@hasna/todos 0.13.4 → 0.13.6

package/dist/cli/index.js

@@ -2123,7 +2123,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/todos",
-    version: "0.13.4",
+    version: "0.13.6",
     description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
     type: "module",
     main: "dist/index.js",
@@ -5871,6 +5871,7 @@ function unresolvedRelatedTask(id) {
     reason: null,
     spawned_from_session: null,
     assigned_by: null,
+    created_by: null,
     assigned_from_project: null,
     task_type: null,
     cost_tokens: 0,
@@ -6362,41 +6363,103 @@ function isMetadataInvocation(args, invocation) {
   }
   return invocation.commandArgs.length === 1 && (HELP_FLAGS.has(invocation.commandArgs[0]) || VERSION_FLAGS.has(invocation.commandArgs[0]));
 }
-function commandSupportsRemote(invocation) {
+function firstPresentOption(args, candidates) {
+  const option = candidates.find((candidate) => hasOption(args, candidate));
+  return option ? dropIt(option) : null;
+}
+function disqualifyingArgument(invocation) {
   const command = invocation.command;
-  if (!command || COMMAND_CAPABILITY_MATRIX.get(command) !== "remote-http")
-    return false;
   const args = invocation.commandArgs;
   switch (command) {
     case "task":
-      return positionalArgs(args)[0] === "upsert";
+      return positionalArgs(args)[0] === "upsert" ? null : { blame: "any subcommand other than `upsert`", remedy: "use `todos task upsert`" };
     case "doctor":
-      return positionalArgs(args)[0] !== "routing" && !hasOption(args, "--apply") && !hasOption(args, "--fix");
+      if (positionalArgs(args)[0] === "routing")
+        return dropIt("the `routing` subcommand");
+      return firstPresentOption(args, ["--apply", "--fix"]);
     case "projects":
-      return !hasOption(args, "--deregister") && !hasOption(args, "--path-prefix") && !hasOption(args, "--dry-run");
+      return firstPresentOption(args, ["--deregister", "--path-prefix", "--dry-run"]);
     case "plans":
-      return !hasOption(args, "--artifact") && !hasOption(args, "--write-artifacts");
+      return firstPresentOption(args, ["--artifact", "--write-artifacts"]);
     case "list":
-      return !hasOption(args, "--recurring");
+      return firstPresentOption(args, ["--recurring"]);
     case "claim":
-      return !invocation.globalOptions.has("--project") && !hasOption(args, "--project") && !hasOption(args, "--stale-minutes") && !hasOption(args, "--steal-stale");
+      if (invocation.globalOptions.has("--project"))
+        return dropIt("--project");
+      return firstPresentOption(args, ["--project", "--stale-minutes", "--steal-stale"]);
     case "status":
-      return !invocation.globalOptions.has("--agent") && !hasOption(args, "--agent");
-    case "deps":
-      return true;
+      if (invocation.globalOptions.has("--agent"))
+        return dropIt("--agent");
+      return firstPresentOption(args, ["--agent"]);
     case "bulk": {
       const action = positionalArgs(args)[0];
       if (action === "plan" || action === "move-plan")
-        return true;
-      return Boolean(action && ["done", "complete", "start", "delete"].includes(action)) && !hasOption(args, "--plan") && !hasOption(args, "--clear-plan");
+        return null;
+      if (!action) {
+        return { blame: "a missing action", remedy: "pass one of done, complete, start, delete, plan, move-plan" };
+      }
+      if (!["done", "complete", "start", "delete"].includes(action)) {
+        return {
+          blame: `the \`${action}\` action`,
+          remedy: "use one of done, complete, start, delete, plan, move-plan"
+        };
+      }
+      return firstPresentOption(args, ["--plan", "--clear-plan"]);
     }
     default:
-      return true;
+      return null;
   }
 }
+function commandSupportsRemote(invocation) {
+  const command = invocation.command;
+  if (!command || COMMAND_CAPABILITY_MATRIX.get(command) !== "remote-http")
+    return false;
+  return disqualifyingArgument(invocation) === null;
+}
+function editDistance(a, b) {
+  const rows = a.length + 1;
+  const cols = b.length + 1;
+  let twoBack = new Array(cols).fill(0);
+  let previous = Array.from({ length: cols }, (_, index) => index);
+  for (let row = 1;row < rows; row += 1) {
+    const current = [row, ...new Array(cols - 1).fill(0)];
+    for (let col = 1;col < cols; col += 1) {
+      const substitution = previous[col - 1] + (a[row - 1] === b[col - 1] ? 0 : 1);
+      current[col] = Math.min(current[col - 1] + 1, previous[col] + 1, substitution);
+      if (row > 1 && col > 1 && a[row - 1] === b[col - 2] && a[row - 2] === b[col - 1]) {
+        current[col] = Math.min(current[col], twoBack[col - 2] + 1);
+      }
+    }
+    twoBack = previous;
+    previous = current;
+  }
+  return previous[cols - 1];
+}
+function nearestCommands(command, limit = 3) {
+  const threshold = command.length <= 4 ? 1 : command.length <= 8 ? 2 : 3;
+  return [...COMMAND_CAPABILITY_MATRIX.entries()].filter(([, owner]) => owner !== "local-only").map(([candidate]) => candidate).map((candidate) => ({ candidate, distance: editDistance(command, candidate) })).filter(({ distance }) => distance <= threshold).sort((left, right) => left.distance - right.distance || left.candidate.localeCompare(right.candidate)).slice(0, limit).map(({ candidate }) => candidate);
+}
 function assertRemoteCommandSupported(invocation) {
-  if (invocation.invalidGlobalOption || invocation.unknownLeadingOption || !commandSupportsRemote(invocation)) {
-    throw new Error(`REMOTE_COMMAND_UNSUPPORTED: ${invocationLabel(invocation)} is not supported by the Todos /v1 CLI; ` + "local SQLite fallback is disabled");
+  if (invocation.invalidGlobalOption) {
+    throw new Error(`REMOTE_COMMAND_UNSUPPORTED: the global option ${invocation.invalidGlobalOption} was given without a value; ` + `pass one as \`${invocation.invalidGlobalOption} <value>\``);
+  }
+  if (invocation.unknownLeadingOption) {
+    throw new Error(`REMOTE_COMMAND_UNSUPPORTED: unknown option ${invocation.unknownLeadingOption} before the command; ` + "run `todos --help` for the global options");
+  }
+  const command = invocation.command;
+  const owner = command ? COMMAND_CAPABILITY_MATRIX.get(command) : undefined;
+  if (command && !owner) {
+    const suggestions = nearestCommands(command);
+    const didYouMean = suggestions.length > 0 ? ` Did you mean: ${suggestions.join(", ")}?` : "";
+    throw new Error(`UNKNOWN_COMMAND: \`${command}\` is not a built-in todos command on the /v1 route.${didYouMean} ` + "Run `todos --help` for the commands available here; verbs contributed by optional packages are local-only. " + "(This is not a connectivity, storage-mode or credential problem.)");
+  }
+  if (command && owner === "local-only") {
+    throw new Error(`REMOTE_COMMAND_UNSUPPORTED: \`${command}\` is a local-only command and the Todos /v1 authority does not ` + "serve it; local SQLite fallback is disabled. Run `todos --help` to see the commands this route supports.");
+  }
+  if (!command || !commandSupportsRemote(invocation)) {
+    const blame = command ? disqualifyingArgument(invocation) : null;
+    const detail = blame ? `\`${command}\` is served by the Todos /v1 authority but ${blame.blame} is not; ${blame.remedy}` : `${invocationLabel(invocation)} is not supported by the Todos /v1 CLI; local SQLite fallback is disabled`;
+    throw new Error(`REMOTE_COMMAND_UNSUPPORTED: ${detail}`);
   }
 }
 function initializeTodosCliAuthority(args = process.argv.slice(2), env = process.env) {
@@ -6415,7 +6478,7 @@ function initializeTodosCliAuthority(args = process.argv.slice(2), env = process
   }
   return { route: "remote-http", v1_base_url: client.baseUrl };
 }
-var REGISTERED_CANONICAL_COMMANDS, TODOS_CLI_COMMAND_ALIASES, DIAGNOSTIC_COMMANDS, REMOTE_COMMANDS, COMMAND_CAPABILITY_MATRIX, GLOBAL_OPTIONS_WITH_VALUES, GLOBAL_FLAGS, HELP_FLAGS, VERSION_FLAGS;
+var REGISTERED_CANONICAL_COMMANDS, TODOS_CLI_COMMAND_ALIASES, DIAGNOSTIC_COMMANDS, REMOTE_COMMANDS, COMMAND_CAPABILITY_MATRIX, GLOBAL_OPTIONS_WITH_VALUES, GLOBAL_FLAGS, HELP_FLAGS, VERSION_FLAGS, dropIt = (blame) => ({ blame, remedy: "re-run without it" });
 var init_stage_a = __esm(() => {
   init_esm();
   init_cloud_router();
@@ -6594,6 +6657,8 @@ var init_stage_a = __esm(() => {
     "template-history": ["templates-history"],
     "agents-normalize": ["normalize-agents"],
     "agent-update": ["agents-update"],
+    done: ["complete"],
+    init: ["register"],
     upgrade: ["self-update"],
     roadmaps: ["roadmap"],
     "env-snapshot": ["environment-snapshot"],
@@ -8971,6 +9036,7 @@ function ensureSchema(db) {
   ensureColumn("tasks", "reason", "TEXT");
   ensureColumn("tasks", "spawned_from_session", "TEXT");
   ensureColumn("tasks", "assigned_by", "TEXT");
+  ensureColumn("tasks", "created_by", "TEXT");
   ensureColumn("tasks", "assigned_from_project", "TEXT");
   ensureColumn("tasks", "started_at", "TEXT");
   ensureColumn("tasks", "task_type", "TEXT");
@@ -9133,6 +9199,8 @@ function ensureSchema(db) {
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_sources_project ON project_sources(project_id)");
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_project_sources_type ON project_sources(type)");
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_tasks_assigned_by ON tasks(assigned_by)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_tasks_created_by ON tasks(created_by)");
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_tasks_assigned_created ON tasks(assigned_to, created_by)");
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_task_rel_source ON task_relationships(source_task_id)");
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_task_rel_target ON task_relationships(target_task_id)");
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_task_rel_type ON task_relationships(relationship_type)");
@@ -15282,13 +15350,14 @@ function createTask(input, db) {
   const timestamp2 = now();
   const tags = input.tags || [];
   const machineId = currentStorageMachineId(d);
+  const createdBy = input.created_by || input.agent_id || null;
   const assignedBy = input.assigned_by || input.agent_id;
   const assignedFromProject = input.assigned_from_project || null;
   let id = uuid();
   for (let attempt = 0;attempt < 3; attempt++) {
     try {
-      d.run(`INSERT INTO tasks (id, short_id, project_id, parent_id, plan_id, task_list_id, cycle_id, title, description, status, priority, agent_id, assigned_to, session_id, working_dir, tags, metadata, version, created_at, updated_at, due_at, estimated_minutes, sla_minutes, confidence, retry_count, max_retries, retry_after, requires_approval, approved_by, approved_at, recurrence_rule, recurrence_parent_id, spawns_template_id, reason, spawned_from_session, assigned_by, assigned_from_project, task_type, machine_id)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+      d.run(`INSERT INTO tasks (id, short_id, project_id, parent_id, plan_id, task_list_id, cycle_id, title, description, status, priority, agent_id, assigned_to, session_id, working_dir, tags, metadata, version, created_at, updated_at, due_at, estimated_minutes, sla_minutes, confidence, retry_count, max_retries, retry_after, requires_approval, approved_by, approved_at, recurrence_rule, recurrence_parent_id, spawns_template_id, reason, spawned_from_session, assigned_by, created_by, assigned_from_project, task_type, machine_id)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
         id,
         null,
         input.project_id || null,
@@ -15324,6 +15393,7 @@ function createTask(input, db) {
         input.reason || null,
         input.spawned_from_session || null,
         assignedBy || null,
+        createdBy,
         assignedFromProject || null,
         input.task_type || null,
         machineId
@@ -15433,6 +15503,14 @@ function listTasks(filter = {}, db) {
     conditions.push("agent_id = ?");
     params.push(filter.agent_id);
   }
+  if (filter.created_by) {
+    conditions.push("LOWER(created_by) = LOWER(?)");
+    params.push(filter.created_by);
+  }
+  if (filter.not_created_by) {
+    conditions.push("(created_by IS NULL OR LOWER(created_by) != LOWER(?))");
+    params.push(filter.not_created_by);
+  }
   if (filter.session_id) {
     conditions.push("session_id = ?");
     params.push(filter.session_id);
@@ -15586,6 +15664,14 @@ function countTasks(filter = {}, db) {
     conditions.push("agent_id = ?");
     params.push(filter.agent_id);
   }
+  if (filter.created_by) {
+    conditions.push("LOWER(created_by) = LOWER(?)");
+    params.push(filter.created_by);
+  }
+  if (filter.not_created_by) {
+    conditions.push("(created_by IS NULL OR LOWER(created_by) != LOWER(?))");
+    params.push(filter.not_created_by);
+  }
   if (filter.session_id) {
     conditions.push("session_id = ?");
     params.push(filter.session_id);
@@ -18746,6 +18832,73 @@ var init_tasks = __esm(() => {
   init_calendar();
 });
 
+// src/lib/creator-identity.ts
+import { existsSync as existsSync8, rmSync as rmSync2 } from "fs";
+import { join as join7 } from "path";
+function identityFilePath() {
+  return join7(getTodosGlobalDir(), "identity.json");
+}
+function readPersistedIdentity() {
+  const path = identityFilePath();
+  if (!existsSync8(path))
+    return null;
+  const parsed = readJsonFile(path);
+  if (!parsed || typeof parsed.agent_id !== "string" || !parsed.agent_id.trim())
+    return null;
+  return parsed;
+}
+function detectIdentityCollision(agentId, agentName) {
+  const existing = readPersistedIdentity();
+  if (!existing)
+    return null;
+  const sameId = canonicalAgentRef(existing.agent_id) === canonicalAgentRef(agentId);
+  const sameName = Boolean(agentName) && canonicalAgentRef(existing.agent_name || "") === canonicalAgentRef(agentName);
+  if (sameId || sameName)
+    return null;
+  return { existing };
+}
+function persistIdentity(identity) {
+  const record = {
+    agent_id: identity.agent_id,
+    ...identity.agent_name ? { agent_name: identity.agent_name } : {},
+    ...identity.session_id ? { session_id: identity.session_id } : {},
+    registered_at: new Date().toISOString()
+  };
+  ensureDir(getTodosGlobalDir());
+  writeJsonFile(identityFilePath(), record);
+  return record;
+}
+function clearPersistedIdentity() {
+  const path = identityFilePath();
+  if (!existsSync8(path))
+    return false;
+  try {
+    rmSync2(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function canonicalAgentRef(value) {
+  return value.trim().toLowerCase();
+}
+function resolveCreatorIdentity(explicit) {
+  const fromExplicit = explicit?.trim();
+  if (fromExplicit)
+    return { agent_id: canonicalAgentRef(fromExplicit), source: "explicit" };
+  const fromEnv = (process.env["TODOS_AGENT_ID"] || process.env["HASNA_TODOS_AGENT_ID"] || "").trim();
+  if (fromEnv)
+    return { agent_id: canonicalAgentRef(fromEnv), source: "env" };
+  const persisted = readPersistedIdentity();
+  if (persisted) {
+    return { agent_id: canonicalAgentRef(persisted.agent_name || persisted.agent_id), source: "persisted" };
+  }
+  return { agent_id: null, source: "none" };
+}
+var init_creator_identity = __esm(() => {
+  init_sync_utils();
+});
+
 // src/cli/output-redaction.ts
 function redactBroadTask(task) {
   return redactValue(task);
@@ -18766,7 +18919,7 @@ __export(exports_task_routing, {
   setTaskWorkflowPointers: () => setTaskWorkflowPointers,
   getTaskRouteState: () => getTaskRouteState
 });
-import { existsSync as existsSync8, statSync as statSync3 } from "fs";
+import { existsSync as existsSync9, statSync as statSync3 } from "fs";
 function machineLocalPath(project, db) {
   const machineId = process.env["TODOS_MACHINE_ID"];
   if (!machineId)
@@ -18806,7 +18959,7 @@ function routeConcurrencyKey(task, project, taskList, projectPath) {
 }
 function directoryExists(path) {
   try {
-    return existsSync8(path) && statSync3(path).isDirectory();
+    return existsSync9(path) && statSync3(path).isDirectory();
   } catch {
     return false;
   }
@@ -19243,10 +19396,15 @@ function computeLocalReparent(current, opts) {
   return patch;
 }
 function registerTaskCommands(program2) {
-  program2.command("add <title>").description("Create a new task").option("-d, --description <text>", "Task description").option("-p, --priority <level>", "Priority: low, medium, high, critical").option("--parent <id>", "Parent task ID").option("-t, --tags <tags>", "Comma-separated tags").option("--tag <tags>", "Comma-separated tags (alias for --tags)").option("--plan <id>", "Assign to a plan").option("--assign <agent>", "Assign to agent").option("--status <status>", "Initial status").option("--list <id>", "Task list ID").option("--task-list <id>", "Task list ID (alias for --list)").option("--estimated <minutes>", "Estimated time in minutes").option("--sla-minutes <minutes>", "SLA minutes before unfinished work is escalated").option("--sla <minutes>", "Alias for --sla-minutes").option("--approval", "Require approval before completion").option("--recurrence <rule>", "Recurrence rule, e.g. 'every day', 'every weekday', 'every 2 weeks'").option("--due <date>", "Due date (ISO string or YYYY-MM-DD)").option("--reason <text>", "Why this task exists").option("--project <id>", "Assign to project by ID or slug (overrides auto-detect)").action(async (title, opts) => {
+  program2.command("add <title>").description("Create a new task").option("-d, --description <text>", "Task description").option("-p, --priority <level>", "Priority: low, medium, high, critical").option("--parent <id>", "Parent task ID").option("-t, --tags <tags>", "Comma-separated tags").option("--tag <tags>", "Comma-separated tags (alias for --tags)").option("--plan <id>", "Assign to a plan").option("--assign <agent>", "Assign to agent").option("--status <status>", "Initial status").option("--list <id>", "Task list ID").option("--task-list <id>", "Task list ID (alias for --list)").option("--estimated <minutes>", "Estimated time in minutes").option("--sla-minutes <minutes>", "SLA minutes before unfinished work is escalated").option("--sla <minutes>", "Alias for --sla-minutes").option("--approval", "Require approval before completion").option("--recurrence <rule>", "Recurrence rule, e.g. 'every day', 'every weekday', 'every 2 weeks'").option("--due <date>", "Due date (ISO string or YYYY-MM-DD)").option("--reason <text>", "Why this task exists").option("--project <id>", "Assign to project by ID or slug (overrides auto-detect)").option("--unassigned", "Deliberately file this task with no assignee").option("--created-by <agent>", "Record a different filer than the resolved agent identity").action(async (title, opts) => {
     const globalOpts = program2.opts();
     opts.tags = opts.tags || opts.tag;
     opts.list = opts.list || opts.taskList;
+    const creator = resolveCreatorIdentity(opts.createdBy || globalOpts.agent);
+    const assignee = opts.assign || (opts.unassigned ? undefined : creator.agent_id || undefined);
+    if (!assignee && !opts.unassigned) {
+      console.error(chalk2.yellow("Warning: task is ownerless and unattributable \u2014 run `todos init <name>`, or pass --assign <agent> or --unassigned."));
+    }
     const cloud = getTodosCloudClient();
     if (cloud) {
       let task3;
@@ -19268,10 +19426,11 @@ function registerTaskCommands(program2) {
           parent_id: opts.parent ? await resolveTaskIdForCommand(opts.parent, cloud) : undefined,
           tags: opts.tags ? opts.tags.split(",").map((t) => t.trim()) : undefined,
           plan_id: cloudPlan?.id,
-          assigned_to: opts.assign,
+          assigned_to: assignee,
           status: parseStatus(opts.status),
           task_list_id: cloudTaskListId,
-          agent_id: globalOpts.agent,
+          agent_id: globalOpts.agent || creator.agent_id || undefined,
+          created_by: creator.agent_id || undefined,
           session_id: globalOpts.session,
           project_id: cloudProjectId,
           estimated_minutes: opts.estimated !== undefined ? parseIntOption(opts.estimated, "--estimated") : undefined,
@@ -19313,10 +19472,11 @@ function registerTaskCommands(program2) {
         parent_id: opts.parent ? resolveTaskId(opts.parent) : undefined,
         tags: opts.tags ? opts.tags.split(",").map((t) => t.trim()) : undefined,
         plan_id: opts.plan ? resolvePlanId(opts.plan) : undefined,
-        assigned_to: opts.assign,
+        assigned_to: assignee,
         status: parseStatus(opts.status),
         task_list_id: taskListId,
-        agent_id: globalOpts.agent,
+        agent_id: globalOpts.agent || creator.agent_id || undefined,
+        created_by: creator.agent_id || undefined,
         session_id: globalOpts.session,
         project_id: projectId,
         working_dir: process.cwd(),
@@ -19470,14 +19630,14 @@ function registerTaskCommands(program2) {
       console.log(`  ${chalk2.dim("Manifest:")} ${state.pointers.latest_manifest_path}`);
     }
   });
-  program2.command("list").description("List tasks").option("-s, --status <status>", "Filter by status").option("-p, --priority <priority>", "Filter by priority").option("--assigned <agent>", "Filter by assigned agent").option("--tags <tags>", "Filter by tags (comma-separated)").option("--tag <tags>", "Filter by tags (alias for --tags)").option("-a, --all", "Show all tasks (including completed/cancelled)").option("--list <ref>", "Filter by task list UUID, unique UUID prefix, or project-scoped slug").option("--task-list <ref>", "Filter by task list UUID, unique UUID prefix, or project-scoped slug (alias for --list)").option("--project-name <name>", "Filter by project name").option("--agent-name <name>", "Filter by agent name/assigned").option("--sort <field>", "Sort by: updated, created, priority, status").option("--format <fmt>", "Output format: table (default), compact, csv, json").option("--due-today", "Only tasks due today or earlier").option("--overdue", "Only overdue tasks (past due_at)").option("--recurring", "Only recurring tasks").option("--limit <n>", "Max tasks to return").action(async (opts) => {
+  program2.command("list").description("List tasks").option("-s, --status <status>", "Filter by status").option("-p, --priority <priority>", "Filter by priority").option("--assigned <agent>", "Filter by assigned agent").option("--created-by <agent>", "Filter by the agent who FILED the task").option("--not-created-by <agent>", "Exclude tasks filed by this agent").option("--inbox", "Work assigned to my identity that a DIFFERENT agent filed").option("--tags <tags>", "Filter by tags (comma-separated)").option("--tag <tags>", "Filter by tags (alias for --tags)").option("-a, --all", "Show all tasks (including completed/cancelled)").option("--list <ref>", "Filter by task list UUID, unique UUID prefix, or project-scoped slug").option("--task-list <ref>", "Filter by task list UUID, unique UUID prefix, or project-scoped slug (alias for --list)").option("--project-name <name>", "Filter by project name").option("--agent-name <name>", "Filter by agent name/assigned").option("--sort <field>", "Sort by: updated, created, priority, status").option("--format <fmt>", "Output format: table (default), compact, csv, json").option("--due-today", "Only tasks due today or earlier").option("--overdue", "Only overdue tasks (past due_at)").option("--recurring", "Only recurring tasks").option("--limit <n>", "Max tasks to return").action(async (opts) => {
     const globalOpts = program2.opts();
     opts.tags = opts.tags || opts.tag;
     opts.list = opts.list || opts.taskList;
     const cloud = getTodosCloudClient();
     const cloudProjectRef = globalOpts.project || opts.projectName;
     const projectId = cloud && cloudProjectRef ? await cloudResolveProjectRef(cloud, cloudProjectRef) : cloud ? undefined : autoProject(globalOpts);
-    const hasAssignedFilter = Boolean(opts.assigned || opts.agentName);
+    const hasAssignedFilter = Boolean(opts.assigned || opts.agentName || opts.inbox);
     const hasExplicitProjectFilter = Boolean(globalOpts.project || opts.projectName);
     const allowedSortFields = new Set(["updated", "created", "priority", "status"]);
     if (opts.sort && !allowedSortFields.has(opts.sort)) {
@@ -19510,6 +19670,19 @@ function registerTaskCommands(program2) {
       filter["priority"] = opts.priority;
     if (opts.assigned)
       filter["assigned_to"] = opts.assigned;
+    if (opts.createdBy)
+      filter["created_by"] = canonicalAgentRef(opts.createdBy);
+    if (opts.notCreatedBy)
+      filter["not_created_by"] = canonicalAgentRef(opts.notCreatedBy);
+    if (opts.inbox) {
+      const me = resolveCreatorIdentity(program2.opts().agent);
+      if (!me.agent_id) {
+        console.error(chalk2.red("--inbox needs an agent identity. Run `todos init <name>` or pass --agent <id>."));
+        process.exit(1);
+      }
+      filter["assigned_to"] = me.agent_id;
+      filter["not_created_by"] = me.agent_id;
+    }
     if (opts.tags)
       filter["tags"] = opts.tags.split(",").map((t) => t.trim());
     if (opts.projectName && !cloud) {
@@ -19534,7 +19707,32 @@ function registerTaskCommands(program2) {
       }
       filter["limit"] = parsedLimit;
     }
-    let tasks = cloud ? await cloudListTasks(cloud, filter) : listTasks(filter);
+    const creatorFilterActive = Boolean(filter["created_by"] || filter["not_created_by"]);
+    const requestedLimit = filter["limit"];
+    const serverFilter = creatorFilterActive && cloud && requestedLimit !== undefined ? (() => {
+      const { limit: _dropped, ...rest } = filter;
+      return rest;
+    })() : filter;
+    let tasks = cloud ? await cloudListTasks(cloud, serverFilter) : listTasks(serverFilter);
+    if (cloud && creatorFilterActive) {
+      if (tasks.length > 0 && tasks.every((t) => !("created_by" in t))) {
+        console.error(chalk2.yellow(`Warning: this server does not record task authorship, so the creator filter matched nothing to exclude.
+` + "         Results are unfiltered. The API needs upgrading past the release that added created_by."));
+      }
+      const wantCreatedBy = filter["created_by"];
+      const excludeCreatedBy = filter["not_created_by"];
+      tasks = tasks.filter((t) => {
+        const raw = t.created_by ?? null;
+        const author = raw === null ? null : canonicalAgentRef(raw);
+        if (wantCreatedBy && author !== canonicalAgentRef(wantCreatedBy))
+          return false;
+        if (excludeCreatedBy && author !== null && author === canonicalAgentRef(excludeCreatedBy))
+          return false;
+        return true;
+      });
+      if (requestedLimit !== undefined)
+        tasks = tasks.slice(0, requestedLimit);
+    }
     if (opts.dueToday) {
       const todayEnd = new Date;
       todayEnd.setHours(23, 59, 59, 999);
@@ -20099,7 +20297,7 @@ ${chalk2.cyan(sid)} ${statusColor(task2.status)} ${prioColor(task2.priority)} ${
       console.log(formatTaskLine(task2));
     }
   });
-  program2.command("done <id>").description("Mark a task as completed").option("--attach-ids <ids>", "Comma-separated @hasna/attachments IDs to link as evidence").option("--files-changed <files>", "Comma-separated list of files changed").option("--test-results <results>", "Test results summary").option("--commit-hash <hash>", "Git commit hash").option("--notes <notes>", "Completion notes").option("--confidence <0-1>", "Agent's confidence 0.0-1.0 that the task is fully complete (default: 1.0, <0.7 flagged for review)").action(async (id, opts) => {
+  program2.command("done <id>").alias("complete").description("Mark a task as completed (alias: complete)").option("--attach-ids <ids>", "Comma-separated @hasna/attachments IDs to link as evidence").option("--files-changed <files>", "Comma-separated list of files changed").option("--test-results <results>", "Test results summary").option("--commit-hash <hash>", "Git commit hash").option("--notes <notes>", "Completion notes").option("--confidence <0-1>", "Agent's confidence 0.0-1.0 that the task is fully complete (default: 1.0, <0.7 flagged for review)").action(async (id, opts) => {
     const globalOpts = program2.opts();
     const attachmentIds = opts.attachIds ? opts.attachIds.split(",").map((s) => s.trim()).filter(Boolean) : undefined;
     const filesChanged = opts.filesChanged ? opts.filesChanged.split(",").map((s) => s.trim()).filter(Boolean) : undefined;
@@ -20418,14 +20616,15 @@ var init_task_commands = __esm(() => {
   init_tasks();
   init_task_lists();
   init_cloud_router();
+  init_creator_identity();
   init_helpers();
   init_output_redaction();
   init_types();
 });
 
 // src/lib/plan-artifacts.ts
-import { existsSync as existsSync9, mkdirSync as mkdirSync6, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
-import { join as join7, resolve as resolve10 } from "path";
+import { existsSync as existsSync10, mkdirSync as mkdirSync6, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
+import { join as join8, resolve as resolve10 } from "path";
 function assertSafePathSegment(value, label) {
   const trimmed = value.trim();
   if (!trimmed || trimmed === "." || trimmed === ".." || trimmed.includes("/") || trimmed.includes("\\")) {
@@ -20486,7 +20685,7 @@ function resolvePlanArtifactPaths(input) {
   const project = resolvePlanArtifactProject(input);
   const projectId = assertSafePathSegment(project.id, "project id");
   const projectRoot = resolve10(project.path);
-  const directory = join7(projectRoot, ".hasna", "todos", "plans", projectId);
+  const directory = join8(projectRoot, ".hasna", "todos", "plans", projectId);
   const planId = input.plan_id ? assertSafePathSegment(input.plan_id, "plan id") : null;
   const planSlug = input.plan_slug ? assertSafePathSegment(slugify(input.plan_slug), "plan slug") : null;
   const fileName = planId ? planSlug ? `${planSlug}--${planId.slice(0, 8)}.md` : `${planId}.md` : null;
@@ -20494,7 +20693,7 @@ function resolvePlanArtifactPaths(input) {
     project_id: project.id,
     project_root: projectRoot,
     directory,
-    file_path: fileName ? join7(directory, fileName) : directory
+    file_path: fileName ? join8(directory, fileName) : directory
   };
 }
 function resolvePlanArtifactCandidatePaths(plan, db) {
@@ -20660,7 +20859,7 @@ function readPlanArtifact(plan, db) {
     return null;
   const d = db || getDatabase();
   const paths = resolvePlanArtifactCandidatePaths(plan, d);
-  const path = existsSync9(paths.primary.file_path) ? paths.primary.file_path : existsSync9(paths.legacy.file_path) ? paths.legacy.file_path : null;
+  const path = existsSync10(paths.primary.file_path) ? paths.primary.file_path : existsSync10(paths.legacy.file_path) ? paths.legacy.file_path : null;
   if (!path)
     return null;
   const markdown = readFileSync4(path, "utf8");
@@ -20675,7 +20874,7 @@ function inspectPlanArtifact(plan, db) {
     return null;
   const d = db || getDatabase();
   const paths = resolvePlanArtifactCandidatePaths(plan, d);
-  const path = existsSync9(paths.primary.file_path) ? paths.primary.file_path : existsSync9(paths.legacy.file_path) ? paths.legacy.file_path : null;
+  const path = existsSync10(paths.primary.file_path) ? paths.primary.file_path : existsSync10(paths.legacy.file_path) ? paths.legacy.file_path : null;
   if (!path) {
     return {
       path: paths.primary.file_path,
@@ -20755,7 +20954,7 @@ __export(exports_builtin_templates, {
   BUILTIN_TEMPLATES: () => BUILTIN_TEMPLATES
 });
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync5 } from "fs";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 function templateMetadata(template) {
   return {
     source: BUILTIN_TEMPLATE_LIBRARY_SOURCE,
@@ -20814,7 +21013,7 @@ function writeBuiltinTemplateFiles(directory) {
   mkdirSync7(directory, { recursive: true });
   const files = [];
   for (const entry of exportBuiltinTemplateFiles()) {
-    const path = join8(directory, entry.filename);
+    const path = join9(directory, entry.filename);
     writeFileSync5(path, `${JSON.stringify(entry.template, null, 2)}
 `, "utf-8");
     files.push(path);
@@ -22586,16 +22785,16 @@ var init_saved_search_views = __esm(() => {
 });
 
 // src/lib/claude-tasks.ts
-import { existsSync as existsSync10, readFileSync as readFileSync5, readdirSync as readdirSync2, writeFileSync as writeFileSync6 } from "fs";
-import { join as join9 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync5, readdirSync as readdirSync2, writeFileSync as writeFileSync6 } from "fs";
+import { join as join10 } from "path";
 function getTaskListDir(taskListId) {
-  return join9(HOME, ".claude", "tasks", taskListId);
+  return join10(HOME, ".claude", "tasks", taskListId);
 }
 function readClaudeTask(dir, filename) {
-  return readJsonFile(join9(dir, filename));
+  return readJsonFile(join10(dir, filename));
 }
 function writeClaudeTask(dir, task) {
-  writeJsonFile(join9(dir, `${task.id}.json`), task);
+  writeJsonFile(join10(dir, `${task.id}.json`), task);
 }
 function toClaudeStatus(status) {
   if (status === "pending" || status === "in_progress" || status === "completed") {
@@ -22607,14 +22806,14 @@ function toSqliteStatus(status) {
   return status;
 }
 function readPrefixCounter(dir) {
-  const path = join9(dir, ".prefix-counter");
-  if (!existsSync10(path))
+  const path = join10(dir, ".prefix-counter");
+  if (!existsSync11(path))
     return 0;
   const val = parseInt(readFileSync5(path, "utf-8").trim(), 10);
   return isNaN(val) ? 0 : val;
 }
 function writePrefixCounter(dir, value) {
-  writeFileSync6(join9(dir, ".prefix-counter"), String(value));
+  writeFileSync6(join10(dir, ".prefix-counter"), String(value));
 }
 function formatPrefixedSubject(title, prefix, counter) {
   const padded = String(counter).padStart(5, "0");
@@ -22641,7 +22840,7 @@ function taskToClaudeTask(task, claudeTaskId, existingMeta) {
 }
 function pushToClaudeTaskList(taskListId, projectId, options = {}) {
   const dir = getTaskListDir(taskListId);
-  if (!existsSync10(dir))
+  if (!existsSync11(dir))
     ensureDir(dir);
   const filter = {};
   if (projectId)
@@ -22650,7 +22849,7 @@ function pushToClaudeTaskList(taskListId, projectId, options = {}) {
   const existingByTodosId = new Map;
   const files = listJsonFiles(dir);
   for (const f of files) {
-    const path = join9(dir, f);
+    const path = join10(dir, f);
     const ct = readClaudeTask(dir, f);
     if (ct?.metadata?.["todos_id"]) {
       existingByTodosId.set(ct.metadata["todos_id"], { task: ct, mtimeMs: getFileMtimeMs(path) });
@@ -22737,7 +22936,7 @@ function pushToClaudeTaskList(taskListId, projectId, options = {}) {
 }
 function pullFromClaudeTaskList(taskListId, projectId, options = {}) {
   const dir = getTaskListDir(taskListId);
-  if (!existsSync10(dir)) {
+  if (!existsSync11(dir)) {
     return { pushed: 0, pulled: 0, errors: [`Task list directory not found: ${dir}`] };
   }
   const files = readdirSync2(dir).filter((f) => f.endsWith(".json"));
@@ -22757,7 +22956,7 @@ function pullFromClaudeTaskList(taskListId, projectId, options = {}) {
   }
   for (const f of files) {
     try {
-      const filePath = join9(dir, f);
+      const filePath = join10(dir, f);
       const ct = readClaudeTask(dir, f);
       if (!ct)
         continue;
@@ -22830,20 +23029,20 @@ var init_claude_tasks = __esm(() => {
 });
 
 // src/lib/agent-tasks.ts
-import { existsSync as existsSync11 } from "fs";
-import { join as join10 } from "path";
+import { existsSync as existsSync12 } from "fs";
+import { join as join11 } from "path";
 function agentBaseDir(agent) {
   const key = `TODOS_${agent.toUpperCase()}_TASKS_DIR`;
-  return process.env[key] || getAgentTasksDir(agent) || process.env["TODOS_AGENT_TASKS_DIR"] || join10(getTodosGlobalDir(), "agents");
+  return process.env[key] || getAgentTasksDir(agent) || process.env["TODOS_AGENT_TASKS_DIR"] || join11(getTodosGlobalDir(), "agents");
 }
 function getTaskListDir2(agent, taskListId) {
-  return join10(agentBaseDir(agent), agent, taskListId);
+  return join11(agentBaseDir(agent), agent, taskListId);
 }
 function readAgentTask(dir, filename) {
-  return readJsonFile(join10(dir, filename));
+  return readJsonFile(join11(dir, filename));
 }
 function writeAgentTask(dir, task) {
-  writeJsonFile(join10(dir, `${task.id}.json`), task);
+  writeJsonFile(join11(dir, `${task.id}.json`), task);
 }
 function taskToAgentTask(task, externalId, existingMeta) {
   return {
@@ -22868,7 +23067,7 @@ function metadataKey(agent) {
 }
 function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
   const dir = getTaskListDir2(agent, taskListId);
-  if (!existsSync11(dir))
+  if (!existsSync12(dir))
     ensureDir(dir);
   const filter = {};
   if (projectId)
@@ -22877,7 +23076,7 @@ function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
   const existingByTodosId = new Map;
   const files = listJsonFiles(dir);
   for (const f of files) {
-    const path = join10(dir, f);
+    const path = join11(dir, f);
     const at = readAgentTask(dir, f);
     if (at?.metadata?.["todos_id"]) {
       existingByTodosId.set(at.metadata["todos_id"], { task: at, mtimeMs: getFileMtimeMs(path) });
@@ -22951,7 +23150,7 @@ function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
 }
 function pullFromAgentTaskList(agent, taskListId, projectId, options = {}) {
   const dir = getTaskListDir2(agent, taskListId);
-  if (!existsSync11(dir)) {
+  if (!existsSync12(dir)) {
     return { pushed: 0, pulled: 0, errors: [`Task list directory not found: ${dir}`] };
   }
   const files = listJsonFiles(dir);
@@ -22970,7 +23169,7 @@ function pullFromAgentTaskList(agent, taskListId, projectId, options = {}) {
   }
   for (const f of files) {
     try {
-      const filePath = join10(dir, f);
+      const filePath = join11(dir, f);
       const at = readAgentTask(dir, f);
       if (!at)
         continue;
@@ -23123,7 +23322,7 @@ __export(exports_project_bootstrap, {
   discoverProjectWorkspace: () => discoverProjectWorkspace,
   bootstrapProject: () => bootstrapProject
 });
-import { existsSync as existsSync12, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
 import { basename as basename4, dirname as dirname6, resolve as resolve11 } from "path";
 function safeStat(path) {
   try {
@@ -23142,7 +23341,7 @@ function canonicalPath(input) {
 function findUp(start, marker) {
   let current = canonicalPath(start);
   while (true) {
-    if (existsSync12(resolve11(current, marker)))
+    if (existsSync13(resolve11(current, marker)))
       return current;
     const parent = dirname6(current);
     if (parent === current)
@@ -23154,7 +23353,7 @@ function readPackageJson(path) {
   if (!path)
     return null;
   const file = resolve11(path, "package.json");
-  if (!existsSync12(file))
+  if (!existsSync13(file))
     return null;
   try {
     const parsed = JSON.parse(readFileSync6(file, "utf-8"));
@@ -23176,7 +23375,7 @@ function workspaceMarker(root, rootPackage) {
   if (rootPackage?.workspaces)
     markers.push("package.json#workspaces");
   for (const marker of ["pnpm-workspace.yaml", "turbo.json", "nx.json", "lerna.json", "rush.json", "bun.lock", "bun.lockb"]) {
-    if (existsSync12(resolve11(root, marker)))
+    if (existsSync13(resolve11(root, marker)))
       markers.push(marker);
   }
   const kind = markers.find((marker) => marker !== "bun.lock" && marker !== "bun.lockb") ?? null;
@@ -23510,9 +23709,9 @@ __export(exports_extract, {
   buildCodebaseIndex: () => buildCodebaseIndex,
   EXTRACT_TAGS: () => EXTRACT_TAGS
 });
-import { existsSync as existsSync13, readFileSync as readFileSync7, statSync as statSync5 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync7, statSync as statSync5 } from "fs";
 import { createHash as createHash4 } from "crypto";
-import { relative as relative3, resolve as resolve12, join as join11 } from "path";
+import { relative as relative3, resolve as resolve12, join as join12 } from "path";
 function stableHash(value) {
   return createHash4("sha256").update(value).digest("hex");
 }
@@ -23521,8 +23720,8 @@ function normalizePathForMatch(value) {
 }
 function readGitignorePatterns(basePath) {
   const root = statSync5(basePath).isFile() ? resolve12(basePath, "..") : basePath;
-  const gitignorePath = join11(root, ".gitignore");
-  if (!existsSync13(gitignorePath))
+  const gitignorePath = join12(root, ".gitignore");
+  if (!existsSync14(gitignorePath))
     return [];
   try {
     return readFileSync7(gitignorePath, "utf-8").split(`
@@ -23664,7 +23863,7 @@ function buildCodebaseIndex(options) {
   const files = collectFiles(basePath, extensions, excludes, respectGitignore);
   const indexed = [];
   for (const file of files) {
-    const fullPath = statSync5(basePath).isFile() ? basePath : join11(basePath, file);
+    const fullPath = statSync5(basePath).isFile() ? basePath : join12(basePath, file);
     try {
       const source = readFileSync7(fullPath, "utf-8");
       const relPath = statSync5(basePath).isFile() ? relative3(resolve12(basePath, ".."), fullPath) : file;
@@ -23695,7 +23894,7 @@ function extractTodos(options, db) {
   const files = collectFiles(basePath, extensions, excludes, respectGitignore);
   const allComments = [];
   for (const file of files) {
-    const fullPath = statSync5(basePath).isFile() ? basePath : join11(basePath, file);
+    const fullPath = statSync5(basePath).isFile() ? basePath : join12(basePath, file);
     try {
       const source = readFileSync7(fullPath, "utf-8");
       const relPath = statSync5(basePath).isFile() ? relative3(resolve12(basePath, ".."), fullPath) : file;
@@ -26746,8 +26945,16 @@ function resolveCloudAgentByNameOrId(agents, nameOrId) {
     return null;
   return matches.reduce((freshest, candidate) => new Date(candidate.last_seen_at).getTime() > new Date(freshest.last_seen_at).getTime() ? candidate : freshest);
 }
+function clearIdentityIfMine(agentId, agentName) {
+  const persisted = readPersistedIdentity();
+  if (!persisted)
+    return;
+  if (persisted.agent_id === agentId || agentName && persisted.agent_name === agentName) {
+    clearPersistedIdentity();
+  }
+}
 function registerAgentCommands(program2) {
-  program2.command("init <name>").description("Register an agents and get a short UUID").option("-d, --description <text>", "Agent description").action(async (name, opts) => {
+  program2.command("init <name>").alias("register").description("Register an agent and get a short UUID (alias: register)").option("-d, --description <text>", "Agent description").option("--force", "Take over the machine-wide persisted identity even if another session holds it").action(async (name, opts) => {
     const globalOpts = program2.opts();
     try {
       const cloud = getTodosCloudClient();
@@ -26757,14 +26964,25 @@ function registerAgentCommands(program2) {
         console.error(chalk5.red("CONFLICT:"), result.message);
         process.exit(1);
       }
+      const collision = detectIdentityCollision(result.id, result.name);
+      if (collision && !opts.force) {
+        const held = collision.existing.agent_name || collision.existing.agent_id;
+        console.error(chalk5.red(`This machine already has a persisted todos identity: ${held} (registered ${collision.existing.registered_at}).`));
+        console.error(chalk5.yellow(`Overwriting it would make that session attribute its tasks to you.
+` + `For a concurrent session, set a per-process identity instead \u2014 it outranks the file and cannot collide:
+` + `  export TODOS_AGENT_ID=${result.name}
+Or pass --force to take over the machine-wide identity.`));
+        process.exit(2);
+      }
+      persistIdentity({ agent_id: result.id, agent_name: result.name, ...globalOpts.session ? { session_id: globalOpts.session } : {} });
       if (globalOpts.json) {
-        output(result, true);
+        output({ ...result, identity_persisted: true }, true);
       } else {
         console.log(chalk5.green("Agent registered:"));
         console.log(`  ${chalk5.dim("ID:")}   ${result.id}`);
         console.log(`  ${chalk5.dim("Name:")} ${result.name}`);
         console.log(`
-Use ${chalk5.cyan(`--agent ${result.id}`)} on future commands.`);
+${chalk5.dim("Identity saved \u2014 later commands attribute to this agent automatically.")}`);
       }
     } catch (e) {
       handleError(e);
@@ -26821,6 +27039,7 @@ Use ${chalk5.cyan(`--agent ${result.id}`)} on future commands.`);
         if (!result.released) {
           handleError(new Error("Release denied: session_id does not match agent's current session."));
         }
+        clearIdentityIfMine(result.agent.id, result.agent.name);
         if (globalOpts.json) {
           console.log(JSON.stringify({ agent_id: result.agent.id, name: result.agent.name, released: true }));
         } else {
@@ -26837,6 +27056,7 @@ Use ${chalk5.cyan(`--agent ${result.id}`)} on future commands.`);
       if (!released) {
         handleError(new Error("Release denied: session_id does not match agent's current session."));
       }
+      clearIdentityIfMine(a.id, a.name);
       if (globalOpts.json) {
         console.log(JSON.stringify({ agent_id: a.id, name: a.name, released: true }));
       } else {
@@ -27177,6 +27397,7 @@ var init_agent_commands = __esm(() => {
   init_task_lists();
   init_tasks();
   init_helpers();
+  init_creator_identity();
   init_cloud_router();
 });
 
@@ -27219,8 +27440,8 @@ async function findFreePort(start) {
 var DEFAULT_PORT = 19427;
 
 // src/lib/db-backup.ts
-import { existsSync as existsSync14, copyFileSync, mkdirSync as mkdirSync8, readFileSync as readFileSync8, renameSync, statSync as statSync6, writeFileSync as writeFileSync7, unlinkSync } from "fs";
-import { dirname as dirname7, join as join12, resolve as resolve14 } from "path";
+import { existsSync as existsSync15, copyFileSync, mkdirSync as mkdirSync8, readFileSync as readFileSync8, renameSync, statSync as statSync6, writeFileSync as writeFileSync7, unlinkSync } from "fs";
+import { dirname as dirname7, join as join13, resolve as resolve14 } from "path";
 import { Database as Database2 } from "bun:sqlite";
 function resolveDbPath(dbPath) {
   if (dbPath)
@@ -27236,7 +27457,7 @@ function resolveDbPath(dbPath) {
 }
 function backupDatabase(outputPath, sourcePath) {
   const source = resolveDbPath(sourcePath);
-  if (!existsSync14(source))
+  if (!existsSync15(source))
     throw new Error(`Database not found: ${source}`);
   mkdirSync8(dirname7(outputPath), { recursive: true });
   closeDatabase();
@@ -27261,7 +27482,7 @@ function backupDatabase(outputPath, sourcePath) {
 function checkDatabaseIntegrity(dbPath) {
   const path = dbPath ? resolve14(dbPath) : resolveDbPath();
   const errors = [];
-  if (!existsSync14(path)) {
+  if (!existsSync15(path)) {
     return {
       schema_version: DB_BACKUP_SCHEMA,
       path,
@@ -27326,7 +27547,7 @@ function checkDatabaseIntegrity(dbPath) {
 function defaultBackupPath(dbPath) {
   const base = dbPath ? dirname7(resolve14(dbPath)) : dirname7(resolveDbPath());
   const stamp = new Date().toISOString().replace(/[:.]/g, "-");
-  return join12(base, "backups", `todos-${stamp}.db`);
+  return join13(base, "backups", `todos-${stamp}.db`);
 }
 var DB_BACKUP_SCHEMA = "todos.db_backup.v1";
 var init_db_backup = __esm(() => {
@@ -27343,7 +27564,7 @@ __export(exports_evidence_redaction, {
   TODOS_EVIDENCE_REDACTION_CONFIRM: () => TODOS_EVIDENCE_REDACTION_CONFIRM
 });
 import { chmodSync } from "fs";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 function unique4(values) {
   return Array.from(new Set((values ?? []).map((value) => value.trim()).filter(Boolean)));
 }
@@ -27690,7 +27911,7 @@ function redactEvidenceRows(options, db) {
 }
 function defaultEvidenceRedactionBackupPath(dbPath) {
   const base = defaultBackupPath(dbPath);
-  return join13(base.replace(/\.db$/, ""), "pre-redaction.db");
+  return join14(base.replace(/\.db$/, ""), "pre-redaction.db");
 }
 var TODOS_EVIDENCE_REDACTION_SCHEMA = "todos.evidence_redaction.v1", TODOS_EVIDENCE_REDACTION_CONFIRM = "REDACT_TODOS_EVIDENCE";
 var init_evidence_redaction = __esm(() => {
@@ -27706,7 +27927,7 @@ __export(exports_retention_cleanup, {
   applyRetentionCleanup: () => applyRetentionCleanup,
   RETENTION_CLEANUP_CONFIRMATION: () => RETENTION_CLEANUP_CONFIRMATION
 });
-import { existsSync as existsSync15, unlinkSync as unlinkSync2 } from "fs";
+import { existsSync as existsSync16, unlinkSync as unlinkSync2 } from "fs";
 function normalizeScopes(scopes) {
   if (!scopes || scopes.length === 0)
     return [...ALL_SCOPES];
@@ -27909,7 +28130,7 @@ function applyRetentionCleanup(input, db) {
   for (const artifact of report.candidates.artifact_files) {
     try {
       const path = artifactStorePath(artifact.relative_path);
-      if (!existsSync15(path)) {
+      if (!existsSync16(path)) {
         report.warnings.push(`stored artifact already missing: ${artifact.relative_path}`);
         continue;
       }
@@ -28585,8 +28806,8 @@ __export(exports_local_extensions, {
   discoverLocalExtensions: () => discoverLocalExtensions
 });
 import { createHash as createHash6, createVerify } from "crypto";
-import { existsSync as existsSync16, readdirSync as readdirSync3, readFileSync as readFileSync9, statSync as statSync7 } from "fs";
-import { basename as basename6, join as join14, resolve as resolve15 } from "path";
+import { existsSync as existsSync17, readdirSync as readdirSync3, readFileSync as readFileSync9, statSync as statSync7 } from "fs";
+import { basename as basename6, join as join15, resolve as resolve15 } from "path";
 function isObject(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
@@ -28845,10 +29066,10 @@ function verifyExtensionSignature(input) {
 }
 function inspectExtensionSource(source2) {
   const resolved = resolve15(source2);
-  if (!existsSync16(resolved))
+  if (!existsSync17(resolved))
     throw new Error(`extension source not found: ${source2}`);
   const stat = statSync7(resolved);
-  const manifestPath = stat.isDirectory() ? [join14(resolved, "todos.extension.json"), join14(resolved, "extension.json")].find(existsSync16) : resolved;
+  const manifestPath = stat.isDirectory() ? [join15(resolved, "todos.extension.json"), join15(resolved, "extension.json")].find(existsSync17) : resolved;
   if (!manifestPath)
     throw new Error(`extension directory ${source2} is missing todos.extension.json`);
   const raw = readFileSync9(manifestPath);
@@ -28944,20 +29165,20 @@ function projectExtensionSources(projectPath) {
     return [];
   const root = resolve15(projectPath);
   const candidates = [
-    join14(root, "todos.extension.json"),
-    join14(root, ".todos", "todos.extension.json")
+    join15(root, "todos.extension.json"),
+    join15(root, ".todos", "todos.extension.json")
   ];
-  const extensionDir = join14(root, ".todos", "extensions");
-  if (existsSync16(extensionDir)) {
+  const extensionDir = join15(root, ".todos", "extensions");
+  if (existsSync17(extensionDir)) {
     for (const entry of readdirSync3(extensionDir)) {
       if (entry.startsWith("."))
         continue;
-      const full = join14(extensionDir, entry);
+      const full = join15(extensionDir, entry);
       if (statSync7(full).isDirectory() || entry.endsWith(".json"))
         candidates.push(full);
     }
   }
-  return candidates.filter(existsSync16);
+  return candidates.filter(existsSync17);
 }
 function discoverLocalExtensions(options = {}) {
   const config = loadConfig();
@@ -31045,6 +31266,10 @@ class PostgresJsonRecordStore {
       conds.push(`payload->>'assigned_to' = ${p(filter.assigned_to)}`);
     if (filter.agent_id !== undefined)
       conds.push(`payload->>'agent_id' = ${p(filter.agent_id)}`);
+    if (filter.created_by !== undefined)
+      conds.push(`LOWER(payload->>'created_by') = LOWER(${p(filter.created_by)})`);
+    if (filter.not_created_by !== undefined)
+      conds.push(`(payload->>'created_by' IS NULL OR LOWER(payload->>'created_by') <> LOWER(${p(filter.not_created_by)}))`);
     if (filter.session_id !== undefined)
       conds.push(`payload->>'session_id' = ${p(filter.session_id)}`);
     if (filter.tags?.length) {
@@ -31558,7 +31783,7 @@ async function createTask2(input, store, context) {
     description: input.description ?? null,
     status: input.status ?? "pending",
     priority: input.priority ?? "medium",
-    agent_id: input.agent_id ?? null,
+    agent_id: input.agent_id ?? context?.agentId ?? null,
     assigned_to: input.assigned_to ?? null,
     session_id: input.session_id ?? context?.sessionId ?? null,
     working_dir: input.working_dir ?? null,
@@ -31583,7 +31808,8 @@ async function createTask2(input, store, context) {
     confidence: input.confidence ?? null,
     reason: input.reason ?? null,
     spawned_from_session: input.spawned_from_session ?? null,
-    assigned_by: input.assigned_by ?? null,
+    assigned_by: input.assigned_by ?? input.agent_id ?? context?.agentId ?? null,
+    created_by: input.created_by ?? input.agent_id ?? context?.agentId ?? null,
     assigned_from_project: input.assigned_from_project ?? null,
     task_type: input.task_type ?? null,
     cost_tokens: 0,
@@ -31620,7 +31846,8 @@ async function updateTask2(id, input, store) {
     tags: input.tags ?? existing.tags,
     metadata: input.metadata ?? existing.metadata,
     requires_approval: input.requires_approval ?? existing.requires_approval,
-    task_list_id: input.task_list_id !== undefined ? input.task_list_id : existing.task_list_id
+    task_list_id: input.task_list_id !== undefined ? input.task_list_id : existing.task_list_id,
+    created_by: existing.created_by
   };
   await store.upsert("tasks", task);
   return task;
@@ -33348,8 +33575,8 @@ var exports_doctor = {};
 __export(exports_doctor, {
   runTodosDoctor: () => runTodosDoctor
 });
-import { chmodSync as chmodSync2, copyFileSync as copyFileSync2, existsSync as existsSync17, mkdirSync as mkdirSync9, statSync as statSync8 } from "fs";
-import { basename as basename7, dirname as dirname8, join as join15 } from "path";
+import { chmodSync as chmodSync2, copyFileSync as copyFileSync2, existsSync as existsSync18, mkdirSync as mkdirSync9, statSync as statSync8 } from "fs";
+import { basename as basename7, dirname as dirname8, join as join16 } from "path";
 function tableExists3(db, table) {
   return Boolean(db.query("SELECT name FROM sqlite_master WHERE type='table' AND name=?").get(table));
 }
@@ -33443,7 +33670,7 @@ function findMissingProjectRoots(db) {
       continue;
     if (!row.path.startsWith("/"))
       continue;
-    if (!existsSync17(row.path))
+    if (!existsSync18(row.path))
       missing++;
   }
   return missing;
@@ -33503,16 +33730,16 @@ function databasePermissionsAreUnsafe(dbPath) {
 function createBackup(dbPath) {
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
     return;
-  if (!existsSync17(dbPath))
+  if (!existsSync18(dbPath))
     return;
   const stamp = now().replace(/[:.]/g, "-");
-  const backupDir = join15(dirname8(dbPath), `${basename7(dbPath)}.backup-${stamp}`);
+  const backupDir = join16(dirname8(dbPath), `${basename7(dbPath)}.backup-${stamp}`);
   const files = [];
   mkdirSync9(backupDir, { recursive: true });
   for (const source2 of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {
-    if (!existsSync17(source2))
+    if (!existsSync18(source2))
       continue;
-    const target = join15(backupDir, basename7(source2));
+    const target = join16(backupDir, basename7(source2));
     copyFileSync2(source2, target);
     files.push(target);
   }
@@ -33771,7 +33998,7 @@ var init_doctor = __esm(() => {
 });
 
 // src/server/routes.ts
-import { join as join16, resolve as resolve17, sep as sep4 } from "path";
+import { join as join17, resolve as resolve17, sep as sep4 } from "path";
 function parseFieldsParam(url) {
   const fieldsParam = url.searchParams.get("fields");
   return fieldsParam ? fieldsParam.split(",").map((f) => f.trim()).filter(Boolean) : undefined;
@@ -33952,11 +34179,15 @@ async function handleCreateTask(req, ctx, json2, taskToSummary2) {
     const body = await req.json();
     if (!body.title)
       return json2({ error: "Missing 'title'" }, 400);
+    const createdBy = body.created_by ?? body.agent_id ?? "dashboard";
     const task = createTask({
       title: body.title,
       description: body.description,
       priority: body.priority,
-      project_id: body.project_id
+      project_id: body.project_id,
+      agent_id: body.agent_id ?? createdBy,
+      created_by: createdBy,
+      ...body.assigned_to ? { assigned_to: body.assigned_to } : {}
     });
     ctx.broadcastEvent({ type: "task", task_id: task.id, action: "created", agent_id: task.agent_id, project_id: task.project_id });
     return json2(taskToSummary2(task), 201);
@@ -34562,7 +34793,7 @@ function handleStaticFiles(path, method, ctx, json2, serveStaticFile2) {
   if (!ctx.dashboardExists || method !== "GET" && method !== "HEAD")
     return null;
   if (path !== "/") {
-    const filePath = join16(ctx.dashboardDir, path);
+    const filePath = join17(ctx.dashboardDir, path);
     const resolvedFile = resolve17(filePath);
     const resolvedBase = resolve17(ctx.dashboardDir);
     if (!resolvedFile.startsWith(resolvedBase + sep4) && resolvedFile !== resolvedBase) {
@@ -34572,7 +34803,7 @@ function handleStaticFiles(path, method, ctx, json2, serveStaticFile2) {
     if (res2)
       return res2;
   }
-  const indexPath = join16(ctx.dashboardDir, "index.html");
+  const indexPath = join17(ctx.dashboardDir, "index.html");
   const res = serveStaticFile2(indexPath);
   if (res)
     return res;
@@ -35060,7 +35291,11 @@ function createLocalSqliteTodosStorageAdapter(options = {}) {
       sync: true
     },
     tasks: {
-      create: (input) => createTask(input, database()),
+      create: (input, context) => createTask({
+        ...input,
+        agent_id: input.agent_id ?? context?.agentId,
+        created_by: input.created_by ?? input.agent_id ?? context?.agentId
+      }, database()),
       get: (id) => getTask(id, database()),
       resolveRef: (ref) => resolveTaskRefLocal(database(), ref),
       list: (filter = {}) => listTasksMaybeSearch(filter, database()),
@@ -37676,6 +37911,8 @@ async function handleV1Request(req, url, dependencies = {}) {
             ...url.searchParams.get("task_list_id") ? { task_list_id: url.searchParams.get("task_list_id") } : {},
             ...url.searchParams.get("assigned_to") ? { assigned_to: url.searchParams.get("assigned_to") } : {},
             ...url.searchParams.get("agent_id") ? { agent_id: url.searchParams.get("agent_id") } : {},
+            ...url.searchParams.get("created_by") ? { created_by: url.searchParams.get("created_by") } : {},
+            ...url.searchParams.get("not_created_by") ? { not_created_by: url.searchParams.get("not_created_by") } : {},
             ...url.searchParams.get("tags") ? {
               tags: url.searchParams.get("tags").split(",").map((tag) => tag.trim()).filter(Boolean)
             } : {},
@@ -42921,6 +43158,8 @@ function registerTaskCrudTools(server, ctx) {
       project_id: exports_external.string().optional().describe("Project ID"),
       task_list_id: exports_external.string().optional().describe("Task list ID"),
       assigned_to: exports_external.string().optional().describe("Agent ID or name to assign to"),
+      created_by: exports_external.string().optional().describe("Agent who FILED this task. Defaults to the ambient agent identity (todos init / TODOS_AGENT_ID)."),
+      unassigned: exports_external.boolean().optional().describe("Deliberately file with no assignee. Without it, the task defaults to the filer."),
       depends_on: exports_external.array(exports_external.string()).optional().describe("Array of task IDs this task depends on"),
       short_id: exports_external.string().nullable().optional().describe("Short ID (auto-generated if not provided, disabled if null)"),
       tags: exports_external.array(exports_external.string()).optional().describe("Tags for the task"),
@@ -42931,12 +43170,18 @@ function registerTaskCrudTools(server, ctx) {
       retry_count: exports_external.number().optional().describe("Max retry count for agent failures")
     }, async (params) => {
       try {
-        const { depends_on, assigned_to, project_id, task_list_id, tags, estimate, confidence, retry_count, deadline, ...rest } = params;
+        const { depends_on, assigned_to, project_id, task_list_id, tags, estimate, confidence, retry_count, deadline, created_by, unassigned, ...rest } = params;
+        const creator = resolveCreatorIdentity(created_by);
+        const assignee = assigned_to || (unassigned ? undefined : creator.agent_id || undefined);
         const cloud = getTodosCloudClient();
         if (cloud) {
           const payload = { ...rest };
-          if (assigned_to)
-            payload.assigned_to = assigned_to;
+          if (creator.agent_id) {
+            payload.created_by = creator.agent_id;
+            payload.agent_id = payload.agent_id ?? creator.agent_id;
+          }
+          if (assignee)
+            payload.assigned_to = assignee;
           if (project_id)
             payload.project_id = project_id;
           if (task_list_id)
@@ -42957,8 +43202,12 @@ function registerTaskCrudTools(server, ctx) {
           return { content: [{ type: "text", text: mutationTaskResponse(created) }] };
         }
         const resolved = { ...rest };
-        if (assigned_to)
-          resolved.assigned_to = resolveAssignee(assigned_to);
+        if (creator.agent_id) {
+          resolved.created_by = creator.agent_id;
+          resolved.agent_id = resolved.agent_id ?? creator.agent_id;
+        }
+        if (assignee)
+          resolved.assigned_to = resolveAssignee(assignee);
         if (project_id)
           resolved.project_id = resolveId(project_id, "projects");
         if (task_list_id)
@@ -43044,6 +43293,8 @@ function registerTaskCrudTools(server, ctx) {
       project_id: exports_external.string().optional().describe("Filter by project"),
       task_list_id: exports_external.string().optional().describe("Filter by task list"),
       assigned_to: exports_external.string().optional().describe("Filter by assignee (agent ID or name, empty string = unassigned)"),
+      created_by: exports_external.string().optional().describe("Filter by the agent who FILED the task"),
+      not_created_by: exports_external.string().optional().describe('Exclude tasks filed by this agent. With assigned_to=<me> this is the "my inbox, minus my own filings" query.'),
       tags: exports_external.array(exports_external.string()).optional().describe("Filter by tags (AND logic)"),
       created_after: exports_external.string().optional().describe("ISO date \u2014 tasks created after this date"),
       created_before: exports_external.string().optional().describe("ISO date \u2014 tasks created before this date"),
@@ -43236,6 +43487,7 @@ var init_task_crud2 = __esm(() => {
   init_tasks();
   init_types();
   init_token_utils();
+  init_creator_identity();
   init_cloud_router();
 });
 
@@ -43432,8 +43684,8 @@ var exports_mention_resolver = {};
 __export(exports_mention_resolver, {
   resolveMentions: () => resolveMentions
 });
-import { existsSync as existsSync18, readdirSync as readdirSync4, readFileSync as readFileSync10, statSync as statSync9 } from "fs";
-import { basename as basename8, isAbsolute, join as join17, relative as relative5, resolve as resolve18, sep as sep5 } from "path";
+import { existsSync as existsSync19, readdirSync as readdirSync4, readFileSync as readFileSync10, statSync as statSync9 } from "fs";
+import { basename as basename8, isAbsolute, join as join18, relative as relative5, resolve as resolve18, sep as sep5 } from "path";
 function blankResolution(parsed) {
   return {
     input: parsed.input,
@@ -43531,7 +43783,7 @@ function resolveFile(parsed, workspace) {
     return resolution;
   }
   resolution.path = relPath;
-  if (!existsSync18(absolutePath)) {
+  if (!existsSync19(absolutePath)) {
     resolution.warnings.push("file does not exist in the local workspace");
     return resolution;
   }
@@ -43564,7 +43816,7 @@ function walkSourceFiles(root, current = root, files = []) {
       if (SKIP_DIRS2.has(entry2.name))
         continue;
     }
-    const absolutePath = join17(current, entry2.name);
+    const absolutePath = join18(current, entry2.name);
     if (entry2.isDirectory()) {
       if (!SKIP_DIRS2.has(entry2.name))
         walkSourceFiles(root, absolutePath, files);
@@ -46331,7 +46583,7 @@ __export(exports_release_compatibility, {
   LOCAL_RELEASE_COMPATIBILITY_SCHEMA_VERSION: () => LOCAL_RELEASE_COMPATIBILITY_SCHEMA_VERSION
 });
 import { readFileSync as readFileSync11 } from "fs";
-import { join as join18, resolve as resolve19 } from "path";
+import { join as join19, resolve as resolve19 } from "path";
 import { Database as Database3 } from "bun:sqlite";
 function pass(id, message, details) {
   return { id, status: "passed", message, details };
@@ -46343,7 +46595,7 @@ function warn(id, message, details) {
   return { id, status: "warning", message, details };
 }
 function readPackageJson2(root) {
-  return JSON.parse(readFileSync11(join18(root, "package.json"), "utf8"));
+  return JSON.parse(readFileSync11(join19(root, "package.json"), "utf8"));
 }
 function sortedKeys(value) {
   return Object.keys(value ?? {}).sort((left, right) => left.localeCompare(right));
@@ -52286,7 +52538,7 @@ __export(exports_verification_providers, {
   getVerificationRecord: () => getVerificationRecord,
   discoverVerificationProviderCapabilities: () => discoverVerificationProviderCapabilities
 });
-import { existsSync as existsSync19, readFileSync as readFileSync12 } from "fs";
+import { existsSync as existsSync20, readFileSync as readFileSync12 } from "fs";
 function normalizeName6(name) {
   const normalized = name.trim().toLowerCase();
   if (!/^[a-z0-9][a-z0-9_-]{0,63}$/.test(normalized)) {
@@ -52438,7 +52690,7 @@ Timed out after ${provider.timeout_ms}ms`);
   };
 }
 function runCiLogProvider(input) {
-  const text = input.log_text ?? (input.log_path && existsSync19(input.log_path) ? readFileSync12(input.log_path, "utf-8") : "");
+  const text = input.log_text ?? (input.log_path && existsSync20(input.log_path) ? readFileSync12(input.log_path, "utf-8") : "");
   return {
     status: classifyLog(text),
     attempts: 1,
@@ -52450,7 +52702,7 @@ function runBrowserProvider(input) {
   if (!input.artifact_path) {
     return { status: "unknown", attempts: 1, exit_code: null, output_summary: "browser provider needs a screenshot or artifact path" };
   }
-  if (!existsSync19(input.artifact_path)) {
+  if (!existsSync20(input.artifact_path)) {
     return { status: "failed", attempts: 1, exit_code: null, output_summary: `artifact not found: ${input.artifact_path}` };
   }
   return {
@@ -55039,7 +55291,7 @@ __export(exports_onboarding_fixtures, {
   TODOS_ONBOARDING_FIXTURE_LIBRARY_VERSION: () => TODOS_ONBOARDING_FIXTURE_LIBRARY_VERSION
 });
 import { mkdirSync as mkdirSync11, writeFileSync as writeFileSync9 } from "fs";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 function emptyData() {
   return {
     projects: [],
@@ -55107,6 +55359,7 @@ function task(input) {
     reason: "Bundled deterministic onboarding fixture",
     spawned_from_session: null,
     assigned_by: null,
+    created_by: null,
     assigned_from_project: null,
     task_type: "onboarding",
     cost_tokens: 0,
@@ -55373,7 +55626,7 @@ function writeOnboardingFixtureFiles(directory) {
   mkdirSync11(directory, { recursive: true });
   const files = [];
   for (const fixture of allFixtures()) {
-    const path = join19(directory, `${fixture.summary.name}.bridge.json`);
+    const path = join20(directory, `${fixture.summary.name}.bridge.json`);
     writeFileSync9(path, `${JSON.stringify(fixture.bundle, null, 2)}
 `, "utf-8");
     files.push(path);
@@ -61585,16 +61838,16 @@ __export(exports_environment_snapshots, {
   captureEnvironmentSnapshot: () => captureEnvironmentSnapshot
 });
 import { createHash as createHash13 } from "crypto";
-import { existsSync as existsSync20, readFileSync as readFileSync15, statSync as statSync10 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync15, statSync as statSync10 } from "fs";
 import { hostname as hostname2, platform, arch } from "os";
-import { dirname as dirname10, join as join20, resolve as resolve21 } from "path";
+import { dirname as dirname10, join as join21, resolve as resolve21 } from "path";
 import { tmpdir as tmpdir4 } from "os";
 function sha2567(value) {
   return createHash13("sha256").update(value).digest("hex");
 }
 function fileRecord(root, relativePath) {
-  const path = join20(root, relativePath);
-  if (!existsSync20(path))
+  const path = join21(root, relativePath);
+  if (!existsSync21(path))
     return null;
   const stat = statSync10(path);
   if (!stat.isFile())
@@ -61606,7 +61859,7 @@ function manifestRecord(root, relativePath) {
   const base = fileRecord(root, relativePath);
   if (!base)
     return null;
-  const parsed = readJsonFile(join20(root, relativePath));
+  const parsed = readJsonFile(join21(root, relativePath));
   if (!parsed)
     return { ...base, redacted: {} };
   const redacted = redactValue({
@@ -61701,8 +61954,8 @@ function commandEnv(env, includeValues) {
 function defaultSnapshotDir() {
   const dbPath = getDatabasePath();
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
-    return join20(tmpdir4(), "hasna-todos", "environment-snapshots");
-  return join20(dirname10(resolve21(dbPath)), "environment-snapshots");
+    return join21(tmpdir4(), "hasna-todos", "environment-snapshots");
+  return join21(dirname10(resolve21(dbPath)), "environment-snapshots");
 }
 function snapshotWithId(snapshot) {
   const digest = sha2567(JSON.stringify(snapshot)).slice(0, 24);
@@ -61749,7 +62002,7 @@ function captureEnvironmentSnapshot(input = {}) {
   });
 }
 function writeEnvironmentSnapshot(snapshot, outputPath) {
-  const path = outputPath ? resolve21(outputPath) : join20(defaultSnapshotDir(), `${snapshot.id}.json`);
+  const path = outputPath ? resolve21(outputPath) : join21(defaultSnapshotDir(), `${snapshot.id}.json`);
   ensureDir(dirname10(path));
   writeJsonFile(path, snapshot);
   return path;
@@ -62557,27 +62810,27 @@ __export(exports_serve, {
   SECURITY_HEADERS: () => SECURITY_HEADERS,
   MIME_TYPES: () => MIME_TYPES
 });
-import { existsSync as existsSync21 } from "fs";
-import { join as join21, dirname as dirname11, extname } from "path";
+import { existsSync as existsSync22 } from "fs";
+import { join as join22, dirname as dirname11, extname } from "path";
 import { fileURLToPath } from "url";
 function resolveDashboardDir() {
   const candidates = [];
   try {
     const scriptDir = dirname11(fileURLToPath(import.meta.url));
-    candidates.push(join21(scriptDir, "..", "dashboard", "dist"));
-    candidates.push(join21(scriptDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join22(scriptDir, "..", "dashboard", "dist"));
+    candidates.push(join22(scriptDir, "..", "..", "dashboard", "dist"));
   } catch {}
   if (process.argv[1]) {
     const mainDir = dirname11(process.argv[1]);
-    candidates.push(join21(mainDir, "..", "dashboard", "dist"));
-    candidates.push(join21(mainDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join22(mainDir, "..", "dashboard", "dist"));
+    candidates.push(join22(mainDir, "..", "..", "dashboard", "dist"));
   }
-  candidates.push(join21(process.cwd(), "dashboard", "dist"));
+  candidates.push(join22(process.cwd(), "dashboard", "dist"));
   for (const candidate of candidates) {
-    if (existsSync21(candidate))
+    if (existsSync22(candidate))
       return candidate;
   }
-  return join21(process.cwd(), "dashboard", "dist");
+  return join22(process.cwd(), "dashboard", "dist");
 }
 function getProvidedApiKey(req) {
   const headerKey = req.headers.get("x-api-key");
@@ -62649,7 +62902,7 @@ function json(data, status = 200, headers) {
   });
 }
 function serveStaticFile(filePath) {
-  if (!existsSync21(filePath))
+  if (!existsSync22(filePath))
     return null;
   const ext = extname(filePath);
   const contentType = MIME_TYPES[ext] || "application/octet-stream";
@@ -62750,7 +63003,7 @@ data: ${data}
       filteredSseClients.delete(client);
   }
   const dashboardDir = resolveDashboardDir();
-  const dashboardExists = existsSync21(dashboardDir);
+  const dashboardExists = existsSync22(dashboardDir);
   if (!dashboardExists) {
     console.error(`
 Dashboard not found at: ${dashboardDir}`);
@@ -64623,12 +64876,12 @@ __export(exports_config_serve_commands, {
   registerConfigServeCommands: () => registerConfigServeCommands
 });
 import chalk6 from "chalk";
-import { existsSync as existsSync22, mkdirSync as mkdirSync12, readFileSync as readFileSync16, writeFileSync as writeFileSync10 } from "fs";
-import { dirname as dirname12, join as join22 } from "path";
+import { existsSync as existsSync23, mkdirSync as mkdirSync12, readFileSync as readFileSync16, writeFileSync as writeFileSync10 } from "fs";
+import { dirname as dirname12, join as join23 } from "path";
 function registerConfigServeCommands(program2) {
   program2.command("config").description("View or update configuration").option("--get <key>", "Get a config value").option("--set <key=value>", "Set a config value (e.g. completion_guard.enabled=true)").action((opts) => {
     const globalOpts = program2.opts();
-    const configPath = join22(getTodosGlobalDir(), "config.json");
+    const configPath = join23(getTodosGlobalDir(), "config.json");
     if (opts.get) {
       const config2 = loadConfig();
       const keys = opts.get.split(".");
@@ -64665,7 +64918,7 @@ function registerConfigServeCommands(program2) {
       }
       obj[keys[keys.length - 1]] = parsedValue;
       const dir = dirname12(configPath);
-      if (!existsSync22(dir))
+      if (!existsSync23(dir))
         mkdirSync12(dir, { recursive: true });
       writeFileSync10(configPath, JSON.stringify(config2, null, 2));
       if (globalOpts.json) {
@@ -65845,8 +66098,8 @@ __export(exports_routing_doctor, {
   classifyTaskRouting: () => classifyTaskRouting,
   TODOS_ROUTING_DOCTOR_SCHEMA_VERSION: () => TODOS_ROUTING_DOCTOR_SCHEMA_VERSION
 });
-import { copyFileSync as copyFileSync3, existsSync as existsSync23, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11 } from "fs";
-import { basename as basename9, dirname as dirname13, join as join23 } from "path";
+import { copyFileSync as copyFileSync3, existsSync as existsSync24, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11 } from "fs";
+import { basename as basename9, dirname as dirname13, join as join24 } from "path";
 function normalizePath5(path) {
   if (!path)
     return null;
@@ -66148,16 +66401,16 @@ function evaluateTaskRouting(ctx) {
 function createBackup2(dbPath, generatedAt) {
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
     return;
-  if (!existsSync23(dbPath))
+  if (!existsSync24(dbPath))
     return;
   const stamp = generatedAt.replace(/[:.]/g, "-");
-  const backupDir = join23(dirname13(dbPath), `${basename9(dbPath)}.routing-doctor-backup-${stamp}`);
+  const backupDir = join24(dirname13(dbPath), `${basename9(dbPath)}.routing-doctor-backup-${stamp}`);
   const files = [];
   mkdirSync13(backupDir, { recursive: true });
   for (const source3 of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {
-    if (!existsSync23(source3))
+    if (!existsSync24(source3))
       continue;
-    const target = join23(backupDir, basename9(source3));
+    const target = join24(backupDir, basename9(source3));
     copyFileSync3(source3, target);
     files.push(target);
   }
@@ -66261,7 +66514,7 @@ function runRoutingDoctor(options = {}) {
       }
       const applied = repairs.filter((r) => r.applied);
       if (applied.length > 0) {
-        const undoPath = options.undoRecordPath ?? join23(process.cwd(), `todos-routing-doctor-undo-${generatedAt.replace(/[:.]/g, "-")}.json`);
+        const undoPath = options.undoRecordPath ?? join24(process.cwd(), `todos-routing-doctor-undo-${generatedAt.replace(/[:.]/g, "-")}.json`);
         const undoRecord = {
           schema_version: TODOS_ROUTING_DOCTOR_SCHEMA_VERSION,
           purpose: "Undo record for routing-doctor --apply. Restore each field with the prior value below.",
@@ -66360,8 +66613,8 @@ __export(exports_task_route_sources, {
 });
 import { Database as Database4 } from "bun:sqlite";
 import { createHash as createHash14 } from "crypto";
-import { existsSync as existsSync24, readdirSync as readdirSync5, statSync as statSync11 } from "fs";
-import { basename as basename10, dirname as dirname14, join as join24, resolve as resolve22 } from "path";
+import { existsSync as existsSync25, readdirSync as readdirSync5, statSync as statSync11 } from "fs";
+import { basename as basename10, dirname as dirname14, join as join25, resolve as resolve22 } from "path";
 function normalizePath6(input) {
   return resolve22(input);
 }
@@ -66425,8 +66678,8 @@ function discoverStoresUnderRoot(sourceRoot) {
   const rootPath = normalizePath6(sourceRoot);
   const errors2 = [];
   const stores = [];
-  if (!existsSync24(rootPath)) {
-    const ref = createStoreRef(join24(rootPath, TODO_STORE_RELATIVE_PATH));
+  if (!existsSync25(rootPath)) {
+    const ref = createStoreRef(join25(rootPath, TODO_STORE_RELATIVE_PATH));
     errors2.push({
       ...ref,
       code: "SOURCE_ROOT_MISSING",
@@ -66438,7 +66691,7 @@ function discoverStoresUnderRoot(sourceRoot) {
   try {
     rootStat = statSync11(rootPath);
   } catch (error2) {
-    const ref = createStoreRef(join24(rootPath, TODO_STORE_RELATIVE_PATH));
+    const ref = createStoreRef(join25(rootPath, TODO_STORE_RELATIVE_PATH));
     errors2.push({
       ...ref,
       code: "SOURCE_ROOT_UNREADABLE",
@@ -66451,8 +66704,8 @@ function discoverStoresUnderRoot(sourceRoot) {
     return { stores, errors: errors2 };
   }
   function scanDirectory(dir, depth) {
-    const candidate = join24(dir, TODO_STORE_RELATIVE_PATH);
-    if (existsSync24(candidate)) {
+    const candidate = join25(dir, TODO_STORE_RELATIVE_PATH);
+    if (existsSync25(candidate)) {
       stores.push(createStoreRef(candidate));
     }
     if (depth >= ROOT_SCAN_MAX_DEPTH)
@@ -66472,7 +66725,7 @@ function discoverStoresUnderRoot(sourceRoot) {
     for (const entry2 of entries) {
       if (!entry2.isDirectory() || SKIPPED_SCAN_DIRS.has(entry2.name))
         continue;
-      scanDirectory(join24(dir, entry2.name), depth + 1);
+      scanDirectory(join25(dir, entry2.name), depth + 1);
     }
   }
   scanDirectory(rootPath, 0);
@@ -66498,7 +66751,7 @@ function collectStoreRefs(input) {
   };
 }
 function openReadonlyStore(ref) {
-  if (!existsSync24(ref.source_db_path)) {
+  if (!existsSync25(ref.source_db_path)) {
     throw Object.assign(new Error(`Store does not exist: ${ref.source_db_path}`), { code: "STORE_MISSING" });
   }
   return new Database4(ref.source_db_path, { readonly: true, create: false });
@@ -66672,7 +66925,7 @@ var init_task_route_sources = __esm(() => {
   init_task_crud();
   init_redaction();
   init_task_routing();
-  TODO_STORE_RELATIVE_PATH = join24(".hasna", "todos", "todos.db");
+  TODO_STORE_RELATIVE_PATH = join25(".hasna", "todos", "todos.db");
   SKIPPED_SCAN_DIRS = new Set([
     ".git",
     ".hg",
@@ -68181,9 +68434,9 @@ Findings`));
       const db = getDatabase();
       const row = db.query("SELECT COUNT(*) as count FROM tasks").get();
       const { statSync: statSync12 } = await import("fs");
-      const { join: join25 } = await import("path");
+      const { join: join26 } = await import("path");
       const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-      const dbPath = process.env["HASNA_TODOS_DB_PATH"] || process.env["TODOS_DB_PATH"] || join25(home, ".hasna", "todos", "todos.db");
+      const dbPath = process.env["HASNA_TODOS_DB_PATH"] || process.env["TODOS_DB_PATH"] || join26(home, ".hasna", "todos", "todos.db");
       let size = "unknown";
       try {
         size = `${(statSync12(dbPath).size / 1024 / 1024).toFixed(1)} MB`;
@@ -70097,21 +70350,21 @@ __export(exports_mcp_hooks_commands, {
 });
 import chalk9 from "chalk";
 import { execSync as execSync3 } from "child_process";
-import { existsSync as existsSync25, readFileSync as readFileSync18, writeFileSync as writeFileSync13, mkdirSync as mkdirSync14, chmodSync as chmodSync3 } from "fs";
-import { dirname as dirname15, join as join25 } from "path";
+import { existsSync as existsSync26, readFileSync as readFileSync18, writeFileSync as writeFileSync13, mkdirSync as mkdirSync14, chmodSync as chmodSync3 } from "fs";
+import { dirname as dirname15, join as join26 } from "path";
 function getMcpBinaryPath() {
   try {
     const p = execSync3("which todos-mcp", { encoding: "utf-8" }).trim();
     if (p)
       return p;
   } catch {}
-  const bunBin = join25(HOME2, ".bun", "bin", "todos-mcp");
-  if (existsSync25(bunBin))
+  const bunBin = join26(HOME2, ".bun", "bin", "todos-mcp");
+  if (existsSync26(bunBin))
     return bunBin;
   return "todos-mcp";
 }
 function readJsonFile2(path) {
-  if (!existsSync25(path))
+  if (!existsSync26(path))
     return {};
   try {
     return JSON.parse(readFileSync18(path, "utf-8"));
@@ -70121,19 +70374,19 @@ function readJsonFile2(path) {
 }
 function writeJsonFile2(path, data) {
   const dir = dirname15(path);
-  if (!existsSync25(dir))
+  if (!existsSync26(dir))
     mkdirSync14(dir, { recursive: true });
   writeFileSync13(path, JSON.stringify(data, null, 2) + `
 `);
 }
 function readTomlFile(path) {
-  if (!existsSync25(path))
+  if (!existsSync26(path))
     return "";
   return readFileSync18(path, "utf-8");
 }
 function writeTomlFile(path, content) {
   const dir = dirname15(path);
-  if (!existsSync25(dir))
+  if (!existsSync26(dir))
     mkdirSync14(dir, { recursive: true });
   writeFileSync13(path, content);
 }
@@ -70198,7 +70451,7 @@ function unregisterClaude(_global) {
   }
 }
 function registerCodex(binPath) {
-  const configPath = join25(HOME2, ".codex", "config.toml");
+  const configPath = join26(HOME2, ".codex", "config.toml");
   let content = readTomlFile(configPath);
   content = removeTomlBlock(content, "mcp_servers.todos");
   const block = `
@@ -70212,7 +70465,7 @@ args = ["--stdio"]
   console.log(chalk9.green(`Codex CLI: registered in ${configPath}`));
 }
 function unregisterCodex() {
-  const configPath = join25(HOME2, ".codex", "config.toml");
+  const configPath = join26(HOME2, ".codex", "config.toml");
   let content = readTomlFile(configPath);
   if (!content.includes("[mcp_servers.todos]")) {
     console.log(chalk9.dim(`Codex CLI: todos not found in ${configPath}`));
@@ -70224,7 +70477,7 @@ function unregisterCodex() {
   console.log(chalk9.green(`Codex CLI: unregistered from ${configPath}`));
 }
 function registerGemini(binPath) {
-  const configPath = join25(HOME2, ".gemini", "settings.json");
+  const configPath = join26(HOME2, ".gemini", "settings.json");
   const config = readJsonFile2(configPath);
   if (!config["mcpServers"]) {
     config["mcpServers"] = {};
@@ -70238,7 +70491,7 @@ function registerGemini(binPath) {
   console.log(chalk9.green(`Gemini CLI: registered in ${configPath}`));
 }
 function unregisterGemini() {
-  const configPath = join25(HOME2, ".gemini", "settings.json");
+  const configPath = join26(HOME2, ".gemini", "settings.json");
   const config = readJsonFile2(configPath);
   const servers = config["mcpServers"];
   if (!servers || !("todos" in servers)) {
@@ -70249,8 +70502,37 @@ function unregisterGemini() {
   writeJsonFile2(configPath, config);
   console.log(chalk9.green(`Gemini CLI: unregistered from ${configPath}`));
 }
+function cursorConfigPath(global) {
+  return global ? join26(HOME2, ".cursor", "mcp.json") : join26(process.cwd(), ".cursor", "mcp.json");
+}
+function registerCursor(binPath, global) {
+  const configPath = cursorConfigPath(global);
+  const config = readJsonFile2(configPath);
+  if (!config["mcpServers"]) {
+    config["mcpServers"] = {};
+  }
+  const servers = config["mcpServers"];
+  servers["todos"] = {
+    command: binPath,
+    args: ["--stdio"]
+  };
+  writeJsonFile2(configPath, config);
+  console.log(chalk9.green(`Cursor (${global ? "user" : "project"}): registered in ${configPath}`));
+}
+function unregisterCursor(global) {
+  const configPath = cursorConfigPath(global);
+  const config = readJsonFile2(configPath);
+  const servers = config["mcpServers"];
+  if (!servers || !("todos" in servers)) {
+    console.log(chalk9.dim(`Cursor: todos not found in ${configPath}`));
+    return;
+  }
+  delete servers["todos"];
+  writeJsonFile2(configPath, config);
+  console.log(chalk9.green(`Cursor (${global ? "user" : "project"}): unregistered from ${configPath}`));
+}
 function registerMcp(agent, global) {
-  const agents = agent === "all" ? ["claude", "codex", "gemini"] : [agent];
+  const agents = agent === "all" ? ["claude", "codex", "gemini", "cursor"] : [agent];
   const binPath = getMcpBinaryPath();
   for (const a of agents) {
     switch (a) {
@@ -70263,13 +70545,16 @@ function registerMcp(agent, global) {
       case "gemini":
         registerGemini(binPath);
         break;
+      case "cursor":
+        registerCursor(binPath, global);
+        break;
       default:
-        console.error(chalk9.red(`Unknown agent: ${a}. Use: claude, codex, gemini, all`));
+        console.error(chalk9.red(`Unknown agent: ${a}. Use: claude, codex, gemini, cursor, all`));
     }
   }
 }
 function unregisterMcp(agent, global) {
-  const agents = agent === "all" ? ["claude", "codex", "gemini"] : [agent];
+  const agents = agent === "all" ? ["claude", "codex", "gemini", "cursor"] : [agent];
   for (const a of agents) {
     switch (a) {
       case "claude":
@@ -70281,8 +70566,11 @@ function unregisterMcp(agent, global) {
       case "gemini":
         unregisterGemini();
         break;
+      case "cursor":
+        unregisterCursor(global);
+        break;
       default:
-        console.error(chalk9.red(`Unknown agent: ${a}. Use: claude, codex, gemini, all`));
+        console.error(chalk9.red(`Unknown agent: ${a}. Use: claude, codex, gemini, cursor, all`));
     }
   }
 }
@@ -70295,8 +70583,8 @@ function registerMcpHooksCommands(program2) {
       if (p)
         todosBin = p;
     } catch {}
-    const hooksDir = join25(process.cwd(), ".claude", "hooks");
-    if (!existsSync25(hooksDir))
+    const hooksDir = join26(process.cwd(), ".claude", "hooks");
+    if (!existsSync26(hooksDir))
       mkdirSync14(hooksDir, { recursive: true });
     const hookScript = `#!/usr/bin/env bash
 # Auto-generated by: todos hooks install
@@ -70321,11 +70609,11 @@ esac
 
 exit 0
 `;
-    const hookPath = join25(hooksDir, "todos-sync.sh");
+    const hookPath = join26(hooksDir, "todos-sync.sh");
     writeFileSync13(hookPath, hookScript);
     execSync3(`chmod +x "${hookPath}"`);
     console.log(chalk9.green(`Hook script created: ${hookPath}`));
-    const settingsPath = join25(process.cwd(), ".claude", "settings.json");
+    const settingsPath = join26(process.cwd(), ".claude", "settings.json");
     const settings = readJsonFile2(settingsPath);
     if (!settings["hooks"]) {
       settings["hooks"] = {};
@@ -70354,7 +70642,7 @@ exit 0
     console.log(chalk9.green(`Claude Code hooks configured in: ${settingsPath}`));
     console.log(chalk9.dim("Task list ID auto-detected from project."));
   });
-  program2.command("mcp").description("Start MCP server (stdio)").option("--register <agent>", "Register MCP server with an agent (claude, codex, gemini, all)").option("--unregister <agent>", "Unregister MCP server from an agent (claude, codex, gemini, all)").option("-g, --global", "Register/unregister globally (user-level) instead of project-level").action(async (opts) => {
+  program2.command("mcp").description("Start MCP server (stdio)").option("--register <agent>", "Register MCP server with an agent (claude, codex, gemini, cursor, all)").option("--unregister <agent>", "Unregister MCP server from an agent (claude, codex, gemini, cursor, all)").option("-g, --global", "Register/unregister globally (user-level) instead of project-level").action(async (opts) => {
     if (opts.register) {
       registerMcp(opts.register, opts.global);
       return;
@@ -71256,7 +71544,7 @@ Artifacts:`));
       const gitDir = execSync3("git rev-parse --git-dir", { encoding: "utf-8" }).trim();
       const hookPath = `${gitDir}/hooks/post-commit`;
       const marker = "# todos-auto-link";
-      if (existsSync25(hookPath)) {
+      if (existsSync26(hookPath)) {
         const existing = readFileSync18(hookPath, "utf-8");
         if (existing.includes(marker)) {
           console.log(chalk9.yellow("Hook already installed."));
@@ -71283,7 +71571,7 @@ $(dirname "$0")/../../scripts/post-commit-hook.sh
       const gitDir = execSync3("git rev-parse --git-dir", { encoding: "utf-8" }).trim();
       const hookPath = `${gitDir}/hooks/post-commit`;
       const marker = "# todos-auto-link";
-      if (!existsSync25(hookPath)) {
+      if (!existsSync26(hookPath)) {
         console.log(chalk9.dim("No post-commit hook found."));
         return;
       }
@@ -71469,7 +71757,7 @@ import chalk11 from "chalk";
 import { execSync as execSync4 } from "child_process";
 import { readFileSync as readFileSync19, unlinkSync as unlinkSync3, writeFileSync as writeFileSync14 } from "fs";
 import { tmpdir as tmpdir5 } from "os";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 function getOrCreateLocalMachineName() {
   return process.env["TODOS_MACHINE_NAME"] || __require("os").hostname() || "unknown";
 }
@@ -71507,7 +71795,7 @@ function remoteTempPath(sshAddress) {
 }
 function readRemoteBridgeBundle(sshAddress) {
   const remotePath = remoteTempPath(sshAddress);
-  const localPath = join26(tmpdir5(), `todos-bridge-pull-${uuid()}.json`);
+  const localPath = join27(tmpdir5(), `todos-bridge-pull-${uuid()}.json`);
   try {
     runSsh(sshAddress, `todos export --format bridge --allow-plaintext-sensitive --output ${shellQuote(remotePath)}`, 120000);
     scpFromRemote(sshAddress, remotePath, localPath);
@@ -71522,7 +71810,7 @@ function readRemoteBridgeBundle(sshAddress) {
   }
 }
 function writeLocalBridgeBundle() {
-  const localPath = join26(tmpdir5(), `todos-bridge-push-${uuid()}.json`);
+  const localPath = join27(tmpdir5(), `todos-bridge-push-${uuid()}.json`);
   writeFileSync14(localPath, JSON.stringify(createLocalBridgeBundle(), null, 2));
   return localPath;
 }
@@ -76097,7 +76385,7 @@ __export(exports_sdk_integration_fixtures, {
   TODOS_SDK_INTEGRATION_FIXTURE_GENERATED_AT: () => TODOS_SDK_INTEGRATION_FIXTURE_GENERATED_AT
 });
 import { mkdirSync as mkdirSync15, writeFileSync as writeFileSync15 } from "fs";
-import { join as join27 } from "path";
+import { join as join28 } from "path";
 function source5(version) {
   return {
     packageName: "@hasna/todos",
@@ -76204,7 +76492,7 @@ function writeSdkIntegrationFixtures(directory, options = {}) {
   ];
   const written = [];
   for (const [name, payload] of files) {
-    const file = join27(directory, name);
+    const file = join28(directory, name);
     writeFileSync15(file, `${JSON.stringify(payload, null, 2)}
 `, "utf-8");
     written.push(file);