs, {
 function createHandoff(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp3 = now();
+  const timestamp3 = now2();
   d.run(`INSERT INTO handoffs (id, agent_id, project_id, session_id, summary, completed, in_progress, blockers, next_steps, task_ids, relevant_files, run_ids, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -31081,7 +31081,7 @@ function importHandoffBundle(bundle, options = {}, db) {
     ]);
   }
   for (const agentId of handoff.acknowledged_by ?? []) {
-    d.run("INSERT OR REPLACE INTO handoff_acknowledgements (handoff_id, agent_id, acknowledged_at) VALUES (?, ?, ?)", [handoff.id, agentId, now()]);
+    d.run("INSERT OR REPLACE INTO handoff_acknowledgements (handoff_id, agent_id, acknowledged_at) VALUES (?, ?, ?)", [handoff.id, agentId, now2()]);
   }
   return {
     applied: true,
@@ -31157,7 +31157,7 @@ function acknowledgeHandoff(id, agentId, db) {
   const handoff = getHandoff(id, d);
   if (!handoff)
     throw new Error(`Handoff not found: ${id}`);
-  d.run("INSERT OR REPLACE INTO handoff_acknowledgements (handoff_id, agent_id, acknowledged_at) VALUES (?, ?, ?)", [handoff.id, agentId, now()]);
+  d.run("INSERT OR REPLACE INTO handoff_acknowledgements (handoff_id, agent_id, acknowledged_at) VALUES (?, ?, ?)", [handoff.id, agentId, now2()]);
   return getHandoff(handoff.id, d);
 }
 function getLatestHandoff(agentId, projectId, db) {
@@ -31467,7 +31467,7 @@ function registerTaskWorkflowTools(server, ctx) {
             const globalRole = n.agent.role ? ` [${n.agent.role}]` : "";
             const lead = n.is_lead ? " \u2605" : "";
             const lastSeen = new Date(n.agent.last_seen_at).getTime();
-            const active = now3 - lastSeen < ACTIVE_MS ? " \u25CF" : " \u25CB";
+            const active = now4 - lastSeen < ACTIVE_MS ? " \u25CF" : " \u25CB";
             const line = `${prefix}${active} ${n.agent.name}${title}${globalRole}${lead}`;
             const children = n.reports.length > 0 ? `
 ` + render(n.reports, indent + 1) : "";
@@ -31480,7 +31480,7 @@ function registerTaskWorkflowTools(server, ctx) {
         if (format === "json") {
           return { content: [{ type: "text", text: JSON.stringify(tree, null, 2) }] };
         }
-        const now3 = Date.now();
+        const now4 = Date.now();
         const ACTIVE_MS = 30 * 60 * 1000;
         const text = tree.length > 0 ? render(tree) : "No agents in org chart.";
         return { content: [{ type: "text", text }] };
@@ -31676,14 +31676,14 @@ function registerTaskAutoTools(server, ctx) {
           return { content: [{ type: "text", text: "No agent_id provided and no agent focus is active." }], isError: true };
         }
         const assigned = listTasks3({ assigned_to: effectiveAgentId, limit: 500 }, undefined);
-        const now3 = Date.now();
-        const dueSoonCutoff = now3 + 24 * 60 * 60 * 1000;
+        const now4 = Date.now();
+        const dueSoonCutoff = now4 + 24 * 60 * 60 * 1000;
         const blocked = getBlockedTasks2().filter((t) => t.assigned_to === effectiveAgentId);
         const workload = {
           in_progress: assigned.filter((t) => t.status === "in_progress").length,
           pending: assigned.filter((t) => t.status === "pending").length,
-          completed_recent: assigned.filter((t) => t.status === "completed" && t.completed_at && now3 - new Date(t.completed_at).getTime() <= 7 * 24 * 60 * 60 * 1000).length,
-          due_soon: assigned.filter((t) => t.due_at && new Date(t.due_at).getTime() <= dueSoonCutoff && new Date(t.due_at).getTime() >= now3 && !["completed", "cancelled", "failed"].includes(t.status)).length,
+          completed_recent: assigned.filter((t) => t.status === "completed" && t.completed_at && now4 - new Date(t.completed_at).getTime() <= 7 * 24 * 60 * 60 * 1000).length,
+          due_soon: assigned.filter((t) => t.due_at && new Date(t.due_at).getTime() <= dueSoonCutoff && new Date(t.due_at).getTime() >= now4 && !["completed", "cancelled", "failed"].includes(t.status)).length,
           blocked: blocked.length
         };
         const lines = [
@@ -31910,7 +31910,7 @@ function limits(input) {
     stale_after_hours: clamp(input.stale_after_hours, DEFAULT_LIMITS.stale_after_hours, 24 * 365)
   };
 }
-function truncate(value, max) {
+function truncate2(value, max) {
   if (!value)
     return value ?? null;
   const redacted = redactEvidenceText(value);
@@ -31931,9 +31931,9 @@ function acceptanceCriteria(task, maxText) {
   const metadata = task.metadata || {};
   const raw = metadata["acceptance_criteria"] ?? metadata["acceptanceCriteria"] ?? metadata["criteria"];
   if (Array.isArray(raw))
-    return raw.map((item) => truncate(String(item), maxText)).filter((item) => Boolean(item));
+    return raw.map((item) => truncate2(String(item), maxText)).filter((item) => Boolean(item));
   if (typeof raw === "string") {
-    return raw.split(/\r?\n/).map((line) => line.replace(/^[-*]\s*/, "").trim()).filter(Boolean).map((line) => truncate(line, maxText)).filter((item) => Boolean(item));
+    return raw.split(/\r?\n/).map((line) => line.replace(/^[-*]\s*/, "").trim()).filter(Boolean).map((line) => truncate2(line, maxText)).filter((item) => Boolean(item));
   }
   return [];
 }
@@ -31956,7 +31956,7 @@ function addFile(files, path, source2, base) {
     path,
     status: base?.status || "active",
     agent_id: base?.agent_id ?? null,
-    note: truncate(base?.note, 240),
+    note: truncate2(base?.note, 240),
     updated_at: base?.updated_at || "",
     sources: [source2]
   });
@@ -32014,7 +32014,7 @@ function estimateTokens(value) {
   return Math.max(1, Math.ceil((text || "").length / 4));
 }
 function summarizeStrings(values, maxChars) {
-  return truncate(values.filter(Boolean).join("; "), maxChars) || "No local details were available before this section was omitted.";
+  return truncate2(values.filter(Boolean).join("; "), maxChars) || "No local details were available before this section was omitted.";
 }
 function summarizeSection(pack, section, maxChars) {
   if (section === "project")
@@ -32205,8 +32205,8 @@ function createAgentContextPack(input, db) {
     ...taskFiles.map((file) => file.updated_at)
   ], task.updated_at);
   const warnings = [];
-  const now3 = input.now ? new Date(input.now) : new Date;
-  if (Date.parse(task.updated_at) < now3.getTime() - limit.stale_after_hours * 60 * 60 * 1000) {
+  const now4 = input.now ? new Date(input.now) : new Date;
+  if (Date.parse(task.updated_at) < now4.getTime() - limit.stale_after_hours * 60 * 60 * 1000) {
     warnings.push(`task state is older than ${limit.stale_after_hours} hours`);
   }
   if (comments.length > recentComments.length)
@@ -32221,7 +32221,7 @@ function createAgentContextPack(input, db) {
     id: task.id,
     short_id: task.short_id,
     title: redactEvidenceText(task.title),
-    description: truncate(task.description, limit.max_text_chars),
+    description: truncate2(task.description, limit.max_text_chars),
     status: task.status,
     priority: task.priority,
     assigned_to: task.assigned_to,
@@ -32245,7 +32245,7 @@ function createAgentContextPack(input, db) {
     plan: plan ? {
       id: plan.id,
       name: plan.name,
-      description: truncate(plan.description, limit.max_text_chars),
+      description: truncate2(plan.description, limit.max_text_chars),
       status: plan.status,
       agent_id: plan.agent_id,
       tasks: planTasks.slice(0, limit.plan_task_limit).map(taskSummary).filter((item) => Boolean(item)),
@@ -32264,7 +32264,7 @@ function createAgentContextPack(input, db) {
         type: comment.type,
         progress_pct: comment.progress_pct,
         created_at: comment.created_at,
-        content: truncate(comment.content, limit.max_text_chars) || ""
+        content: truncate2(comment.content, limit.max_text_chars) || ""
       })),
       omitted: Math.max(0, comments.length - recentComments.length)
     },
@@ -32272,7 +32272,7 @@ function createAgentContextPack(input, db) {
     traceability: {
       commits: traceability.commits.map((commit) => ({
         sha: commit.sha,
-        message: truncate(commit.message, 240),
+        message: truncate2(commit.message, 240),
         files_changed: commit.files_changed,
         committed_at: commit.committed_at
       })),
@@ -32280,7 +32280,7 @@ function createAgentContextPack(input, db) {
       verifications: verifications.map((verification) => ({
         command: verification.command,
         status: verification.status,
-        output_summary: truncate(verification.output_summary, limit.max_text_chars),
+        output_summary: truncate2(verification.output_summary, limit.max_text_chars),
         artifact_path: verification.artifact_path,
         run_at: verification.run_at
       })),
@@ -32291,14 +32291,14 @@ function createAgentContextPack(input, db) {
         id: ledger.run.id,
         title: ledger.run.title,
         status: ledger.run.status,
-        summary: truncate(ledger.run.summary, limit.max_text_chars),
+        summary: truncate2(ledger.run.summary, limit.max_text_chars),
         agent_id: ledger.run.agent_id,
         started_at: ledger.run.started_at,
         completed_at: ledger.run.completed_at,
-        events: ledger.events.map((event) => ({ event_type: event.event_type, message: truncate(event.message, 500), created_at: event.created_at })),
-        commands: ledger.commands.map((command) => ({ command: command.command, status: command.status, output_summary: truncate(command.output_summary, limit.max_text_chars), artifact_path: command.artifact_path })),
-        files: ledger.files.map((file) => ({ path: file.path, status: file.status, note: truncate(file.note, 240) })),
-        artifacts: ledger.artifacts.map((artifact) => ({ path: artifact.path, artifact_type: artifact.artifact_type, description: truncate(artifact.description, 240), sha256: artifact.sha256 }))
+        events: ledger.events.map((event) => ({ event_type: event.event_type, message: truncate2(event.message, 500), created_at: event.created_at })),
+        commands: ledger.commands.map((command) => ({ command: command.command, status: command.status, output_summary: truncate2(command.output_summary, limit.max_text_chars), artifact_path: command.artifact_path })),
+        files: ledger.files.map((file) => ({ path: file.path, status: file.status, note: truncate2(file.note, 240) })),
+        artifacts: ledger.artifacts.map((artifact) => ({ path: artifact.path, artifact_type: artifact.artifact_type, description: truncate2(artifact.description, 240), sha256: artifact.sha256 }))
       })),
       omitted: Math.max(0, runs.length - selectedRuns.length)
     },
@@ -32330,7 +32330,7 @@ function createAgentContextPack(input, db) {
     }))
   };
   const { context_budget: _contextBudget, ...withoutContextBudget } = budgeted;
-  const redacted = redactValue(withoutContextBudget);
+  const redacted = redactValue2(withoutContextBudget);
   redacted.context_budget = contextBudget;
   return redacted;
 }
@@ -32403,7 +32403,7 @@ function renderAgentContextPackCompactMarkdown(pack) {
   const lines = [
     `# Context: ${pack.task.title}`,
     `${pack.task.status} | ${pack.task.priority} | ${pack.task.short_id || pack.task.id.slice(0, 8)}`,
-    pack.task.description ? truncate(pack.task.description, Math.min(pack.limits.summary_char_limit, 700)) : null,
+    pack.task.description ? truncate2(pack.task.description, Math.min(pack.limits.summary_char_limit, 700)) : null,
     "",
     "## Must Know",
     bullet([
@@ -32518,7 +32518,7 @@ function emptyContract(taskId) {
     relevant_files: [],
     risk_level: null,
     done_definition: [],
-    updated_at: now()
+    updated_at: now2()
   };
 }
 function emptyReview(taskId) {
@@ -32544,7 +32544,7 @@ function readContract(taskId, metadata) {
     relevant_files: cleanList2(raw.relevant_files),
     risk_level: cleanRisk(raw.risk_level),
     done_definition: cleanList2(raw.done_definition),
-    updated_at: typeof raw.updated_at === "string" ? raw.updated_at : now()
+    updated_at: typeof raw.updated_at === "string" ? raw.updated_at : now2()
   };
 }
 function readReview(taskId, metadata) {
@@ -32557,7 +32557,7 @@ function readReview(taskId, metadata) {
       actor: typeof item.actor === "string" ? item.actor : "unknown",
       notes: typeof item.notes === "string" ? item.notes : null,
       changes_requested: cleanList2(item.changes_requested),
-      at: typeof item.at === "string" ? item.at : now()
+      at: typeof item.at === "string" ? item.at : now2()
     };
   }) : [];
   return {
@@ -32587,7 +32587,7 @@ function setTaskContract(input, db) {
     relevant_files: input.relevant_files === undefined ? current.relevant_files : cleanList2(input.relevant_files),
     risk_level: input.risk_level === undefined ? current.risk_level : cleanRisk(input.risk_level),
     done_definition: input.done_definition === undefined ? current.done_definition : cleanList2(input.done_definition),
-    updated_at: now()
+    updated_at: now2()
   };
   const metadata = {
     ...task.metadata,
@@ -32606,7 +32606,7 @@ function getTaskContract(taskId, db) {
 }
 function requestTaskReview(input, db) {
   const task = taskOrThrow(input.task_id, db);
-  const timestamp3 = now();
+  const timestamp3 = now2();
   const previous = readReview(task.id, task.metadata);
   const entry = {
     state: "requested",
@@ -32631,7 +32631,7 @@ function requestTaskReview(input, db) {
 }
 function recordTaskReview(input, db) {
   const task = taskOrThrow(input.task_id, db);
-  const timestamp3 = now();
+  const timestamp3 = now2();
   const previous = readReview(task.id, task.metadata);
   const changes = cleanList2(input.changes_requested);
   const entry = {
@@ -33492,11 +33492,11 @@ function updateDispatcherMetadata(runId, dispatcher, db) {
   const run = getTaskRun(resolveTaskRunId(runId, d), d);
   if (!run)
     throw new Error(`Run not found: ${runId}`);
-  const metadata = redactValue({
+  const metadata = redactValue2({
     ...run.metadata,
     agent_run_dispatcher: dispatcher
   });
-  d.run("UPDATE task_runs SET metadata = ?, updated_at = ? WHERE id = ?", [JSON.stringify(metadata), now(), run.id]);
+  d.run("UPDATE task_runs SET metadata = ?, updated_at = ? WHERE id = ?", [JSON.stringify(metadata), now2(), run.id]);
   return getTaskRun(run.id, d);
 }
 function resolveAdapter(adapter) {
@@ -33735,7 +33735,7 @@ function claimNextAgentRun(agentId, options = {}, db) {
   const dispatcher = { ...next.dispatcher, state: "running", started_at: new Date().toISOString() };
   const updated = updateDispatcherMetadata(next.run.id, dispatcher, d);
   if (agentId)
-    d.run("UPDATE task_runs SET agent_id = ?, updated_at = ? WHERE id = ?", [agentId, now(), next.run.id]);
+    d.run("UPDATE task_runs SET agent_id = ?, updated_at = ? WHERE id = ?", [agentId, now2(), next.run.id]);
   const reread = getTaskRun(next.run.id, d) ?? updated;
   return toAgentRun({ run: reread, dispatcher });
 }
@@ -33805,7 +33805,7 @@ __export(exports_verification_providers, {
   getVerificationRecord: () => getVerificationRecord,
   discoverVerificationProviderCapabilities: () => discoverVerificationProviderCapabilities
 });
-import { existsSync as existsSync15, readFileSync as readFileSync10 } from "fs";
+import { existsSync as existsSync16, readFileSync as readFileSync10 } from "fs";
 function normalizeName6(name) {
   const normalized = name.trim().toLowerCase();
   if (!/^[a-z0-9][a-z0-9_-]{0,63}$/.test(normalized)) {
@@ -33838,7 +33838,7 @@ function upsertVerificationProvider(input) {
     kind: input.kind,
     command: input.command ?? existing?.command,
     cwd: input.cwd ?? existing?.cwd,
-    env: input.env ? redactValue(input.env) : existing?.env,
+    env: input.env ? redactValue2(input.env) : existing?.env,
     capabilities: input.capabilities ?? existing?.capabilities,
     retry: input.retry ? retryConfig(input.retry) : existing?.retry,
     timeout_ms: timeoutMs(input.timeout_ms ?? existing?.timeout_ms),
@@ -33957,7 +33957,7 @@ Timed out after ${provider.timeout_ms}ms`);
   };
 }
 function runCiLogProvider(input) {
-  const text = input.log_text ?? (input.log_path && existsSync15(input.log_path) ? readFileSync10(input.log_path, "utf-8") : "");
+  const text = input.log_text ?? (input.log_path && existsSync16(input.log_path) ? readFileSync10(input.log_path, "utf-8") : "");
   return {
     status: classifyLog(text),
     attempts: 1,
@@ -33969,7 +33969,7 @@ function runBrowserProvider(input) {
   if (!input.artifact_path) {
     return { status: "unknown", attempts: 1, exit_code: null, output_summary: "browser provider needs a screenshot or artifact path" };
   }
-  if (!existsSync15(input.artifact_path)) {
+  if (!existsSync16(input.artifact_path)) {
     return { status: "failed", attempts: 1, exit_code: null, output_summary: `artifact not found: ${input.artifact_path}` };
   }
   return {
@@ -33997,9 +33997,9 @@ async function runVerificationProvider(input, db) {
     exit_code: partial.exit_code,
     output_summary: partial.output_summary ? redactEvidenceText(partial.output_summary) : null,
     artifact_path: input.artifact_path || null,
-    run_at: now(),
+    run_at: now2(),
     task_id: input.task_id || null,
-    metadata: redactValue({
+    metadata: redactValue2({
       ...input.metadata || {},
       provider_kind: provider.kind,
       command_template: command,
@@ -34246,7 +34246,7 @@ function generateReleaseNotes(input = {}, db) {
     warnings.push("no completed tasks matched the release-note scope");
   return {
     schema_version: 1,
-    generated_at: input.generated_at || now(),
+    generated_at: input.generated_at || now2(),
     title: input.title || "Release Notes",
     version: input.version || null,
     local_only: true,
@@ -34341,7 +34341,7 @@ var init_release_notes = __esm(() => {
 function saveSnapshot(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp3 = now();
+  const timestamp3 = now2();
   d.run(`INSERT INTO context_snapshots (id, agent_id, task_id, project_id, snapshot_type, plan_summary, files_open, attempts, blockers, next_steps, metadata, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -34426,7 +34426,7 @@ function rowToKnowledgeRecord(row) {
     agent_id: row.agent_id,
     snapshot_id: row.snapshot_id,
     tags: parseArray2(row.tags),
-    metadata: redactValue(parseObject2(row.metadata)),
+    metadata: redactValue2(parseObject2(row.metadata)),
     created_at: row.created_at,
     updated_at: row.updated_at
   };
@@ -34442,7 +34442,7 @@ function createKnowledgeRecord(input, db) {
   if (!title)
     throw new Error("Knowledge record title is required");
   const d = db || getDatabase();
-  const timestamp3 = now();
+  const timestamp3 = now2();
   const id = uuid();
   d.run(`INSERT INTO project_knowledge_records (
       id, record_type, title, content, decision, rationale, alternatives,
@@ -34578,7 +34578,7 @@ function createKnowledgeExportReport(options, db) {
     schema_version: 1,
     local_only: true,
     no_network: true,
-    generated_at: now(),
+    generated_at: now2(),
     filters: { ...filters, query: options.query || null },
     count: records.length,
     records
@@ -34694,7 +34694,7 @@ function rowToRisk(row) {
     plan_id: row.plan_id,
     task_id: row.task_id,
     tags: parseArray3(row.tags),
-    metadata: redactValue(parseObject3(row.metadata)),
+    metadata: redactValue2(parseObject3(row.metadata)),
     created_at: row.created_at,
     updated_at: row.updated_at,
     closed_at: row.closed_at
@@ -34716,7 +34716,7 @@ function createRisk(input, db) {
   assertSeverity(severity);
   assertProbability(probability);
   const d = db || getDatabase();
-  const timestamp3 = now();
+  const timestamp3 = now2();
   const id = uuid();
   const closedAt = status === "resolved" || status === "accepted" ? timestamp3 : null;
   d.run(`INSERT INTO project_risks (
@@ -34756,7 +34756,7 @@ function updateRisk(id, input, db) {
     throw new Error(`Risk not found: ${id}`);
   const resolved = current.id;
   const sets = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.title !== undefined) {
     const title = input.title.trim();
     if (!title)
@@ -34773,7 +34773,7 @@ function updateRisk(id, input, db) {
     sets.push("status = ?");
     params.push(input.status);
     sets.push("closed_at = ?");
-    params.push(input.status === "resolved" || input.status === "accepted" ? now() : null);
+    params.push(input.status === "resolved" || input.status === "accepted" ? now2() : null);
   }
   if (input.severity !== undefined) {
     assertSeverity(input.severity);
@@ -34911,7 +34911,7 @@ function calculateDependencyDepth(taskIds, db) {
 }
 function scoreHealth(scope, scopeId, db) {
   const d = db || getDatabase();
-  const generatedAt = now();
+  const generatedAt = now2();
   const scopeInfo = scopeCondition(scope, scopeId, d);
   const tasks = d.query(`SELECT id, short_id, title, status, due_at FROM tasks WHERE ${scopeInfo.where}`).all(scopeInfo.id);
   const taskIds = new Set(tasks.map((task) => task.id));
@@ -35008,7 +35008,7 @@ function createRiskRegisterExport(options = {}, db) {
     schema_version: 1,
     local_only: true,
     no_network: true,
-    generated_at: now(),
+    generated_at: now2(),
     filters,
     count: risks.length,
     risks
@@ -35157,8 +35157,8 @@ function scoreTask(taskId, score, reviewerId, db) {
   metadata._review_score = score;
   if (reviewerId)
     metadata._reviewed_by = reviewerId;
-  metadata._reviewed_at = now();
-  d.run("UPDATE tasks SET metadata = ?, updated_at = ? WHERE id = ?", [JSON.stringify(metadata), now(), taskId]);
+  metadata._reviewed_at = now2();
+  d.run("UPDATE tasks SET metadata = ?, updated_at = ? WHERE id = ?", [JSON.stringify(metadata), now2(), taskId]);
 }
 function clampScore(value) {
   if (!Number.isFinite(value))
@@ -35238,7 +35238,7 @@ function getAgentReliabilityScorecard(agentId, options = {}, db) {
   const agent = resolveAgent2(agentId, d);
   if (!agent)
     return null;
-  const generatedAt = now();
+  const generatedAt = now2();
   const staleAfterHours = Number.isFinite(options.stale_after_hours) && options.stale_after_hours > 0 ? Math.min(Math.floor(options.stale_after_hours), 24 * 30) : 24;
   const staleCutoff = new Date(Date.now() - staleAfterHours * 60 * 60 * 1000).toISOString();
   const taskFilter = agentTaskWhere(agent, options, d);
@@ -35417,7 +35417,7 @@ function createAgentReliabilityExport(options = {}, db) {
     schema_version: 1,
     local_only: true,
     no_network: true,
-    generated_at: now(),
+    generated_at: now2(),
     filters: {
       agent_id: options.agent_id || null,
       project_id: options.project_id || null,
@@ -35545,7 +35545,7 @@ function extractUsage(value) {
   }
   return own;
 }
-function parseJsonObject5(value) {
+function parseJsonObject6(value) {
   if (!value)
     return {};
   try {
@@ -35717,7 +35717,7 @@ function createLocalUsageLedger(options = {}, db) {
       completedRunMs += millisBetween(run.started_at, run.completed_at);
     else
       openRunMs += millisBetween(run.started_at, generatedAt);
-    const usage = extractUsage(parseJsonObject5(run.metadata));
+    const usage = extractUsage(parseJsonObject6(run.metadata));
     metadataUsage.tokens += usage.tokens;
     metadataUsage.cost_usd += usage.cost_usd;
     metadataUsage.duration_ms += usage.duration_ms;
@@ -35729,7 +35729,7 @@ function createLocalUsageLedger(options = {}, db) {
        JOIN tasks t ON t.id = e.task_id
        ${runClause}`, runParams);
   for (const event of eventRows) {
-    const usage = extractUsage(parseJsonObject5(event.data));
+    const usage = extractUsage(parseJsonObject6(event.data));
     metadataUsage.tokens += usage.tokens;
     metadataUsage.cost_usd += usage.cost_usd;
     metadataUsage.duration_ms += usage.duration_ms;
@@ -35881,12 +35881,12 @@ function summarizeTask(task) {
   };
 }
 function overdueTasks(tasks, nowIso) {
-  const now3 = Date.parse(nowIso);
+  const now4 = Date.parse(nowIso);
   return tasks.filter((task) => {
     if (isTerminal(task) || !task.due_at)
       return false;
     const due = Date.parse(task.due_at);
-    return Number.isFinite(due) && due < now3;
+    return Number.isFinite(due) && due < now4;
   });
 }
 function isReady(task, db) {
@@ -36299,7 +36299,7 @@ function asRecord(value) {
 }
 function createLocalBackup(options = {}, db) {
   const d = db || getDatabase();
-  const createdAt = options.generated_at ?? now();
+  const createdAt = options.generated_at ?? now2();
   const bridge = createLocalBridgeBundle({
     project_id: options.project_id,
     generatedAt: createdAt,
@@ -36364,7 +36364,7 @@ function readLocalBackupFile(path) {
   return JSON.parse(readFileSync11(resolve17(path), "utf-8"));
 }
 function verifyLocalBackup(value, options = {}, db) {
-  const verifiedAt = options.verified_at ?? now();
+  const verifiedAt = options.verified_at ?? now2();
   const record = asRecord(value);
   const issues = [];
   const warnings = [];
@@ -36470,7 +36470,7 @@ function restoreLocalBackup(backup, options = {}, db) {
     kind: "hasna.todos.local-backup-restore",
     local_only: true,
     no_network: true,
-    restored_at: options.verified_at ?? now(),
+    restored_at: options.verified_at ?? now2(),
     dry_run: !options.apply,
     ok: verification.ok && Boolean(importResult?.ok),
     verification,
@@ -36528,7 +36528,7 @@ function checkLocalIntegrity(options = {}, db) {
     kind: TODOS_LOCAL_INTEGRITY_KIND,
     local_only: true,
     no_network: true,
-    generated_at: options.generated_at ?? now(),
+    generated_at: options.generated_at ?? now2(),
     database_path: getDatabasePath(),
     sqlite,
     bridge_validation: bridgeValidation,
@@ -36558,7 +36558,7 @@ __export(exports_onboarding_fixtures, {
   TODOS_ONBOARDING_FIXTURE_LIBRARY_VERSION: () => TODOS_ONBOARDING_FIXTURE_LIBRARY_VERSION
 });
 import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync6 } from "fs";
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 function emptyData() {
   return {
     projects: [],
@@ -36891,7 +36891,7 @@ function writeOnboardingFixtureFiles(directory) {
   mkdirSync8(directory, { recursive: true });
   const files = [];
   for (const fixture of allFixtures()) {
-    const path = join15(directory, `${fixture.summary.name}.bridge.json`);
+    const path = join16(directory, `${fixture.summary.name}.bridge.json`);
     writeFileSync6(path, `${JSON.stringify(fixture.bundle, null, 2)}
 `, "utf-8");
     files.push(path);
@@ -37121,7 +37121,7 @@ function getLocalSnapshot(options, db) {
   if (!ALL_TYPES.includes(options.type)) {
     throw new Error(`Unknown local snapshot type: ${options.type}`);
   }
-  const generatedAt = options.generatedAt ?? now();
+  const generatedAt = options.generatedAt ?? now2();
   const limit = normalizeLimit2(options.limit);
   const items = snapshotItems({ ...options, generatedAt, limit }, db);
   const cursor = latestTimestamp2(items, generatedAt);
@@ -37157,7 +37157,7 @@ function getLocalSnapshot(options, db) {
   };
 }
 function pollLocalSnapshots(options = {}, db) {
-  const generatedAt = options.generatedAt ?? now();
+  const generatedAt = options.generatedAt ?? now2();
   const types2 = options.types?.length ? options.types : ALL_TYPES;
   const snapshots = types2.map((type) => getLocalSnapshot({
     type,
@@ -37282,7 +37282,7 @@ function rowToRetrospective(row) {
     project_id: row.project_id,
     plan_id: row.plan_id,
     agent_id: row.agent_id,
-    report: redactValue(report),
+    report: redactValue2(report),
     created_at: row.created_at,
     updated_at: row.updated_at
   };
@@ -37347,7 +37347,7 @@ function buildFollowUps(report) {
 }
 function buildReport2(input, db) {
   const scope = scopeFromInput(input, db);
-  const generatedAt = now();
+  const generatedAt = now2();
   const title = input.title?.trim() || `${scope.scope === "plan" ? "Plan" : "Project"} retrospective ${scope.scopeId.slice(0, 8)}`;
   const tasks = db.query(`SELECT id, short_id, title, status, estimated_minutes, actual_minutes
      FROM tasks WHERE ${scope.where}`).all(scope.scopeId);
@@ -37431,7 +37431,7 @@ function createRetrospective(input, db) {
   const d = db || getDatabase();
   const report = buildReport2(input, d);
   const scope = scopeFromInput(input, d);
-  const timestamp3 = now();
+  const timestamp3 = now2();
   if (input.create_followups) {
     for (const followUp of report.follow_up_tasks) {
       const task2 = createTask({
@@ -37485,7 +37485,7 @@ function createRetrospectiveExport(options = {}, db) {
     schema_version: 1,
     local_only: true,
     no_network: true,
-    generated_at: now(),
+    generated_at: now2(),
     filters,
     count: retrospectives.length,
     retrospectives
@@ -37603,7 +37603,7 @@ function approvalsFromFixture(fixture, runs) {
   return [...explicit, ...fromEvents];
 }
 function simulateAgentReplay(input, options = {}) {
-  const fixture = redactValue(unpackFixture(input));
+  const fixture = redactValue2(unpackFixture(input));
   const task2 = isObject2(fixture["task"]) ? fixture["task"] : {};
   const plan = isObject2(fixture["plan"]) ? fixture["plan"] : null;
   const runsContainer = isObject2(fixture["runs"]) ? fixture["runs"] : {};
@@ -37953,7 +37953,7 @@ function createInboxItem(input, db) {
     const item = rowToInboxItem(existing);
     return { item, task: item.task_id ? getTask(item.task_id, d) : null, duplicate: true };
   }
-  const timestamp3 = now();
+  const timestamp3 = now2();
   let task2 = null;
   const metadata = {
     ...input.metadata || {},
@@ -38127,7 +38127,7 @@ function githubRecord(input, fallback) {
     labels,
     assignee: asString3(asObject2(input["assignee"])["login"]) || asString3(input["assignee"]),
     priority: priorityFromLabels(labels, fallback),
-    metadata: redactValue(input)
+    metadata: redactValue2(input)
   };
 }
 function linearRecord(input, fallback) {
@@ -38146,7 +38146,7 @@ function linearRecord(input, fallback) {
     labels,
     assignee: asString3(asObject2(input["assignee"])["name"]) || asString3(asObject2(input["assignee"])["displayName"]) || asString3(input["assignee"]),
     priority,
-    metadata: redactValue(input)
+    metadata: redactValue2(input)
   };
 }
 function jiraDescription(value) {
@@ -38174,7 +38174,7 @@ function jiraRecord(input, fallback) {
     labels,
     assignee: asString3(asObject2(fields["assignee"])["displayName"]) || asString3(input["assignee"]),
     priority,
-    metadata: redactValue(input)
+    metadata: redactValue2(input)
   };
 }
 function urlRecord(url, title, body, fallback = "medium") {
@@ -38357,7 +38357,7 @@ function createTaskFromIssue(issue, input, db) {
       key: issue.key,
       url: issue.url,
       state: issue.state,
-      imported_at: now()
+      imported_at: now2()
     },
     ...parsedGitHub ? {
       github_url: issue.url,
@@ -38371,7 +38371,7 @@ function createTaskFromIssue(issue, input, db) {
     description: taskDescription(issue).slice(0, 4000),
     priority: issue.priority || input.default_priority || "medium",
     tags: Array.from(new Set(["external-issue", issue.provider, ...issue.labels])).slice(0, 10),
-    metadata: redactValue(metadata),
+    metadata: redactValue2(metadata),
     project_id: input.project_id,
     task_list_id: input.task_list_id,
     agent_id: input.agent_id,
@@ -38421,7 +38421,7 @@ function importExternalIssues(input, db) {
     external_id: stableId(issue.provider, issue.key, issue.url, issue.title),
     body: issue.body ? redactEvidenceText(issue.body) : null,
     title: redactEvidenceText(issue.title),
-    metadata: redactValue(issue.metadata)
+    metadata: redactValue2(issue.metadata)
   }));
   const createdTasks = [];
   const inboxItems = [];
@@ -38467,7 +38467,7 @@ function importExternalIssues(input, db) {
     local_only: true,
     network_used: networkUsed,
     dry_run: !input.apply,
-    imported_at: now(),
+    imported_at: now2(),
     source: {
       provider,
       source_url: input.source_url || null,
@@ -38512,14 +38512,14 @@ function expiresAt(ttlSeconds) {
 }
 function cleanExpiredFileLocks(db) {
   const d = db || getDatabase();
-  const result = d.run("DELETE FROM file_locks WHERE expires_at <= ?", [now()]);
+  const result = d.run("DELETE FROM file_locks WHERE expires_at <= ?", [now2()]);
   return result.changes;
 }
 function lockFile(input, db) {
   const d = db || getDatabase();
   const ttl = input.ttl_seconds ?? FILE_LOCK_DEFAULT_TTL_SECONDS;
   const expiry = expiresAt(ttl);
-  const timestamp3 = now();
+  const timestamp3 = now2();
   cleanExpiredFileLocks(d);
   const existing = d.query("SELECT * FROM file_locks WHERE path = ?").get(input.path);
   if (existing) {
@@ -40047,7 +40047,7 @@ function syncKgEdges(db) {
 function upsertEdge(d, sourceId, sourceType, targetId, targetType, relationType, weight = 1) {
   try {
     d.run(`INSERT OR IGNORE INTO kg_edges (id, source_id, source_type, target_id, target_type, relation_type, weight, metadata, created_at)
-       VALUES (?, ?, ?, ?, ?, ?, ?, '{}', ?)`, [uuid(), sourceId, sourceType, targetId, targetType, relationType, weight, now()]);
+       VALUES (?, ?, ?, ?, ?, ?, ?, '{}', ?)`, [uuid(), sourceId, sourceType, targetId, targetType, relationType, weight, now2()]);
     return 1;
   } catch {
     return 0;
@@ -40202,7 +40202,7 @@ function getCriticalPath(opts, db) {
 function addKgEdge(sourceId, sourceType, targetId, targetType, relationType, weight = 1, metadata, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp3 = now();
+  const timestamp3 = now2();
   d.run(`INSERT OR IGNORE INTO kg_edges (id, source_id, source_type, target_id, target_type, relation_type, weight, metadata, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, [id, sourceId, sourceType, targetId, targetType, relationType, weight, JSON.stringify(metadata || {}), timestamp3]);
   return { id, source_id: sourceId, source_type: sourceType, target_id: targetId, target_type: targetType, relation_type: relationType, weight, metadata: metadata || {}, created_at: timestamp3 };
@@ -40238,7 +40238,7 @@ function setProjectAgentRole(projectId, agentId, role, isLead = false, db) {
     return rowToRole(d.query("SELECT * FROM project_agent_roles WHERE id = ?").get(existing.id));
   }
   const id = uuid();
-  d.run("INSERT INTO project_agent_roles (id, project_id, agent_id, role, is_lead, created_at) VALUES (?, ?, ?, ?, ?, ?)", [id, projectId, agentId, role, isLead ? 1 : 0, now()]);
+  d.run("INSERT INTO project_agent_roles (id, project_id, agent_id, role, is_lead, created_at) VALUES (?, ?, ?, ?, ?, ?)", [id, projectId, agentId, role, isLead ? 1 : 0, now2()]);
   return rowToRole(d.query("SELECT * FROM project_agent_roles WHERE id = ?").get(id));
 }
 function removeProjectAgentRole(projectId, agentId, role, db) {
@@ -40442,7 +40442,7 @@ function taskOrThrow2(taskId, db) {
   return task2;
 }
 function normalizeRule2(input, existing) {
-  const timestamp3 = now();
+  const timestamp3 = now2();
   const name = input.name.trim();
   if (!name)
     throw new Error("Review routing rule name is required");
@@ -40477,7 +40477,7 @@ function readQueue(task2) {
     requested_at: typeof raw.requested_at === "string" ? raw.requested_at : null,
     claimed_at: typeof raw.claimed_at === "string" ? raw.claimed_at : null,
     decided_at: typeof raw.decided_at === "string" ? raw.decided_at : null,
-    updated_at: typeof raw.updated_at === "string" ? raw.updated_at : now(),
+    updated_at: typeof raw.updated_at === "string" ? raw.updated_at : now2(),
     history: Array.isArray(raw.history) ? raw.history.map((entry) => {
       const item = typeof entry === "object" && entry !== null ? entry : {};
       const entryState = typeof item.state === "string" && STATES.has(item.state) ? item.state : state;
@@ -40485,7 +40485,7 @@ function readQueue(task2) {
         state: entryState,
         actor: typeof item.actor === "string" ? item.actor : "unknown",
         note: typeof item.note === "string" ? item.note : null,
-        at: typeof item.at === "string" ? item.at : now()
+        at: typeof item.at === "string" ? item.at : now2()
       };
     }) : []
   };
@@ -40527,7 +40527,7 @@ function writeQueue(task2, queue, actor, action, db) {
   return itemFromTask(taskOrThrow2(task2.id, d), queue, d);
 }
 function appendHistory(queue, state, actor, note) {
-  return [...queue.history, { state, actor, note: note ?? null, at: now() }];
+  return [...queue.history, { state, actor, note: note ?? null, at: now2() }];
 }
 function itemFromTask(task2, queue, db) {
   return {
@@ -40662,7 +40662,7 @@ function requestReviewQueue(input, db) {
     notes: input.notes ?? input.reason
   }, d);
   const updatedTask = taskOrThrow2(task2.id, d);
-  const timestamp3 = now();
+  const timestamp3 = now2();
   const previous = readQueue(updatedTask);
   const queue = {
     schema_version: 1,
@@ -40705,7 +40705,7 @@ function claimReviewItem(input, db) {
   const previous = derivedQueue(task2, d);
   if (!previous)
     throw new Error(`Task is not in a review queue: ${task2.id}`);
-  const timestamp3 = now();
+  const timestamp3 = now2();
   const queue = {
     ...previous,
     state: "claimed",
@@ -40725,7 +40725,7 @@ function approveReviewItem(input, db) {
     throw new Error(`Task is not in a review queue: ${task2.id}`);
   recordTaskReview({ task_id: task2.id, state: "approved", reviewer: input.reviewer, notes: input.note }, d);
   const updatedTask = taskOrThrow2(task2.id, d);
-  const timestamp3 = now();
+  const timestamp3 = now2();
   const queue = {
     ...previous,
     state: "approved",
@@ -40753,7 +40753,7 @@ function returnReviewItem(input, db) {
     changes_requested: changes
   }, d);
   const updatedTask = taskOrThrow2(task2.id, d);
-  const timestamp3 = now();
+  const timestamp3 = now2();
   const queue = {
     ...previous,
     state: "returned",
@@ -40774,7 +40774,7 @@ function reopenReviewItem(input, db) {
     throw new Error(`Task is not in a review queue: ${task2.id}`);
   recordTaskReview({ task_id: task2.id, state: "reopened", reviewer: input.reviewer, notes: input.note }, d);
   const updatedTask = taskOrThrow2(task2.id, d);
-  const timestamp3 = now();
+  const timestamp3 = now2();
   const queue = {
     ...previous,
     state: "reopened",
@@ -41217,7 +41217,7 @@ ${lines.join(`
             const projectRoles = n.project_roles.length > 0 ? ` <${n.project_roles.join(", ")}>` : "";
             const lead = n.is_project_lead ? " \u2605" : "";
             const lastSeen = new Date(n.agent.last_seen_at).getTime();
-            const active = now3 - lastSeen < ACTIVE_MS ? " \u25CF" : " \u25CB";
+            const active = now4 - lastSeen < ACTIVE_MS ? " \u25CF" : " \u25CB";
             const line = `${prefix}${active} ${n.agent.name}${title}${globalRole}${projectRoles}${lead}`;
             const children = n.reports.length > 0 ? `
 ` + render(n.reports, indent + 1) : "";
@@ -41231,7 +41231,7 @@ ${lines.join(`
         if (format === "json") {
           return { content: [{ type: "text", text: JSON.stringify(tree, null, 2) }] };
         }
-        const now3 = Date.now();
+        const now4 = Date.now();
         const ACTIVE_MS = 30 * 60 * 1000;
         const text2 = tree.length > 0 ? render(tree) : "No agents in this project's org chart.";
         return { content: [{ type: "text", text: text2 }] };
@@ -41781,10 +41781,10 @@ ${lines.join(`
     });
   }
   if (shouldRegisterTool("get_idle_focus_prompts")) {
-    server.tool("get_idle_focus_prompts", "Return local idle prompts for active focus sessions.", { agent_id: exports_external.string().optional(), now: exports_external.string().optional() }, async ({ agent_id, now: now3 }) => {
+    server.tool("get_idle_focus_prompts", "Return local idle prompts for active focus sessions.", { agent_id: exports_external.string().optional(), now: exports_external.string().optional() }, async ({ agent_id, now: now4 }) => {
       try {
         const { getIdleFocusSessionPrompts: getIdleFocusSessionPrompts2 } = (init_tasks(), __toCommonJS(exports_tasks));
-        return { content: [{ type: "text", text: JSON.stringify(getIdleFocusSessionPrompts2({ agent_id, now: now3 }), null, 2) }] };
+        return { content: [{ type: "text", text: JSON.stringify(getIdleFocusSessionPrompts2({ agent_id, now: now4 }), null, 2) }] };
       } catch (e) {
         return { content: [{ type: "text", text: formatError(e) }], isError: true };
       }
@@ -42922,16 +42922,16 @@ __export(exports_environment_snapshots, {
   captureEnvironmentSnapshot: () => captureEnvironmentSnapshot
 });
 import { createHash as createHash12 } from "crypto";
-import { existsSync as existsSync16, readFileSync as readFileSync13, statSync as statSync8 } from "fs";
+import { existsSync as existsSync17, readFileSync as readFileSync13, statSync as statSync8 } from "fs";
 import { hostname as hostname2, platform, arch } from "os";
-import { dirname as dirname9, join as join16, resolve as resolve18 } from "path";
+import { dirname as dirname9, join as join17, resolve as resolve18 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 function sha2566(value) {
   return createHash12("sha256").update(value).digest("hex");
 }
 function fileRecord(root, relativePath) {
-  const path = join16(root, relativePath);
-  if (!existsSync16(path))
+  const path = join17(root, relativePath);
+  if (!existsSync17(path))
     return null;
   const stat = statSync8(path);
   if (!stat.isFile())
@@ -42943,10 +42943,10 @@ function manifestRecord(root, relativePath) {
   const base = fileRecord(root, relativePath);
   if (!base)
     return null;
-  const parsed = readJsonFile(join16(root, relativePath));
+  const parsed = readJsonFile(join17(root, relativePath));
   if (!parsed)
     return { ...base, redacted: {} };
-  const redacted = redactValue({
+  const redacted = redactValue2({
     name: parsed["name"] ?? null,
     version: parsed["version"] ?? null,
     packageManager: parsed["packageManager"] ?? null,
@@ -43038,8 +43038,8 @@ function commandEnv(env, includeValues) {
 function defaultSnapshotDir() {
   const dbPath = getDatabasePath();
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
-    return join16(tmpdir2(), "hasna-todos", "environment-snapshots");
-  return join16(dirname9(resolve18(dbPath)), "environment-snapshots");
+    return join17(tmpdir2(), "hasna-todos", "environment-snapshots");
+  return join17(dirname9(resolve18(dbPath)), "environment-snapshots");
 }
 function snapshotWithId(snapshot) {
   const digest = sha2566(JSON.stringify(snapshot)).slice(0, 24);
@@ -43086,7 +43086,7 @@ function captureEnvironmentSnapshot(input = {}) {
   });
 }
 function writeEnvironmentSnapshot(snapshot, outputPath) {
-  const path = outputPath ? resolve18(outputPath) : join16(defaultSnapshotDir(), `${snapshot.id}.json`);
+  const path = outputPath ? resolve18(outputPath) : join17(defaultSnapshotDir(), `${snapshot.id}.json`);
   ensureDir2(dirname9(path));
   writeJsonFile(path, snapshot);
   return path;
@@ -43617,27 +43617,27 @@ __export(exports_serve, {
   SECURITY_HEADERS: () => SECURITY_HEADERS,
   MIME_TYPES: () => MIME_TYPES
 });
-import { existsSync as existsSync17 } from "fs";
-import { join as join17, dirname as dirname10, extname } from "path";
+import { existsSync as existsSync18 } from "fs";
+import { join as join18, dirname as dirname10, extname } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function resolveDashboardDir() {
   const candidates = [];
   try {
     const scriptDir = dirname10(fileURLToPath2(import.meta.url));
-    candidates.push(join17(scriptDir, "..", "dashboard", "dist"));
-    candidates.push(join17(scriptDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join18(scriptDir, "..", "dashboard", "dist"));
+    candidates.push(join18(scriptDir, "..", "..", "dashboard", "dist"));
   } catch {}
   if (process.argv[1]) {
     const mainDir = dirname10(process.argv[1]);
-    candidates.push(join17(mainDir, "..", "dashboard", "dist"));
-    candidates.push(join17(mainDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join18(mainDir, "..", "dashboard", "dist"));
+    candidates.push(join18(mainDir, "..", "..", "dashboard", "dist"));
   }
-  candidates.push(join17(process.cwd(), "dashboard", "dist"));
+  candidates.push(join18(process.cwd(), "dashboard", "dist"));
   for (const candidate of candidates) {
-    if (existsSync17(candidate))
+    if (existsSync18(candidate))
       return candidate;
   }
-  return join17(process.cwd(), "dashboard", "dist");
+  return join18(process.cwd(), "dashboard", "dist");
 }
 function getProvidedApiKey(req) {
   const headerKey = req.headers.get("x-api-key");
@@ -43664,15 +43664,15 @@ function checkAuth(req, apiKey) {
   return null;
 }
 function checkRateLimit(ip) {
-  const now3 = Date.now();
+  const now4 = Date.now();
   const entry = rateLimitMap.get(ip);
-  if (!entry || now3 > entry.resetAt) {
-    rateLimitMap.set(ip, { count: 1, resetAt: now3 + RATE_LIMIT_WINDOW_MS });
+  if (!entry || now4 > entry.resetAt) {
+    rateLimitMap.set(ip, { count: 1, resetAt: now4 + RATE_LIMIT_WINDOW_MS });
     return { allowed: true };
   }
   entry.count++;
   if (entry.count > RATE_LIMIT_MAX) {
-    return { allowed: false, retryAfter: Math.ceil((entry.resetAt - now3) / 1000) };
+    return { allowed: false, retryAfter: Math.ceil((entry.resetAt - now4) / 1000) };
   }
   return { allowed: true };
 }
@@ -43687,7 +43687,7 @@ function json(data, status = 200, headers) {
   });
 }
 function serveStaticFile(filePath) {
-  if (!existsSync17(filePath))
+  if (!existsSync18(filePath))
     return null;
   const ext = extname(filePath);
   const contentType = MIME_TYPES[ext] || "application/octet-stream";
@@ -43766,7 +43766,7 @@ data: ${data}
       filteredSseClients.delete(client);
   }
   const dashboardDir = resolveDashboardDir();
-  const dashboardExists = existsSync17(dashboardDir);
+  const dashboardExists = existsSync18(dashboardDir);
   if (!dashboardExists) {
     console.error(`
 Dashboard not found at: ${dashboardDir}`);
@@ -45592,12 +45592,12 @@ __export(exports_config_serve_commands, {
   registerConfigServeCommands: () => registerConfigServeCommands
 });
 import chalk6 from "chalk";
-import { existsSync as existsSync18, mkdirSync as mkdirSync9, readFileSync as readFileSync14, writeFileSync as writeFileSync7 } from "fs";
-import { dirname as dirname11, join as join18 } from "path";
+import { existsSync as existsSync19, mkdirSync as mkdirSync9, readFileSync as readFileSync14, writeFileSync as writeFileSync7 } from "fs";
+import { dirname as dirname11, join as join19 } from "path";
 function registerConfigServeCommands(program2) {
   program2.command("config").description("View or update configuration").option("--get <key>", "Get a config value").option("--set <key=value>", "Set a config value (e.g. completion_guard.enabled=true)").action((opts) => {
     const globalOpts = program2.opts();
-    const configPath = join18(getTodosGlobalDir(), "config.json");
+    const configPath = join19(getTodosGlobalDir(), "config.json");
     if (opts.get) {
       const config2 = loadConfig();
       const keys = opts.get.split(".");
@@ -45634,7 +45634,7 @@ function registerConfigServeCommands(program2) {
       }
       obj[keys[keys.length - 1]] = parsedValue;
       const dir = dirname11(configPath);
-      if (!existsSync18(dir))
+      if (!existsSync19(dir))
         mkdirSync9(dir, { recursive: true });
       writeFileSync7(configPath, JSON.stringify(config2, null, 2));
       if (globalOpts.json) {
@@ -46496,8 +46496,8 @@ function registerConfigServeCommands(program2) {
       for (const t of all)
         counts[t.status] = (counts[t.status] || 0) + 1;
       process.stdout.write("\x1B[2J\x1B[0f");
-      const now3 = new Date().toLocaleTimeString();
-      console.log(chalk6.bold(`todos watch`) + chalk6.dim(` \u2014 ${now3} \u2014 refreshing every ${opts.interval}s \u2014 Ctrl+C to stop
+      const now4 = new Date().toLocaleTimeString();
+      console.log(chalk6.bold(`todos watch`) + chalk6.dim(` \u2014 ${now4} \u2014 refreshing every ${opts.interval}s \u2014 Ctrl+C to stop
 `));
       const parts = [
         `total: ${chalk6.bold(String(all.length))}`,
@@ -47331,9 +47331,9 @@ Repairs`));
       const db = getDatabase();
       const row = db.query("SELECT COUNT(*) as count FROM tasks").get();
       const { statSync: statSync9 } = await import("fs");
-      const { join: join19 } = await import("path");
+      const { join: join20 } = await import("path");
       const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-      const dbPath = process.env["HASNA_TODOS_DB_PATH"] || process.env["TODOS_DB_PATH"] || join19(home, ".hasna", "todos", "todos.db");
+      const dbPath = process.env["HASNA_TODOS_DB_PATH"] || process.env["TODOS_DB_PATH"] || join20(home, ".hasna", "todos", "todos.db");
       let size = "unknown";
       try {
         size = `${(statSync9(dbPath).size / 1024 / 1024).toFixed(1)} MB`;
@@ -47641,14 +47641,14 @@ Repairs`));
     const globalOpts = program2.opts();
     const db = getDatabase();
     const { getTasksChangedSince: getTasksChangedSince2 } = await Promise.resolve().then(() => (init_tasks(), exports_tasks));
-    const now3 = new Date;
-    const start = new Date(now3);
+    const now4 = new Date;
+    const start = new Date(now4);
     start.setDate(start.getDate() - 7);
     start.setHours(0, 0, 0, 0);
     const tasks = getTasksChangedSince2(start.toISOString(), undefined, db);
     const days = {};
     for (let i = 0;i < 7; i++) {
-      const d = new Date(now3);
+      const d = new Date(now4);
       d.setDate(d.getDate() - i);
       days[d.toISOString().slice(0, 10)] = { completed: [], started: [], other: [] };
     }
@@ -47664,12 +47664,12 @@ Repairs`));
         days[day].other.push(t);
     }
     if (opts.json || globalOpts.json) {
-      console.log(JSON.stringify({ from: start.toISOString().slice(0, 10), to: now3.toISOString().slice(0, 10), days }));
+      console.log(JSON.stringify({ from: start.toISOString().slice(0, 10), to: now4.toISOString().slice(0, 10), days }));
       return;
     }
     const totalCompleted = tasks.filter((t) => t.status === "completed").length;
     const totalStarted = tasks.filter((t) => t.status === "in_progress").length;
-    console.log(chalk7.bold(`Week \u2014 ${start.toISOString().slice(0, 10)} to ${now3.toISOString().slice(0, 10)}`));
+    console.log(chalk7.bold(`Week \u2014 ${start.toISOString().slice(0, 10)} to ${now4.toISOString().slice(0, 10)}`));
     console.log(chalk7.dim(`  ${totalCompleted} completed, ${totalStarted} in progress, ${tasks.length} total changes
 `));
     const sortedDays = Object.keys(days).sort().reverse();
@@ -47696,10 +47696,10 @@ Repairs`));
     const { getRecentActivity: getRecentActivity2 } = await Promise.resolve().then(() => (init_audit(), exports_audit));
     const numDays = parseInt(opts.days, 10);
     const entries = getRecentActivity2(5000, db);
-    const now3 = new Date;
+    const now4 = new Date;
     const dayStats = [];
     for (let i = numDays - 1;i >= 0; i--) {
-      const d = new Date(now3);
+      const d = new Date(now4);
       d.setDate(d.getDate() - i);
       const dateStr = d.toISOString().slice(0, 10);
       const dayEntries = entries.filter((e) => e.created_at.slice(0, 10) === dateStr);
@@ -49090,21 +49090,21 @@ __export(exports_mcp_hooks_commands, {
 });
 import chalk8 from "chalk";
 import { execSync as execSync3 } from "child_process";
-import { existsSync as existsSync19, readFileSync as readFileSync16, writeFileSync as writeFileSync9, mkdirSync as mkdirSync10, chmodSync as chmodSync2 } from "fs";
-import { dirname as dirname12, join as join19 } from "path";
+import { existsSync as existsSync20, readFileSync as readFileSync16, writeFileSync as writeFileSync9, mkdirSync as mkdirSync10, chmodSync as chmodSync2 } from "fs";
+import { dirname as dirname12, join as join20 } from "path";
 function getMcpBinaryPath() {
   try {
     const p = execSync3("which todos-mcp", { encoding: "utf-8" }).trim();
     if (p)
       return p;
   } catch {}
-  const bunBin = join19(HOME2, ".bun", "bin", "todos-mcp");
-  if (existsSync19(bunBin))
+  const bunBin = join20(HOME2, ".bun", "bin", "todos-mcp");
+  if (existsSync20(bunBin))
     return bunBin;
   return "todos-mcp";
 }
 function readJsonFile2(path) {
-  if (!existsSync19(path))
+  if (!existsSync20(path))
     return {};
   try {
     return JSON.parse(readFileSync16(path, "utf-8"));
@@ -49114,19 +49114,19 @@ function readJsonFile2(path) {
 }
 function writeJsonFile2(path, data) {
   const dir = dirname12(path);
-  if (!existsSync19(dir))
+  if (!existsSync20(dir))
     mkdirSync10(dir, { recursive: true });
   writeFileSync9(path, JSON.stringify(data, null, 2) + `
 `);
 }
 function readTomlFile(path) {
-  if (!existsSync19(path))
+  if (!existsSync20(path))
     return "";
   return readFileSync16(path, "utf-8");
 }
 function writeTomlFile(path, content) {
   const dir = dirname12(path);
-  if (!existsSync19(dir))
+  if (!existsSync20(dir))
     mkdirSync10(dir, { recursive: true });
   writeFileSync9(path, content);
 }
@@ -49192,7 +49192,7 @@ function unregisterClaude(_global) {
   }
 }
 function registerCodex(binPath) {
-  const configPath = join19(HOME2, ".codex", "config.toml");
+  const configPath = join20(HOME2, ".codex", "config.toml");
   let content = readTomlFile(configPath);
   content = removeTomlBlock(content, "mcp_servers.todos");
   const block = `
@@ -49206,7 +49206,7 @@ args = []
   console.log(chalk8.green(`Codex CLI: registered in ${configPath}`));
 }
 function unregisterCodex() {
-  const configPath = join19(HOME2, ".codex", "config.toml");
+  const configPath = join20(HOME2, ".codex", "config.toml");
   let content = readTomlFile(configPath);
   if (!content.includes("[mcp_servers.todos]")) {
     console.log(chalk8.dim(`Codex CLI: todos not found in ${configPath}`));
@@ -49218,7 +49218,7 @@ function unregisterCodex() {
   console.log(chalk8.green(`Codex CLI: unregistered from ${configPath}`));
 }
 function registerGemini(binPath) {
-  const configPath = join19(HOME2, ".gemini", "settings.json");
+  const configPath = join20(HOME2, ".gemini", "settings.json");
   const config = readJsonFile2(configPath);
   if (!config["mcpServers"]) {
     config["mcpServers"] = {};
@@ -49232,7 +49232,7 @@ function registerGemini(binPath) {
   console.log(chalk8.green(`Gemini CLI: registered in ${configPath}`));
 }
 function unregisterGemini() {
-  const configPath = join19(HOME2, ".gemini", "settings.json");
+  const configPath = join20(HOME2, ".gemini", "settings.json");
   const config = readJsonFile2(configPath);
   const servers = config["mcpServers"];
   if (!servers || !("todos" in servers)) {
@@ -49289,8 +49289,8 @@ function registerMcpHooksCommands(program2) {
       if (p)
         todosBin = p;
     } catch {}
-    const hooksDir = join19(process.cwd(), ".claude", "hooks");
-    if (!existsSync19(hooksDir))
+    const hooksDir = join20(process.cwd(), ".claude", "hooks");
+    if (!existsSync20(hooksDir))
       mkdirSync10(hooksDir, { recursive: true });
     const hookScript = `#!/usr/bin/env bash
 # Auto-generated by: todos hooks install
@@ -49315,11 +49315,11 @@ esac
 
 exit 0
 `;
-    const hookPath = join19(hooksDir, "todos-sync.sh");
+    const hookPath = join20(hooksDir, "todos-sync.sh");
     writeFileSync9(hookPath, hookScript);
     execSync3(`chmod +x "${hookPath}"`);
     console.log(chalk8.green(`Hook script created: ${hookPath}`));
-    const settingsPath = join19(process.cwd(), ".claude", "settings.json");
+    const settingsPath = join20(process.cwd(), ".claude", "settings.json");
     const settings = readJsonFile2(settingsPath);
     if (!settings["hooks"]) {
       settings["hooks"] = {};
@@ -50122,7 +50122,7 @@ Artifacts:`));
       const gitDir = execSync3("git rev-parse --git-dir", { encoding: "utf-8" }).trim();
       const hookPath = `${gitDir}/hooks/post-commit`;
       const marker = "# todos-auto-link";
-      if (existsSync19(hookPath)) {
+      if (existsSync20(hookPath)) {
         const existing = readFileSync16(hookPath, "utf-8");
         if (existing.includes(marker)) {
           console.log(chalk8.yellow("Hook already installed."));
@@ -50150,7 +50150,7 @@ $(dirname "$0")/../../scripts/post-commit-hook.sh
       const gitDir = execSync3("git rev-parse --git-dir", { encoding: "utf-8" }).trim();
       const hookPath = `${gitDir}/hooks/post-commit`;
       const marker = "# todos-auto-link";
-      if (!existsSync19(hookPath)) {
+      if (!existsSync20(hookPath)) {
         console.log(chalk8.dim("No post-commit hook found."));
         return;
       }
@@ -50332,7 +50332,7 @@ import chalk10 from "chalk";
 import { execSync as execSync4 } from "child_process";
 import { readFileSync as readFileSync17, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 function getOrCreateLocalMachineName() {
   return process.env["TODOS_MACHINE_NAME"] || __require("os").hostname() || "unknown";
 }
@@ -50370,7 +50370,7 @@ function remoteTempPath(sshAddress) {
 }
 function readRemoteBridgeBundle(sshAddress) {
   const remotePath = remoteTempPath(sshAddress);
-  const localPath = join20(tmpdir3(), `todos-bridge-pull-${uuid()}.json`);
+  const localPath = join21(tmpdir3(), `todos-bridge-pull-${uuid()}.json`);
   try {
     runSsh(sshAddress, `todos export --format bridge --allow-plaintext-sensitive --output ${shellQuote(remotePath)}`, 120000);
     scpFromRemote(sshAddress, remotePath, localPath);
@@ -50385,7 +50385,7 @@ function readRemoteBridgeBundle(sshAddress) {
   }
 }
 function writeLocalBridgeBundle() {
-  const localPath = join20(tmpdir3(), `todos-bridge-push-${uuid()}.json`);
+  const localPath = join21(tmpdir3(), `todos-bridge-push-${uuid()}.json`);
   writeFileSync10(localPath, JSON.stringify(createLocalBridgeBundle(), null, 2));
   return localPath;
 }
@@ -50908,7 +50908,7 @@ function parseRecordType(value) {
   console.error(chalk13.red(`type must be one of: ${RECORD_TYPES.join(", ")}`));
   process.exit(1);
 }
-function parseJsonObject6(value, label) {
+function parseJsonObject7(value, label) {
   if (!value)
     return;
   try {
@@ -50968,7 +50968,7 @@ function registerKnowledgeCommands(program2) {
         plan_id: opts.plan,
         agent_id: opts.agent || globalOpts.agent,
         tags: tagsFromOption(opts.tag),
-        metadata: parseJsonObject6(opts.metadataJson, "--metadata-json")
+        metadata: parseJsonObject7(opts.metadataJson, "--metadata-json")
       }, getDatabase());
       if (opts.json || globalOpts.json)
         output(record, true);
@@ -50993,7 +50993,7 @@ function registerKnowledgeCommands(program2) {
         blockers: opts.blocker,
         next_steps: opts.next,
         tags: tagsFromOption(opts.tag),
-        metadata: parseJsonObject6(opts.metadataJson, "--metadata-json")
+        metadata: parseJsonObject7(opts.metadataJson, "--metadata-json")
       }, getDatabase());
       if (opts.json || globalOpts.json)
         output(result, true);
@@ -51079,7 +51079,7 @@ function parseChoice(value, choices, label) {
   console.error(chalk14.red(`${label} must be one of: ${choices.join(", ")}`));
   process.exit(1);
 }
-function parseJsonObject7(value, label) {
+function parseJsonObject8(value, label) {
   if (!value)
     return;
   try {
@@ -51144,7 +51144,7 @@ function registerRiskCommands(program2) {
         plan_id: opts.plan,
         task_id: opts.task,
         tags: tagsFromOption2(opts.tag),
-        metadata: parseJsonObject7(opts.metadataJson, "--metadata-json")
+        metadata: parseJsonObject8(opts.metadataJson, "--metadata-json")
       }, getDatabase());
       if (opts.json || globalOpts.json)
         output(risk, true);
@@ -51196,7 +51196,7 @@ function registerRiskCommands(program2) {
         plan_id: opts.plan,
         task_id: opts.task,
         tags: opts.tag.length > 0 ? tagsFromOption2(opts.tag) : undefined,
-        metadata: parseJsonObject7(opts.metadataJson, "--metadata-json")
+        metadata: parseJsonObject8(opts.metadataJson, "--metadata-json")
       }, getDatabase());
       if (opts.json || globalOpts.json)
         output(risk, true);
@@ -51360,7 +51360,7 @@ __export(exports_agent_reliability_commands, {
   registerAgentReliabilityCommands: () => registerAgentReliabilityCommands
 });
 import chalk16 from "chalk";
-function parseNumber(value, fallback) {
+function parseNumber2(value, fallback) {
   if (!value)
     return fallback;
   const parsed = Number.parseInt(value, 10);
@@ -51370,7 +51370,7 @@ function commonOptions(opts) {
   return {
     project_id: opts.project,
     since: opts.since,
-    stale_after_hours: parseNumber(opts.staleAfterHours, 24)
+    stale_after_hours: parseNumber2(opts.staleAfterHours, 24)
   };
 }
 function printScorecard(scorecard) {
@@ -51407,7 +51407,7 @@ function registerAgentReliabilityCommands(program2) {
       const report = createAgentReliabilityExport({
         ...commonOptions(opts),
         agent_id: opts.agent,
-        limit: parseNumber(opts.limit, 50)
+        limit: parseNumber2(opts.limit, 50)
       }, getDatabase());
       const globalOpts = program2.opts();
       if (opts.json || globalOpts.json)
@@ -51423,7 +51423,7 @@ function registerAgentReliabilityCommands(program2) {
       const report = createAgentReliabilityExport({
         ...commonOptions(opts),
         agent_id: opts.agent,
-        limit: parseNumber(opts.limit, 100)
+        limit: parseNumber2(opts.limit, 100)
       }, getDatabase());
       if (opts.format === "markdown") {
         console.log(renderAgentReliabilityMarkdown(report));
@@ -54767,7 +54767,7 @@ __export(exports_sdk_integration_fixtures, {
   TODOS_SDK_INTEGRATION_FIXTURE_GENERATED_AT: () => TODOS_SDK_INTEGRATION_FIXTURE_GENERATED_AT
 });
 import { mkdirSync as mkdirSync11, writeFileSync as writeFileSync11 } from "fs";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 function source5(version) {
   return {
     packageName: "@hasna/todos",
@@ -54874,7 +54874,7 @@ function writeSdkIntegrationFixtures(directory, options = {}) {
   ];
   const written = [];
   for (const [name, payload] of files) {
-    const file = join21(directory, name);
+    const file = join22(directory, name);
     writeFileSync11(file, `${JSON.stringify(payload, null, 2)}
 `, "utf-8");
     written.push(file);
@@ -56596,7 +56596,7 @@ var init_hybrid = __esm(() => {
 });
 
 // src/storage/postgres-adapter.ts
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 function createPostgresTodosStorageAdapter(options) {
   const store = new PostgresJsonRecordStore(options);
   const adapter = {
@@ -56779,7 +56779,7 @@ async function createTask3(input, store, context) {
   const timestamp3 = new Date().toISOString();
   const shortId = input.project_id ? await nextTaskShortId2(input.project_id, store, context) : null;
   const task2 = {
-    id: randomUUID2(),
+    id: randomUUID5(),
     short_id: shortId,
     project_id: input.project_id ?? context?.projectId ?? null,
     parent_id: input.parent_id ?? null,
@@ -56946,7 +56946,7 @@ async function getChangedSince(since, filters, store) {
 async function createProject2(input, store, context) {
   const timestamp3 = new Date().toISOString();
   const project = {
-    id: randomUUID2(),
+    id: randomUUID5(),
     name: input.name,
     path: input.path,
     description: input.description ?? null,
@@ -56966,7 +56966,7 @@ async function updateProject2(id, input, store) {
 async function createPlan2(input, store, context) {
   const timestamp3 = new Date().toISOString();
   return store.upsert("plans", {
-    id: randomUUID2(),
+    id: randomUUID5(),
     project_id: input.project_id ?? context?.projectId ?? null,
     task_list_id: input.task_list_id ?? context?.taskListId ?? null,
     agent_id: input.agent_id ?? context?.agentId ?? null,
@@ -56988,7 +56988,7 @@ async function registerAgent2(input, store, context) {
   }
   const timestamp3 = new Date().toISOString();
   const agent = {
-    id: existing?.id ?? randomUUID2().slice(0, 8),
+    id: existing?.id ?? randomUUID5().slice(0, 8),
     name: input.name,
     description: input.description ?? existing?.description ?? null,
     role: input.role ?? existing?.role ?? null,
@@ -57024,7 +57024,7 @@ async function updateAgent2(id, input, store) {
 async function createTaskList2(input, store, context) {
   const timestamp3 = new Date().toISOString();
   return store.upsert("task_lists", {
-    id: randomUUID2(),
+    id: randomUUID5(),
     project_id: input.project_id ?? context?.projectId ?? null,
     slug: input.slug ?? slugify2(input.name),
     name: input.name,
@@ -57046,7 +57046,7 @@ async function updateTaskList2(id, input, store) {
 async function createTemplate2(input, store, context) {
   const timestamp3 = new Date().toISOString();
   return store.upsert("templates", {
-    id: randomUUID2(),
+    id: randomUUID5(),
     name: input.name,
     title_pattern: input.title_pattern,
     description: input.description ?? null,
@@ -57075,7 +57075,7 @@ async function updateTemplate2(id, input, store) {
 }
 async function logTaskChange2(taskId, action, field2, oldValue, newValue, agentId, store, context) {
   const entry2 = {
-    id: randomUUID2(),
+    id: randomUUID5(),
     task_id: taskId,
     action,
     field: field2 ?? null,
@@ -57088,7 +57088,7 @@ async function logTaskChange2(taskId, action, field2, oldValue, newValue, agentI
 }
 async function addComment2(input, store, context) {
   const comment = {
-    id: randomUUID2(),
+    id: randomUUID5(),
     task_id: input.task_id,
     agent_id: input.agent_id ?? context?.agentId ?? null,
     session_id: input.session_id ?? context?.sessionId ?? null,
@@ -57271,10 +57271,10 @@ var init_factory = __esm(() => {
 });
 
 // src/storage/s3-artifacts.ts
-import { createHash as createHash13, createHmac } from "crypto";
+import { createHash as createHash13, createHmac as createHmac2 } from "crypto";
 function createTodosS3ArtifactStore(options) {
   const requestFetch = options.fetch ?? fetch;
-  const now3 = options.now ?? (() => new Date);
+  const now4 = options.now ?? (() => new Date);
   return {
     objectKey: (relativePath) => buildS3ObjectKey(options.config, relativePath),
     objectUrl: (relativePath) => buildS3ObjectUrl(options.config, buildS3ObjectKey(options.config, relativePath)),
@@ -57296,7 +57296,7 @@ function createTodosS3ArtifactStore(options) {
         headers,
         body,
         credentials: options.credentials,
-        now: now3()
+        now: now4()
       });
       const response = await requestFetch(url, { method: "PUT", headers: signed.headers, body });
       if (!response.ok)
@@ -57317,7 +57317,7 @@ function createTodosS3ArtifactStore(options) {
         service: "s3",
         headers: {},
         credentials: options.credentials,
-        now: now3()
+        now: now4()
       });
       const response = await requestFetch(url, { method: "GET", headers: signed.headers });
       if (!response.ok)
@@ -57333,7 +57333,7 @@ function createTodosS3ArtifactStore(options) {
         service: "s3",
         headers: {},
         credentials: options.credentials,
-        now: now3()
+        now: now4()
       });
       const response = await requestFetch(url, { method: "DELETE", headers: signed.headers });
       if (!response.ok && response.status !== 404)
@@ -57446,10 +57446,10 @@ function sha256Hex(value) {
   return createHash13("sha256").update(value).digest("hex");
 }
 function hmac(key, value) {
-  return createHmac("sha256", key).update(value).digest();
+  return createHmac2("sha256", key).update(value).digest();
 }
 function hmacHex(key, value) {
-  return createHmac("sha256", key).update(value).digest("hex");
+  return createHmac2("sha256", key).update(value).digest("hex");
 }
 function getSigningKey(secretAccessKey, dateStamp, region, service) {
   const dateKey = hmac(`AWS4${secretAccessKey}`, dateStamp);
@@ -57462,7 +57462,7 @@ var init_s3_artifacts = () => {};
 // src/storage/s3-artifact-sync.ts
 async function uploadRunArtifactsToS3(options) {
   const db = options.db ?? getDatabase();
-  const now3 = options.now ?? (() => new Date);
+  const now4 = options.now ?? (() => new Date);
   const result = emptyResult();
   for (const artifact of listRunArtifacts(db, options.filter)) {
     try {
@@ -57501,7 +57501,7 @@ async function uploadRunArtifactsToS3(options) {
         url: ref.url,
         sha256: content.sha256,
         size_bytes: content.size_bytes,
-        uploaded_at: now3().toISOString()
+        uploaded_at: now4().toISOString()
       };
       updateArtifactMetadata(db, artifact.id, {
         ...metadata,
@@ -57576,7 +57576,7 @@ function planRunArtifactsS3Sync(options) {
 }
 async function downloadRunArtifactsFromS3(options) {
   const db = options.db ?? getDatabase();
-  const now3 = options.now ?? (() => new Date);
+  const now4 = options.now ?? (() => new Date);
   const result = emptyResult();
   for (const artifact of listRunArtifacts(db, options.filter)) {
     try {
@@ -57612,7 +57612,7 @@ async function downloadRunArtifactsFromS3(options) {
         ...metadata,
         remote_artifact_store: {
           ...remote,
-          downloaded_at: now3().toISOString()
+          downloaded_at: now4().toISOString()
         }
       });
       result.downloaded += 1;
@@ -58675,6 +58675,686 @@ var init_help_commands = __esm(() => {
 
 // src/cli/index.tsx
 init_esm();
+
+// node_modules/.bun/@hasna+events@0.1.3/node_modules/@hasna/events/dist/commander.js
+import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
+import { existsSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+import { createHmac, timingSafeEqual } from "crypto";
+import { randomUUID } from "crypto";
+import { spawn } from "child_process";
+import { randomUUID as randomUUID2 } from "crypto";
+function getPathValue(input, path) {
+  return path.split(".").reduce((value, part) => {
+    if (value && typeof value === "object" && part in value) {
+      return value[part];
+    }
+    return;
+  }, input);
+}
+function wildcardToRegExp(pattern) {
+  const escaped = pattern.replace(/[|\\{}()[\]^$+?.]/g, "\\$&").replace(/\*/g, ".*");
+  return new RegExp(`^${escaped}$`);
+}
+function matchString(value, matcher) {
+  if (matcher === undefined)
+    return true;
+  if (value === undefined)
+    return false;
+  const matchers = Array.isArray(matcher) ? matcher : [matcher];
+  return matchers.some((item) => wildcardToRegExp(item).test(value));
+}
+function matchRecord(input, matcher) {
+  if (!matcher)
+    return true;
+  return Object.entries(matcher).every(([path, expected]) => {
+    const actual = getPathValue(input, path);
+    if (typeof expected === "string" || Array.isArray(expected)) {
+      return matchString(actual === undefined ? undefined : String(actual), expected);
+    }
+    return actual === expected;
+  });
+}
+function eventMatchesFilter(event, filter) {
+  return matchString(event.source, filter.source) && matchString(event.type, filter.type) && matchString(event.subject, filter.subject) && matchString(event.severity, filter.severity) && matchRecord(event.data, filter.data) && matchRecord(event.metadata, filter.metadata);
+}
+function channelMatchesEvent(channel, event) {
+  if (!channel.enabled)
+    return false;
+  if (!channel.filters || channel.filters.length === 0)
+    return true;
+  return channel.filters.some((filter) => eventMatchesFilter(event, filter));
+}
+var HASNA_EVENTS_DIR_ENV = "HASNA_EVENTS_DIR";
+var HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME";
+function getEventsDataDir(override) {
+  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join(homedir(), ".hasna", "events");
+}
+
+class JsonEventsStore {
+  dataDir;
+  channelsPath;
+  eventsPath;
+  deliveriesPath;
+  constructor(dataDir = getEventsDataDir()) {
+    this.dataDir = dataDir;
+    this.channelsPath = join(dataDir, "channels.json");
+    this.eventsPath = join(dataDir, "events.json");
+    this.deliveriesPath = join(dataDir, "deliveries.json");
+  }
+  async init() {
+    await mkdir(this.dataDir, { recursive: true, mode: 448 });
+    await chmod(this.dataDir, 448).catch(() => {
+      return;
+    });
+    await this.ensureArrayFile(this.channelsPath);
+    await this.ensureArrayFile(this.eventsPath);
+    await this.ensureArrayFile(this.deliveriesPath);
+  }
+  async addChannel(channel) {
+    await this.init();
+    const channels = await this.readJson(this.channelsPath, []);
+    const index = channels.findIndex((item) => item.id === channel.id);
+    if (index >= 0) {
+      channels[index] = { ...channel, createdAt: channels[index].createdAt, updatedAt: new Date().toISOString() };
+    } else {
+      channels.push(channel);
+    }
+    await this.writeJson(this.channelsPath, channels);
+    return index >= 0 ? channels[index] : channel;
+  }
+  async listChannels() {
+    await this.init();
+    return this.readJson(this.channelsPath, []);
+  }
+  async getChannel(id) {
+    const channels = await this.listChannels();
+    return channels.find((channel) => channel.id === id);
+  }
+  async removeChannel(id) {
+    await this.init();
+    const channels = await this.readJson(this.channelsPath, []);
+    const next = channels.filter((channel) => channel.id !== id);
+    await this.writeJson(this.channelsPath, next);
+    return next.length !== channels.length;
+  }
+  async appendEvent(event) {
+    await this.init();
+    const events = await this.readJson(this.eventsPath, []);
+    events.push(event);
+    await this.writeJson(this.eventsPath, events);
+    return event;
+  }
+  async listEvents() {
+    await this.init();
+    return this.readJson(this.eventsPath, []);
+  }
+  async findEventByIdentity(identity) {
+    const events = await this.listEvents();
+    return events.find((event) => identity.id !== undefined && event.id === identity.id || identity.dedupeKey !== undefined && event.dedupeKey === identity.dedupeKey);
+  }
+  async appendDelivery(result) {
+    await this.init();
+    const deliveries = await this.readJson(this.deliveriesPath, []);
+    deliveries.push(result);
+    await this.writeJson(this.deliveriesPath, deliveries);
+    return result;
+  }
+  async listDeliveries() {
+    await this.init();
+    return this.readJson(this.deliveriesPath, []);
+  }
+  async exportData() {
+    return {
+      channels: await this.listChannels(),
+      events: await this.listEvents(),
+      deliveries: await this.listDeliveries()
+    };
+  }
+  async ensureArrayFile(path) {
+    if (!existsSync(path)) {
+      await writeFile(path, `[]
+`, { encoding: "utf-8", mode: 384 });
+    }
+    await chmod(path, 384).catch(() => {
+      return;
+    });
+  }
+  async readJson(path, fallback) {
+    try {
+      const raw = await readFile(path, "utf-8");
+      if (!raw.trim())
+        return fallback;
+      return JSON.parse(raw);
+    } catch (error) {
+      if (error.code === "ENOENT")
+        return fallback;
+      throw error;
+    }
+  }
+  async writeJson(path, value) {
+    const tempPath = `${path}.${process.pid}.${Date.now()}.tmp`;
+    await writeFile(tempPath, `${JSON.stringify(value, null, 2)}
+`, { encoding: "utf-8", mode: 384 });
+    await rename(tempPath, path);
+    await chmod(path, 384).catch(() => {
+      return;
+    });
+  }
+}
+var DEFAULT_SIGNATURE_TOLERANCE_MS = 5 * 60 * 1000;
+function buildSignatureBase(timestamp, body) {
+  return `${timestamp}.${body}`;
+}
+function signPayload(secret, timestamp, body) {
+  const digest = createHmac("sha256", secret).update(buildSignatureBase(timestamp, body)).digest("hex");
+  return `sha256=${digest}`;
+}
+function now() {
+  return new Date().toISOString();
+}
+function truncate(value, max = 4096) {
+  return value.length > max ? `${value.slice(0, max)}...` : value;
+}
+function buildWebhookRequest(event, channel) {
+  if (!channel.webhook)
+    throw new Error(`Channel ${channel.id} has no webhook config`);
+  const body = JSON.stringify(event);
+  const timestamp = event.time;
+  const headers = {
+    "Content-Type": "application/json",
+    "User-Agent": "@hasna/events",
+    "X-Hasna-Event-Id": event.id,
+    "X-Hasna-Event-Type": event.type,
+    "X-Hasna-Timestamp": timestamp,
+    ...channel.webhook.headers
+  };
+  if (channel.webhook.secret) {
+    headers["X-Hasna-Signature"] = signPayload(channel.webhook.secret, timestamp, body);
+  }
+  return { body, headers };
+}
+async function dispatchWebhook(event, channel, options = {}) {
+  if (!channel.webhook)
+    throw new Error(`Channel ${channel.id} has no webhook config`);
+  const startedAt = now();
+  const { body, headers } = buildWebhookRequest(event, channel);
+  const controller = new AbortController;
+  const timeout = setTimeout(() => controller.abort(), channel.webhook.timeoutMs ?? 15000);
+  try {
+    const response = await (options.fetchImpl ?? fetch)(channel.webhook.url, {
+      method: "POST",
+      headers,
+      body,
+      signal: controller.signal
+    });
+    const responseBody = truncate(await response.text());
+    return {
+      attempt: 1,
+      status: response.ok ? "success" : "failed",
+      startedAt,
+      completedAt: now(),
+      responseStatus: response.status,
+      responseBody,
+      error: response.ok ? undefined : `Webhook returned HTTP ${response.status}`
+    };
+  } catch (error) {
+    return {
+      attempt: 1,
+      status: "failed",
+      startedAt,
+      completedAt: now(),
+      error: error instanceof Error ? error.message : String(error)
+    };
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+async function dispatchCommand(event, channel) {
+  if (!channel.command)
+    throw new Error(`Channel ${channel.id} has no command config`);
+  const startedAt = now();
+  const eventJson = JSON.stringify(event);
+  const env = {
+    ...process.env,
+    ...channel.command.env,
+    HASNA_CHANNEL_ID: channel.id,
+    HASNA_EVENT_ID: event.id,
+    HASNA_EVENT_TYPE: event.type,
+    HASNA_EVENT_SOURCE: event.source,
+    HASNA_EVENT_SUBJECT: event.subject ?? "",
+    HASNA_EVENT_SEVERITY: event.severity,
+    HASNA_EVENT_TIME: event.time,
+    HASNA_EVENT_DEDUPE_KEY: event.dedupeKey ?? "",
+    HASNA_EVENT_SCHEMA_VERSION: event.schemaVersion,
+    HASNA_EVENT_JSON: eventJson
+  };
+  return new Promise((resolve) => {
+    const child = spawn(channel.command.command, channel.command.args ?? [], {
+      cwd: channel.command.cwd,
+      env,
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    let stdout = "";
+    let stderr = "";
+    const timeout = setTimeout(() => child.kill("SIGTERM"), channel.command.timeoutMs ?? 15000);
+    child.stdin.end(eventJson);
+    child.stdout.on("data", (chunk) => {
+      stdout += chunk.toString();
+    });
+    child.stderr.on("data", (chunk) => {
+      stderr += chunk.toString();
+    });
+    child.on("error", (error) => {
+      clearTimeout(timeout);
+      resolve({
+        attempt: 1,
+        status: "failed",
+        startedAt,
+        completedAt: now(),
+        stdout: truncate(stdout),
+        stderr: truncate(stderr),
+        error: error.message
+      });
+    });
+    child.on("close", (code, signal) => {
+      clearTimeout(timeout);
+      const success = code === 0;
+      resolve({
+        attempt: 1,
+        status: success ? "success" : "failed",
+        startedAt,
+        completedAt: now(),
+        stdout: truncate(stdout),
+        stderr: truncate(stderr),
+        error: success ? undefined : `Command exited with ${signal ? `signal ${signal}` : `code ${code}`}`
+      });
+    });
+  });
+}
+async function dispatchChannel(event, channel, options = {}) {
+  if (channel.transport === "webhook")
+    return dispatchWebhook(event, channel, options);
+  if (channel.transport === "command")
+    return dispatchCommand(event, channel);
+  return {
+    attempt: 1,
+    status: "skipped",
+    startedAt: now(),
+    completedAt: now(),
+    error: `Unsupported transport: ${channel.transport}`
+  };
+}
+function createDeliveryResult(event, channel, attempts) {
+  const status = attempts.some((attempt) => attempt.status === "success") ? "success" : attempts.every((attempt) => attempt.status === "skipped") ? "skipped" : "failed";
+  return {
+    id: randomUUID(),
+    eventId: event.id,
+    channelId: channel.id,
+    transport: channel.transport,
+    status,
+    attempts,
+    createdAt: attempts[0]?.startedAt ?? now(),
+    completedAt: attempts.at(-1)?.completedAt ?? now()
+  };
+}
+function createEvent(input) {
+  return {
+    id: input.id ?? randomUUID2(),
+    source: input.source,
+    type: input.type,
+    time: normalizeTime(input.time),
+    subject: input.subject,
+    severity: input.severity ?? "info",
+    data: input.data ?? {},
+    message: input.message,
+    dedupeKey: input.dedupeKey,
+    schemaVersion: input.schemaVersion ?? "1.0",
+    metadata: input.metadata ?? {}
+  };
+}
+
+class EventsClient {
+  store;
+  redactors;
+  transportOptions;
+  constructor(options = {}) {
+    this.store = options.store ?? new JsonEventsStore(options.dataDir);
+    this.redactors = options.redactors ?? [];
+    this.transportOptions = { fetchImpl: options.fetchImpl };
+  }
+  async addChannel(input) {
+    const timestamp = new Date().toISOString();
+    return this.store.addChannel({
+      ...input,
+      createdAt: input.createdAt ?? timestamp,
+      updatedAt: input.updatedAt ?? timestamp
+    });
+  }
+  async listChannels() {
+    return this.store.listChannels();
+  }
+  async removeChannel(id) {
+    return this.store.removeChannel(id);
+  }
+  async emit(input, options = {}) {
+    const event = options.redactSensitiveData === false ? createEvent(input) : redactSensitiveKeys(createEvent(input));
+    if (options.dedupe !== false) {
+      const existing = await this.store.findEventByIdentity({ id: input.id, dedupeKey: event.dedupeKey });
+      if (existing) {
+        return { event: existing, deliveries: [], deduped: true };
+      }
+    }
+    await this.store.appendEvent(event);
+    const deliveries = options.deliver === false ? [] : await this.deliver(event);
+    return { event, deliveries, deduped: false };
+  }
+  async listEvents() {
+    return this.store.listEvents();
+  }
+  async listDeliveries() {
+    return this.store.listDeliveries();
+  }
+  async deliver(event) {
+    const channels = await this.store.listChannels();
+    const selected = channels.filter((channel) => channelMatchesEvent(channel, event));
+    const deliveries = [];
+    for (const channel of selected) {
+      const eventForChannel = await this.applyRedaction(event, channel);
+      const result = await this.deliverWithRetry(eventForChannel, channel);
+      await this.store.appendDelivery(result);
+      deliveries.push(result);
+    }
+    return deliveries;
+  }
+  async testChannel(id, input = {}) {
+    const channel = await this.store.getChannel(id);
+    if (!channel)
+      throw new Error(`Channel not found: ${id}`);
+    const event = createEvent({
+      source: input.source ?? "hasna.events",
+      type: input.type ?? "events.test",
+      subject: input.subject ?? id,
+      severity: input.severity ?? "info",
+      data: input.data ?? { test: true },
+      message: input.message ?? "Hasna events test delivery",
+      dedupeKey: input.dedupeKey,
+      schemaVersion: input.schemaVersion,
+      metadata: input.metadata,
+      time: input.time,
+      id: input.id
+    });
+    const eventForChannel = await this.applyRedaction(event, channel);
+    const result = await this.deliverWithRetry(eventForChannel, channel);
+    await this.store.appendDelivery(result);
+    return result;
+  }
+  async replay(options = {}) {
+    const events = (await this.store.listEvents()).filter((event) => {
+      if (options.eventId && event.id !== options.eventId)
+        return false;
+      if (options.source && event.source !== options.source)
+        return false;
+      if (options.type && event.type !== options.type)
+        return false;
+      return true;
+    });
+    if (options.dryRun)
+      return { events, deliveries: [] };
+    const deliveries = [];
+    for (const event of events) {
+      deliveries.push(...await this.deliver(event));
+    }
+    return { events, deliveries };
+  }
+  async applyRedaction(event, channel) {
+    let next = redactPaths(event, channel.redact?.paths ?? [], channel.redact?.replacement ?? "[REDACTED]");
+    for (const redactor of this.redactors) {
+      next = await redactor(next, channel);
+    }
+    return next;
+  }
+  async deliverWithRetry(event, channel) {
+    const policy = normalizeRetryPolicy(channel.retry);
+    const attempts = [];
+    for (let index = 0;index < policy.maxAttempts; index += 1) {
+      const attempt = await dispatchChannel(event, channel, this.transportOptions);
+      attempt.attempt = index + 1;
+      if (attempt.status === "failed" && index + 1 < policy.maxAttempts) {
+        attempt.nextBackoffMs = Math.round(policy.backoffMs * policy.multiplier ** index);
+      }
+      attempts.push(attempt);
+      if (attempt.status !== "failed")
+        break;
+      if (attempt.nextBackoffMs)
+        await Bun.sleep(attempt.nextBackoffMs);
+    }
+    return createDeliveryResult(event, channel, attempts);
+  }
+}
+function redactPaths(event, paths, replacement = "[REDACTED]") {
+  if (paths.length === 0)
+    return event;
+  const copy = structuredClone(event);
+  for (const path of paths) {
+    setPath(copy, path, replacement);
+  }
+  return copy;
+}
+function sanitizeChannelForOutput(channel) {
+  const copy = structuredClone(channel);
+  if (copy.webhook?.secret)
+    copy.webhook.secret = "[REDACTED]";
+  if (copy.command?.env) {
+    copy.command.env = Object.fromEntries(Object.entries(copy.command.env).map(([key, value]) => [key, shouldRedactKey(key) ? "[REDACTED]" : value]));
+  }
+  return copy;
+}
+function sanitizeChannelsForOutput(channels) {
+  return channels.map(sanitizeChannelForOutput);
+}
+function redactSensitiveKeys(event, replacement = "[REDACTED]") {
+  return redactValue(event, replacement);
+}
+function shouldRedactKey(key) {
+  return /secret|token|password|api[_-]?key|authorization/i.test(key);
+}
+function redactValue(value, replacement) {
+  if (Array.isArray(value))
+    return value.map((item) => redactValue(item, replacement));
+  if (!value || typeof value !== "object")
+    return value;
+  return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+    key,
+    shouldRedactKey(key) ? replacement : redactValue(item, replacement)
+  ]));
+}
+function setPath(input, path, replacement) {
+  const parts = path.split(".");
+  let cursor = input;
+  for (const part of parts.slice(0, -1)) {
+    const next = cursor[part];
+    if (!next || typeof next !== "object")
+      return;
+    cursor = next;
+  }
+  const last = parts.at(-1);
+  if (last && last in cursor)
+    cursor[last] = replacement;
+}
+function normalizeTime(value) {
+  if (!value)
+    return new Date().toISOString();
+  return value instanceof Date ? value.toISOString() : value;
+}
+function normalizeRetryPolicy(policy) {
+  return {
+    maxAttempts: Math.max(1, policy?.maxAttempts ?? 1),
+    backoffMs: Math.max(0, policy?.backoffMs ?? 250),
+    multiplier: Math.max(1, policy?.multiplier ?? 2)
+  };
+}
+function parseJsonObject(value, fallback) {
+  if (!value)
+    return fallback;
+  const parsed = JSON.parse(value);
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error("Expected a JSON object");
+  }
+  return parsed;
+}
+function parseHeaders(values) {
+  if (!values?.length)
+    return;
+  const headers = {};
+  for (const value of values) {
+    const separator = value.indexOf("=");
+    if (separator === -1)
+      throw new Error(`Invalid header, expected name=value: ${value}`);
+    headers[value.slice(0, separator)] = value.slice(separator + 1);
+  }
+  return headers;
+}
+function parseFilter(options) {
+  const filter2 = {};
+  if (options.source)
+    filter2.source = options.source;
+  if (options.type)
+    filter2.type = options.type;
+  if (options.subject)
+    filter2.subject = options.subject;
+  if (options.severity)
+    filter2.severity = options.severity;
+  return Object.keys(filter2).length > 0 ? [filter2] : undefined;
+}
+function createClient(options) {
+  if (options.createClient)
+    return options.createClient();
+  return new EventsClient({ store: new JsonEventsStore(options.dataDir) });
+}
+function print(value, json, text) {
+  if (json)
+    console.log(JSON.stringify(value, null, 2));
+  else
+    console.log(text);
+}
+function registerWebhookCommands(program2, options) {
+  const webhooks = program2.command(options.webhooksCommandName ?? "webhooks").description("Manage Hasna event webhook subscriptions");
+  webhooks.command("add").description("Add or replace a webhook or command subscription").argument("<target>", "Webhook URL or command binary").requiredOption("--id <id>", "Subscription/channel identifier").option("--transport <kind>", "Transport kind: webhook or command", "webhook").option("--name <name>", "Display name").option("--type <pattern>", "Event type filter, e.g. todos.task.*").option("--source <pattern>", "Event source filter").option("--subject <pattern>", "Event subject filter").option("--severity <pattern>", "Event severity filter").option("--secret <secret>", "Webhook HMAC secret").option("--header <name=value...>", "Webhook header", collectValues, []).option("--arg <arg...>", "Command argument", collectValues, []).option("--timeout-ms <ms>", "Transport timeout in milliseconds", parseNumber).option("--retry-attempts <n>", "Maximum delivery attempts", parseNumber).option("--retry-backoff-ms <ms>", "Initial retry backoff in milliseconds", parseNumber).option("--redact <path...>", "Event field path to redact before delivery", collectValues, []).option("--disabled", "Create channel disabled", false).option("-j, --json", "Print JSON output", false).action(async (target, actionOptions) => {
+    const timestamp = new Date().toISOString();
+    const channel = {
+      id: actionOptions.id,
+      name: actionOptions.name,
+      enabled: !actionOptions.disabled,
+      transport: actionOptions.transport,
+      filters: parseFilter(actionOptions),
+      retry: actionOptions.retryAttempts || actionOptions.retryBackoffMs ? { maxAttempts: actionOptions.retryAttempts, backoffMs: actionOptions.retryBackoffMs } : undefined,
+      redact: actionOptions.redact?.length ? { paths: actionOptions.redact } : undefined,
+      createdAt: timestamp,
+      updatedAt: timestamp
+    };
+    if (actionOptions.transport === "webhook") {
+      channel.webhook = { url: target, secret: actionOptions.secret, headers: parseHeaders(actionOptions.header), timeoutMs: actionOptions.timeoutMs };
+    } else if (actionOptions.transport === "command") {
+      channel.command = { command: target, args: actionOptions.arg ?? [], timeoutMs: actionOptions.timeoutMs };
+    } else {
+      throw new Error(`Transport ${actionOptions.transport} is reserved for future use and cannot be added yet`);
+    }
+    const saved = await createClient(options).addChannel(channel);
+    print(sanitizeChannelForOutput(saved), Boolean(actionOptions.json), `Added ${saved.transport} channel ${saved.id}`);
+  });
+  webhooks.command("list").description("List configured subscriptions").option("-j, --json", "Print JSON output", false).action(async (actionOptions) => {
+    const channels = await createClient(options).listChannels();
+    if (actionOptions.json) {
+      console.log(JSON.stringify(sanitizeChannelsForOutput(channels), null, 2));
+      return;
+    }
+    if (!channels.length) {
+      console.log("No channels configured.");
+      return;
+    }
+    for (const channel of channels) {
+      console.log(`${channel.id}	${channel.enabled ? "enabled" : "disabled"}	${channel.transport}	${channel.webhook?.url ?? channel.command?.command ?? channel.transport}`);
+    }
+  });
+  webhooks.command("remove").description("Remove a subscription").argument("<id>", "Subscription/channel identifier").option("-j, --json", "Print JSON output", false).action(async (id, actionOptions) => {
+    const removed = await createClient(options).removeChannel(id);
+    print({ removed }, Boolean(actionOptions.json), removed ? `Removed ${id}` : `Channel not found: ${id}`);
+  });
+  webhooks.command("test").description("Send a test event to one subscription").argument("<id>", "Subscription/channel identifier").option("--type <type>", "Event type", "events.test").option("--subject <subject>", "Event subject").option("--message <message>", "Event message", "Hasna events test delivery").option("--data <json>", "Event data JSON object").option("-j, --json", "Print JSON output", false).action(async (id, actionOptions) => {
+    const result = await createClient(options).testChannel(id, {
+      source: options.source,
+      type: actionOptions.type,
+      subject: actionOptions.subject ?? id,
+      message: actionOptions.message,
+      data: parseJsonObject(actionOptions.data, { test: true })
+    });
+    print(result, Boolean(actionOptions.json), `${result.status}: ${result.channelId}`);
+  });
+  return webhooks;
+}
+function registerEventCommands(program2, options) {
+  const events = program2.command(options.eventsCommandName ?? "events").description("Emit, list, and replay Hasna events");
+  events.command("emit").description("Emit an event from this app").argument("<type>", "Event type").option("--source <source>", "Event source override").option("--subject <subject>", "Event subject").option("--severity <severity>", "Event severity", "info").option("--message <message>", "Event message").option("--dedupe-key <key>", "Dedupe key").option("--data <json>", "Event data JSON object").option("--metadata <json>", "Event metadata JSON object").option("--no-deliver", "Record without delivering").option("--no-dedupe", "Allow duplicate id/dedupeKey events").option("-j, --json", "Print JSON output", false).action(async (type, actionOptions) => {
+    const result = await createClient(options).emit({
+      source: actionOptions.source ?? options.source,
+      type,
+      subject: actionOptions.subject,
+      severity: actionOptions.severity,
+      message: actionOptions.message,
+      dedupeKey: actionOptions.dedupeKey,
+      data: parseJsonObject(actionOptions.data, {}),
+      metadata: parseJsonObject(actionOptions.metadata, {})
+    }, { deliver: actionOptions.deliver, dedupe: actionOptions.dedupe });
+    print(result, Boolean(actionOptions.json), `${result.deduped ? "Deduped" : "Emitted"} ${result.event.id} to ${result.deliveries.length} channel(s)`);
+  });
+  events.command("list").description("List recorded events").option("--source <source>", "Filter by source").option("--type <type>", "Filter by type").option("--limit <n>", "Limit results", parseNumber).option("-j, --json", "Print JSON output", false).action(async (actionOptions) => {
+    let rows = await createClient(options).listEvents();
+    if (actionOptions.source)
+      rows = rows.filter((event) => event.source === actionOptions.source);
+    if (actionOptions.type)
+      rows = rows.filter((event) => event.type === actionOptions.type);
+    if (actionOptions.limit)
+      rows = rows.slice(-actionOptions.limit);
+    if (actionOptions.json) {
+      console.log(JSON.stringify(rows, null, 2));
+      return;
+    }
+    if (!rows.length) {
+      console.log("No events recorded.");
+      return;
+    }
+    for (const event of rows)
+      console.log(`${event.time}	${event.id}	${event.source}	${event.type}	${event.severity}`);
+  });
+  events.command("replay").description("Replay recorded events").option("--id <id>", "Replay one event id").option("--source <source>", "Filter by source").option("--type <type>", "Filter by type").option("--dry-run", "Preview without delivery", false).option("-j, --json", "Print JSON output", false).action(async (actionOptions) => {
+    const result = await createClient(options).replay({
+      eventId: actionOptions.id,
+      source: actionOptions.source,
+      type: actionOptions.type,
+      dryRun: actionOptions.dryRun
+    });
+    print(result, Boolean(actionOptions.json), `Replayed ${result.events.length} event(s), ${result.deliveries.length} delivery result(s)`);
+  });
+  return events;
+}
+function registerEventsCommands(program2, options) {
+  registerWebhookCommands(program2, options);
+  registerEventCommands(program2, options);
+}
+function parseNumber(value) {
+  const parsed = Number(value);
+  if (!Number.isFinite(parsed))
+    throw new Error(`Expected a number, got ${value}`);
+  return parsed;
+}
+function collectValues(value, previous) {
+  previous.push(value);
+  return previous;
+}
+
+// src/cli/index.tsx
 init_package_version();
 var program2 = new Command;
 program2.name("todos").description("Universal task management for AI coding agents").version(getPackageVersion()).option("--project <path>", "Project path").option("-j, --json", "Output as JSON").option("--agent <name>", "Agent name").option("--session <id>", "Session ID");
@@ -58764,5 +59444,6 @@ registerUsageLedgerCommands2(program2);
 registerLocalBackupCommands2(program2);
 registerStorageCommands2(program2);
 registerScaleHardeningCommands2(program2);
+registerEventsCommands(program2, { source: "todos" });
 registerHelpCommands2(program2);
 program2.parse();