@hasna/todos 0.13.1 → 0.13.2

package/dist/cli/index.js

@@ -2123,7 +2123,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/todos",
-    version: "0.13.1",
+    version: "0.13.2",
     description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
     type: "module",
     main: "dist/index.js",
@@ -2175,7 +2175,7 @@ var init_package = __esm(() => {
       "backfill:comment-redaction": "bun run src/server/index.ts redact-comments",
       "generate:sdk": "bun run scripts/generate-sdk.ts",
       "build:dashboard": "cd dashboard && bun install --frozen-lockfile && bun run build",
-      typecheck: "tsc --noEmit",
+      typecheck: "tsc --noEmit -p tsconfig.typecheck.json",
       test: "bun test",
       "test:no-cloud": "bun test src/no-cloud-boundary.test.ts src/local-first.test.ts src/lib/public-release-gate.test.ts",
       "dev:cli": "bun run src/cli/index.tsx",
@@ -2250,6 +2250,161 @@ var init_package_version = __esm(() => {
   init_package();
 });
 
+// src/types/index.ts
+function isBlockingDependencyStatus(status) {
+  return status !== "completed" && status !== "cancelled";
+}
+var TASK_STATUSES, TASK_PRIORITIES, VersionConflictError, TaskNotFoundError, ProjectNotFoundError, ResourceConflictError, PlanNotFoundError, LockError, AgentNotFoundError, IdentityAliasAmbiguousError, IdentityIdImmutableError, TaskListNotFoundError, DependencyCycleError, CompletionGuardError, DispatchNotFoundError;
+var init_types = __esm(() => {
+  TASK_STATUSES = [
+    "pending",
+    "in_progress",
+    "completed",
+    "failed",
+    "cancelled"
+  ];
+  TASK_PRIORITIES = [
+    "low",
+    "medium",
+    "high",
+    "critical"
+  ];
+  VersionConflictError = class VersionConflictError extends Error {
+    taskId;
+    expectedVersion;
+    actualVersion;
+    static code = "VERSION_CONFLICT";
+    static suggestion = "Fetch the task with get_task to get the current version before updating.";
+    constructor(taskId, expectedVersion, actualVersion) {
+      super(`Version conflict for task ${taskId}: expected ${expectedVersion}, got ${actualVersion}`);
+      this.taskId = taskId;
+      this.expectedVersion = expectedVersion;
+      this.actualVersion = actualVersion;
+      this.name = "VersionConflictError";
+    }
+  };
+  TaskNotFoundError = class TaskNotFoundError extends Error {
+    taskId;
+    static code = "TASK_NOT_FOUND";
+    static suggestion = "Verify the task ID. Use list_tasks or search_tasks to find the correct ID.";
+    constructor(taskId) {
+      super(`Task not found: ${taskId}`);
+      this.taskId = taskId;
+      this.name = "TaskNotFoundError";
+    }
+  };
+  ProjectNotFoundError = class ProjectNotFoundError extends Error {
+    projectId;
+    static code = "PROJECT_NOT_FOUND";
+    static suggestion = "Use list_projects to see available projects.";
+    constructor(projectId) {
+      super(`Project not found: ${projectId}`);
+      this.projectId = projectId;
+      this.name = "ProjectNotFoundError";
+    }
+  };
+  ResourceConflictError = class ResourceConflictError extends Error {
+    code;
+    constructor(code, message) {
+      super(message);
+      this.code = code;
+      this.name = "ResourceConflictError";
+    }
+  };
+  PlanNotFoundError = class PlanNotFoundError extends Error {
+    planId;
+    static code = "PLAN_NOT_FOUND";
+    static suggestion = "Use list_plans to see available plans.";
+    constructor(planId) {
+      super(`Plan not found: ${planId}`);
+      this.planId = planId;
+      this.name = "PlanNotFoundError";
+    }
+  };
+  LockError = class LockError extends Error {
+    taskId;
+    lockedBy;
+    static code = "LOCK_ERROR";
+    static suggestion = "Wait for the lock to expire (30 min) or contact the lock holder.";
+    constructor(taskId, lockedBy) {
+      super(`Task ${taskId} is locked by ${lockedBy}`);
+      this.taskId = taskId;
+      this.lockedBy = lockedBy;
+      this.name = "LockError";
+    }
+  };
+  AgentNotFoundError = class AgentNotFoundError extends Error {
+    agentId;
+    static code = "AGENT_NOT_FOUND";
+    static suggestion = "Use register_agent to create the agent first, or list_agents to find existing ones.";
+    constructor(agentId) {
+      super(`Agent not found: ${agentId}`);
+      this.agentId = agentId;
+      this.name = "AgentNotFoundError";
+    }
+  };
+  IdentityAliasAmbiguousError = class IdentityAliasAmbiguousError extends Error {
+    code = "IDENTITY_ALIAS_AMBIGUOUS";
+    candidates;
+    constructor(subject, candidates = []) {
+      super(`Identity alias or source is ambiguous: ${subject}`);
+      this.name = "IdentityAliasAmbiguousError";
+      this.candidates = [...new Set(candidates)].sort();
+    }
+  };
+  IdentityIdImmutableError = class IdentityIdImmutableError extends Error {
+    code = "IDENTITY_ID_IMMUTABLE";
+    constructor(agentId) {
+      super(`IDENTITY_ID_IMMUTABLE: canonical identity for agent ${agentId} cannot be replaced`);
+      this.name = "IdentityIdImmutableError";
+    }
+  };
+  TaskListNotFoundError = class TaskListNotFoundError extends Error {
+    taskListId;
+    static code = "TASK_LIST_NOT_FOUND";
+    static suggestion = "Use list_task_lists to see available lists.";
+    constructor(taskListId) {
+      super(`Task list not found: ${taskListId}`);
+      this.taskListId = taskListId;
+      this.name = "TaskListNotFoundError";
+    }
+  };
+  DependencyCycleError = class DependencyCycleError extends Error {
+    taskId;
+    dependsOn;
+    static code = "DEPENDENCY_CYCLE";
+    static suggestion = "Check the dependency chain with get_task to avoid circular references.";
+    constructor(taskId, dependsOn) {
+      super(`Adding dependency ${taskId} -> ${dependsOn} would create a cycle`);
+      this.taskId = taskId;
+      this.dependsOn = dependsOn;
+      this.name = "DependencyCycleError";
+    }
+  };
+  CompletionGuardError = class CompletionGuardError extends Error {
+    reason;
+    retryAfterSeconds;
+    static code = "COMPLETION_BLOCKED";
+    static suggestion = "Wait for the cooldown period, then retry.";
+    constructor(reason, retryAfterSeconds) {
+      super(reason);
+      this.reason = reason;
+      this.retryAfterSeconds = retryAfterSeconds;
+      this.name = "CompletionGuardError";
+    }
+  };
+  DispatchNotFoundError = class DispatchNotFoundError extends Error {
+    dispatchId;
+    static code = "DISPATCH_NOT_FOUND";
+    static suggestion = "Check the dispatch ID with list_dispatches.";
+    constructor(dispatchId) {
+      super(`Dispatch not found: ${dispatchId}`);
+      this.dispatchId = dispatchId;
+      this.name = "DispatchNotFoundError";
+    }
+  };
+});
+
 // src/lib/sync-utils.ts
 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
 import { join } from "path";
@@ -2472,11 +2627,15 @@ function secretPatterns() {
   return [...customPatterns(), ...DEFAULT_SECRET_PATTERNS];
 }
 function isRedactionPlaceholderMatch(match) {
-  const placeholder = String.raw`\[REDACTED(?:_[A-Z_]+)?\]`;
   const trimmed = match.trim();
-  return new RegExp(`^${placeholder}$`).test(trimmed) || new RegExp(`=\\s*['"]?${placeholder}['"]?$`).test(trimmed);
+  return new RegExp(`^${REDACTION_PLACEHOLDER}$`).test(trimmed) || new RegExp(`=\\s*['"]?${REDACTION_PLACEHOLDER}['"]?$`).test(trimmed);
+}
+function isRedactionPlaceholderKey(key) {
+  return new RegExp(`^${REDACTION_PLACEHOLDER}$`).test(key.trim());
 }
 function isSecretKey(key) {
+  if (isRedactionPlaceholderKey(key))
+    return false;
   if (NON_SECRET_USAGE_KEYS.has(key.toLowerCase()))
     return false;
   if (DEFAULT_SECRET_KEY_PATTERN.test(key))
@@ -2537,7 +2696,7 @@ function upsertSecretSafetyConfig(input) {
   saveConfig({ ...config, secret_safety: next });
   return next;
 }
-var DEFAULT_SECRET_PATTERNS, DEFAULT_SECRET_KEY_PATTERN, NON_SECRET_USAGE_KEYS;
+var DEFAULT_SECRET_PATTERNS, DEFAULT_SECRET_KEY_PATTERN, NON_SECRET_USAGE_KEYS, REDACTION_PLACEHOLDER;
 var init_redaction = __esm(() => {
   init_config();
   DEFAULT_SECRET_PATTERNS = [
@@ -2561,11 +2720,12 @@ var init_redaction = __esm(() => {
     "completion_tokens",
     "cost_tokens"
   ]);
+  REDACTION_PLACEHOLDER = String.raw`\[REDACTED(?:_[A-Z_]+)?\]`;
 });
 
 // src/pr-groups/types.ts
 var PR_GROUP_LEDGER_SCHEMA_VERSION = 1, PR_GROUP_REPAIR_CYCLE_LIMIT = 2, PrGroupLedgerError;
-var init_types = __esm(() => {
+var init_types2 = __esm(() => {
   PrGroupLedgerError = class PrGroupLedgerError extends Error {
     code;
     details;
@@ -3920,7 +4080,7 @@ class PrGroupLedger {
 }
 var SHA_PATTERN, SAFE_REFERENCE_PATTERN, SAFE_PROFILE_PATTERN, FORBIDDEN_METADATA_KEY, EMAIL_PATTERN, CREDENTIAL_PATTERN, AUTH_PATH_PATTERN, STATE_VIEW_ATTEMPT_LIMIT = 100, STATE_VIEW_EVENT_LIMIT = 500, PR_GROUP_WRITER_STALE_AFTER_MS = 30000, APPENDABLE_EVENT_TYPES, EVENT_OUTCOMES, RECEIPT_EVENT_TYPES;
 var init_ledger = __esm(() => {
-  init_types();
+  init_types2();
   SHA_PATTERN = /^[0-9a-f]{40}$/;
   SAFE_REFERENCE_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,255}$/;
   SAFE_PROFILE_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
@@ -4722,7 +4882,7 @@ class PrGroupHttpClient {
 var LEDGER_CODES, GROUP_STATES, ATTEMPT_STATES, EVENT_TYPES, EVENT_OUTCOMES2;
 var init_http_client = __esm(() => {
   init_ledger();
-  init_types();
+  init_types2();
   LEDGER_CODES = new Set([
     "PR_GROUP_INVALID_INPUT",
     "PR_GROUP_NOT_FOUND",
@@ -5539,7 +5699,7 @@ async function cloudUnlockTask(client, id, agentId, force = false) {
 async function cloudGetDependencies(client, id) {
   const raw = await client.transport.get(`/tasks/${encodeURIComponent(id)}/dependencies`);
   const env = raw ?? {};
-  return { dependencies: env.dependencies ?? [], blocked_by: env.blocked_by ?? [] };
+  return { dependencies: env.dependencies ?? [], blocks: env.blocks ?? env.blocked_by ?? [] };
 }
 function unresolvedRelatedTask(id) {
   const now = new Date(0).toISOString();
@@ -5600,7 +5760,7 @@ function unresolvedRelatedTask(id) {
 async function cloudGetTaskRelations(client, id) {
   const edges = await cloudGetDependencies(client, id);
   const upstream = dedupe(edges.dependencies.map((edge) => edge.depends_on));
-  const downstream = dedupe(edges.blocked_by.map((edge) => edge.task_id));
+  const downstream = dedupe(edges.blocks.map((edge) => edge.task_id));
   const wanted = dedupe([...upstream, ...downstream]).filter((ref) => ref !== id);
   const rows = new Map;
   let cursor = 0;
@@ -5616,7 +5776,9 @@ async function cloudGetTaskRelations(client, id) {
   });
   await Promise.all(workers);
   const materialize = (ref) => rows.get(ref) ?? unresolvedRelatedTask(ref);
-  return { dependencies: upstream.map(materialize), blocked_by: downstream.map(materialize) };
+  const dependencies = upstream.map(materialize);
+  const blocked_by = dependencies.filter((dep) => isBlockingDependencyStatus(dep.status));
+  return { dependencies, blocked_by, blocks: downstream.map(materialize) };
 }
 function dedupe(ids) {
   const seen = new Set;
@@ -5938,6 +6100,7 @@ async function cloudTimeline(client, options = {}) {
 }
 var UUID_RE, CLOUD_MODES, VALID_STORAGE_MODES, COMPLETION_EVIDENCE_FIELDS, completionCapabilityCache, RELATION_HYDRATION_CONCURRENCY = 6, PRIORITY_RANK;
 var init_cloud_router = __esm(() => {
+  init_types();
   init_redaction();
   init_http_client();
   UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -9769,158 +9932,6 @@ var init_machines = __esm(() => {
   ];
 });
 
-// src/types/index.ts
-var TASK_STATUSES, TASK_PRIORITIES, VersionConflictError, TaskNotFoundError, ProjectNotFoundError, ResourceConflictError, PlanNotFoundError, LockError, AgentNotFoundError, IdentityAliasAmbiguousError, IdentityIdImmutableError, TaskListNotFoundError, DependencyCycleError, CompletionGuardError, DispatchNotFoundError;
-var init_types2 = __esm(() => {
-  TASK_STATUSES = [
-    "pending",
-    "in_progress",
-    "completed",
-    "failed",
-    "cancelled"
-  ];
-  TASK_PRIORITIES = [
-    "low",
-    "medium",
-    "high",
-    "critical"
-  ];
-  VersionConflictError = class VersionConflictError extends Error {
-    taskId;
-    expectedVersion;
-    actualVersion;
-    static code = "VERSION_CONFLICT";
-    static suggestion = "Fetch the task with get_task to get the current version before updating.";
-    constructor(taskId, expectedVersion, actualVersion) {
-      super(`Version conflict for task ${taskId}: expected ${expectedVersion}, got ${actualVersion}`);
-      this.taskId = taskId;
-      this.expectedVersion = expectedVersion;
-      this.actualVersion = actualVersion;
-      this.name = "VersionConflictError";
-    }
-  };
-  TaskNotFoundError = class TaskNotFoundError extends Error {
-    taskId;
-    static code = "TASK_NOT_FOUND";
-    static suggestion = "Verify the task ID. Use list_tasks or search_tasks to find the correct ID.";
-    constructor(taskId) {
-      super(`Task not found: ${taskId}`);
-      this.taskId = taskId;
-      this.name = "TaskNotFoundError";
-    }
-  };
-  ProjectNotFoundError = class ProjectNotFoundError extends Error {
-    projectId;
-    static code = "PROJECT_NOT_FOUND";
-    static suggestion = "Use list_projects to see available projects.";
-    constructor(projectId) {
-      super(`Project not found: ${projectId}`);
-      this.projectId = projectId;
-      this.name = "ProjectNotFoundError";
-    }
-  };
-  ResourceConflictError = class ResourceConflictError extends Error {
-    code;
-    constructor(code, message) {
-      super(message);
-      this.code = code;
-      this.name = "ResourceConflictError";
-    }
-  };
-  PlanNotFoundError = class PlanNotFoundError extends Error {
-    planId;
-    static code = "PLAN_NOT_FOUND";
-    static suggestion = "Use list_plans to see available plans.";
-    constructor(planId) {
-      super(`Plan not found: ${planId}`);
-      this.planId = planId;
-      this.name = "PlanNotFoundError";
-    }
-  };
-  LockError = class LockError extends Error {
-    taskId;
-    lockedBy;
-    static code = "LOCK_ERROR";
-    static suggestion = "Wait for the lock to expire (30 min) or contact the lock holder.";
-    constructor(taskId, lockedBy) {
-      super(`Task ${taskId} is locked by ${lockedBy}`);
-      this.taskId = taskId;
-      this.lockedBy = lockedBy;
-      this.name = "LockError";
-    }
-  };
-  AgentNotFoundError = class AgentNotFoundError extends Error {
-    agentId;
-    static code = "AGENT_NOT_FOUND";
-    static suggestion = "Use register_agent to create the agent first, or list_agents to find existing ones.";
-    constructor(agentId) {
-      super(`Agent not found: ${agentId}`);
-      this.agentId = agentId;
-      this.name = "AgentNotFoundError";
-    }
-  };
-  IdentityAliasAmbiguousError = class IdentityAliasAmbiguousError extends Error {
-    code = "IDENTITY_ALIAS_AMBIGUOUS";
-    candidates;
-    constructor(subject, candidates = []) {
-      super(`Identity alias or source is ambiguous: ${subject}`);
-      this.name = "IdentityAliasAmbiguousError";
-      this.candidates = [...new Set(candidates)].sort();
-    }
-  };
-  IdentityIdImmutableError = class IdentityIdImmutableError extends Error {
-    code = "IDENTITY_ID_IMMUTABLE";
-    constructor(agentId) {
-      super(`IDENTITY_ID_IMMUTABLE: canonical identity for agent ${agentId} cannot be replaced`);
-      this.name = "IdentityIdImmutableError";
-    }
-  };
-  TaskListNotFoundError = class TaskListNotFoundError extends Error {
-    taskListId;
-    static code = "TASK_LIST_NOT_FOUND";
-    static suggestion = "Use list_task_lists to see available lists.";
-    constructor(taskListId) {
-      super(`Task list not found: ${taskListId}`);
-      this.taskListId = taskListId;
-      this.name = "TaskListNotFoundError";
-    }
-  };
-  DependencyCycleError = class DependencyCycleError extends Error {
-    taskId;
-    dependsOn;
-    static code = "DEPENDENCY_CYCLE";
-    static suggestion = "Check the dependency chain with get_task to avoid circular references.";
-    constructor(taskId, dependsOn) {
-      super(`Adding dependency ${taskId} -> ${dependsOn} would create a cycle`);
-      this.taskId = taskId;
-      this.dependsOn = dependsOn;
-      this.name = "DependencyCycleError";
-    }
-  };
-  CompletionGuardError = class CompletionGuardError extends Error {
-    reason;
-    retryAfterSeconds;
-    static code = "COMPLETION_BLOCKED";
-    static suggestion = "Wait for the cooldown period, then retry.";
-    constructor(reason, retryAfterSeconds) {
-      super(reason);
-      this.reason = reason;
-      this.retryAfterSeconds = retryAfterSeconds;
-      this.name = "CompletionGuardError";
-    }
-  };
-  DispatchNotFoundError = class DispatchNotFoundError extends Error {
-    dispatchId;
-    static code = "DISPATCH_NOT_FOUND";
-    static suggestion = "Check the dispatch ID with list_dispatches.";
-    constructor(dispatchId) {
-      super(`Dispatch not found: ${dispatchId}`);
-      this.dispatchId = dispatchId;
-      this.name = "DispatchNotFoundError";
-    }
-  };
-});
-
 // src/db/identity-mapping.ts
 function timestamp() {
   return new Date().toISOString();
@@ -10075,8 +10086,8 @@ function recordAgentAlias(agentId, label, db) {
 }
 var IDENTITY_PROJECTION_CONTRACT, IDENTITY_MIGRATION_ID = 65;
 var init_identity_mapping = __esm(() => {
-  init_types2();
-  init_types2();
+  init_types();
+  init_types();
   IDENTITY_PROJECTION_CONTRACT = Object.freeze({
     name: "hasna.todos.agent-identity-projection/v1",
     version: 1,
@@ -10467,8 +10478,8 @@ function ensureDir2(filePath) {
 function openDatabase(path) {
   ensureDir2(path);
   const db = new Database(path);
-  db.run("PRAGMA journal_mode = WAL");
   db.run("PRAGMA busy_timeout = 5000");
+  db.run("PRAGMA journal_mode = WAL");
   db.run("PRAGMA foreign_keys = ON");
   runMigrations(db);
   ensureAgentIdentitySchema(db);
@@ -10601,7 +10612,7 @@ var init_database = __esm(() => {
   init_schema();
   init_machines();
   init_identity_mapping();
-  init_types2();
+  init_types();
   ALLOWED_TABLES = new Set(["tasks", "projects", "agents", "plans", "task_lists", "task_templates", "project_knowledge_records", "project_risks", "local_retrospectives"]);
 });
 
@@ -11042,7 +11053,7 @@ function removeMachineLocalPath(projectId, machineId, db) {
   return result.changes > 0;
 }
 var init_projects = __esm(() => {
-  init_types2();
+  init_types();
   init_database();
   init_machines();
   init_storage_tombstones();
@@ -11387,7 +11398,7 @@ function checkCompletionGuard(task, agentId, db, configOverride) {
   }
 }
 var init_completion_guard = __esm(() => {
-  init_types2();
+  init_types();
   init_config();
   init_projects();
 });
@@ -12811,7 +12822,7 @@ function ensureTaskList(name, slug, projectId, db) {
   return createTaskList({ name, slug, project_id: projectId }, d);
 }
 var init_task_lists = __esm(() => {
-  init_types2();
+  init_types();
   init_database();
   init_projects();
   init_storage_tombstones();
@@ -13101,7 +13112,7 @@ function scanTextForSecrets(text, options = {}) {
   };
 }
 function redactText(text, options = {}) {
-  const placeholder = options.placeholder ?? REDACTION_PLACEHOLDER;
+  const placeholder = options.placeholder ?? REDACTION_PLACEHOLDER2;
   let out = text;
   for (const { pattern, allowlist_ok } of DEFAULT_PATTERNS) {
     out = out.replace(new RegExp(pattern.source, pattern.flags), (match) => {
@@ -13128,7 +13139,7 @@ function redactExportRecord(record) {
   }
   return base;
 }
-var SECRET_REDACTION_SCHEMA, REDACTION_PLACEHOLDER = "[REDACTED]", DEFAULT_PATTERNS, DEFAULT_ALLOWLIST, customRedactors;
+var SECRET_REDACTION_SCHEMA, REDACTION_PLACEHOLDER2 = "[REDACTED]", DEFAULT_PATTERNS, DEFAULT_ALLOWLIST, customRedactors;
 var init_secret_redaction = __esm(() => {
   init_redaction();
   SECRET_REDACTION_SCHEMA = ["todos", "secret_redaction", "v1"].join(".");
@@ -14435,7 +14446,7 @@ function wouldCreateCycle(taskId, dependsOn, db) {
   return false;
 }
 var init_task_graph = __esm(() => {
-  init_types2();
+  init_types();
   init_database();
   init_task_crud();
 });
@@ -14994,7 +15005,7 @@ function spawnNextRecurrence(completedTask, db, completedAt) {
 }
 var MAX_SPAWN_DEPTH = 10;
 var init_task_lifecycle = __esm(() => {
-  init_types2();
+  init_types();
   init_database();
   init_completion_guard();
   init_event_emission_safety();
@@ -15153,10 +15164,11 @@ function getTaskWithRelations(id, db) {
        JOIN task_dependencies td ON td.depends_on = t.id
        WHERE td.task_id = ?`).all(id);
   const dependencies = depRows.map(rowToTask);
-  const blockedByRows = d.query(`SELECT t.* FROM tasks t
+  const blocked_by = dependencies.filter((dep) => isBlockingDependencyStatus(dep.status));
+  const blocksRows = d.query(`SELECT t.* FROM tasks t
        JOIN task_dependencies td ON td.task_id = t.id
        WHERE td.depends_on = ?`).all(id);
-  const blocked_by = blockedByRows.map(rowToTask);
+  const blocks = blocksRows.map(rowToTask);
   const comments = d.query("SELECT * FROM task_comments WHERE task_id = ? ORDER BY created_at").all(id);
   const parent = task.parent_id ? getTask(task.parent_id, d) : null;
   const checklist = getChecklist(id, d);
@@ -15165,6 +15177,7 @@ function getTaskWithRelations(id, db) {
     subtasks,
     dependencies,
     blocked_by,
+    blocks,
     comments,
     parent,
     checklist
@@ -15622,7 +15635,7 @@ function deleteTask(id, db) {
   return result.changes > 0;
 }
 var init_task_crud = __esm(() => {
-  init_types2();
+  init_types();
   init_database();
   init_completion_guard();
   init_event_emission_safety();
@@ -15808,7 +15821,7 @@ function getTaskStats(filters, db) {
   return { total: totalRow.count, by_status, by_priority, completion_rate, by_agent };
 }
 var init_task_status = __esm(() => {
-  init_types2();
+  init_types();
   init_database();
   init_task_crud();
   init_task_graph();
@@ -16489,7 +16502,7 @@ function deletePlan(id, db) {
   return result.changes > 0;
 }
 var init_plans = __esm(() => {
-  init_types2();
+  init_types();
   init_event_emission_safety();
   init_event_hooks();
   init_database();
@@ -17176,7 +17189,7 @@ function deleteComment(id, db) {
   return result.changes > 0;
 }
 var init_comments = __esm(() => {
-  init_types2();
+  init_types();
   init_database();
   init_tasks();
   init_prewrite_secrets();
@@ -18055,7 +18068,7 @@ var init_task_runs = __esm(() => {
   init_event_emission_safety();
   init_event_hooks();
   init_prewrite_secrets();
-  init_types2();
+  init_types();
   init_comments();
   init_database();
   init_task_files();
@@ -18845,7 +18858,7 @@ async function cloudDetailRelations(cloud, id) {
     if (status !== 404 && status !== 501) {
       console.error(chalk2.dim(`Warning: could not load task dependencies: ${e instanceof Error ? e.message : String(e)}`));
     }
-    return { dependencies: [], blocked_by: [] };
+    return { dependencies: [], blocked_by: [], blocks: [] };
   }
 }
 function resolveProjectIdOrSlug(input) {
@@ -19422,6 +19435,7 @@ function registerTaskCommands(program2) {
         tags: remote.tags ?? [],
         dependencies: relations.dependencies,
         blocked_by: relations.blocked_by,
+        blocks: relations.blocks,
         comments: commentPage.comments,
         comments_page: {
           count: commentPage.count,
@@ -19505,10 +19519,10 @@ function registerTaskCommands(program2) {
         console.log(`    ${formatTaskLine(dep)}`);
       }
     }
-    if (task2.blocked_by.length > 0) {
+    if (task2.blocks.length > 0) {
       console.log(chalk2.bold(`
-  Blocks (${task2.blocked_by.length}):`));
-      for (const b of task2.blocked_by) {
+  Blocks (${task2.blocks.length}):`));
+      for (const b of task2.blocks) {
         console.log(`    ${formatTaskLine(b)}`);
       }
     }
@@ -19551,6 +19565,7 @@ function registerTaskCommands(program2) {
         tags: remote.tags ?? [],
         dependencies: relations.dependencies,
         blocked_by: relations.blocked_by,
+        blocks: relations.blocks,
         comments: commentPage.comments,
         comments_page: {
           count: commentPage.count,
@@ -19632,10 +19647,10 @@ ${chalk2.cyan(sid)} ${statusColor(task2.status)} ${prioColor(task2.priority)} ${
       console.log(chalk2.red(`
   BLOCKED by ${unfinishedDeps.length} unfinished dep(s)`));
     }
-    if (task2.blocked_by.length > 0) {
+    if (task2.blocks.length > 0) {
       console.log(chalk2.bold(`
-  Blocks (${task2.blocked_by.length}):`));
-      for (const b of task2.blocked_by)
+  Blocks (${task2.blocks.length}):`));
+      for (const b of task2.blocks)
         console.log(`    ${formatTaskLine(b)}`);
     }
     if (task2.subtasks.length > 0) {
@@ -20203,7 +20218,7 @@ var init_task_commands = __esm(() => {
   init_cloud_router();
   init_helpers();
   init_output_redaction();
-  init_types2();
+  init_types();
 });
 
 // src/lib/plan-artifacts.ts
@@ -21724,13 +21739,14 @@ function detectCyclesFromEdges(edges) {
   }
   return cycles;
 }
-function buildTaskDependencyEdges(task, dependencies, blocked_by) {
+function buildTaskDependencyEdges(task, dependencies, blocks) {
   return {
     schema_version: TASK_DEPENDENCY_EDGES_SCHEMA,
     task_id: task.id,
     short_id: task.short_id,
     dependencies: dependencies.map(toNode),
-    blocked_by: blocked_by.map(toNode)
+    blocked_by: dependencies.filter((dep) => isBlockingDependencyStatus(dep.status)).map(toNode),
+    blocks: blocks.map(toNode)
   };
 }
 function getTaskDependencyEdges(taskId, db) {
@@ -21739,8 +21755,8 @@ function getTaskDependencyEdges(taskId, db) {
   if (!task)
     return null;
   const dependencies = getTaskDependencies(taskId, d).map((edge) => getTask(edge.depends_on, d)).filter((t) => Boolean(t));
-  const blocked_by = getTaskDependents(taskId, d).map((edge) => getTask(edge.task_id, d)).filter((t) => Boolean(t));
-  return buildTaskDependencyEdges(task, dependencies, blocked_by);
+  const blocks = getTaskDependents(taskId, d).map((edge) => getTask(edge.task_id, d)).filter((t) => Boolean(t));
+  return buildTaskDependencyEdges(task, dependencies, blocks);
 }
 function buildProjectDependencyGraph(projectId, tasks, edges, generatedAt = new Date().toISOString()) {
   const nodeIds = new Set(tasks.map((t) => t.id));
@@ -21766,6 +21782,8 @@ var init_dependency_graph = __esm(() => {
   init_tasks();
   init_task_graph();
   init_task_lifecycle();
+  init_types();
+  init_types();
 });
 
 // src/lib/local-fields.ts
@@ -21860,7 +21878,7 @@ var LOCAL_FIELDS_KEY = "local_fields";
 var init_local_fields = __esm(() => {
   init_database();
   init_tasks();
-  init_types2();
+  init_types();
   init_redaction();
 });
 
@@ -25241,7 +25259,7 @@ function registerProjectCommands(program2) {
       }
       if (globalOpts.json) {
         const relations = await cloudGetTaskRelations(cloud, cloudId);
-        output(buildTaskDependencyEdges({ id: cloudId, short_id: null }, relations.dependencies.filter(isResolvedTask), relations.blocked_by.filter(isResolvedTask)), true);
+        output(buildTaskDependencyEdges({ id: cloudId, short_id: null }, relations.dependencies.filter(isResolvedTask), relations.blocks.filter(isResolvedTask)), true);
         return;
       }
       const edges = await cloudGetDependencies(cloud, cloudId);
@@ -25250,12 +25268,12 @@ function registerProjectCommands(program2) {
         for (const dep of edges.dependencies)
           console.log(`  ${chalk4.cyan(dep.depends_on)}`);
       }
-      if (edges.blocked_by.length > 0) {
+      if (edges.blocks.length > 0) {
         console.log(chalk4.bold("Blocks:"));
-        for (const b of edges.blocked_by)
+        for (const b of edges.blocks)
           console.log(`  ${chalk4.cyan(b.task_id)}`);
       }
-      if (edges.dependencies.length === 0 && edges.blocked_by.length === 0) {
+      if (edges.dependencies.length === 0 && edges.blocks.length === 0) {
         console.log(chalk4.dim("No dependencies."));
       }
       return;
@@ -25317,13 +25335,13 @@ function registerProjectCommands(program2) {
           console.log(`  ${formatTaskLine(dep)}`);
         }
       }
-      if (task.blocked_by.length > 0) {
+      if (task.blocks.length > 0) {
         console.log(chalk4.bold("Blocks:"));
-        for (const b of task.blocked_by) {
+        for (const b of task.blocks) {
           console.log(`  ${formatTaskLine(b)}`);
         }
       }
-      if (task.dependencies.length === 0 && task.blocked_by.length === 0) {
+      if (task.dependencies.length === 0 && task.blocks.length === 0) {
         console.log(chalk4.dim("No dependencies."));
       }
     }
@@ -26500,7 +26518,7 @@ function getCapableAgents(capabilities, opts, db) {
   return opts?.limit ? scored.slice(0, opts.limit) : scored;
 }
 var init_agents = __esm(() => {
-  init_types2();
+  init_types();
   init_database();
   init_identity_mapping();
   init_storage_tombstones();
@@ -26948,6 +26966,44 @@ var init_agent_commands = __esm(() => {
   init_cloud_router();
 });
 
+// src/server/port.ts
+var exports_port = {};
+__export(exports_port, {
+  refuseInvalidPort: () => refuseInvalidPort,
+  findFreePort: () => findFreePort,
+  coercePort: () => coercePort,
+  DEFAULT_PORT: () => DEFAULT_PORT
+});
+function coercePort(raw) {
+  if (raw === undefined)
+    return;
+  const trimmed = raw.trim();
+  if (!/^\d+$/.test(trimmed))
+    return;
+  if (trimmed.length > 1 && trimmed.startsWith("0"))
+    return;
+  const parsed = Number.parseInt(trimmed, 10);
+  if (!Number.isInteger(parsed) || parsed > 65535)
+    return;
+  return parsed;
+}
+function refuseInvalidPort(source, raw) {
+  console.error(`Invalid ${source}: ${JSON.stringify(raw)} is not a port.
+` + `Use an integer from 0 to 65535, where 0 asks the kernel for a free port.`);
+  process.exit(1);
+}
+async function findFreePort(start) {
+  for (let port = start;port < start + 100; port++) {
+    try {
+      const server = Bun.serve({ port, fetch: () => new Response("") });
+      server.stop(true);
+      return port;
+    } catch {}
+  }
+  return start;
+}
+var DEFAULT_PORT = 19427;
+
 // src/lib/db-backup.ts
 import { existsSync as existsSync14, copyFileSync, mkdirSync as mkdirSync8, readFileSync as readFileSync8, renameSync, statSync as statSync6, writeFileSync as writeFileSync7, unlinkSync } from "fs";
 import { dirname as dirname7, join as join12, resolve as resolve14 } from "path";
@@ -29519,7 +29575,7 @@ var init_approval_gates = __esm(() => {
   init_database();
   init_task_runs();
   init_tasks();
-  init_types2();
+  init_types();
   init_event_emission_safety();
   init_event_hooks();
 });
@@ -31227,9 +31283,11 @@ async function removeDependency2(taskId, dependsOn, store) {
 }
 async function listDependencies(taskId, store) {
   const edges = await store.list("dependencies");
+  const incoming = edges.filter((edge) => edge.depends_on === taskId).map((edge) => ({ task_id: edge.task_id, depends_on: edge.depends_on }));
   return {
     dependencies: edges.filter((edge) => edge.task_id === taskId).map((edge) => ({ task_id: edge.task_id, depends_on: edge.depends_on })),
-    blocked_by: edges.filter((edge) => edge.depends_on === taskId).map((edge) => ({ task_id: edge.task_id, depends_on: edge.depends_on }))
+    blocks: incoming,
+    blocked_by: incoming
   };
 }
 async function addVerification(input, store, context) {
@@ -31773,7 +31831,7 @@ function postgresConstraintName(error) {
 }
 var CLOUD_LOCK_EXPIRY_MINUTES = 30, TASK_ORDER_TIEBREAK = "CASE payload->>'priority' WHEN 'critical' THEN 0 WHEN 'high' THEN 1 WHEN 'medium' THEN 2 WHEN 'low' THEN 3 ELSE 4 END ASC, payload->>'created_at' ASC, payload->>'id' ASC", TASK_ORDER_BY;
 var init_postgres_adapter = __esm(() => {
-  init_types2();
+  init_types();
   init_postgres_sync();
   init_redaction();
   TASK_ORDER_BY = `ORDER BY ${TASK_ORDER_TIEBREAK}`;
@@ -32256,7 +32314,7 @@ class PostgresPrGroupLedgerPersistence {
   }
 }
 var init_postgres = __esm(() => {
-  init_types();
+  init_types2();
 });
 
 // src/storage/comment-redaction-backfill.ts
@@ -33974,7 +34032,7 @@ function handleStaticFiles(path, method, ctx, json2, serveStaticFile2) {
 var init_routes = __esm(() => {
   init_tasks();
   init_database();
-  init_types2();
+  init_types();
   init_projects();
   init_agents();
   init_plans();
@@ -36612,7 +36670,7 @@ async function handlePrGroupHttpRequest(req, url, ledger, basePath, principal) {
 }
 var JSON_HEADERS;
 var init_pr_groups = __esm(() => {
-  init_types();
+  init_types2();
   JSON_HEADERS = { "Content-Type": "application/json" };
 });
 
@@ -37731,7 +37789,7 @@ async function handleV1Request(req, url, dependencies = {}) {
 }
 var JSON_HEADERS2, DEFAULT_COMMENT_PAGE_SIZE = 100, MAX_COMMENT_PAGE_SIZE = 500, LEGACY_COMMENT_RESPONSE_LIMIT = 500;
 var init_v1 = __esm(() => {
-  init_types2();
+  init_types();
   init_cloud();
   init_pr_groups();
   init_redaction();
@@ -41816,7 +41874,7 @@ function getDueDispatches(db) {
 }
 var init_dispatches = __esm(() => {
   init_database();
-  init_types2();
+  init_types();
   init_prewrite_secrets();
 });
 
@@ -42595,7 +42653,7 @@ ${task.description}` : null
 var init_task_crud2 = __esm(() => {
   init_zod();
   init_tasks();
-  init_types2();
+  init_types();
   init_token_utils();
   init_cloud_router();
 });
@@ -43993,7 +44051,7 @@ function renderWorkflowStatesMarkdown(states = listWorkflowStates()) {
 var LOCAL_FIELDS_KEY2 = "local_fields", WORKFLOW_STATE_KEY = "workflow_state", DEFAULT_WORKFLOW_STATES;
 var init_workflow_states = __esm(() => {
   init_tasks();
-  init_types2();
+  init_types();
   init_database();
   init_config();
   init_local_fields();
@@ -48237,7 +48295,7 @@ var init_task_project_tools = __esm(() => {
   init_capacity_forecasts();
   init_audit_ledger();
   init_release_compatibility();
-  init_types2();
+  init_types();
 });
 
 // src/db/handoffs.ts
@@ -48914,7 +48972,7 @@ function registerTaskWorkflowTools(server, ctx) {
 }
 var init_task_workflow_tools = __esm(() => {
   init_zod();
-  init_types2();
+  init_types();
   init_token_utils();
   init_cloud_router();
 });
@@ -49879,7 +49937,7 @@ var init_context_packs = __esm(() => {
   init_task_graph();
   init_task_runs();
   init_tasks();
-  init_types2();
+  init_types();
   init_redaction();
   DEFAULT_LIMITS = {
     comment_limit: 8,
@@ -51274,7 +51332,7 @@ function resolveMissingTaskFindings(input, db) {
 var TASK_FINDING_SCHEMA_VERSION = "todos.task_finding.v1", TASK_FINDING_UPSERT_SCHEMA_VERSION = "todos.task_finding_upsert.v1", TASK_FINDING_RESOLVE_MISSING_SCHEMA_VERSION = "todos.task_finding_resolve_missing.v1", SEVERITIES, STATUSES;
 var init_findings = __esm(() => {
   init_redaction();
-  init_types2();
+  init_types();
   init_database();
   init_tasks();
   init_task_runs();
@@ -56372,7 +56430,7 @@ function forceUnlockFile(path, db) {
 var FILE_LOCK_DEFAULT_TTL_SECONDS;
 var init_file_locks = __esm(() => {
   init_database();
-  init_types2();
+  init_types();
   FILE_LOCK_DEFAULT_TTL_SECONDS = 30 * 60;
 });
 
@@ -61520,7 +61578,7 @@ var agentFocusMap, isDirectRun;
 var init_mcp2 = __esm(() => {
   init_agents();
   init_database();
-  init_types2();
+  init_types();
   init_dispatch2();
   init_task_crud2();
   init_task_project_tools();
@@ -61874,7 +61932,7 @@ var init_pr_groups2 = __esm(() => {
   init_database();
   init_ledger();
   init_sqlite();
-  init_types();
+  init_types2();
   init_ledger();
   init_sqlite();
   init_http_client();
@@ -62112,7 +62170,7 @@ Dashboard not found at: ${dashboardDir}`);
       const path = url.pathname;
       const method = req.method;
       const reqOrigin = req.headers.get("origin") || undefined;
-      const corsHeaders = reqOrigin && (reqOrigin === `http://localhost:${port}` || reqOrigin === "http://localhost:0") ? {
+      const corsHeaders = reqOrigin && reqOrigin === `http://localhost:${ctx.port}` ? {
         "Access-Control-Allow-Origin": reqOrigin,
         "Access-Control-Allow-Methods": "GET, POST, PATCH, DELETE, OPTIONS",
         "Access-Control-Allow-Headers": "Content-Type, X-API-Key, Authorization",
@@ -62400,7 +62458,9 @@ Dashboard not found at: ${dashboardDir}`);
   };
   process.on("SIGINT", shutdown);
   process.on("SIGTERM", shutdown);
-  const serverUrl = `http://localhost:${port}`;
+  const boundPort = server.port ?? port;
+  ctx.port = boundPort;
+  const serverUrl = `http://localhost:${boundPort}`;
   console.log(`Todos Dashboard running at ${serverUrl}`);
   if (shouldOpen) {
     try {
@@ -62882,7 +62942,7 @@ function TaskDetail({ task: task2 }) {
           }, dep.id, true, undefined, this))
         ]
       }, undefined, true, undefined, this),
-      task2.blocked_by.length > 0 && /* @__PURE__ */ jsxDEV3(Box3, {
+      task2.blocks.length > 0 && /* @__PURE__ */ jsxDEV3(Box3, {
         flexDirection: "column",
         marginBottom: 1,
         children: [
@@ -62890,11 +62950,11 @@ function TaskDetail({ task: task2 }) {
             bold: true,
             children: [
               "Blocks (",
-              task2.blocked_by.length,
+              task2.blocks.length,
               "):"
             ]
           }, undefined, true, undefined, this),
-          task2.blocked_by.map((b) => /* @__PURE__ */ jsxDEV3(Box3, {
+          task2.blocks.map((b) => /* @__PURE__ */ jsxDEV3(Box3, {
             marginLeft: 2,
             children: [
               /* @__PURE__ */ jsxDEV3(Text3, {
@@ -64878,18 +64938,11 @@ function registerConfigServeCommands(program2) {
       console.log(renderTerminalNotification2(notification, rule?.format || "line"));
     }
   });
-  program2.command("serve").description("Start the web dashboard").option("--port <port>", "Port number", "19427").option("--host <host>", "Host to bind (default: 127.0.0.1 localhost only, use 0.0.0.0 for all interfaces)").option("--api-key <key>", "Require this API key for /api/* requests").option("--allow-anonymous", "Local dev only: serve /api/* and /mcp without a credential (refused unless the bind host is loopback)").option("--no-open", "Don't open browser automatically").action(async (opts) => {
+  program2.command("serve").description("Start the web dashboard").option("--port <port>", "Port number", String(DEFAULT_PORT)).option("--host <host>", "Host to bind (default: 127.0.0.1 localhost only, use 0.0.0.0 for all interfaces)").option("--api-key <key>", "Require this API key for /api/* requests").option("--allow-anonymous", "Local dev only: serve /api/* and /mcp without a credential (refused unless the bind host is loopback)").option("--no-open", "Don't open browser automatically").action(async (opts) => {
     const { startServer: startServer2 } = await Promise.resolve().then(() => (init_serve(), exports_serve));
-    const requestedPort = parseInt(opts.port, 10);
-    let port = requestedPort;
-    for (let p = requestedPort;p < requestedPort + 100; p++) {
-      try {
-        const s = Bun.serve({ port: p, fetch: () => new Response("") });
-        s.stop(true);
-        port = p;
-        break;
-      } catch {}
-    }
+    const { coercePort: coercePort2, findFreePort: findFreePort2, refuseInvalidPort: refuseInvalidPort2 } = await Promise.resolve().then(() => exports_port);
+    const requestedPort = coercePort2(opts.port) ?? refuseInvalidPort2("--port", String(opts.port));
+    const port = requestedPort === 0 ? requestedPort : await findFreePort2(requestedPort);
     if (port !== requestedPort) {
       console.log(`Port ${requestedPort} in use, using ${port}`);
     }
@@ -69304,7 +69357,7 @@ var init_query_commands = __esm(() => {
   init_local_reports();
   init_helpers();
   init_cloud_router();
-  init_types2();
+  init_types();
 });
 
 // src/cli/commands/mcp-hooks-commands.ts