@hasna/todos 0.15.35 → 0.15.41

package/dist/storage.js

@@ -42,20 +42,16 @@ var __require = import.meta.require;
 // src/storage/config.ts
 var exports_config = {};
 __export(exports_config, {
-  parseStorageMode: () => parseStorageMode,
   parseStorageBackend: () => parseStorageBackend,
   loadTodosStorageConfig: () => loadTodosStorageConfig,
   loadStorageConfig: () => loadStorageConfig,
   isTodosShadowEnabled: () => isTodosShadowEnabled,
-  isTodosRemoteStorageEnabled: () => isTodosRemoteStorageEnabled,
   isTodosPostgresBackend: () => isTodosPostgresBackend,
   getTodosStorageShadowEnvName: () => getTodosStorageShadowEnvName,
-  getTodosStorageMode: () => getTodosStorageMode,
   getTodosStorageEnvName: () => getTodosStorageEnvName,
   getTodosStorageDatabaseUrl: () => getTodosStorageDatabaseUrl,
   getTodosStorageDatabaseEnv: () => getTodosStorageDatabaseEnv,
   getTodosStorageBackend: () => getTodosStorageBackend,
-  getStorageMode: () => getStorageMode,
   getStorageDatabaseUrl: () => getStorageDatabaseUrl,
   getStorageDatabaseEnv: () => getStorageDatabaseEnv,
   getCanonicalTodosRdsConfig: () => getCanonicalTodosRdsConfig,
@@ -65,7 +61,6 @@ __export(exports_config, {
   TODOS_STORAGE_FALLBACK_ENV: () => TODOS_STORAGE_FALLBACK_ENV,
   TODOS_STORAGE_ENV: () => TODOS_STORAGE_ENV,
   STORAGE_TABLES: () => STORAGE_TABLES,
-  REMOVED_STORAGE_MODE_ENV_KEYS: () => REMOVED_STORAGE_MODE_ENV_KEYS,
   CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV: () => CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV,
   CANONICAL_TODOS_RDS_DATABASE: () => CANONICAL_TODOS_RDS_DATABASE,
   CANONICAL_TODOS_RDS_CLUSTER_ENV: () => CANONICAL_TODOS_RDS_CLUSTER_ENV
@@ -120,9 +115,6 @@ function loadStorageConfig(env = process.env) {
 function isTodosPostgresBackend(config) {
   return config.mode === "postgres";
 }
-function isTodosRemoteStorageEnabled(config) {
-  return isTodosPostgresBackend(config);
-}
 function assertTodosRemoteStorageConfig(config) {
   if (!isTodosPostgresBackend(config))
     return;
@@ -138,32 +130,15 @@ function parseStorageBackend(value) {
     return "sqlite";
   if (normalized === "postgres" || normalized === "postgresql")
     return "postgres";
-  if (["local", "remote", "cloud", "hybrid", "self_hosted"].includes(normalized)) {
-    throw new Error(`${TODOS_STORAGE_ENV.databaseUrl} selects the backend. Deployment modes no longer exist: ` + `delete the storage-mode variable and set ${TODOS_STORAGE_ENV.databaseUrl} to select the ` + `postgresql backend, or leave it unset for sqlite.`);
-  }
   throw new Error(`Storage backend must be sqlite or postgres`);
 }
-function parseStorageMode(value) {
-  return parseStorageBackend(value);
-}
 function getTodosStorageBackend(env = process.env) {
-  for (const key of REMOVED_STORAGE_MODE_ENV_KEYS) {
-    if (Object.hasOwn(env, key) && env[key] !== undefined) {
-      throw new Error(`${key} was removed. Deployment modes no longer exist: delete the storage-mode variable. ` + `Set ${TODOS_STORAGE_ENV.databaseUrl} to select the postgresql backend, ` + `or leave it unset for sqlite.`);
-    }
-  }
   if (!getTodosStorageDatabaseUrl(env))
     return "sqlite";
   if (isTodosShadowEnabled(env))
     return "sqlite";
   return "postgres";
 }
-function getTodosStorageMode(env = process.env) {
-  return getTodosStorageBackend(env);
-}
-function getStorageMode(env = process.env) {
-  return getTodosStorageBackend(env);
-}
 function isTodosShadowEnabled(env = process.env) {
   return parseBoolean(readStorageEnv(env, "shadow").value, false);
 }
@@ -230,7 +205,7 @@ function parsePositiveInteger(value, fallback) {
   }
   return parsed;
 }
-var TODOS_STORAGE_TABLES, STORAGE_TABLES, TODOS_STORAGE_ENV, TODOS_STORAGE_FALLBACK_ENV, REMOVED_STORAGE_MODE_ENV_KEYS, CANONICAL_TODOS_RDS_CLUSTER_ENV = "HASNA_TODOS_RDS_CLUSTER", CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV = "HASNA_TODOS_RDS_RUNTIME_PATH", CANONICAL_TODOS_RDS_DATABASE = "todos";
+var TODOS_STORAGE_TABLES, STORAGE_TABLES, TODOS_STORAGE_ENV, TODOS_STORAGE_FALLBACK_ENV, CANONICAL_TODOS_RDS_CLUSTER_ENV = "HASNA_TODOS_RDS_CLUSTER", CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV = "HASNA_TODOS_RDS_RUNTIME_PATH", CANONICAL_TODOS_RDS_DATABASE = "todos";
 var init_config = __esm(() => {
   TODOS_STORAGE_TABLES = [
     "todos_sync_records",
@@ -269,12 +244,6 @@ var init_config = __esm(() => {
     syncBatchSize: "TODOS_SYNC_BATCH_SIZE",
     syncDryRun: "TODOS_SYNC_DRY_RUN"
   };
-  REMOVED_STORAGE_MODE_ENV_KEYS = [
-    "HASNA_TODOS_STORAGE_MODE",
-    "HASNA_TODOS_MODE",
-    "TODOS_STORAGE_MODE",
-    "TODOS_MODE"
-  ];
 });
 
 // src/types/index.ts
@@ -3127,6 +3096,20 @@ function ensureSchema(db) {
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_webhook_deliveries_event ON webhook_deliveries(event)");
   ensureColumn("task_comments", "type", "TEXT DEFAULT 'comment'");
   ensureColumn("task_comments", "progress_pct", "INTEGER");
+  ensureTable("plan_comments", `
+    CREATE TABLE plan_comments (
+      id TEXT PRIMARY KEY,
+      plan_id TEXT NOT NULL REFERENCES plans(id) ON DELETE CASCADE,
+      agent_id TEXT,
+      session_id TEXT,
+      content TEXT NOT NULL,
+      type TEXT DEFAULT 'comment' CHECK(type IN ('comment', 'progress', 'note')),
+      progress_pct INTEGER CHECK(progress_pct IS NULL OR (progress_pct >= 0 AND progress_pct <= 100)),
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      machine_id TEXT,
+      synced_at TEXT
+    )`);
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_plan_comments_plan ON plan_comments(plan_id)");
   ensureColumn("projects", "machine_id", "TEXT");
   ensureColumn("projects", "synced_at", "TEXT");
   ensureColumn("tasks", "machine_id", "TEXT");
@@ -4108,6 +4091,7 @@ var init_machines = __esm(() => {
     "task_lists",
     "plans",
     "task_comments",
+    "plan_comments",
     "sessions",
     "task_history",
     "webhooks",
@@ -6857,22 +6841,31 @@ function updateTaskList(id, input, db) {
       throw new TaskListNotFoundError(id);
     const sets = ["updated_at = ?"];
     const params = [now()];
-    if (input.slug !== undefined) {
-      const slug = slugify(input.slug);
-      if (!slug)
-        throw new Error("Invalid task-list slug \u2014 must be non-empty kebab-case");
-      const duplicate = existing.project_id ? d.query("SELECT id FROM task_lists WHERE project_id = ? AND slug = ? AND id != ?").get(existing.project_id, slug, id) : d.query("SELECT id FROM task_lists WHERE project_id IS NULL AND slug = ? AND id != ?").get(slug, id);
+    const projectId = input.project_id === "" || input.project_id === null ? null : input.project_id === undefined ? existing.project_id : input.project_id;
+    const scopeChanged = projectId !== existing.project_id;
+    const effectiveSlug = input.slug !== undefined ? slugify(input.slug) : existing.slug;
+    if (input.slug !== undefined && !effectiveSlug) {
+      throw new Error("Invalid task-list slug \u2014 must be non-empty kebab-case");
+    }
+    if (scopeChanged || input.slug !== undefined && effectiveSlug !== existing.slug) {
+      const duplicate = projectId ? d.query("SELECT id FROM task_lists WHERE project_id = ? AND slug = ? AND id != ?").get(projectId, effectiveSlug, id) : d.query("SELECT id FROM task_lists WHERE project_id IS NULL AND slug = ? AND id != ?").get(effectiveSlug, id);
       if (duplicate) {
-        throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${slug}" already exists in this scope`);
+        throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${effectiveSlug}" already exists in this scope`);
       }
-      if (slug !== existing.slug) {
+      if (scopeChanged || effectiveSlug !== existing.slug) {
         releaseCanonicalSlugClaims("task_list", id, d);
-        if (!claimCanonicalSlug("task_list", taskListSlugScopeKey(existing.project_id), slug, id, d)) {
-          throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${slug}" already exists in this scope`);
+        if (!claimCanonicalSlug("task_list", taskListSlugScopeKey(projectId), effectiveSlug, id, d)) {
+          throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${effectiveSlug}" already exists in this scope`);
         }
       }
+    }
+    if (input.slug !== undefined) {
       sets.push("slug = ?");
-      params.push(slug);
+      params.push(effectiveSlug);
+    }
+    if (projectId !== existing.project_id) {
+      sets.push("project_id = ?");
+      params.push(projectId);
     }
     if (input.name !== undefined) {
       sets.push("name = ?");
@@ -9321,8 +9314,8 @@ function failTask(id, agentId, reason, options, db) {
   const safeMeta = sanitizePreWriteValue(meta, "task.failure.metadata");
   const timestamp2 = now();
   const failTx = d.transaction(() => {
-    const res = d.run(`UPDATE tasks SET status = 'failed', reason = ?, locked_by = NULL, locked_at = NULL, metadata = ?, version = version + 1, updated_at = ?
-       WHERE id = ? AND version = ?`, [safeReason, JSON.stringify(safeMeta), timestamp2, id, task.version]);
+    const res = d.run(`UPDATE tasks SET status = 'failed', reason = ?, locked_by = NULL, locked_at = NULL, completed_at = COALESCE(completed_at, ?), metadata = ?, version = version + 1, updated_at = ?
+       WHERE id = ? AND version = ?`, [safeReason, timestamp2, JSON.stringify(safeMeta), timestamp2, id, task.version]);
     if (res.changes === 0) {
       const current = getTask(id, d);
       throw new VersionConflictError(id, task.version, current?.version ?? -1);
@@ -9334,6 +9327,7 @@ function failTask(id, agentId, reason, options, db) {
     status: "failed",
     locked_by: null,
     locked_at: null,
+    completed_at: task.completed_at ?? timestamp2,
     reason: safeReason,
     metadata: safeMeta,
     version: task.version + 1,
@@ -9982,13 +9976,20 @@ function updateTaskStored(id, input, db) {
     if (isTerminalStatus(input.status)) {
       sets.push("locked_by = NULL");
       sets.push("locked_at = NULL");
-    }
-    if (input.status === "completed") {
-      sets.push("completed_at = ?");
-      params.push(completionTimestamp);
+      if (input.status === "completed") {
+        sets.push("completed_at = ?");
+        params.push(completionTimestamp);
+      } else {
+        sets.push("completed_at = COALESCE(completed_at, ?)");
+        params.push(completionTimestamp);
+      }
     } else if (task.status === "completed" && input.completed_at === undefined) {
       sets.push("completed_at = NULL");
     }
+    if (input.status === "in_progress") {
+      sets.push("started_at = COALESCE(started_at, ?)");
+      params.push(timestamp2);
+    }
   }
   if (input.priority !== undefined) {
     sets.push("priority = ?");
@@ -10126,7 +10127,6 @@ function updateTaskStored(id, input, db) {
   if (input.approved_by !== undefined)
     logTaskChange(id, "approve", "approved_by", null, input.approved_by, agentId, d);
   const reopened = input.status !== undefined && input.status !== "completed" && task.status === "completed" && input.completed_at === undefined;
-  const completedNow = input.status === "completed";
   const terminalNow = input.status !== undefined && isTerminalStatus(input.status);
   const updatedTask = {
     ...task,
@@ -10137,7 +10137,8 @@ function updateTaskStored(id, input, db) {
     updated_at: timestamp2,
     locked_by: terminalNow ? null : task.locked_by,
     locked_at: terminalNow ? null : task.locked_at,
-    completed_at: completedNow ? completionTimestamp : reopened ? null : input.completed_at !== undefined ? input.completed_at : task.completed_at,
+    completed_at: input.status === "completed" ? completionTimestamp : input.completed_at !== undefined ? input.completed_at : terminalNow ? task.completed_at ?? completionTimestamp : reopened ? null : task.completed_at,
+    started_at: input.status === "in_progress" ? task.started_at ?? timestamp2 : task.started_at,
     sla_minutes: input.sla_minutes !== undefined ? input.sla_minutes : task.sla_minutes,
     actual_minutes: input.actual_minutes ?? task.actual_minutes,
     confidence: input.confidence !== undefined ? input.confidence : task.confidence,
@@ -10198,6 +10199,9 @@ function deleteTask(id, db) {
     version: row.version
   }, d);
   const result = d.run("DELETE FROM tasks WHERE id = ?", [id]);
+  if (result.changes > 0) {
+    d.run("DELETE FROM task_dependencies WHERE task_id = ? OR depends_on = ?", [id, id]);
+  }
   return result.changes > 0;
 }
 var init_task_crud = __esm(() => {
@@ -12967,6 +12971,40 @@ init_tasks();
 init_projects();
 init_plans();
 
+// src/db/plan-comments.ts
+init_types();
+init_database();
+init_plans();
+init_prewrite_secrets();
+function addPlanComment(input, db) {
+  const d = db || getDatabase();
+  if (!getPlan(input.plan_id, d)) {
+    throw new PlanNotFoundError(input.plan_id);
+  }
+  const id = uuid();
+  const timestamp2 = now();
+  d.run(`INSERT INTO plan_comments (id, plan_id, agent_id, session_id, content, type, progress_pct, created_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, [
+    id,
+    input.plan_id,
+    input.agent_id || null,
+    input.session_id || null,
+    sanitizePreWriteText(input.content, "comment.content"),
+    input.type || "comment",
+    input.progress_pct ?? null,
+    timestamp2
+  ]);
+  return getPlanComment(id, d);
+}
+function getPlanComment(id, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM plan_comments WHERE id = ?").get(id);
+}
+function listPlanComments(planId, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM plan_comments WHERE plan_id = ? ORDER BY created_at, rowid").all(planId);
+}
+
 // src/db/agents.ts
 init_types();
 init_database();
@@ -13624,6 +13662,20 @@ init_task_lists();
 init_templates();
 init_audit();
 init_comments();
+
+// src/lib/comment-cursor.ts
+function isStrictlyOlder(comment, before) {
+  return comment.created_at < before.created_at || comment.created_at === before.created_at && comment.id < before.id;
+}
+function compareCommentKeyset(left, right) {
+  if (isStrictlyOlder(left, right))
+    return -1;
+  if (isStrictlyOlder(right, left))
+    return 1;
+  return 0;
+}
+
+// src/storage/local-sqlite.ts
 init_database();
 
 // src/db/integrity.ts
@@ -14720,7 +14772,22 @@ function createLocalSqliteTodosStorageAdapter(options = {}) {
       list: (projectId) => listPlans(projectId, database()),
       update: (id, input) => updatePlan(id, input, database()),
       completeAtRevision: (id, expectedUpdatedAt) => completePlanAtRevision(id, expectedUpdatedAt, database()),
-      delete: (id) => deletePlan(id, database())
+      delete: (id) => deletePlan(id, database()),
+      addComment: (input) => addPlanComment(input, database()),
+      getComments: (planId) => listPlanComments(planId, database()),
+      getCommentsPage: (planId, options2) => {
+        if (options2?.limit !== undefined && (!Number.isSafeInteger(options2.limit) || options2.limit < 1 || options2.limit > 1001)) {
+          throw new Error("Plan comment limit must be an integer between 1 and 1001");
+        }
+        let comments = listPlanComments(planId, database());
+        comments = comments.sort(compareCommentKeyset);
+        if (options2?.before) {
+          const before = options2.before;
+          comments = comments.filter((comment) => isStrictlyOlder(comment, before));
+        }
+        const limit = options2?.limit ?? 100;
+        return comments.slice(-limit);
+      }
     },
     planProjectLinks: {
       apply: (input) => applyPlanProjectLinkSqlite(input, database()),
@@ -14761,10 +14828,10 @@ function createLocalSqliteTodosStorageAdapter(options = {}) {
           throw new Error("Comment limit must be an integer between 1 and 1001");
         }
         let comments = listComments(taskId, database());
-        comments = comments.sort((left, right) => left.created_at.localeCompare(right.created_at) || left.id.localeCompare(right.id));
+        comments = comments.sort(compareCommentKeyset);
         if (options2?.before) {
           const before = options2.before;
-          comments = comments.filter((comment) => comment.created_at < before.created_at || comment.created_at === before.created_at && comment.id < before.id);
+          comments = comments.filter((comment) => isStrictlyOlder(comment, before));
         }
         if (options2?.limit !== undefined)
           comments = comments.slice(-options2.limit);
@@ -15294,7 +15361,26 @@ function createPostgresTodosStorageAdapter(options) {
       list: async (projectId) => (await store.list("plans")).filter((plan) => projectId === undefined || plan.project_id === projectId).sort((a, b) => a.name.localeCompare(b.name)),
       update: (id, input) => updatePlan2(id, input, store),
       completeAtRevision: (id, expectedUpdatedAt, context) => store.completePlanAtRevision(id, expectedUpdatedAt, context),
-      delete: (id, context) => store.deletePlan(id, context)
+      delete: (id, context) => store.deletePlan(id, context),
+      addComment: (input, context) => addPlanComment2(input, store, context),
+      getComments: async (planId) => {
+        const pages = [];
+        let before;
+        while (true) {
+          const page = await store.listPlanComments(planId, { limit: 1000, ...before ? { before } : {} });
+          if (page.length === 0)
+            break;
+          pages.unshift(page);
+          if (page.length < 1000)
+            break;
+          const oldest = page[0];
+          before = { created_at: oldest.created_at, id: oldest.id };
+        }
+        return pages.flat().map(redactPlanComment).sort((a, b) => a.created_at.localeCompare(b.created_at) || a.id.localeCompare(b.id));
+      },
+      getCommentsPage: async (planId, options2) => {
+        return (await store.listPlanComments(planId, options2)).map(redactPlanComment).sort((a, b) => a.created_at.localeCompare(b.created_at) || a.id.localeCompare(b.id));
+      }
     },
     planProjectLinks: {
       apply: (input, context) => store.applyPlanProjectLink(input, context),
@@ -15512,6 +15598,27 @@ class PostgresJsonRecordStore {
        LIMIT $${params.length}`, params);
     return result.rows.map((row) => payloadRecord2(row.payload)).reverse();
   }
+  async listPlanComments(planId, options = {}) {
+    await this.ensureSchema();
+    const limit = options.limit ?? 100;
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 1001) {
+      throw new Error("Postgres plan comment limit must be an integer between 1 and 1001");
+    }
+    const params = [this.service, planId];
+    let cursorPredicate = "";
+    if (options.before) {
+      params.push(options.before.created_at, options.before.id);
+      cursorPredicate = `AND (payload->>'created_at', object_id) < ($3, $4)`;
+    }
+    params.push(limit);
+    const result = await this.options.client.query(`/* todos:list-plan-comments */ SELECT payload FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'plan_comments' AND deleted_at IS NULL
+         AND payload->>'plan_id' = $2
+         ${cursorPredicate}
+       ORDER BY payload->>'created_at' DESC, object_id DESC
+       LIMIT $${params.length}`, params);
+    return result.rows.map((row) => payloadRecord2(row.payload)).reverse();
+  }
   async listRecords(type) {
     await this.ensureSchema();
     const result = await this.options.client.query(`SELECT object_type, object_id, payload, updated_at
@@ -16673,6 +16780,15 @@ class PostgresJsonRecordStore {
         WHERE r.service = $1 AND r.object_type = 'tasks' AND r.deleted_at IS NULL
           AND r.payload->>'plan_id' = $2 AND EXISTS (SELECT 1 FROM target)
         RETURNING 1
+      ), deleted_plan_comments AS (
+        UPDATE ${this.tableName} r SET
+          deleted_at = $3::timestamptz,
+          updated_at = $3::timestamptz,
+          source_machine_id = COALESCE($4, r.source_machine_id),
+          version = COALESCE(r.version, 0) + 1
+        WHERE r.service = $1 AND r.object_type = 'plan_comments' AND r.deleted_at IS NULL
+          AND r.payload->>'plan_id' = $2 AND EXISTS (SELECT 1 FROM target)
+        RETURNING 1
       ), deleted_plan AS (
         UPDATE ${this.tableName} r SET
           deleted_at = $3::timestamptz,
@@ -16848,7 +16964,8 @@ async function updateTask2(id, input, store, context) {
     task_list_id: input.task_list_id !== undefined ? input.task_list_id : existing.task_list_id,
     parent_id: input.parent_id !== undefined ? input.parent_id : existing.parent_id,
     created_by: existing.created_by,
-    completed_at: reopened ? null : input.completed_at !== undefined ? input.completed_at : existing.completed_at
+    completed_at: input.status === "completed" ? input.completed_at ?? new Date().toISOString() : input.completed_at !== undefined ? input.completed_at : input.status !== undefined && isTerminalStatus(input.status) ? existing.completed_at ?? new Date().toISOString() : reopened ? null : existing.completed_at,
+    started_at: input.status === "in_progress" ? existing.started_at ?? new Date().toISOString() : existing.started_at
   };
   const storedTask = await store.upsertTaskWithPlanMembershipGuard(task, [existing.plan_id, effectivePlanId].filter((planId) => Boolean(planId)), input.project_id !== undefined, context, {
     operation: "update",
@@ -16893,7 +17010,8 @@ async function failTask2(id, agentId, reason, options, store) {
     status: "failed",
     assigned_to: task.assigned_to ?? agentId ?? null,
     reason: reason ?? task.reason,
-    retry_after: options?.retry_after ?? task.retry_after
+    retry_after: options?.retry_after ?? task.retry_after,
+    completed_at: task.completed_at ?? new Date().toISOString()
   }, store);
   if (!options?.retry)
     return { task: failed };
@@ -17341,16 +17459,22 @@ async function createTaskList2(input, store, context) {
 async function updateTaskList2(id, input, store) {
   const list = await requireRecord("task_lists", id, store);
   const patch = definedPatch(input);
+  const projectId = input.project_id === "" || input.project_id === null ? null : input.project_id === undefined ? list.project_id : input.project_id;
   if (input.slug !== undefined) {
     const slug = slugifyRaw(input.slug);
     if (!slug)
       throw new Error("Invalid task-list slug \u2014 must be non-empty kebab-case");
-    const duplicate = (await store.list("task_lists")).find((candidate) => candidate.id !== id && candidate.project_id === list.project_id && candidate.slug === slug);
+    patch.slug = slug;
+  }
+  const effectiveSlug = patch.slug ?? list.slug;
+  if (projectId !== list.project_id || effectiveSlug !== list.slug) {
+    const duplicate = (await store.list("task_lists")).find((candidate) => candidate.id !== id && candidate.project_id === projectId && candidate.slug === effectiveSlug);
     if (duplicate) {
-      throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${slug}" already exists in this scope`);
+      throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${effectiveSlug}" already exists in this scope`);
     }
-    patch.slug = slug;
   }
+  if (projectId !== list.project_id)
+    patch.project_id = projectId;
   return store.upsert("task_lists", {
     ...list,
     ...patch,
@@ -17443,6 +17567,22 @@ async function addComment2(input, store, context) {
 function redactComment(comment) {
   return { ...comment, content: redactEvidenceText(comment.content) };
 }
+async function addPlanComment2(input, store, context) {
+  const comment = {
+    id: randomUUID3(),
+    plan_id: input.plan_id,
+    agent_id: input.agent_id ?? context?.agentId ?? null,
+    session_id: input.session_id ?? context?.sessionId ?? null,
+    content: redactEvidenceText(input.content),
+    type: input.type ?? "comment",
+    progress_pct: input.progress_pct ?? null,
+    created_at: new Date().toISOString()
+  };
+  return store.upsert("plan_comments", comment, context);
+}
+function redactPlanComment(comment) {
+  return { ...comment, content: redactEvidenceText(comment.content) };
+}
 async function exportSnapshot(store) {
   return {
     exportedAt: new Date().toISOString(),
@@ -19051,24 +19191,20 @@ export {
   postgresTodosScopedSlugIndexStatusSql,
   postgresTodosCommentCursorIndexSql,
   planRunArtifactsS3Sync,
-  parseStorageMode,
   parseStorageBackend,
   maybeInstallShadowCapture2 as maybeInstallShadowCapture,
   loadTodosStorageConfig,
   loadStorageConfig,
   isTodosShadowEnabled,
-  isTodosRemoteStorageEnabled,
   isTodosPostgresBackend,
   isCommentRedactionBackfillComplete,
   installShadowOutboxSchema,
   importSqliteTodosStorageSnapshot,
   getTodosStorageShadowEnvName,
-  getTodosStorageMode,
   getTodosStorageEnvName,
   getTodosStorageDatabaseUrl,
   getTodosStorageDatabaseEnv,
   getTodosStorageBackend,
-  getStorageMode,
   getStorageDatabaseUrl,
   getStorageDatabaseEnv,
   getRuntimeShadowOutbox,

package/dist/task-subtree-transfer/authority.d.ts

@@ -0,0 +1,27 @@
+import { type PostgresTodosTaskSubtreeTransferAuthorityOptions, type SqliteTodosTaskSubtreeTransferAuthorityOptions, type TodosTaskSubtreeTransferApplyRequest, type TodosTaskSubtreeTransferAuthority, type TodosTaskSubtreeTransferAuthorityOptions, type TodosTaskSubtreeTransferCapability, type TodosTaskSubtreeTransferInspectRequest, type TodosTaskSubtreeTransferRollbackRequest } from "./types.js";
+import type { TodosTaskSubtreeTransferBackend } from "./backend.js";
+export declare function parseTodosTaskSubtreeTransferInspect(input: unknown): TodosTaskSubtreeTransferInspectRequest;
+export declare function parseTodosTaskSubtreeTransferApply(input: unknown): TodosTaskSubtreeTransferApplyRequest;
+export declare function parseTodosTaskSubtreeTransferRollback(input: unknown): TodosTaskSubtreeTransferRollbackRequest;
+export { deriveTodosTaskSubtreeTransferIdempotencyKey, taskSubtreeTransferRequestDigest, taskSubtreeTransferRollbackRequestDigest, } from "./canonical.js";
+export declare function deriveTodosTaskSubtreeTransferApplyPreconditionDigest(input: Pick<TodosTaskSubtreeTransferApplyRequest, "source_project_id" | "destination_project_id" | "destination_task_list_id" | "root_task_id" | "expected_root_parent_id" | "destination_parent_id" | "source_population_digest" | "expected_tasks" | "shared_plan_splits">): string;
+export declare function deriveTodosTaskSubtreeTransferRollbackPreconditionDigest(input: {
+    receipt_id: string;
+    operation_id: string;
+    step_id: string;
+    apply_result_digest: string;
+}): string;
+export declare class PackageOwnedTodosTaskSubtreeTransferAuthority implements TodosTaskSubtreeTransferAuthority {
+    private readonly backend;
+    private readonly tenantId;
+    private readonly backendOptions;
+    constructor(backend: TodosTaskSubtreeTransferBackend, options?: TodosTaskSubtreeTransferAuthorityOptions);
+    capability(): Promise<TodosTaskSubtreeTransferCapability>;
+    inspect(input: unknown): Promise<import("./types.js").TodosTaskSubtreeTransferInspection>;
+    apply(input: unknown): Promise<import("./types.js").TodosTaskSubtreeTransferResult>;
+    readExact(receiptIdValue: string): Promise<import("./types.js").TodosTaskSubtreeTransferResult>;
+    rollback(input: unknown): Promise<import("./types.js").TodosTaskSubtreeTransferResult>;
+}
+export declare function createSqliteTodosTaskSubtreeTransferAuthority(options: SqliteTodosTaskSubtreeTransferAuthorityOptions): TodosTaskSubtreeTransferAuthority;
+export declare function createPostgresTodosTaskSubtreeTransferAuthority(client: import("./types.js").TodosTaskSubtreeTransferPostgresClient, options?: PostgresTodosTaskSubtreeTransferAuthorityOptions): TodosTaskSubtreeTransferAuthority;
+//# sourceMappingURL=authority.d.ts.map

package/dist/task-subtree-transfer/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../src/task-subtree-transfer/authority.ts"],"names":[],"mappings":"AAQA,OAAO,EAIL,KAAK,gDAAgD,EACrD,KAAK,8CAA8C,EACnD,KAAK,oCAAoC,EACzC,KAAK,iCAAiC,EACtC,KAAK,wCAAwC,EAC7C,KAAK,kCAAkC,EACvC,KAAK,sCAAsC,EAC3C,KAAK,uCAAuC,EAC7C,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAsEpE,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,OAAO,GACb,sCAAsC,CAgBxC;AAeD,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,OAAO,GACb,oCAAoC,CAkEtC;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,OAAO,GACb,uCAAuC,CAezC;AAED,OAAO,EACL,4CAA4C,EAC5C,gCAAgC,EAChC,wCAAwC,GACzC,MAAM,gBAAgB,CAAC;AAExB,wBAAgB,qDAAqD,CACnE,KAAK,EAAE,IAAI,CACT,oCAAoC,EACpC,mBAAmB,GACjB,wBAAwB,GACxB,0BAA0B,GAC1B,cAAc,GACd,yBAAyB,GACzB,uBAAuB,GACvB,0BAA0B,GAC1B,gBAAgB,GAChB,oBAAoB,CACvB,GACA,MAAM,CAyBR;AAED,wBAAgB,wDAAwD,CACtE,KAAK,EAAE;IACL,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,GACA,MAAM,CASR;AAaD,qBAAa,6CAA8C,YAAW,iCAAiC;IAInG,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2C;gBAEvD,OAAO,EAAE,+BAA+B,EACzD,OAAO,GAAE,wCAA6C;IAMlD,UAAU,IAAI,OAAO,CAAC,kCAAkC,CAAC;IAoBzD,OAAO,CAAC,KAAK,EAAE,OAAO;IAItB,KAAK,CAAC,KAAK,EAAE,OAAO;IA6BpB,SAAS,CAAC,cAAc,EAAE,MAAM;IAIhC,QAAQ,CAAC,KAAK,EAAE,OAAO;CAoB9B;AAED,wBAAgB,6CAA6C,CAC3D,OAAO,EAAE,8CAA8C,GACtD,iCAAiC,CAKnC;AAED,wBAAgB,+CAA+C,CAC7D,MAAM,EAAE,OAAO,YAAY,EAAE,sCAAsC,EACnE,OAAO,GAAE,gDAAqD,GAC7D,iCAAiC,CAKnC"}

package/dist/task-subtree-transfer/backend.d.ts

@@ -0,0 +1,9 @@
+import type { TodosTaskSubtreeTransferApplyRequest, TodosTaskSubtreeTransferAuthorityOptions, TodosTaskSubtreeTransferInspectRequest, TodosTaskSubtreeTransferInspection, TodosTaskSubtreeTransferResult, TodosTaskSubtreeTransferRollbackRequest } from "./types.js";
+export interface TodosTaskSubtreeTransferBackend {
+    readonly kind: "sqlite" | "postgresql";
+    inspect(input: TodosTaskSubtreeTransferInspectRequest): Promise<TodosTaskSubtreeTransferInspection>;
+    apply(input: TodosTaskSubtreeTransferApplyRequest, options: TodosTaskSubtreeTransferAuthorityOptions): Promise<TodosTaskSubtreeTransferResult>;
+    readExact(receiptId: string): Promise<TodosTaskSubtreeTransferResult>;
+    rollback(input: TodosTaskSubtreeTransferRollbackRequest, options: TodosTaskSubtreeTransferAuthorityOptions): Promise<TodosTaskSubtreeTransferResult>;
+}
+//# sourceMappingURL=backend.d.ts.map

package/dist/task-subtree-transfer/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/task-subtree-transfer/backend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oCAAoC,EACpC,wCAAwC,EACxC,sCAAsC,EACtC,kCAAkC,EAClC,8BAA8B,EAC9B,uCAAuC,EACxC,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY,CAAC;IACvC,OAAO,CAAC,KAAK,EAAE,sCAAsC,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;IACpG,KAAK,CAAC,KAAK,EAAE,oCAAoC,EAAE,OAAO,EAAE,wCAAwC,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC/I,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACtE,QAAQ,CAAC,KAAK,EAAE,uCAAuC,EAAE,OAAO,EAAE,wCAAwC,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;CACtJ"}

package/dist/task-subtree-transfer/canonical.d.ts

@@ -0,0 +1,14 @@
+import { canonicalDigest, canonicalJson, deterministicUuid } from "../task-manifest/canonical.js";
+import { type TodosTaskSubtreeTransferApplyRequest, type TodosTaskSubtreeTransferDirection, type TodosTaskSubtreeTransferRollbackRequest } from "./types.js";
+export { canonicalDigest, canonicalJson, deterministicUuid };
+export declare function taskSubtreeTransferRequestDigest(input: Omit<TodosTaskSubtreeTransferApplyRequest, "idempotency_key">): string;
+export declare function taskSubtreeTransferRollbackRequestDigest(input: Omit<TodosTaskSubtreeTransferRollbackRequest, "idempotency_key">): string;
+export declare function deriveTodosTaskSubtreeTransferIdempotencyKey(input: {
+    operation_id: string;
+    step_id: string;
+    direction: TodosTaskSubtreeTransferDirection;
+    target_selector: string;
+    request_digest: string;
+    precondition_digest: string;
+}): string;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/task-subtree-transfer/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../src/task-subtree-transfer/canonical.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,aAAa,EACb,iBAAiB,EAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,KAAK,oCAAoC,EACzC,KAAK,iCAAiC,EACtC,KAAK,uCAAuC,EAC7C,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC;AAE7D,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,IAAI,CAAC,oCAAoC,EAAE,iBAAiB,CAAC,GACnE,MAAM,CAGR;AAED,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,IAAI,CAAC,uCAAuC,EAAE,iBAAiB,CAAC,GACtE,MAAM,CAGR;AAED,wBAAgB,4CAA4C,CAAC,KAAK,EAAE;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,iCAAiC,CAAC;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,GAAG,MAAM,CAKT"}

package/dist/task-subtree-transfer/http.d.ts

@@ -0,0 +1,16 @@
+import { type TodosTaskSubtreeTransferAuthority, type TodosTaskSubtreeTransferHttpClientOptions } from "./types.js";
+export declare function handleTodosTaskSubtreeTransferHttpRequest(request: Request, url: URL, authority: TodosTaskSubtreeTransferAuthority, basePath?: string): Promise<Response | null>;
+export declare class TodosTaskSubtreeTransferHttpClient implements TodosTaskSubtreeTransferAuthority {
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    private readonly headers;
+    constructor(options: TodosTaskSubtreeTransferHttpClientOptions);
+    private request;
+    capability(): Promise<import("./types.js").TodosTaskSubtreeTransferCapability>;
+    inspect(input: unknown): Promise<import("./types.js").TodosTaskSubtreeTransferInspection>;
+    apply(input: unknown): Promise<import("./types.js").TodosTaskSubtreeTransferResult>;
+    readExact(receiptId: string): Promise<import("./types.js").TodosTaskSubtreeTransferResult>;
+    rollback(input: unknown): Promise<import("./types.js").TodosTaskSubtreeTransferResult>;
+}
+export declare function createTodosTaskSubtreeTransferHttpClient(options: TodosTaskSubtreeTransferHttpClientOptions): TodosTaskSubtreeTransferAuthority;
+//# sourceMappingURL=http.d.ts.map

package/dist/task-subtree-transfer/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/task-subtree-transfer/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iCAAiC,EACtC,KAAK,yCAAyC,EAC/C,MAAM,YAAY,CAAC;AA0EpB,wBAAsB,yCAAyC,CAC7D,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,iCAAiC,EAC5C,QAAQ,SAA8B,GACrC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAiC1B;AAED,qBAAa,kCAAmC,YAAW,iCAAiC;IAC1F,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;gBAErC,OAAO,EAAE,yCAAyC;YAUhD,OAAO;IA+Bf,UAAU;IAIV,OAAO,CAAC,KAAK,EAAE,OAAO;IAOtB,KAAK,CAAC,KAAK,EAAE,OAAO;IAOpB,SAAS,CAAC,SAAS,EAAE,MAAM;IAO3B,QAAQ,CAAC,KAAK,EAAE,OAAO;CAM9B;AAED,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,yCAAyC,GACjD,iCAAiC,CAEnC"}

package/dist/task-subtree-transfer/index.d.ts

@@ -0,0 +1,6 @@
+export { PackageOwnedTodosTaskSubtreeTransferAuthority, createPostgresTodosTaskSubtreeTransferAuthority, createSqliteTodosTaskSubtreeTransferAuthority, deriveTodosTaskSubtreeTransferApplyPreconditionDigest, deriveTodosTaskSubtreeTransferIdempotencyKey, deriveTodosTaskSubtreeTransferRollbackPreconditionDigest, parseTodosTaskSubtreeTransferApply, parseTodosTaskSubtreeTransferInspect, parseTodosTaskSubtreeTransferRollback, taskSubtreeTransferRequestDigest, taskSubtreeTransferRollbackRequestDigest, } from "./authority.js";
+export { TodosTaskSubtreeTransferHttpClient, createTodosTaskSubtreeTransferHttpClient, handleTodosTaskSubtreeTransferHttpRequest, } from "./http.js";
+export { TODOS_TASK_SUBTREE_TRANSFER_ROUTE, TODOS_TASK_SUBTREE_TRANSFER_SCHEMA_VERSION, TodosTaskSubtreeTransferError, } from "./types.js";
+export type * from "./types.js";
+export { postgresTodosTaskSubtreeTransferSchemaSql, sqliteTodosTaskSubtreeTransferSchemaSql, } from "./schema-sql.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/task-subtree-transfer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/task-subtree-transfer/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6CAA6C,EAC7C,+CAA+C,EAC/C,6CAA6C,EAC7C,qDAAqD,EACrD,4CAA4C,EAC5C,wDAAwD,EACxD,kCAAkC,EAClC,oCAAoC,EACpC,qCAAqC,EACrC,gCAAgC,EAChC,wCAAwC,GACzC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kCAAkC,EAClC,wCAAwC,EACxC,yCAAyC,GAC1C,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iCAAiC,EACjC,0CAA0C,EAC1C,6BAA6B,GAC9B,MAAM,YAAY,CAAC;AACpB,mBAAmB,YAAY,CAAC;AAChC,OAAO,EACL,yCAAyC,EACzC,uCAAuC,GACxC,MAAM,iBAAiB,CAAC"}

package/dist/task-subtree-transfer/planner.d.ts

@@ -0,0 +1,24 @@
+import { type TodosTaskSubtreeTransferApplyRequest, type TodosTaskSubtreeTransferInspection, type TodosTaskSubtreeTransferPlanImage, type TodosTaskSubtreeTransferTaskImage } from "./types.js";
+export interface TransferTaskRecord extends TodosTaskSubtreeTransferTaskImage {
+    archived_at?: string | null;
+}
+export interface TransferPlanRecord extends TodosTaskSubtreeTransferPlanImage {
+}
+export interface TransferSnapshot {
+    source_tasks: TransferTaskRecord[];
+    plan_tasks: TransferTaskRecord[];
+    plans: TransferPlanRecord[];
+    destination_project_found: boolean;
+    destination_task_list_found: boolean;
+    destination_parent_found: boolean;
+}
+export interface PreparedTransfer {
+    inspection: TodosTaskSubtreeTransferInspection;
+    prior_tasks: TodosTaskSubtreeTransferTaskImage[];
+    prior_plans: TodosTaskSubtreeTransferPlanImage[];
+    task_plan_targets: Map<string, string | null>;
+}
+export declare function sourcePopulationDigest(tasks: TransferTaskRecord[]): string;
+export declare function prepareTransfer(snapshot: TransferSnapshot, input: TodosTaskSubtreeTransferApplyRequest | (Omit<TodosTaskSubtreeTransferApplyRequest, "version" | "operation_id" | "step_id" | "idempotency_key" | "precondition_digest" | "expected_root_parent_id" | "source_population_digest" | "expected_tasks" | "shared_plan_splits">)): PreparedTransfer;
+export declare function validateApplySnapshot(prepared: PreparedTransfer, request: TodosTaskSubtreeTransferApplyRequest, plans: TransferPlanRecord[]): void;
+//# sourceMappingURL=planner.d.ts.map

package/dist/task-subtree-transfer/planner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.d.ts","sourceRoot":"","sources":["../../src/task-subtree-transfer/planner.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,oCAAoC,EACzC,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACtC,KAAK,iCAAiC,EACvC,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,kBAAmB,SAAQ,iCAAiC;IAC3E,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAmB,SAAQ,iCAAiC;CAAG;AAEhF,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,kBAAkB,EAAE,CAAC;IACnC,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,yBAAyB,EAAE,OAAO,CAAC;IACnC,2BAA2B,EAAE,OAAO,CAAC;IACrC,wBAAwB,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,kCAAkC,CAAC;IAC/C,WAAW,EAAE,iCAAiC,EAAE,CAAC;IACjD,WAAW,EAAE,iCAAiC,EAAE,CAAC;IACjD,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;CAC/C;AAcD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAO1E;AAkDD,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,oCAAoC,GAAG,CAAC,IAAI,CAAC,oCAAoC,EACtF,SAAS,GAAG,cAAc,GAAG,SAAS,GAAG,iBAAiB,GAAG,qBAAqB,GAChF,yBAAyB,GAAG,0BAA0B,GAAG,gBAAgB,GAAG,oBAAoB,CAAC,CAAC,GACrG,gBAAgB,CAuElB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,oCAAoC,EAC7C,KAAK,EAAE,kBAAkB,EAAE,GAC1B,IAAI,CAsEN"}