@hasna/todos 0.15.35 → 0.15.41

package/dist/mcp/index.js

@@ -2888,6 +2888,20 @@ function ensureSchema(db) {
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_webhook_deliveries_event ON webhook_deliveries(event)");
   ensureColumn("task_comments", "type", "TEXT DEFAULT 'comment'");
   ensureColumn("task_comments", "progress_pct", "INTEGER");
+  ensureTable("plan_comments", `
+    CREATE TABLE plan_comments (
+      id TEXT PRIMARY KEY,
+      plan_id TEXT NOT NULL REFERENCES plans(id) ON DELETE CASCADE,
+      agent_id TEXT,
+      session_id TEXT,
+      content TEXT NOT NULL,
+      type TEXT DEFAULT 'comment' CHECK(type IN ('comment', 'progress', 'note')),
+      progress_pct INTEGER CHECK(progress_pct IS NULL OR (progress_pct >= 0 AND progress_pct <= 100)),
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      machine_id TEXT,
+      synced_at TEXT
+    )`);
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_plan_comments_plan ON plan_comments(plan_id)");
   ensureColumn("projects", "machine_id", "TEXT");
   ensureColumn("projects", "synced_at", "TEXT");
   ensureColumn("tasks", "machine_id", "TEXT");
@@ -3884,6 +3898,7 @@ var init_machines = __esm(() => {
     "task_lists",
     "plans",
     "task_comments",
+    "plan_comments",
     "sessions",
     "task_history",
     "webhooks",
@@ -4112,20 +4127,16 @@ var init_sync_utils = __esm(() => {
 // src/storage/config.ts
 var exports_config = {};
 __export(exports_config, {
-  parseStorageMode: () => parseStorageMode,
   parseStorageBackend: () => parseStorageBackend,
   loadTodosStorageConfig: () => loadTodosStorageConfig,
   loadStorageConfig: () => loadStorageConfig,
   isTodosShadowEnabled: () => isTodosShadowEnabled,
-  isTodosRemoteStorageEnabled: () => isTodosRemoteStorageEnabled,
   isTodosPostgresBackend: () => isTodosPostgresBackend,
   getTodosStorageShadowEnvName: () => getTodosStorageShadowEnvName,
-  getTodosStorageMode: () => getTodosStorageMode,
   getTodosStorageEnvName: () => getTodosStorageEnvName,
   getTodosStorageDatabaseUrl: () => getTodosStorageDatabaseUrl,
   getTodosStorageDatabaseEnv: () => getTodosStorageDatabaseEnv,
   getTodosStorageBackend: () => getTodosStorageBackend,
-  getStorageMode: () => getStorageMode,
   getStorageDatabaseUrl: () => getStorageDatabaseUrl,
   getStorageDatabaseEnv: () => getStorageDatabaseEnv,
   getCanonicalTodosRdsConfig: () => getCanonicalTodosRdsConfig,
@@ -4135,7 +4146,6 @@ __export(exports_config, {
   TODOS_STORAGE_FALLBACK_ENV: () => TODOS_STORAGE_FALLBACK_ENV,
   TODOS_STORAGE_ENV: () => TODOS_STORAGE_ENV,
   STORAGE_TABLES: () => STORAGE_TABLES,
-  REMOVED_STORAGE_MODE_ENV_KEYS: () => REMOVED_STORAGE_MODE_ENV_KEYS,
   CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV: () => CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV,
   CANONICAL_TODOS_RDS_DATABASE: () => CANONICAL_TODOS_RDS_DATABASE,
   CANONICAL_TODOS_RDS_CLUSTER_ENV: () => CANONICAL_TODOS_RDS_CLUSTER_ENV
@@ -4190,9 +4200,6 @@ function loadStorageConfig(env = process.env) {
 function isTodosPostgresBackend(config) {
   return config.mode === "postgres";
 }
-function isTodosRemoteStorageEnabled(config) {
-  return isTodosPostgresBackend(config);
-}
 function assertTodosRemoteStorageConfig(config) {
   if (!isTodosPostgresBackend(config))
     return;
@@ -4208,32 +4215,15 @@ function parseStorageBackend(value) {
     return "sqlite";
   if (normalized === "postgres" || normalized === "postgresql")
     return "postgres";
-  if (["local", "remote", "cloud", "hybrid", "self_hosted"].includes(normalized)) {
-    throw new Error(`${TODOS_STORAGE_ENV.databaseUrl} selects the backend. Deployment modes no longer exist: ` + `delete the storage-mode variable and set ${TODOS_STORAGE_ENV.databaseUrl} to select the ` + `postgresql backend, or leave it unset for sqlite.`);
-  }
   throw new Error(`Storage backend must be sqlite or postgres`);
 }
-function parseStorageMode(value) {
-  return parseStorageBackend(value);
-}
 function getTodosStorageBackend(env = process.env) {
-  for (const key of REMOVED_STORAGE_MODE_ENV_KEYS) {
-    if (Object.hasOwn(env, key) && env[key] !== undefined) {
-      throw new Error(`${key} was removed. Deployment modes no longer exist: delete the storage-mode variable. ` + `Set ${TODOS_STORAGE_ENV.databaseUrl} to select the postgresql backend, ` + `or leave it unset for sqlite.`);
-    }
-  }
   if (!getTodosStorageDatabaseUrl(env))
     return "sqlite";
   if (isTodosShadowEnabled(env))
     return "sqlite";
   return "postgres";
 }
-function getTodosStorageMode(env = process.env) {
-  return getTodosStorageBackend(env);
-}
-function getStorageMode(env = process.env) {
-  return getTodosStorageBackend(env);
-}
 function isTodosShadowEnabled(env = process.env) {
   return parseBoolean(readStorageEnv(env, "shadow").value, false);
 }
@@ -4300,7 +4290,7 @@ function parsePositiveInteger(value, fallback) {
   }
   return parsed;
 }
-var TODOS_STORAGE_TABLES, STORAGE_TABLES, TODOS_STORAGE_ENV, TODOS_STORAGE_FALLBACK_ENV, REMOVED_STORAGE_MODE_ENV_KEYS, CANONICAL_TODOS_RDS_CLUSTER_ENV = "HASNA_TODOS_RDS_CLUSTER", CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV = "HASNA_TODOS_RDS_RUNTIME_PATH", CANONICAL_TODOS_RDS_DATABASE = "todos";
+var TODOS_STORAGE_TABLES, STORAGE_TABLES, TODOS_STORAGE_ENV, TODOS_STORAGE_FALLBACK_ENV, CANONICAL_TODOS_RDS_CLUSTER_ENV = "HASNA_TODOS_RDS_CLUSTER", CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV = "HASNA_TODOS_RDS_RUNTIME_PATH", CANONICAL_TODOS_RDS_DATABASE = "todos";
 var init_config = __esm(() => {
   TODOS_STORAGE_TABLES = [
     "todos_sync_records",
@@ -4339,12 +4329,6 @@ var init_config = __esm(() => {
     syncBatchSize: "TODOS_SYNC_BATCH_SIZE",
     syncDryRun: "TODOS_SYNC_DRY_RUN"
   };
-  REMOVED_STORAGE_MODE_ENV_KEYS = [
-    "HASNA_TODOS_STORAGE_MODE",
-    "HASNA_TODOS_MODE",
-    "TODOS_STORAGE_MODE",
-    "TODOS_MODE"
-  ];
 });
 
 // src/storage/shadow-outbox-schema.ts
@@ -11747,22 +11731,31 @@ function updateTaskList(id, input, db) {
       throw new TaskListNotFoundError(id);
     const sets = ["updated_at = ?"];
     const params = [now()];
-    if (input.slug !== undefined) {
-      const slug = slugify(input.slug);
-      if (!slug)
-        throw new Error("Invalid task-list slug \u2014 must be non-empty kebab-case");
-      const duplicate = existing.project_id ? d.query("SELECT id FROM task_lists WHERE project_id = ? AND slug = ? AND id != ?").get(existing.project_id, slug, id) : d.query("SELECT id FROM task_lists WHERE project_id IS NULL AND slug = ? AND id != ?").get(slug, id);
+    const projectId = input.project_id === "" || input.project_id === null ? null : input.project_id === undefined ? existing.project_id : input.project_id;
+    const scopeChanged = projectId !== existing.project_id;
+    const effectiveSlug = input.slug !== undefined ? slugify(input.slug) : existing.slug;
+    if (input.slug !== undefined && !effectiveSlug) {
+      throw new Error("Invalid task-list slug \u2014 must be non-empty kebab-case");
+    }
+    if (scopeChanged || input.slug !== undefined && effectiveSlug !== existing.slug) {
+      const duplicate = projectId ? d.query("SELECT id FROM task_lists WHERE project_id = ? AND slug = ? AND id != ?").get(projectId, effectiveSlug, id) : d.query("SELECT id FROM task_lists WHERE project_id IS NULL AND slug = ? AND id != ?").get(effectiveSlug, id);
       if (duplicate) {
-        throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${slug}" already exists in this scope`);
+        throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${effectiveSlug}" already exists in this scope`);
       }
-      if (slug !== existing.slug) {
+      if (scopeChanged || effectiveSlug !== existing.slug) {
         releaseCanonicalSlugClaims("task_list", id, d);
-        if (!claimCanonicalSlug("task_list", taskListSlugScopeKey(existing.project_id), slug, id, d)) {
-          throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${slug}" already exists in this scope`);
+        if (!claimCanonicalSlug("task_list", taskListSlugScopeKey(projectId), effectiveSlug, id, d)) {
+          throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${effectiveSlug}" already exists in this scope`);
         }
       }
+    }
+    if (input.slug !== undefined) {
       sets.push("slug = ?");
-      params.push(slug);
+      params.push(effectiveSlug);
+    }
+    if (projectId !== existing.project_id) {
+      sets.push("project_id = ?");
+      params.push(projectId);
     }
     if (input.name !== undefined) {
       sets.push("name = ?");
@@ -13959,8 +13952,8 @@ function failTask(id, agentId, reason, options, db) {
   const safeMeta = sanitizePreWriteValue(meta, "task.failure.metadata");
   const timestamp2 = now();
   const failTx = d.transaction(() => {
-    const res = d.run(`UPDATE tasks SET status = 'failed', reason = ?, locked_by = NULL, locked_at = NULL, metadata = ?, version = version + 1, updated_at = ?
-       WHERE id = ? AND version = ?`, [safeReason, JSON.stringify(safeMeta), timestamp2, id, task.version]);
+    const res = d.run(`UPDATE tasks SET status = 'failed', reason = ?, locked_by = NULL, locked_at = NULL, completed_at = COALESCE(completed_at, ?), metadata = ?, version = version + 1, updated_at = ?
+       WHERE id = ? AND version = ?`, [safeReason, timestamp2, JSON.stringify(safeMeta), timestamp2, id, task.version]);
     if (res.changes === 0) {
       const current = getTask(id, d);
       throw new VersionConflictError(id, task.version, current?.version ?? -1);
@@ -13972,6 +13965,7 @@ function failTask(id, agentId, reason, options, db) {
     status: "failed",
     locked_by: null,
     locked_at: null,
+    completed_at: task.completed_at ?? timestamp2,
     reason: safeReason,
     metadata: safeMeta,
     version: task.version + 1,
@@ -14620,13 +14614,20 @@ function updateTaskStored(id, input, db) {
     if (isTerminalStatus(input.status)) {
       sets.push("locked_by = NULL");
       sets.push("locked_at = NULL");
-    }
-    if (input.status === "completed") {
-      sets.push("completed_at = ?");
-      params.push(completionTimestamp);
+      if (input.status === "completed") {
+        sets.push("completed_at = ?");
+        params.push(completionTimestamp);
+      } else {
+        sets.push("completed_at = COALESCE(completed_at, ?)");
+        params.push(completionTimestamp);
+      }
     } else if (task.status === "completed" && input.completed_at === undefined) {
       sets.push("completed_at = NULL");
     }
+    if (input.status === "in_progress") {
+      sets.push("started_at = COALESCE(started_at, ?)");
+      params.push(timestamp2);
+    }
   }
   if (input.priority !== undefined) {
     sets.push("priority = ?");
@@ -14764,7 +14765,6 @@ function updateTaskStored(id, input, db) {
   if (input.approved_by !== undefined)
     logTaskChange(id, "approve", "approved_by", null, input.approved_by, agentId, d);
   const reopened = input.status !== undefined && input.status !== "completed" && task.status === "completed" && input.completed_at === undefined;
-  const completedNow = input.status === "completed";
   const terminalNow = input.status !== undefined && isTerminalStatus(input.status);
   const updatedTask = {
     ...task,
@@ -14775,7 +14775,8 @@ function updateTaskStored(id, input, db) {
     updated_at: timestamp2,
     locked_by: terminalNow ? null : task.locked_by,
     locked_at: terminalNow ? null : task.locked_at,
-    completed_at: completedNow ? completionTimestamp : reopened ? null : input.completed_at !== undefined ? input.completed_at : task.completed_at,
+    completed_at: input.status === "completed" ? completionTimestamp : input.completed_at !== undefined ? input.completed_at : terminalNow ? task.completed_at ?? completionTimestamp : reopened ? null : task.completed_at,
+    started_at: input.status === "in_progress" ? task.started_at ?? timestamp2 : task.started_at,
     sla_minutes: input.sla_minutes !== undefined ? input.sla_minutes : task.sla_minutes,
     actual_minutes: input.actual_minutes ?? task.actual_minutes,
     confidence: input.confidence !== undefined ? input.confidence : task.confidence,
@@ -14836,6 +14837,9 @@ function deleteTask(id, db) {
     version: row.version
   }, d);
   const result = d.run("DELETE FROM tasks WHERE id = ?", [id]);
+  if (result.changes > 0) {
+    d.run("DELETE FROM task_dependencies WHERE task_id = ? OR depends_on = ?", [id, id]);
+  }
   return result.changes > 0;
 }
 var init_task_crud = __esm(() => {
@@ -15100,8 +15104,10 @@ function bulkDeleteTasks(taskIds, force = false, db) {
           continue;
         }
         const result = d.run("DELETE FROM tasks WHERE id = ?", [id]);
-        if (result.changes > 0)
+        if (result.changes > 0) {
+          d.run("DELETE FROM task_dependencies WHERE task_id = ? OR depends_on = ?", [id, id]);
           deleted++;
+        }
       } catch (e) {
         failed.push({ id, error: e instanceof Error ? e.message : String(e) });
       }
@@ -21187,20 +21193,25 @@ var init_page_validation = __esm(() => {
 import { resolveStorageClient } from "@hasna/contracts/client/storage";
 import { randomUUID as randomUUID3 } from "crypto";
 import { resolve as resolvePath } from "path";
-function assertNoLegacyStorageMode(env = process.env) {
-  for (const key of LEGACY_STORAGE_MODE_KEYS) {
-    if (Object.hasOwn(env, key) && env[key] !== undefined) {
-      throw new Error(`REMOTE_STORAGE_MODE_REMOVED: ${key} was removed. Deployment modes no longer exist: delete the storage-mode variable. ` + `The client uses the on-box SQLite store, or the HTTP API selected by ` + `HASNA_TODOS_API_URL + HASNA_TODOS_API_KEY. ` + `On the server, set HASNA_TODOS_DATABASE_URL to select the postgresql backend, ` + `or leave it unset for sqlite.`);
-    }
-  }
+function emitTodosLocalFallbackNotice(env) {
+  if (todosLocalFallbackNoticeEmitted)
+    return;
+  todosLocalFallbackNoticeEmitted = true;
+  const notice = {
+    event: "todos-local-fallback",
+    transport: "sqlite",
+    source: "default",
+    apiUrlPresent: Boolean(env.HASNA_TODOS_API_URL?.trim()),
+    apiKeyPresent: Boolean(env.HASNA_TODOS_API_KEY?.trim()),
+    notice: "No hosted API config (HASNA_TODOS_API_URL + HASNA_TODOS_API_KEY) is present; " + "using local SQLite. Hosted todos are NOT visible in this output."
+  };
+  console.error(JSON.stringify(notice));
 }
-function resolveTodosCliStorageMode(env = process.env) {
-  assertNoLegacyStorageMode(env);
+function resolveTodosCliTransport(env = process.env) {
   const urlValue = env.HASNA_TODOS_API_URL?.trim();
   const keyValue = env.HASNA_TODOS_API_KEY?.trim();
   if (urlValue && keyValue) {
     return {
-      mode: "http",
       transport: "http",
       selected: true,
       source: "HASNA_TODOS_API_URL+HASNA_TODOS_API_KEY"
@@ -21212,15 +21223,15 @@ function resolveTodosCliStorageMode(env = process.env) {
   if (keyValue) {
     throw new Error("REMOTE_API_URL_MISSING: remote Todos storage requires HASNA_TODOS_API_URL; local SQLite fallback is disabled");
   }
+  emitTodosLocalFallbackNotice(env);
   return {
-    mode: "sqlite",
     transport: "sqlite",
     selected: false,
     source: "default"
   };
 }
 function requestedTransport(env) {
-  return resolveTodosCliStorageMode(env).transport;
+  return resolveTodosCliTransport(env).transport;
 }
 function normalizeRemoteAuthorityUrl(value) {
   const trimmed = value?.trim();
@@ -21254,13 +21265,13 @@ function normalizeRemoteAuthorityUrl(value) {
 function getTodosRemoteAuthorityConfigStatus(env = process.env) {
   let resolution;
   try {
-    resolution = resolveTodosCliStorageMode(env);
+    resolution = resolveTodosCliTransport(env);
   } catch (error) {
     const issue = error instanceof Error ? error.message : String(error);
     return {
       selected: true,
       ok: false,
-      mode: "invalid",
+      transport: "invalid",
       api_url_configured: Boolean(env.HASNA_TODOS_API_URL?.trim()),
       api_key_configured: Boolean(env.HASNA_TODOS_API_KEY?.trim()),
       v1_base_url: null,
@@ -21268,12 +21279,12 @@ function getTodosRemoteAuthorityConfigStatus(env = process.env) {
       local_fallback: false
     };
   }
-  const { mode, selected } = resolution;
+  const { transport, selected } = resolution;
   if (!selected) {
     return {
       selected: false,
       ok: true,
-      mode,
+      transport,
       api_url_configured: false,
       api_key_configured: false,
       v1_base_url: null,
@@ -21298,7 +21309,7 @@ function getTodosRemoteAuthorityConfigStatus(env = process.env) {
   return {
     selected: true,
     ok: issues.length === 0,
-    mode,
+    transport,
     api_url_configured: apiUrl !== null,
     api_key_configured: apiKeyConfigured,
     v1_base_url: apiUrl ? `${apiUrl}/v1` : null,
@@ -21342,7 +21353,8 @@ function classifyRemoteRequestError(baseUrl, route, error) {
   }
   const message = error instanceof Error ? error.message : String(error);
   if (error instanceof Error && error.name === "AbortError" || /abort|timed?\s*out/i.test(message)) {
-    throw new Error(`REMOTE_API_TIMEOUT: configured Todos authority ${baseUrl} timed out for ${route}; local SQLite fallback is disabled`, { cause: error });
+    const unboundedNote = route === "/tasks" ? "; this is likely an UNBOUNDED task read timing out (bounded task reads from this authority return in ~1 s) \u2014 retry with a bounded/count-specific shape such as todos list --limit; local SQLite fallback is disabled" : "; local SQLite fallback is disabled";
+    throw new Error(`REMOTE_API_TIMEOUT: configured Todos authority ${baseUrl} timed out for ${route}${unboundedNote}`, { cause: error });
   }
   if (status === undefined) {
     throw new Error(`REMOTE_API_UNREACHABLE: configured Todos authority ${baseUrl} could not be reached for ${route}; ` + "local SQLite fallback is disabled", { cause: error });
@@ -21429,11 +21441,10 @@ function getTodosCloudClient(env = process.env, requestTimeoutMs = REMOTE_REQUES
     fetchImpl: (input, init) => globalThis.fetch(input, { ...init, redirect: "manual" }),
     timeoutMs: requestTimeoutMs
   });
-  if (resolved.transport === "cloud-http")
-    return protectRemoteClient(resolved.client, requestTimeoutMs);
   const transportName = resolved.transport;
-  if (transportName === "http")
+  if (transportName === "cloud-http" || transportName === "http") {
     return protectRemoteClient(resolved.client, requestTimeoutMs);
+  }
   return null;
 }
 function unwrapTask(raw) {
@@ -21905,7 +21916,7 @@ async function cloudResolveTaskListRef(client, ref, projectId) {
     return input.toLowerCase();
   return (await cloudResolveTaskList(client, ref, projectId)).id;
 }
-var UUID_RE, completionCapabilityCache, retryCapabilityCache, taskCreatorCapabilityCache, gitRefCapabilityCache, remoteCommandCapabilityCache, LEGACY_STORAGE_MODE_KEYS, REMOTE_REQUEST_TIMEOUT_MS = 1e4, PRIORITY_RANK, listTagsCapabilityCache;
+var UUID_RE, completionCapabilityCache, retryCapabilityCache, taskCreatorCapabilityCache, gitRefCapabilityCache, remoteCommandCapabilityCache, todosLocalFallbackNoticeEmitted = false, REMOTE_REQUEST_TIMEOUT_MS = 1e4, PRIORITY_RANK, listTagsCapabilityCache;
 var init_cloud_router = __esm(() => {
   init_types();
   init_redaction();
@@ -21919,12 +21930,6 @@ var init_cloud_router = __esm(() => {
   taskCreatorCapabilityCache = new Map;
   gitRefCapabilityCache = new Map;
   remoteCommandCapabilityCache = new Map;
-  LEGACY_STORAGE_MODE_KEYS = [
-    "HASNA_TODOS_STORAGE_MODE",
-    "HASNA_TODOS_MODE",
-    "TODOS_STORAGE_MODE",
-    "TODOS_MODE"
-  ];
   PRIORITY_RANK = { critical: 0, high: 1, medium: 2, low: 3 };
   listTagsCapabilityCache = new Map;
 });
@@ -36042,7 +36047,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/todos",
-    version: "0.15.35",
+    version: "0.15.41",
     description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
     type: "module",
     main: "dist/index.js",
@@ -36088,6 +36093,10 @@ var init_package = __esm(() => {
       "./task-manifest": {
         types: "./dist/task-manifest.d.ts",
         import: "./dist/task-manifest.js"
+      },
+      "./task-subtree-transfer": {
+        types: "./dist/task-subtree-transfer.d.ts",
+        import: "./dist/task-subtree-transfer.js"
       }
     },
     workspaces: [
@@ -36101,8 +36110,8 @@ var init_package = __esm(() => {
       "README.md"
     ],
     scripts: {
-      build: "rm -rf dist dashboard/dist && cd dashboard && bun install --frozen-lockfile && bun run build && cd .. && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/server/index.ts --outdir dist/server --target bun && bun build src/sdk/index.ts --outdir dist/sdk --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/index.ts src/mcp.ts src/registry.ts src/contracts.ts src/storage.ts src/testing.ts src/project-registration.ts src/task-manifest.ts --outdir dist --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && tsc --emitDeclarationOnly --outDir dist",
-      "build:server": "rm -rf dist && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/server/index.ts --outdir dist/server --target bun && bun build src/sdk/index.ts --outdir dist/sdk --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/index.ts src/mcp.ts src/registry.ts src/contracts.ts src/storage.ts src/testing.ts src/project-registration.ts src/task-manifest.ts --outdir dist --target bun --external '@hasna/contracts' --external '@hasna/contracts/*'",
+      build: "rm -rf dist dashboard/dist && cd dashboard && bun install --frozen-lockfile && bun run build && cd .. && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/server/index.ts --outdir dist/server --target bun && bun build src/sdk/index.ts --outdir dist/sdk --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/index.ts src/mcp.ts src/registry.ts src/contracts.ts src/storage.ts src/testing.ts src/project-registration.ts src/task-manifest.ts src/task-subtree-transfer.ts --outdir dist --root src --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && tsc --emitDeclarationOnly --outDir dist",
+      "build:server": "rm -rf dist && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/server/index.ts --outdir dist/server --target bun && bun build src/sdk/index.ts --outdir dist/sdk --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/index.ts src/mcp.ts src/registry.ts src/contracts.ts src/storage.ts src/testing.ts src/project-registration.ts src/task-manifest.ts src/task-subtree-transfer.ts --outdir dist --target bun --external '@hasna/contracts' --external '@hasna/contracts/*'",
       migrate: "bun run src/server/index.ts migrate",
       "backfill:comment-redaction": "bun run src/server/index.ts redact-comments",
       "generate:sdk": "bun run scripts/generate-sdk.ts",
@@ -36156,7 +36165,7 @@ var init_package = __esm(() => {
     author: "Andrei Hasna <andrei@hasna.com>",
     license: "Apache-2.0",
     dependencies: {
-      "@hasna/contracts": "0.5.2",
+      "@hasna/contracts": "0.13.3",
       "@hasna/events": "^0.1.11",
       "@modelcontextprotocol/sdk": "^1.12.1",
       chalk: "^5.4.1",
@@ -45433,6 +45442,75 @@ var init_cloud_client = __esm(() => {
   init_config();
 });
 
+// src/db/plan-comments.ts
+function addPlanComment(input, db) {
+  const d = db || getDatabase();
+  if (!getPlan(input.plan_id, d)) {
+    throw new PlanNotFoundError(input.plan_id);
+  }
+  const id = uuid();
+  const timestamp4 = now();
+  d.run(`INSERT INTO plan_comments (id, plan_id, agent_id, session_id, content, type, progress_pct, created_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, [
+    id,
+    input.plan_id,
+    input.agent_id || null,
+    input.session_id || null,
+    sanitizePreWriteText(input.content, "comment.content"),
+    input.type || "comment",
+    input.progress_pct ?? null,
+    timestamp4
+  ]);
+  return getPlanComment(id, d);
+}
+function getPlanComment(id, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM plan_comments WHERE id = ?").get(id);
+}
+function listPlanComments(planId, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM plan_comments WHERE plan_id = ? ORDER BY created_at, rowid").all(planId);
+}
+var init_plan_comments = __esm(() => {
+  init_types();
+  init_database();
+  init_plans();
+  init_prewrite_secrets();
+});
+
+// src/lib/comment-cursor.ts
+function encodeCommentCursor(comment) {
+  return Buffer.from(JSON.stringify({ created_at: comment.created_at, id: comment.id }), "utf8").toString("base64url");
+}
+function decodeCommentCursor(value) {
+  if (value.length > MAX_COMMENT_CURSOR_LENGTH)
+    throw new Error("invalid comment cursor");
+  let parsed;
+  try {
+    parsed = JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
+  } catch {
+    throw new Error("invalid comment cursor");
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+    throw new Error("invalid comment cursor");
+  const cursor = parsed;
+  if (typeof cursor["created_at"] !== "string" || cursor["created_at"].length > 64 || !Number.isFinite(Date.parse(cursor["created_at"])) || typeof cursor["id"] !== "string" || !cursor["id"] || cursor["id"].length > 256) {
+    throw new Error("invalid comment cursor");
+  }
+  return { created_at: cursor["created_at"], id: cursor["id"] };
+}
+function isStrictlyOlder(comment, before) {
+  return comment.created_at < before.created_at || comment.created_at === before.created_at && comment.id < before.id;
+}
+function compareCommentKeyset(left, right) {
+  if (isStrictlyOlder(left, right))
+    return -1;
+  if (isStrictlyOlder(right, left))
+    return 1;
+  return 0;
+}
+var MAX_COMMENT_CURSOR_LENGTH = 1024;
+
 // src/db/plan-project-links.ts
 function getPlanProjectLinkReceipt(receiptId, db) {
   const d = db || getDatabase();
@@ -46239,7 +46317,22 @@ function createLocalSqliteTodosStorageAdapter(options = {}) {
       list: (projectId) => listPlans(projectId, database()),
       update: (id, input) => updatePlan(id, input, database()),
       completeAtRevision: (id, expectedUpdatedAt) => completePlanAtRevision(id, expectedUpdatedAt, database()),
-      delete: (id) => deletePlan(id, database())
+      delete: (id) => deletePlan(id, database()),
+      addComment: (input) => addPlanComment(input, database()),
+      getComments: (planId) => listPlanComments(planId, database()),
+      getCommentsPage: (planId, options2) => {
+        if (options2?.limit !== undefined && (!Number.isSafeInteger(options2.limit) || options2.limit < 1 || options2.limit > 1001)) {
+          throw new Error("Plan comment limit must be an integer between 1 and 1001");
+        }
+        let comments = listPlanComments(planId, database());
+        comments = comments.sort(compareCommentKeyset);
+        if (options2?.before) {
+          const before = options2.before;
+          comments = comments.filter((comment) => isStrictlyOlder(comment, before));
+        }
+        const limit = options2?.limit ?? 100;
+        return comments.slice(-limit);
+      }
     },
     planProjectLinks: {
       apply: (input) => applyPlanProjectLinkSqlite(input, database()),
@@ -46280,10 +46373,10 @@ function createLocalSqliteTodosStorageAdapter(options = {}) {
           throw new Error("Comment limit must be an integer between 1 and 1001");
         }
         let comments = listComments(taskId, database());
-        comments = comments.sort((left, right) => left.created_at.localeCompare(right.created_at) || left.id.localeCompare(right.id));
+        comments = comments.sort(compareCommentKeyset);
         if (options2?.before) {
           const before = options2.before;
-          comments = comments.filter((comment) => comment.created_at < before.created_at || comment.created_at === before.created_at && comment.id < before.id);
+          comments = comments.filter((comment) => isStrictlyOlder(comment, before));
         }
         if (options2?.limit !== undefined)
           comments = comments.slice(-options2.limit);
@@ -46314,6 +46407,7 @@ var init_local_sqlite = __esm(() => {
   init_tasks();
   init_projects();
   init_plans();
+  init_plan_comments();
   init_agents();
   init_task_lists();
   init_templates();
@@ -47226,7 +47320,26 @@ function createPostgresTodosStorageAdapter(options) {
       list: async (projectId) => (await store.list("plans")).filter((plan) => projectId === undefined || plan.project_id === projectId).sort((a, b) => a.name.localeCompare(b.name)),
       update: (id, input) => updatePlan2(id, input, store),
       completeAtRevision: (id, expectedUpdatedAt, context) => store.completePlanAtRevision(id, expectedUpdatedAt, context),
-      delete: (id, context) => store.deletePlan(id, context)
+      delete: (id, context) => store.deletePlan(id, context),
+      addComment: (input, context) => addPlanComment2(input, store, context),
+      getComments: async (planId) => {
+        const pages = [];
+        let before;
+        while (true) {
+          const page = await store.listPlanComments(planId, { limit: 1000, ...before ? { before } : {} });
+          if (page.length === 0)
+            break;
+          pages.unshift(page);
+          if (page.length < 1000)
+            break;
+          const oldest = page[0];
+          before = { created_at: oldest.created_at, id: oldest.id };
+        }
+        return pages.flat().map(redactPlanComment).sort((a, b) => a.created_at.localeCompare(b.created_at) || a.id.localeCompare(b.id));
+      },
+      getCommentsPage: async (planId, options2) => {
+        return (await store.listPlanComments(planId, options2)).map(redactPlanComment).sort((a, b) => a.created_at.localeCompare(b.created_at) || a.id.localeCompare(b.id));
+      }
     },
     planProjectLinks: {
       apply: (input, context) => store.applyPlanProjectLink(input, context),
@@ -47444,6 +47557,27 @@ class PostgresJsonRecordStore {
        LIMIT $${params.length}`, params);
     return result.rows.map((row) => payloadRecord2(row.payload)).reverse();
   }
+  async listPlanComments(planId, options = {}) {
+    await this.ensureSchema();
+    const limit = options.limit ?? 100;
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 1001) {
+      throw new Error("Postgres plan comment limit must be an integer between 1 and 1001");
+    }
+    const params = [this.service, planId];
+    let cursorPredicate = "";
+    if (options.before) {
+      params.push(options.before.created_at, options.before.id);
+      cursorPredicate = `AND (payload->>'created_at', object_id) < ($3, $4)`;
+    }
+    params.push(limit);
+    const result = await this.options.client.query(`/* todos:list-plan-comments */ SELECT payload FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'plan_comments' AND deleted_at IS NULL
+         AND payload->>'plan_id' = $2
+         ${cursorPredicate}
+       ORDER BY payload->>'created_at' DESC, object_id DESC
+       LIMIT $${params.length}`, params);
+    return result.rows.map((row) => payloadRecord2(row.payload)).reverse();
+  }
   async listRecords(type) {
     await this.ensureSchema();
     const result = await this.options.client.query(`SELECT object_type, object_id, payload, updated_at
@@ -48605,6 +48739,15 @@ class PostgresJsonRecordStore {
         WHERE r.service = $1 AND r.object_type = 'tasks' AND r.deleted_at IS NULL
           AND r.payload->>'plan_id' = $2 AND EXISTS (SELECT 1 FROM target)
         RETURNING 1
+      ), deleted_plan_comments AS (
+        UPDATE ${this.tableName} r SET
+          deleted_at = $3::timestamptz,
+          updated_at = $3::timestamptz,
+          source_machine_id = COALESCE($4, r.source_machine_id),
+          version = COALESCE(r.version, 0) + 1
+        WHERE r.service = $1 AND r.object_type = 'plan_comments' AND r.deleted_at IS NULL
+          AND r.payload->>'plan_id' = $2 AND EXISTS (SELECT 1 FROM target)
+        RETURNING 1
       ), deleted_plan AS (
         UPDATE ${this.tableName} r SET
           deleted_at = $3::timestamptz,
@@ -48780,7 +48923,8 @@ async function updateTask2(id, input, store, context) {
     task_list_id: input.task_list_id !== undefined ? input.task_list_id : existing.task_list_id,
     parent_id: input.parent_id !== undefined ? input.parent_id : existing.parent_id,
     created_by: existing.created_by,
-    completed_at: reopened ? null : input.completed_at !== undefined ? input.completed_at : existing.completed_at
+    completed_at: input.status === "completed" ? input.completed_at ?? new Date().toISOString() : input.completed_at !== undefined ? input.completed_at : input.status !== undefined && isTerminalStatus(input.status) ? existing.completed_at ?? new Date().toISOString() : reopened ? null : existing.completed_at,
+    started_at: input.status === "in_progress" ? existing.started_at ?? new Date().toISOString() : existing.started_at
   };
   const storedTask = await store.upsertTaskWithPlanMembershipGuard(task2, [existing.plan_id, effectivePlanId].filter((planId) => Boolean(planId)), input.project_id !== undefined, context, {
     operation: "update",
@@ -48825,7 +48969,8 @@ async function failTask2(id, agentId, reason, options, store) {
     status: "failed",
     assigned_to: task2.assigned_to ?? agentId ?? null,
     reason: reason ?? task2.reason,
-    retry_after: options?.retry_after ?? task2.retry_after
+    retry_after: options?.retry_after ?? task2.retry_after,
+    completed_at: task2.completed_at ?? new Date().toISOString()
   }, store);
   if (!options?.retry)
     return { task: failed };
@@ -49270,16 +49415,22 @@ async function createTaskList2(input, store, context) {
 async function updateTaskList2(id, input, store) {
   const list = await requireRecord("task_lists", id, store);
   const patch = definedPatch(input);
+  const projectId = input.project_id === "" || input.project_id === null ? null : input.project_id === undefined ? list.project_id : input.project_id;
   if (input.slug !== undefined) {
     const slug = slugifyRaw(input.slug);
     if (!slug)
       throw new Error("Invalid task-list slug \u2014 must be non-empty kebab-case");
-    const duplicate = (await store.list("task_lists")).find((candidate) => candidate.id !== id && candidate.project_id === list.project_id && candidate.slug === slug);
+    patch.slug = slug;
+  }
+  const effectiveSlug = patch.slug ?? list.slug;
+  if (projectId !== list.project_id || effectiveSlug !== list.slug) {
+    const duplicate = (await store.list("task_lists")).find((candidate) => candidate.id !== id && candidate.project_id === projectId && candidate.slug === effectiveSlug);
     if (duplicate) {
-      throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${slug}" already exists in this scope`);
+      throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${effectiveSlug}" already exists in this scope`);
     }
-    patch.slug = slug;
   }
+  if (projectId !== list.project_id)
+    patch.project_id = projectId;
   return store.upsert("task_lists", {
     ...list,
     ...patch,
@@ -49372,6 +49523,22 @@ async function addComment2(input, store, context) {
 function redactComment2(comment) {
   return { ...comment, content: redactEvidenceText(comment.content) };
 }
+async function addPlanComment2(input, store, context) {
+  const comment = {
+    id: randomUUID4(),
+    plan_id: input.plan_id,
+    agent_id: input.agent_id ?? context?.agentId ?? null,
+    session_id: input.session_id ?? context?.sessionId ?? null,
+    content: redactEvidenceText(input.content),
+    type: input.type ?? "comment",
+    progress_pct: input.progress_pct ?? null,
+    created_at: new Date().toISOString()
+  };
+  return store.upsert("plan_comments", comment, context);
+}
+function redactPlanComment(comment) {
+  return { ...comment, content: redactEvidenceText(comment.content) };
+}
 async function exportSnapshot(store) {
   return {
     exportedAt: new Date().toISOString(),
@@ -54191,6 +54358,924 @@ var init_task_manifest = __esm(() => {
   init_types5();
 });
 
+// src/task-subtree-transfer/types.ts
+var TODOS_TASK_SUBTREE_TRANSFER_ROUTE = "todos.task-subtree-transfer.v1", TODOS_TASK_SUBTREE_TRANSFER_SCHEMA_VERSION = 1, TodosTaskSubtreeTransferError;
+var init_types6 = __esm(() => {
+  TodosTaskSubtreeTransferError = class TodosTaskSubtreeTransferError extends Error {
+    code;
+    details;
+    constructor(code, message, details = {}) {
+      super(message);
+      this.code = code;
+      this.details = details;
+      this.name = "TodosTaskSubtreeTransferError";
+    }
+  };
+});
+
+// src/task-subtree-transfer/canonical.ts
+function taskSubtreeTransferRequestDigest(input) {
+  const { idempotency_key: _idempotencyKey, ...request } = input;
+  return canonicalDigest(request);
+}
+function taskSubtreeTransferRollbackRequestDigest(input) {
+  const { idempotency_key: _idempotencyKey, ...request } = input;
+  return canonicalDigest(request);
+}
+function deriveTodosTaskSubtreeTransferIdempotencyKey(input) {
+  return `tstk_${canonicalDigest({
+    route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+    ...input
+  }).slice(0, 48)}`;
+}
+var init_canonical2 = __esm(() => {
+  init_canonical();
+  init_types6();
+});
+
+// src/task-subtree-transfer/planner.ts
+function sortedTaskImage(task3) {
+  return {
+    task_id: task3.task_id,
+    project_id: task3.project_id,
+    parent_id: task3.parent_id,
+    plan_id: task3.plan_id,
+    task_list_id: task3.task_list_id,
+    version: task3.version,
+    updated_at: task3.updated_at
+  };
+}
+function sourcePopulationDigest(tasks) {
+  return canonicalDigest(tasks.map((task3) => ({
+    ...sortedTaskImage(task3),
+    archived_at: task3.archived_at ?? null
+  })).sort((left, right) => left.task_id.localeCompare(right.task_id)));
+}
+function closure(tasks, rootTaskId) {
+  const byId = new Map(tasks.map((task3) => [task3.task_id, task3]));
+  if (!byId.has(rootTaskId)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_NOT_FOUND", `Root task not found in the exact source project: ${rootTaskId}`, { root_task_id: rootTaskId });
+  }
+  const children = new Map;
+  for (const task3 of tasks) {
+    if (!task3.parent_id)
+      continue;
+    const siblings = children.get(task3.parent_id) ?? [];
+    siblings.push(task3.task_id);
+    children.set(task3.parent_id, siblings);
+  }
+  for (const ids2 of children.values())
+    ids2.sort();
+  const visiting = new Set;
+  const visited = new Set;
+  const result = [];
+  const visit = (id) => {
+    if (visiting.has(id)) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_HIERARCHY_CYCLE", "Task hierarchy contains a cycle in the requested descendant closure", { task_id: id });
+    }
+    if (visited.has(id))
+      return;
+    const task3 = byId.get(id);
+    if (!task3) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_FOREIGN_REFERENCE", "Task hierarchy references a parent outside the exact source population", { task_id: id });
+    }
+    visiting.add(id);
+    result.push(task3);
+    for (const child of children.get(id) ?? [])
+      visit(child);
+    visiting.delete(id);
+    visited.add(id);
+  };
+  visit(rootTaskId);
+  return result.sort((left, right) => left.task_id.localeCompare(right.task_id));
+}
+function prepareTransfer(snapshot, input) {
+  if (!snapshot.destination_project_found || !snapshot.destination_task_list_found || !snapshot.destination_parent_found) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_FOREIGN_REFERENCE", "Destination project, task list, or parent does not match the exact requested target");
+  }
+  const moved = closure(snapshot.source_tasks, input.root_task_id);
+  const movedIds = new Set(moved.map((task3) => task3.task_id));
+  if (input.destination_parent_id && movedIds.has(input.destination_parent_id)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_HIERARCHY_CYCLE", "Destination parent cannot be inside the transferred subtree", { destination_parent_id: input.destination_parent_id });
+  }
+  const planIds = [...new Set(moved.map((task3) => task3.plan_id).filter((id) => Boolean(id)))].sort();
+  const allPlanTasks = new Map;
+  for (const task3 of snapshot.plan_tasks) {
+    if (!task3.plan_id)
+      continue;
+    const rows = allPlanTasks.get(task3.plan_id) ?? [];
+    rows.push(task3);
+    allPlanTasks.set(task3.plan_id, rows);
+  }
+  const contained = [];
+  const shared = [];
+  const planById = new Map(snapshot.plans.map((plan) => [plan.plan_id, plan]));
+  for (const planId of planIds) {
+    const plan = planById.get(planId);
+    if (!plan || plan.project_id !== input.source_project_id) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_PLAN_CONFLICT", "A moved task references a plan absent from the exact source project", { plan_id: planId });
+    }
+    const members = allPlanTasks.get(planId) ?? [];
+    if (members.length === 0) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_PLAN_CONFLICT", "A moved task references a plan with no authoritative task membership", { plan_id: planId });
+    }
+    if (members.every((task3) => movedIds.has(task3.task_id)))
+      contained.push(planId);
+    else
+      shared.push(planId);
+  }
+  const inspection = {
+    source_project_id: input.source_project_id,
+    destination_project_id: input.destination_project_id,
+    destination_task_list_id: input.destination_task_list_id,
+    root_task_id: input.root_task_id,
+    destination_parent_id: input.destination_parent_id,
+    expected_root_parent_id: moved.find((task3) => task3.task_id === input.root_task_id).parent_id,
+    source_population_digest: sourcePopulationDigest(snapshot.source_tasks),
+    expected_tasks: moved.map((task3) => ({ task_id: task3.task_id, version: task3.version })),
+    contained_plan_ids: contained,
+    shared_plan_ids: shared,
+    complete: true
+  };
+  return {
+    inspection,
+    prior_tasks: moved.map(sortedTaskImage),
+    prior_plans: contained.map((id) => planById.get(id)),
+    task_plan_targets: new Map(moved.map((task3) => [task3.task_id, task3.plan_id]))
+  };
+}
+function validateApplySnapshot(prepared, request, plans) {
+  if (request.expected_root_parent_id !== prepared.inspection.expected_root_parent_id) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "Root parent changed since inspection");
+  }
+  if (request.source_population_digest !== prepared.inspection.source_population_digest) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_POPULATION_DRIFT", "Complete source-project task population changed since inspection");
+  }
+  const expected = request.expected_tasks.map((task3) => ({ task_id: task3.task_id, version: task3.version })).sort((left, right) => left.task_id.localeCompare(right.task_id));
+  if (JSON.stringify(expected) !== JSON.stringify(prepared.inspection.expected_tasks)) {
+    const actualById = new Map(prepared.inspection.expected_tasks.map((task3) => [task3.task_id, task3.version]));
+    const sameIds = expected.length === prepared.inspection.expected_tasks.length && expected.every((task3) => actualById.has(task3.task_id));
+    throw new TodosTaskSubtreeTransferError(sameIds ? "TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT" : "TODOS_TASK_SUBTREE_TRANSFER_CLOSURE_DRIFT", sameIds ? "At least one exact task version changed since inspection" : "Exact descendant closure changed since inspection");
+  }
+  const requestedSources = request.shared_plan_splits.map((mapping) => mapping.source_plan_id).sort();
+  if (JSON.stringify(requestedSources) !== JSON.stringify(prepared.inspection.shared_plan_ids)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_PARTIAL_PLAN", "Shared plans require one exact explicit destination-plan mapping each", {
+      expected_shared_plan_ids: prepared.inspection.shared_plan_ids,
+      received_shared_plan_ids: requestedSources
+    });
+  }
+  const planById = new Map(plans.map((plan) => [plan.plan_id, plan]));
+  const destinationIds = new Set;
+  for (const mapping of request.shared_plan_splits) {
+    if (destinationIds.has(mapping.destination_plan_id)) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_PLAN_CONFLICT", "Two shared source plans cannot collapse into one destination plan");
+    }
+    destinationIds.add(mapping.destination_plan_id);
+    const destination = planById.get(mapping.destination_plan_id);
+    if (!destination || destination.project_id !== request.destination_project_id || destination.task_list_id !== request.destination_task_list_id) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_PLAN_CONFLICT", "Shared-plan destination does not match the exact destination project and task list", { destination_plan_id: mapping.destination_plan_id });
+    }
+    for (const [taskId, planId] of prepared.task_plan_targets) {
+      if (planId === mapping.source_plan_id) {
+        prepared.task_plan_targets.set(taskId, mapping.destination_plan_id);
+      }
+    }
+  }
+}
+var init_planner = __esm(() => {
+  init_canonical2();
+  init_types6();
+});
+
+// src/task-subtree-transfer/schema-sql.ts
+function postgresTodosTaskSubtreeTransferSchemaSql() {
+  return [
+    `CREATE TABLE IF NOT EXISTS todos_task_subtree_transfer_receipts (
+      receipt_id text PRIMARY KEY,
+      tenant_id text NOT NULL,
+      kind text NOT NULL CHECK(kind IN ('apply', 'rollback')),
+      operation_id text NOT NULL,
+      step_id text NOT NULL,
+      idempotency_key text NOT NULL,
+      request_digest text NOT NULL,
+      precondition_digest text NOT NULL,
+      result_digest text NOT NULL,
+      apply_receipt_id text,
+      request_json jsonb NOT NULL,
+      result_json jsonb NOT NULL,
+      created_at timestamptz NOT NULL,
+      UNIQUE(tenant_id, kind, operation_id, step_id),
+      UNIQUE(tenant_id, kind, idempotency_key)
+    )`,
+    `CREATE OR REPLACE FUNCTION reject_todos_task_subtree_transfer_receipt_mutation()
+      RETURNS trigger LANGUAGE plpgsql AS $$
+      BEGIN
+        RAISE EXCEPTION 'todos task subtree transfer receipts are immutable';
+      END $$`,
+    `DROP TRIGGER IF EXISTS todos_task_subtree_transfer_receipts_immutable_update
+      ON todos_task_subtree_transfer_receipts`,
+    `CREATE TRIGGER todos_task_subtree_transfer_receipts_immutable_update
+      BEFORE UPDATE OR DELETE ON todos_task_subtree_transfer_receipts
+      FOR EACH ROW EXECUTE FUNCTION reject_todos_task_subtree_transfer_receipt_mutation()`
+  ];
+}
+
+// src/task-subtree-transfer/postgres.ts
+function safeIdentifier3(value, fallback) {
+  const candidate = value ?? fallback;
+  if (!/^[a-z_][a-z0-9_]*$/.test(candidate)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "PostgreSQL table name must be a safe identifier");
+  }
+  return candidate;
+}
+function timestamp5(value) {
+  return value instanceof Date ? value.toISOString() : new Date(String(value)).toISOString();
+}
+function payloadOf(row) {
+  return typeof row.payload === "string" ? JSON.parse(row.payload) : row.payload;
+}
+function taskRecord(row) {
+  const payload = payloadOf(row);
+  return {
+    task_id: String(payload.id ?? row.object_id),
+    project_id: payload.project_id == null ? null : String(payload.project_id),
+    parent_id: payload.parent_id == null ? null : String(payload.parent_id),
+    plan_id: payload.plan_id == null ? null : String(payload.plan_id),
+    task_list_id: payload.task_list_id == null ? null : String(payload.task_list_id),
+    version: Number(payload.version ?? row.version ?? 1),
+    updated_at: timestamp5(payload.updated_at ?? row.updated_at),
+    archived_at: payload.archived_at == null ? null : String(payload.archived_at)
+  };
+}
+function planRecord(row) {
+  const payload = payloadOf(row);
+  return {
+    plan_id: String(payload.id ?? row.object_id),
+    project_id: payload.project_id == null ? null : String(payload.project_id),
+    task_list_id: payload.task_list_id == null ? null : String(payload.task_list_id),
+    updated_at: timestamp5(payload.updated_at ?? row.updated_at)
+  };
+}
+
+class PostgresTodosTaskSubtreeTransferBackend {
+  client;
+  kind = "postgresql";
+  service;
+  tableName;
+  tenantId;
+  schemaReady = null;
+  constructor(client, options = {}) {
+    this.client = client;
+    this.service = options.service ?? "todos";
+    this.tableName = safeIdentifier3(options.tableName, DEFAULT_TODOS_POSTGRES_SYNC_TABLE);
+    this.tenantId = options.tenantId ?? "default";
+  }
+  async ensureSchema() {
+    this.schemaReady ??= (async () => {
+      for (const sql of postgresTodosSyncSchemaSql(this.tableName))
+        await this.client.query(sql);
+      for (const sql of postgresTodosTaskSubtreeTransferSchemaSql())
+        await this.client.query(sql);
+    })();
+    await this.schemaReady;
+  }
+  async snapshot(client, input, forUpdate = false) {
+    const lock = forUpdate ? " FOR UPDATE" : "";
+    const source3 = await client.query(`SELECT object_id, payload, updated_at, version FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'tasks' AND deleted_at IS NULL
+         AND payload->>'project_id' = $2 ORDER BY object_id${lock}`, [this.service, input.source_project_id]);
+    const allTasks = await client.query(`SELECT object_id, payload, updated_at, version FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'tasks' AND deleted_at IS NULL ORDER BY object_id${lock}`, [this.service]);
+    const plans = await client.query(`SELECT object_id, payload, updated_at, version FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'plans' AND deleted_at IS NULL ORDER BY object_id${lock}`, [this.service]);
+    const destinationProject = await client.query(`SELECT 1 FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'projects' AND object_id = $2
+         AND deleted_at IS NULL LIMIT 1${lock}`, [this.service, input.destination_project_id]);
+    const destinationList = await client.query(`SELECT 1 FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'task_lists' AND object_id = $2
+         AND deleted_at IS NULL AND payload->>'project_id' = $3 LIMIT 1`, [this.service, input.destination_task_list_id, input.destination_project_id]);
+    const destinationParent = input.destination_parent_id === null ? true : (await client.query(`SELECT 1 FROM ${this.tableName}
+         WHERE service = $1 AND object_type = 'tasks' AND object_id = $2
+           AND deleted_at IS NULL AND payload->>'project_id' = $3 LIMIT 1`, [this.service, input.destination_parent_id, input.destination_project_id])).rows.length === 1;
+    return {
+      source_tasks: source3.rows.map(taskRecord),
+      plan_tasks: allTasks.rows.map(taskRecord),
+      plans: plans.rows.map(planRecord),
+      destination_project_found: destinationProject.rows.length === 1,
+      destination_task_list_found: destinationList.rows.length === 1,
+      destination_parent_found: destinationParent
+    };
+  }
+  async inspect(input) {
+    await this.ensureSchema();
+    return prepareTransfer(await this.snapshot(this.client, input), input).inspection;
+  }
+  async insertPayload(client, task3, update, now4) {
+    const current = await client.query(`SELECT payload FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'tasks' AND object_id = $2
+         AND deleted_at IS NULL FOR UPDATE`, [this.service, task3.task_id]);
+    const row = current.rows[0];
+    if (!row)
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_NOT_FOUND", `Task not found: ${task3.task_id}`);
+    const payload = payloadOf(row);
+    if (Number(payload.version ?? 1) !== task3.version) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "Task changed during transfer", { task_id: task3.task_id });
+    }
+    const next = {
+      ...payload,
+      ...update,
+      version: task3.version + 1,
+      updated_at: now4
+    };
+    const result = await client.query(`UPDATE ${this.tableName} SET payload = $1::jsonb, updated_at = $2, version = $3
+       WHERE service = $4 AND object_type = 'tasks' AND object_id = $5
+         AND deleted_at IS NULL AND version = $6
+       RETURNING object_id`, [canonicalJson(next), now4, task3.version + 1, this.service, task3.task_id, task3.version]);
+    if (result.rows.length !== 1) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "Task CAS failed", { task_id: task3.task_id });
+    }
+  }
+  async apply(input, options) {
+    await this.ensureSchema();
+    if (!this.client.transaction) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ATOMICITY_UNAVAILABLE", "PostgreSQL subtree transfer requires an authoritative transaction-capable client");
+    }
+    return this.client.transaction(async (tx) => {
+      await tx.query("SELECT pg_advisory_xact_lock(hashtextextended('todos:task-parent-integrity', 0))");
+      const requestDigest = taskSubtreeTransferRequestDigest(input);
+      const existing = await tx.query(`SELECT result_json, request_digest, precondition_digest, idempotency_key
+         FROM todos_task_subtree_transfer_receipts
+         WHERE tenant_id = $1 AND kind = 'apply'
+           AND (idempotency_key = $2 OR (operation_id = $3 AND step_id = $4))
+         ORDER BY created_at ASC LIMIT 1`, [this.tenantId, input.idempotency_key, input.operation_id, input.step_id]);
+      if (existing.rows[0]) {
+        const row = existing.rows[0];
+        if (row.request_digest !== requestDigest || row.precondition_digest !== input.precondition_digest || row.idempotency_key !== input.idempotency_key) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_IDEMPOTENCY_CONFLICT", "The operation was already accepted for a different request");
+        }
+        return { ...typeof row.result_json === "string" ? JSON.parse(row.result_json) : row.result_json, duplicate: true };
+      }
+      const snapshot = await this.snapshot(tx, input, true);
+      const prepared = prepareTransfer(snapshot, input);
+      validateApplySnapshot(prepared, input, snapshot.plans);
+      const now4 = options.now?.() ?? new Date().toISOString();
+      const priorImage = {
+        tasks: prepared.prior_tasks,
+        plans: prepared.prior_plans
+      };
+      for (const task3 of prepared.prior_tasks) {
+        await this.insertPayload(tx, task3, {
+          project_id: input.destination_project_id,
+          task_list_id: input.destination_task_list_id,
+          plan_id: prepared.task_plan_targets.get(task3.task_id) ?? null,
+          parent_id: task3.task_id === input.root_task_id ? input.destination_parent_id : task3.parent_id
+        }, now4);
+      }
+      if (options.faultInjector && await options.faultInjector("after_task_writes"))
+        throw new Error("Injected task-subtree-transfer fault at after_task_writes");
+      for (const plan of prepared.prior_plans) {
+        const row = await tx.query(`SELECT payload FROM ${this.tableName}
+           WHERE service = $1 AND object_type = 'plans' AND object_id = $2
+             AND deleted_at IS NULL FOR UPDATE`, [this.service, plan.plan_id]);
+        const current = row.rows[0] ? payloadOf(row.rows[0]) : null;
+        if (!current || String(current.project_id ?? "") !== String(plan.project_id ?? "") || (current.task_list_id ?? null) !== plan.task_list_id || timestamp5(current.updated_at ?? row.rows[0]?.updated_at) !== plan.updated_at) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "Contained plan changed during transfer", { plan_id: plan.plan_id });
+        }
+        const result2 = await tx.query(`UPDATE ${this.tableName} SET payload = jsonb_set(jsonb_set(jsonb_set(payload, '{project_id}', to_jsonb($1::text)), '{task_list_id}', to_jsonb($2::text)), '{updated_at}', to_jsonb($3::text)), updated_at = $3
+           WHERE service = $4 AND object_type = 'plans' AND object_id = $5 AND deleted_at IS NULL
+           RETURNING object_id`, [input.destination_project_id, input.destination_task_list_id, now4, this.service, plan.plan_id]);
+        if (result2.rows.length !== 1) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "Contained plan update did not affect exactly one row", { plan_id: plan.plan_id });
+        }
+      }
+      if (options.faultInjector && await options.faultInjector("after_plan_writes"))
+        throw new Error("Injected task-subtree-transfer fault at after_plan_writes");
+      const postImage = {
+        tasks: prepared.prior_tasks.map((task3) => ({
+          ...task3,
+          project_id: input.destination_project_id,
+          task_list_id: input.destination_task_list_id,
+          plan_id: prepared.task_plan_targets.get(task3.task_id) ?? null,
+          parent_id: task3.task_id === input.root_task_id ? input.destination_parent_id : task3.parent_id,
+          version: task3.version + 1,
+          updated_at: now4
+        })),
+        plans: prepared.prior_plans.map((plan) => ({ ...plan, project_id: input.destination_project_id, task_list_id: input.destination_task_list_id, updated_at: now4 }))
+      };
+      const resultDigest = canonicalDigest({ route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE, request_digest: requestDigest, prior_image: priorImage, post_image: postImage });
+      const receipt = {
+        receipt_id: deterministicUuid(TODOS_TASK_SUBTREE_TRANSFER_ROUTE, "apply", input.operation_id, input.step_id, input.idempotency_key, requestDigest),
+        authority: "todos",
+        route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+        schema_version: 1,
+        kind: "apply",
+        operation_id: input.operation_id,
+        step_id: input.step_id,
+        idempotency_key: input.idempotency_key,
+        request_digest: requestDigest,
+        precondition_digest: input.precondition_digest,
+        result_digest: resultDigest,
+        apply_receipt_id: null,
+        source_project_id: input.source_project_id,
+        destination_project_id: input.destination_project_id,
+        destination_task_list_id: input.destination_task_list_id,
+        root_task_id: input.root_task_id,
+        source_population_digest: input.source_population_digest,
+        prior_image: priorImage,
+        post_image: postImage,
+        shared_plan_splits: input.shared_plan_splits,
+        created_at: now4
+      };
+      const result = { duplicate: false, receipt, moved_task_ids: prepared.prior_tasks.map((task3) => task3.task_id), moved_plan_ids: prepared.prior_plans.map((plan) => plan.plan_id), complete: true };
+      await tx.query(`INSERT INTO todos_task_subtree_transfer_receipts (
+          receipt_id, tenant_id, kind, operation_id, step_id, idempotency_key,
+          request_digest, precondition_digest, result_digest, apply_receipt_id,
+          request_json, result_json, created_at
+        ) VALUES ($1, $2, 'apply', $3, $4, $5, $6, $7, $8, NULL, $9::jsonb, $10::jsonb, $11)`, [receipt.receipt_id, this.tenantId, receipt.operation_id, receipt.step_id, receipt.idempotency_key, receipt.request_digest, receipt.precondition_digest, receipt.result_digest, canonicalJson(input), canonicalJson(result), now4]);
+      if (options.faultInjector && await options.faultInjector("after_receipt_write"))
+        throw new Error("Injected task-subtree-transfer fault at after_receipt_write");
+      return result;
+    });
+  }
+  async readExact(receiptId2) {
+    await this.ensureSchema();
+    const row = await this.client.query(`SELECT result_json FROM todos_task_subtree_transfer_receipts WHERE tenant_id = $1 AND receipt_id = $2 LIMIT 1`, [this.tenantId, receiptId2]);
+    if (!row.rows[0])
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_RECEIPT_NOT_FOUND", `Transfer receipt not found: ${receiptId2}`);
+    return { ...typeof row.rows[0].result_json === "string" ? JSON.parse(String(row.rows[0].result_json)) : row.rows[0].result_json, duplicate: false };
+  }
+  async rollback(input, options) {
+    await this.ensureSchema();
+    if (!this.client.transaction)
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ATOMICITY_UNAVAILABLE", "PostgreSQL subtree rollback requires a transaction-capable client");
+    return this.client.transaction(async (tx) => {
+      await tx.query("SELECT pg_advisory_xact_lock(hashtextextended('todos:task-parent-integrity', 0))");
+      const requestDigest = taskSubtreeTransferRollbackRequestDigest(input);
+      const existing = await tx.query(`SELECT result_json, request_digest, precondition_digest, idempotency_key
+         FROM todos_task_subtree_transfer_receipts
+         WHERE tenant_id = $1 AND kind = 'rollback'
+           AND (idempotency_key = $2 OR (operation_id = $3 AND step_id = $4))
+         ORDER BY created_at ASC LIMIT 1`, [this.tenantId, input.idempotency_key, input.operation_id, input.step_id]);
+      if (existing.rows[0]) {
+        const row = existing.rows[0];
+        if (row.request_digest !== requestDigest || row.precondition_digest !== input.precondition_digest || row.idempotency_key !== input.idempotency_key)
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_IDEMPOTENCY_CONFLICT", "The rollback operation was already accepted for a different request");
+        return { ...typeof row.result_json === "string" ? JSON.parse(String(row.result_json)) : row.result_json, duplicate: true };
+      }
+      const applyRow = await tx.query(`SELECT result_json FROM todos_task_subtree_transfer_receipts WHERE tenant_id = $1 AND kind = 'apply' AND receipt_id = $2 LIMIT 1`, [this.tenantId, input.receipt_id]);
+      if (!applyRow.rows[0])
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_RECEIPT_NOT_FOUND", `Apply receipt not found: ${input.receipt_id}`);
+      const applied = typeof applyRow.rows[0].result_json === "string" ? JSON.parse(String(applyRow.rows[0].result_json)) : applyRow.rows[0].result_json;
+      if (applied.receipt.operation_id !== input.operation_id) {
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Rollback operation does not match the apply receipt");
+      }
+      const expectedPrecondition = canonicalDigest({ route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE, direction: "rollback", operation_id: input.operation_id, step_id: input.step_id, apply_receipt_id: input.receipt_id, apply_result_digest: applied.receipt.result_digest });
+      if (input.precondition_digest !== expectedPrecondition)
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_DIGEST_MISMATCH", "Rollback precondition digest does not match the exact apply receipt", { expected_precondition_digest: expectedPrecondition });
+      const now4 = options.now?.() ?? new Date().toISOString();
+      for (const task3 of applied.receipt.post_image.tasks) {
+        const row = await tx.query(`SELECT payload FROM ${this.tableName} WHERE service = $1 AND object_type = 'tasks' AND object_id = $2 AND deleted_at IS NULL FOR UPDATE`, [this.service, task3.task_id]);
+        if (!row.rows[0])
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Transferred task disappeared", { task_id: task3.task_id });
+        const payload = payloadOf(row.rows[0]);
+        if (Number(payload.version ?? 1) !== task3.version || String(payload.project_id ?? "") !== String(task3.project_id ?? "") || (payload.parent_id ?? null) !== task3.parent_id || (payload.plan_id ?? null) !== task3.plan_id || (payload.task_list_id ?? null) !== task3.task_list_id)
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Transferred task changed after apply", { task_id: task3.task_id });
+      }
+      for (const task3 of applied.receipt.prior_image.tasks) {
+        const row = await tx.query(`SELECT payload FROM ${this.tableName} WHERE service = $1 AND object_type = 'tasks' AND object_id = $2 AND deleted_at IS NULL`, [this.service, task3.task_id]);
+        const payload = row.rows[0] ? payloadOf(row.rows[0]) : null;
+        if (!payload)
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Task disappeared during rollback", { task_id: task3.task_id });
+        const next = { ...payload, project_id: task3.project_id, task_list_id: task3.task_list_id, plan_id: task3.plan_id, parent_id: task3.parent_id, version: task3.version + 2, updated_at: now4 };
+        const result2 = await tx.query(`UPDATE ${this.tableName} SET payload = $1::jsonb, updated_at = $2, version = $3
+           WHERE service = $4 AND object_type = 'tasks' AND object_id = $5 AND deleted_at IS NULL AND version = $6
+           RETURNING object_id`, [canonicalJson(next), now4, task3.version + 2, this.service, task3.task_id, task3.version + 1]);
+        if (result2.rows.length !== 1) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Task rollback did not affect exactly one row", { task_id: task3.task_id });
+        }
+      }
+      if (options.faultInjector && await options.faultInjector("after_rollback_task_writes"))
+        throw new Error("Injected task-subtree-transfer fault at after_rollback_task_writes");
+      for (const plan of applied.receipt.prior_image.plans) {
+        const post = applied.receipt.post_image.plans.find((candidate) => candidate.plan_id === plan.plan_id);
+        const result2 = await tx.query(`UPDATE ${this.tableName}
+           SET payload = jsonb_set(
+             jsonb_set(
+               jsonb_set(payload, '{project_id}', to_jsonb($1::text)),
+               '{task_list_id}',
+               COALESCE(to_jsonb($2::text), 'null'::jsonb)
+             ),
+             '{updated_at}',
+             to_jsonb($3::text)
+           ), updated_at = $3
+           WHERE service = $4 AND object_type = 'plans' AND object_id = $5 AND deleted_at IS NULL
+             AND payload->>'project_id' = $6 AND COALESCE(payload->>'task_list_id', '') = COALESCE($7, '') AND payload->>'updated_at' = $8
+           RETURNING object_id`, [plan.project_id, plan.task_list_id, now4, this.service, plan.plan_id, post.project_id, post.task_list_id, post.updated_at]);
+        if (result2.rows.length !== 1) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Contained plan rollback did not affect exactly one row", { plan_id: plan.plan_id });
+        }
+      }
+      if (options.faultInjector && await options.faultInjector("after_rollback_plan_writes"))
+        throw new Error("Injected task-subtree-transfer fault at after_rollback_plan_writes");
+      const restored = {
+        tasks: applied.receipt.prior_image.tasks.map((task3) => ({ ...task3, version: task3.version + 2, updated_at: now4 })),
+        plans: applied.receipt.prior_image.plans.map((plan) => ({ ...plan, updated_at: now4 }))
+      };
+      const resultDigest = canonicalDigest({ route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE, direction: "rollback", apply_receipt_id: input.receipt_id, prior_image: applied.receipt.post_image, post_image: restored });
+      const receipt = { ...applied.receipt, receipt_id: deterministicUuid(TODOS_TASK_SUBTREE_TRANSFER_ROUTE, "rollback", input.operation_id, input.step_id, input.idempotency_key, input.receipt_id), kind: "rollback", operation_id: input.operation_id, step_id: input.step_id, idempotency_key: input.idempotency_key, request_digest: requestDigest, precondition_digest: input.precondition_digest, result_digest: resultDigest, apply_receipt_id: input.receipt_id, prior_image: applied.receipt.post_image, post_image: restored, created_at: now4 };
+      const result = { duplicate: false, receipt, moved_task_ids: applied.moved_task_ids, moved_plan_ids: applied.moved_plan_ids, complete: true };
+      await tx.query(`INSERT INTO todos_task_subtree_transfer_receipts (
+          receipt_id, tenant_id, kind, operation_id, step_id, idempotency_key,
+          request_digest, precondition_digest, result_digest, apply_receipt_id,
+          request_json, result_json, created_at
+        ) VALUES ($1, $2, 'rollback', $3, $4, $5, $6, $7, $8, $9, $10::jsonb, $11::jsonb, $12)`, [receipt.receipt_id, this.tenantId, receipt.operation_id, receipt.step_id, receipt.idempotency_key, receipt.request_digest, receipt.precondition_digest, receipt.result_digest, receipt.apply_receipt_id, canonicalJson(input), canonicalJson(result), now4]);
+      if (options.faultInjector && await options.faultInjector("after_rollback_receipt_write"))
+        throw new Error("Injected task-subtree-transfer fault at after_rollback_receipt_write");
+      return result;
+    });
+  }
+}
+var init_postgres4 = __esm(() => {
+  init_postgres_sync();
+  init_canonical2();
+  init_planner();
+  init_types6();
+});
+
+// src/task-subtree-transfer/sqlite.ts
+var sqliteTails2;
+var init_sqlite3 = __esm(() => {
+  init_canonical2();
+  init_planner();
+  init_types6();
+  sqliteTails2 = new WeakMap;
+});
+
+// src/task-subtree-transfer/authority.ts
+function boundedString(value, field, max = 200) {
+  if (typeof value !== "string" || value.length === 0 || value.length > max) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", `${field} must be a non-empty bounded string`);
+  }
+  return value;
+}
+function uuid3(value, field) {
+  const parsed = boundedString(value, field, 80);
+  if (!UUID.test(parsed)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", `${field} must be a UUID`);
+  }
+  return parsed;
+}
+function digest2(value, field) {
+  const parsed = boundedString(value, field, 64);
+  if (!DIGEST.test(parsed)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", `${field} must be a SHA-256 digest`);
+  }
+  return parsed.toLowerCase();
+}
+function nullableUuid(value, field) {
+  if (value === null)
+    return null;
+  return uuid3(value, field);
+}
+function strictObject(input, fields) {
+  if (input === null || typeof input !== "object" || Array.isArray(input)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "Request must be a JSON object");
+  }
+  const object = input;
+  const allowed = new Set(fields);
+  for (const key2 of Object.keys(object)) {
+    if (!allowed.has(key2)) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", `Unknown field: ${key2}`);
+    }
+  }
+  return object;
+}
+function parseTodosTaskSubtreeTransferInspect(input) {
+  const value = strictObject(input, INSPECT_FIELDS);
+  const request = {
+    source_project_id: uuid3(value.source_project_id, "source_project_id"),
+    destination_project_id: uuid3(value.destination_project_id, "destination_project_id"),
+    destination_task_list_id: uuid3(value.destination_task_list_id, "destination_task_list_id"),
+    root_task_id: uuid3(value.root_task_id, "root_task_id"),
+    destination_parent_id: nullableUuid(value.destination_parent_id, "destination_parent_id")
+  };
+  if (request.source_project_id === request.destination_project_id) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "source_project_id and destination_project_id must identify different Projects");
+  }
+  return request;
+}
+function parseTodosTaskSubtreeTransferApply(input) {
+  const value = strictObject(input, APPLY_FIELDS);
+  if (value.version !== 1) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "version must be 1");
+  }
+  if (!Array.isArray(value.expected_tasks) || value.expected_tasks.length === 0) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "expected_tasks must be a non-empty array");
+  }
+  const expected_tasks = value.expected_tasks.map((item, index) => {
+    const row = strictObject(item, ["task_id", "version"]);
+    const version = row.version;
+    if (!Number.isSafeInteger(version) || Number(version) < 1) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", `expected_tasks.${index}.version must be a positive integer`);
+    }
+    return { task_id: uuid3(row.task_id, `expected_tasks.${index}.task_id`), version: Number(version) };
+  });
+  const ids2 = new Set;
+  for (const row of expected_tasks) {
+    if (ids2.has(row.task_id)) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "expected_tasks must not contain duplicate task IDs");
+    }
+    ids2.add(row.task_id);
+  }
+  if (!Array.isArray(value.shared_plan_splits)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "shared_plan_splits must be an array");
+  }
+  const shared_plan_splits = value.shared_plan_splits.map((item, index) => {
+    const row = strictObject(item, ["source_plan_id", "destination_plan_id"]);
+    return {
+      source_plan_id: uuid3(row.source_plan_id, `shared_plan_splits.${index}.source_plan_id`),
+      destination_plan_id: uuid3(row.destination_plan_id, `shared_plan_splits.${index}.destination_plan_id`)
+    };
+  });
+  return {
+    ...parseTodosTaskSubtreeTransferInspect({
+      source_project_id: value.source_project_id,
+      destination_project_id: value.destination_project_id,
+      destination_task_list_id: value.destination_task_list_id,
+      root_task_id: value.root_task_id,
+      destination_parent_id: value.destination_parent_id
+    }),
+    version: 1,
+    operation_id: boundedString(value.operation_id, "operation_id"),
+    step_id: boundedString(value.step_id, "step_id"),
+    idempotency_key: boundedString(value.idempotency_key, "idempotency_key", 240),
+    precondition_digest: digest2(value.precondition_digest, "precondition_digest"),
+    expected_root_parent_id: nullableUuid(value.expected_root_parent_id, "expected_root_parent_id"),
+    source_population_digest: digest2(value.source_population_digest, "source_population_digest"),
+    expected_tasks,
+    shared_plan_splits
+  };
+}
+function parseTodosTaskSubtreeTransferRollback(input) {
+  const value = strictObject(input, [
+    "receipt_id",
+    "operation_id",
+    "step_id",
+    "idempotency_key",
+    "precondition_digest"
+  ]);
+  return {
+    receipt_id: uuid3(value.receipt_id, "receipt_id"),
+    operation_id: boundedString(value.operation_id, "operation_id"),
+    step_id: boundedString(value.step_id, "step_id"),
+    idempotency_key: boundedString(value.idempotency_key, "idempotency_key", 240),
+    precondition_digest: digest2(value.precondition_digest, "precondition_digest")
+  };
+}
+function deriveTodosTaskSubtreeTransferApplyPreconditionDigest(input) {
+  const {
+    source_project_id,
+    destination_project_id,
+    destination_task_list_id,
+    root_task_id,
+    expected_root_parent_id,
+    destination_parent_id,
+    source_population_digest,
+    expected_tasks,
+    shared_plan_splits
+  } = input;
+  return canonicalDigest({
+    route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+    direction: "apply",
+    source_project_id,
+    destination_project_id,
+    destination_task_list_id,
+    root_task_id,
+    expected_root_parent_id,
+    destination_parent_id,
+    source_population_digest,
+    expected_tasks,
+    shared_plan_splits
+  });
+}
+function resolveTenantId2(value) {
+  const tenant = value ?? "default";
+  if (!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/.test(tenant)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "tenantId must be a bounded exact authority identifier");
+  }
+  return tenant;
+}
+
+class PackageOwnedTodosTaskSubtreeTransferAuthority {
+  backend;
+  tenantId;
+  backendOptions;
+  constructor(backend, options = {}) {
+    this.backend = backend;
+    this.tenantId = resolveTenantId2(options.tenantId);
+    this.backendOptions = { ...options, tenantId: this.tenantId };
+  }
+  async capability() {
+    return {
+      authority: "todos",
+      route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+      schema_version: TODOS_TASK_SUBTREE_TRANSFER_SCHEMA_VERSION,
+      tenant_id: this.tenantId,
+      backend: this.backend.kind,
+      exact_descendant_closure: true,
+      complete_source_population_digest: true,
+      per_task_version_cas: true,
+      explicit_shared_plan_splits: true,
+      atomic_apply: true,
+      immutable_forward_inverse_receipts: true,
+      prior_image_receipts: true,
+      cas_protected_rollback: true,
+      preserves_descendant_parent_ids: true,
+      preserves_task_and_relation_identities: true
+    };
+  }
+  async inspect(input) {
+    return this.backend.inspect(parseTodosTaskSubtreeTransferInspect(input));
+  }
+  async apply(input) {
+    const request = parseTodosTaskSubtreeTransferApply(input);
+    const expected = deriveTodosTaskSubtreeTransferApplyPreconditionDigest(request);
+    if (request.precondition_digest !== expected) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_DIGEST_MISMATCH", "precondition_digest does not match the exact transfer target and source snapshot", { expected_precondition_digest: expected });
+    }
+    const requestDigest = taskSubtreeTransferRequestDigest(request);
+    const expectedKey = deriveTodosTaskSubtreeTransferIdempotencyKey({
+      operation_id: request.operation_id,
+      step_id: request.step_id,
+      direction: "apply",
+      target_selector: request.root_task_id,
+      request_digest: requestDigest,
+      precondition_digest: request.precondition_digest
+    });
+    if (request.idempotency_key !== expectedKey) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_IDEMPOTENCY_MISMATCH", "idempotency_key does not match the exact transfer request", { expected_idempotency_key: expectedKey });
+    }
+    return this.backend.apply(request, this.backendOptions);
+  }
+  async readExact(receiptIdValue) {
+    return this.backend.readExact(uuid3(receiptIdValue, "receipt_id"));
+  }
+  async rollback(input) {
+    const request = parseTodosTaskSubtreeTransferRollback(input);
+    const requestDigest = taskSubtreeTransferRollbackRequestDigest(request);
+    const expectedKey = deriveTodosTaskSubtreeTransferIdempotencyKey({
+      operation_id: request.operation_id,
+      step_id: request.step_id,
+      direction: "rollback",
+      target_selector: request.receipt_id,
+      request_digest: requestDigest,
+      precondition_digest: request.precondition_digest
+    });
+    if (request.idempotency_key !== expectedKey) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_IDEMPOTENCY_MISMATCH", "rollback idempotency_key does not match the exact rollback request", { expected_idempotency_key: expectedKey });
+    }
+    return this.backend.rollback(request, this.backendOptions);
+  }
+}
+function createPostgresTodosTaskSubtreeTransferAuthority(client, options = {}) {
+  return new PackageOwnedTodosTaskSubtreeTransferAuthority(new PostgresTodosTaskSubtreeTransferBackend(client, options), options);
+}
+var UUID, DIGEST, INSPECT_FIELDS, APPLY_FIELDS;
+var init_authority3 = __esm(() => {
+  init_canonical2();
+  init_postgres4();
+  init_sqlite3();
+  init_types6();
+  init_canonical2();
+  UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+  DIGEST = /^[0-9a-f]{64}$/i;
+  INSPECT_FIELDS = [
+    "source_project_id",
+    "destination_project_id",
+    "destination_task_list_id",
+    "root_task_id",
+    "destination_parent_id"
+  ];
+  APPLY_FIELDS = [
+    ...INSPECT_FIELDS,
+    "version",
+    "operation_id",
+    "step_id",
+    "idempotency_key",
+    "precondition_digest",
+    "expected_root_parent_id",
+    "source_population_digest",
+    "expected_tasks",
+    "shared_plan_splits"
+  ];
+});
+
+// src/task-subtree-transfer/http.ts
+function json3(body2, status2 = 200) {
+  return new Response(JSON.stringify(body2), { status: status2, headers: JSON_HEADERS3 });
+}
+function status2(error) {
+  switch (error.code) {
+    case "TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT":
+    case "TODOS_TASK_SUBTREE_TRANSFER_FOREIGN_REFERENCE":
+    case "TODOS_TASK_SUBTREE_TRANSFER_HIERARCHY_CYCLE":
+      return 400;
+    case "TODOS_TASK_SUBTREE_TRANSFER_RECEIPT_NOT_FOUND":
+    case "TODOS_TASK_SUBTREE_TRANSFER_NOT_FOUND":
+      return 404;
+    case "TODOS_TASK_SUBTREE_TRANSFER_ATOMICITY_UNAVAILABLE":
+      return 503;
+    default:
+      return 409;
+  }
+}
+async function boundedText2(message, limit) {
+  if (!message.body)
+    return "";
+  const reader = message.body.getReader();
+  const decoder = new TextDecoder;
+  let bytes = 0;
+  let text2 = "";
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done)
+        break;
+      bytes += value.byteLength;
+      if (bytes > limit) {
+        await reader.cancel();
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "Task-subtree-transfer HTTP body exceeds the byte bound");
+      }
+      text2 += decoder.decode(value, { stream: true });
+    }
+    return text2 + decoder.decode();
+  } finally {
+    reader.releaseLock();
+  }
+}
+async function readBody(request) {
+  const declaredLength = Number(request.headers.get("content-length") ?? 0);
+  if (Number.isFinite(declaredLength) && declaredLength > REQUEST_BYTES) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "Task-subtree-transfer request exceeds the byte bound");
+  }
+  const text2 = await boundedText2(request, REQUEST_BYTES);
+  try {
+    return JSON.parse(text2);
+  } catch {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "Invalid JSON body");
+  }
+}
+async function handleTodosTaskSubtreeTransferHttpRequest(request, url, authority, basePath = "/v1/task-subtree-transfer") {
+  if (url.pathname !== basePath && !url.pathname.startsWith(`${basePath}/`))
+    return null;
+  const action = url.pathname.slice(basePath.length).split("/").filter(Boolean).join("/");
+  try {
+    if ((action === "" || action === "capability") && request.method === "GET") {
+      return json3({ capability: await authority.capability() });
+    }
+    if (request.method !== "POST")
+      return json3({ error: "method not allowed" }, 405);
+    if (action === "inspect")
+      return json3({ inspection: await authority.inspect(await readBody(request)) });
+    if (action === "apply")
+      return json3({ result: await authority.apply(await readBody(request)) }, 201);
+    if (action === "rollback")
+      return json3({ result: await authority.rollback(await readBody(request)) }, 201);
+    if (action === "read-exact") {
+      const input = await readBody(request);
+      if (!input || typeof input.receipt_id !== "string") {
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "receipt_id is required");
+      }
+      return json3({ result: await authority.readExact(input.receipt_id) });
+    }
+    return json3({ error: "unknown task-subtree-transfer route" }, 404);
+  } catch (cause) {
+    if (cause instanceof TodosTaskSubtreeTransferError) {
+      return json3({
+        error: cause.message,
+        code: cause.code,
+        details: cause.details,
+        authoritative: true
+      }, status2(cause));
+    }
+    return json3({ error: "internal task-subtree-transfer error" }, 500);
+  }
+}
+var JSON_HEADERS3, REQUEST_BYTES, RESPONSE_BYTES;
+var init_http4 = __esm(() => {
+  init_types6();
+  JSON_HEADERS3 = { "Content-Type": "application/json" };
+  REQUEST_BYTES = 2 * 1024 * 1024;
+  RESPONSE_BYTES = 8 * 1024 * 1024;
+});
+
+// src/task-subtree-transfer/index.ts
+var init_task_subtree_transfer = __esm(() => {
+  init_authority3();
+  init_http4();
+  init_types6();
+});
+
 // src/storage/comment-redaction-backfill.ts
 function assertSafeIdentifier2(value) {
   if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(value)) {
@@ -54288,6 +55373,207 @@ var init_comment_redaction_backfill = __esm(() => {
   init_postgres_sync();
 });
 
+// src/storage/timestamp-backfill.ts
+function toIso(value) {
+  if (!value || value === "null")
+    return null;
+  const parsed = new Date(value);
+  return Number.isNaN(parsed.getTime()) ? null : parsed.toISOString();
+}
+async function backfillMissingTimestamps(client, options = {}) {
+  const service = options.service ?? "todos";
+  const tableName = options.tableName ?? "todos_sync_records";
+  const batchSize = Math.min(Math.max(options.batchSize ?? 100, 1), 500);
+  const apply = Boolean(options.apply);
+  if (apply && options.confirmation !== TIMESTAMP_BACKFILL_CONFIRMATION) {
+    throw new Error(`timestamp-backfill: --apply requires --confirm=${TIMESTAMP_BACKFILL_CONFIRMATION}`);
+  }
+  if (apply && !options.evidencePath) {
+    throw new Error("timestamp-backfill: --apply requires --evidence-path so the pre-change state is preserved before mutation");
+  }
+  let scanned = 0;
+  let candidates = 0;
+  let completedAtBackfilled = 0;
+  let startedAtBackfilled = 0;
+  let remainingAfterApply = 0;
+  let batches = 0;
+  let cursor = null;
+  for (;; ) {
+    const pageResult = await client.query(`/* todos:timestamp-backfill-candidates */ SELECT object_id,
+         payload->>'status' AS status,
+         payload->>'started_at' AS started_at,
+         payload->>'completed_at' AS completed_at,
+         payload->>'updated_at' AS updated_at,
+         payload->'metadata'->'_failure'->>'failed_at' AS failed_at
+       FROM ${tableName}
+       WHERE service = $1 AND object_type = 'tasks' AND deleted_at IS NULL
+         AND ((payload->>'status' = 'completed'
+             AND ((payload->>'completed_at') IS NULL OR (payload->>'completed_at') = 'null'))
+           OR (payload->>'status' = 'failed'
+             AND ((payload->>'started_at') IS NULL OR (payload->>'started_at') = 'null'
+               OR (payload->>'completed_at') IS NULL OR (payload->>'completed_at') = 'null'))
+           OR (payload->>'status' = 'cancelled'
+             AND ((payload->>'started_at') IS NULL OR (payload->>'started_at') = 'null'
+               OR (payload->>'completed_at') IS NULL OR (payload->>'completed_at') = 'null')))
+         AND ($2::text IS NULL OR object_id > $2)
+       ORDER BY object_id
+       LIMIT $3`, [service, cursor, batchSize]);
+    const page = pageResult.rows;
+    batches += 1;
+    scanned += page.length;
+    if (page.length === 0)
+      break;
+    const batch = page.map((row) => ({
+      ...row,
+      started_at: toIso(row.started_at),
+      completed_at: toIso(row.completed_at),
+      updated_at: toIso(row.updated_at),
+      failed_at: toIso(row.failed_at)
+    }));
+    const taskIds = batch.map((row) => row.object_id);
+    const historyResult = await client.query(`/* todos:timestamp-backfill-history */ SELECT
+         payload->>'task_id' AS task_id,
+         payload->>'action' AS action,
+         payload->>'new_value' AS new_value,
+         payload->>'created_at' AS created_at
+       FROM ${tableName}
+       WHERE service = $1 AND object_type = 'audit_history' AND deleted_at IS NULL
+         AND payload->>'action' IN ('start', 'complete', 'fail')
+         AND payload->>'task_id' = ANY($2::text[])`, [service, taskIds]);
+    const historyRows = historyResult.rows;
+    const byTask = new Map;
+    for (const row of historyRows) {
+      if (!row.task_id)
+        continue;
+      const list = byTask.get(row.task_id) ?? [];
+      list.push(row);
+      byTask.set(row.task_id, list);
+    }
+    for (const row of batch) {
+      candidates += 1;
+      const entries = (byTask.get(row.object_id) ?? []).sort((a, b) => (a.created_at ?? "").localeCompare(b.created_at ?? ""));
+      let derivedStartedAt = null;
+      let startedSource = null;
+      if (!row.started_at) {
+        const start = entries.find((entry2) => entry2.action === "start");
+        const candidate = toIso(start?.created_at);
+        if (candidate) {
+          derivedStartedAt = candidate;
+          startedSource = "audit_history";
+        }
+      }
+      let derivedCompletedAt = null;
+      let completedSource = null;
+      if (!row.completed_at) {
+        const terminal = entries.filter((entry2) => entry2.action === "complete" || entry2.action === "fail");
+        if (terminal.length > 0) {
+          const latest = terminal[terminal.length - 1];
+          const candidate = toIso(latest.created_at);
+          if (candidate) {
+            derivedCompletedAt = candidate;
+            completedSource = "audit_history";
+          }
+        }
+        if (!derivedCompletedAt && row.failed_at && row.status === "failed") {
+          const candidate = toIso(row.failed_at);
+          if (candidate) {
+            derivedCompletedAt = candidate;
+            completedSource = "failure_metadata";
+          }
+        }
+        if (!derivedCompletedAt) {
+          const candidate = toIso(row.updated_at);
+          if (candidate) {
+            derivedCompletedAt = candidate;
+            completedSource = "updated_at";
+          }
+        }
+      }
+      const evidenceRow = {
+        object_id: row.object_id,
+        status: row.status,
+        started_at: row.started_at,
+        completed_at: row.completed_at,
+        updated_at: row.updated_at,
+        derived_started_at: derivedStartedAt,
+        derived_completed_at: derivedCompletedAt,
+        started_source: startedSource,
+        completed_source: completedSource
+      };
+      if (apply && options.evidencePath) {
+        const { appendFileSync: appendFileSync2, mkdirSync: mkdirSync8 } = await import("fs");
+        const { dirname: dirname9 } = await import("path");
+        mkdirSync8(dirname9(options.evidencePath), { recursive: true });
+        appendFileSync2(options.evidencePath, JSON.stringify(evidenceRow) + `
+`);
+      }
+      let completedAtLanded = false;
+      let startedAtLanded = false;
+      if (apply) {
+        const willFillStarted = row.started_at === null && derivedStartedAt !== null;
+        const willFillCompleted = row.completed_at === null && derivedCompletedAt !== null;
+        if (willFillStarted || willFillCompleted) {
+          const result = await client.query(`/* todos:timestamp-backfill-apply */ UPDATE ${tableName} SET
+               payload = jsonb_set(
+                 jsonb_set(
+                   payload,
+                   '{completed_at}',
+                   CASE WHEN $3::text IS NOT NULL
+                          AND ((payload->>'completed_at') IS NULL OR (payload->>'completed_at') = 'null')
+                        THEN to_jsonb($3::text) ELSE payload->'completed_at' END,
+                   true
+                 ),
+                 '{started_at}',
+                 CASE WHEN $4::text IS NOT NULL
+                        AND ((payload->>'started_at') IS NULL OR (payload->>'started_at') = 'null')
+                      THEN to_jsonb($4::text) ELSE payload->'started_at' END,
+                 true
+               )
+             WHERE service = $1 AND object_type = 'tasks' AND object_id = $2 AND deleted_at IS NULL
+               AND (($3::text IS NOT NULL
+                      AND ((payload->>'completed_at') IS NULL OR (payload->>'completed_at') = 'null'))
+                 OR ($4::text IS NOT NULL
+                      AND ((payload->>'started_at') IS NULL OR (payload->>'started_at') = 'null')))
+             RETURNING object_id,
+               ($3::text IS NOT NULL AND payload->>'completed_at' = $3::text) AS completed_written,
+               ($4::text IS NOT NULL AND payload->>'started_at' = $4::text) AS started_written`, [service, row.object_id, derivedCompletedAt, derivedStartedAt]);
+          if (result.rows.length > 0) {
+            const landed = result.rows[0];
+            completedAtLanded = willFillCompleted && landed.completed_written;
+            startedAtLanded = willFillStarted && landed.started_written;
+            if (completedAtLanded)
+              completedAtBackfilled += 1;
+            if (startedAtLanded)
+              startedAtBackfilled += 1;
+          }
+        }
+      }
+      if (row.completed_at === null && !completedAtLanded) {
+        remainingAfterApply += 1;
+      } else if ((row.status === "failed" || row.status === "cancelled") && row.started_at === null && !startedAtLanded) {
+        remainingAfterApply += 1;
+      }
+    }
+    const last = batch[batch.length - 1];
+    if (last.object_id === cursor)
+      break;
+    cursor = last.object_id;
+    if (page.length < batchSize)
+      break;
+  }
+  return {
+    dry_run: !apply,
+    scanned,
+    candidates,
+    completed_at_backfilled: apply ? completedAtBackfilled : 0,
+    started_at_backfilled: apply ? startedAtBackfilled : 0,
+    batches,
+    remaining_candidates: apply ? remainingAfterApply : candidates,
+    evidence_path: options.evidencePath ?? null
+  };
+}
+var TIMESTAMP_BACKFILL_CONFIRMATION = "BACKFILL_TODOS_TERMINAL_TIMESTAMPS";
+
 // src/server/cloud.ts
 var exports_cloud = {};
 __export(exports_cloud, {
@@ -54296,8 +55582,8 @@ __export(exports_cloud, {
   pingCloud: () => pingCloud,
   normalizeCloudPayloads: () => normalizeCloudPayloads,
   isPostgresBackendConfigured: () => isPostgresBackendConfigured,
-  isCloudModeEnabled: () => isCloudModeEnabled,
   getCloudVerifier: () => getCloudVerifier,
+  getCloudTaskSubtreeTransferAuthority: () => getCloudTaskSubtreeTransferAuthority,
   getCloudTaskManifestAuthority: () => getCloudTaskManifestAuthority,
   getCloudStorageAdapter: () => getCloudStorageAdapter,
   getCloudProjectRegistrationAuthority: () => getCloudProjectRegistrationAuthority,
@@ -54309,6 +55595,7 @@ __export(exports_cloud, {
   ensureCloudSchema: () => ensureCloudSchema,
   ensureCloudCommentCursorIndex: () => ensureCloudCommentCursorIndex,
   closeCloud: () => closeCloud,
+  backfillCloudTimestamps: () => backfillCloudTimestamps,
   backfillCloudCommentRedaction: () => backfillCloudCommentRedaction,
   TODOS_APP_SLUG: () => TODOS_APP_SLUG
 });
@@ -54323,9 +55610,6 @@ function resolveSigningSecret(env = process.env) {
 function isPostgresBackendConfigured(env = process.env) {
   return Boolean(resolveCloudDatabaseUrl(env));
 }
-function isCloudModeEnabled(env = process.env) {
-  return isPostgresBackendConfigured(env);
-}
 function getCloudTenantId() {
   return process.env.HASNA_TODOS_TENANT_ID ?? "default";
 }
@@ -54372,6 +55656,15 @@ function getCloudTaskManifestAuthority() {
   });
   return cachedTaskManifestAuthority;
 }
+function getCloudTaskSubtreeTransferAuthority() {
+  if (cachedTaskSubtreeTransferAuthority)
+    return cachedTaskSubtreeTransferAuthority;
+  cachedTaskSubtreeTransferAuthority = createPostgresTodosTaskSubtreeTransferAuthority(getClient(), {
+    service: TODOS_APP_SLUG,
+    tenantId: getCloudTenantId()
+  });
+  return cachedTaskSubtreeTransferAuthority;
+}
 function authClient() {
   const client = getClient();
   return {
@@ -54405,7 +55698,7 @@ function getCloudVerifier() {
   cachedVerifier = verifyApiKey2({
     app: TODOS_APP_SLUG,
     signingSecret,
-    isRevoked: store.isRevoked
+    keyStatus: store.keyStatus
   });
   return cachedVerifier;
 }
@@ -54426,6 +55719,9 @@ async function ensureCloudSchema() {
     for (const sql of postgresTodosTaskManifestSchemaSql(getCloudTenantId())) {
       await client.query(sql);
     }
+    for (const sql of postgresTodosTaskSubtreeTransferSchemaSql()) {
+      await client.query(sql);
+    }
     await getApiKeyStore().ensureSchema();
   })();
   return schemaEnsured;
@@ -54453,6 +55749,9 @@ async function normalizeCloudPayloads() {
 function backfillCloudCommentRedaction(options = {}) {
   return backfillPostgresCommentRedaction(getClient(), { ...options, service: TODOS_APP_SLUG });
 }
+function backfillCloudTimestamps(options = {}) {
+  return backfillMissingTimestamps(getClient(), { ...options, service: TODOS_APP_SLUG });
+}
 async function pingCloud() {
   const client = getClient();
   const res = await client.query("select 1 as ok");
@@ -54468,9 +55767,10 @@ async function closeCloud() {
   cachedPrGroupLedger = null;
   cachedProjectRegistrationAuthority = null;
   cachedTaskManifestAuthority = null;
+  cachedTaskSubtreeTransferAuthority = null;
   schemaEnsured = null;
 }
-var TODOS_APP_SLUG = "todos", cachedClient = null, cachedAdapter = null, cachedStore = null, cachedVerifier = null, cachedPrGroupLedger = null, cachedProjectRegistrationAuthority = null, cachedTaskManifestAuthority = null, schemaEnsured = null;
+var TODOS_APP_SLUG = "todos", cachedClient = null, cachedAdapter = null, cachedStore = null, cachedVerifier = null, cachedPrGroupLedger = null, cachedProjectRegistrationAuthority = null, cachedTaskManifestAuthority = null, cachedTaskSubtreeTransferAuthority = null, schemaEnsured = null;
 var init_cloud = __esm(() => {
   init_cloud_client();
   init_postgres_adapter();
@@ -54478,6 +55778,7 @@ var init_cloud = __esm(() => {
   init_postgres();
   init_project_registration();
   init_task_manifest();
+  init_task_subtree_transfer();
   init_postgres_sync();
   init_comment_redaction_backfill();
 });
@@ -54691,8 +55992,8 @@ function rowToOrg(row) {
 function createOrg(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp5 = now();
-  d.run(`INSERT INTO orgs (id, name, description, metadata, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)`, [id, input.name, input.description || null, JSON.stringify(input.metadata || {}), timestamp5, timestamp5]);
+  const timestamp6 = now();
+  d.run(`INSERT INTO orgs (id, name, description, metadata, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)`, [id, input.name, input.description || null, JSON.stringify(input.metadata || {}), timestamp6, timestamp6]);
   return getOrg(id, d);
 }
 function getOrg(id, db) {
@@ -54836,9 +56137,9 @@ function parseBoundedLimit(value, fallback, max) {
     return fallback;
   return Math.min(parsed, max);
 }
-function mapTaskError(e, json4) {
+function mapTaskError(e, json5) {
   if (e instanceof VersionConflictError) {
-    return json4({
+    return json5({
       error: e.message,
       code: VersionConflictError.code,
       expected_version: e.expectedVersion,
@@ -54846,23 +56147,23 @@ function mapTaskError(e, json4) {
     }, 409);
   }
   if (e instanceof TaskNotFoundError) {
-    return json4({ error: e.message, code: TaskNotFoundError.code }, 404);
+    return json5({ error: e.message, code: TaskNotFoundError.code }, 404);
   }
   if (e instanceof LockError) {
-    return json4({ error: e.message, code: LockError.code }, 409);
+    return json5({ error: e.message, code: LockError.code }, 409);
   }
   if (e instanceof CompletionGuardError) {
-    return json4({
+    return json5({
       error: e.message,
       code: CompletionGuardError.code,
       retry_after: e.retryAfterSeconds ?? null
     }, 409);
   }
   if (e instanceof TaskNotStartableError) {
-    return json4({ error: e.message, code: TaskNotStartableError.code }, 409);
+    return json5({ error: e.message, code: TaskNotStartableError.code }, 409);
   }
   if (e instanceof Error && / is blocked by /.test(e.message)) {
-    return json4({ error: e.message, code: "TASK_NOT_STARTABLE" }, 409);
+    return json5({ error: e.message, code: "TASK_NOT_STARTABLE" }, 409);
   }
   return null;
 }
@@ -54947,11 +56248,11 @@ data: ${JSON.stringify({ type: "connected", agent_id: agentId, timestamp: new Da
     }
   });
 }
-function handleHealth(_ctx, json4) {
+function handleHealth(_ctx, json5) {
   const stats2 = getTaskStats();
   const staleCount = getStaleTasks(30).length;
   const overdueRecurring = getOverdueTasks().filter((t) => t.recurrence_rule && t.status === "pending").length;
-  return json4({
+  return json5({
     status: staleCount === 0 && overdueRecurring === 0 ? "ok" : "warn",
     tasks: stats2.total,
     stale: staleCount,
@@ -54959,18 +56260,18 @@ function handleHealth(_ctx, json4) {
     timestamp: new Date().toISOString()
   });
 }
-function handleHeadlessBoundary(_ctx, json4) {
+function handleHeadlessBoundary(_ctx, json5) {
   const { getHeadlessBoundaryManifest: getHeadlessBoundaryManifest2 } = (init_headless_boundaries(), __toCommonJS(exports_headless_boundaries));
-  return json4(getHeadlessBoundaryManifest2());
+  return json5(getHeadlessBoundaryManifest2());
 }
-function handleStats(_ctx, json4) {
+function handleStats(_ctx, json5) {
   const stats2 = getTaskStats();
   const byStatus = stats2.by_status;
   const projects = listProjects();
   const agents = listAgents();
   const staleCount = getStaleTasks(30).length;
   const overdueRecurring = getOverdueTasks().filter((t) => t.recurrence_rule && t.status === "pending").length;
-  return json4({
+  return json5({
     total_tasks: stats2.total,
     pending: byStatus["pending"] ?? 0,
     in_progress: byStatus["in_progress"] ?? 0,
@@ -54993,10 +56294,10 @@ function taskStatusQueryParam(url) {
     return { ok: false, message: result.message };
   return { ok: true, value: collapseEnumValues(result.values) };
 }
-async function handleListTasks(_req, url, _ctx, json4, taskToSummary2) {
+async function handleListTasks(_req, url, _ctx, json5, taskToSummary2) {
   const statusParam = taskStatusQueryParam(url);
   if (!statusParam.ok)
-    return json4({ error: statusParam.message }, 400);
+    return json5({ error: statusParam.message }, 400);
   const projectId = url.searchParams.get("project_id") || undefined;
   const sessionId = url.searchParams.get("session_id") || undefined;
   const agentId = url.searchParams.get("agent_id") || undefined;
@@ -55011,13 +56312,13 @@ async function handleListTasks(_req, url, _ctx, json4, taskToSummary2) {
     limit: limitParam ? parseInt(limitParam, 10) : undefined,
     offset: offsetParam ? parseInt(offsetParam, 10) : undefined
   });
-  return json4(tasks.map((t) => taskToSummary2(t, fields)));
+  return json5(tasks.map((t) => taskToSummary2(t, fields)));
 }
-async function handleCreateTask(req, ctx, json4, taskToSummary2) {
+async function handleCreateTask(req, ctx, json5, taskToSummary2) {
   try {
     const body2 = await req.json();
     if (!body2.title)
-      return json4({ error: "Missing 'title'" }, 400);
+      return json5({ error: "Missing 'title'" }, 400);
     const createdBy = body2.created_by ?? body2.agent_id ?? "dashboard";
     const task3 = createTask({
       title: body2.title,
@@ -55029,19 +56330,19 @@ async function handleCreateTask(req, ctx, json4, taskToSummary2) {
       ...body2.assigned_to ? { assigned_to: body2.assigned_to } : {}
     });
     ctx.broadcastEvent({ type: "task", task_id: task3.id, action: "created", agent_id: task3.agent_id, project_id: task3.project_id });
-    return json4(taskToSummary2(task3), 201);
+    return json5(taskToSummary2(task3), 201);
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed to create task" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed to create task" }, 500);
   }
 }
-async function handleUpsertTask(req, ctx, json4, taskToSummary2) {
+async function handleUpsertTask(req, ctx, json5, taskToSummary2) {
   try {
     const body2 = await req.json();
     if (typeof body2["fingerprint"] !== "string" || body2["fingerprint"].trim() === "") {
-      return json4({ error: "Missing 'fingerprint'" }, 400);
+      return json5({ error: "Missing 'fingerprint'" }, 400);
     }
     if (typeof body2["title"] !== "string" || body2["title"].trim() === "") {
-      return json4({ error: "Missing 'title'" }, 400);
+      return json5({ error: "Missing 'title'" }, 400);
     }
     const metadata = body2["metadata"] && typeof body2["metadata"] === "object" && !Array.isArray(body2["metadata"]) ? { ...body2["metadata"] } : {};
     for (const key2 of ["expectation_id", "expectation_fingerprint", "evidence_paths", "origin_loop_id", "origin_run_id", "expected", "observed", "acceptance"]) {
@@ -55062,9 +56363,9 @@ async function handleUpsertTask(req, ctx, json4, taskToSummary2) {
       metadata
     });
     ctx.broadcastEvent({ type: "task", task_id: result.task.id, action: result.created ? "created" : "updated", agent_id: result.task.agent_id, project_id: result.task.project_id });
-    return json4({ created: result.created, task: taskToSummary2(result.task) }, result.created ? 201 : 200);
+    return json5({ created: result.created, task: taskToSummary2(result.task) }, result.created ? 201 : 200);
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed to upsert task" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed to upsert task" }, 500);
   }
 }
 function handleTasksExport(_req, url, _ctx, _json, taskToSummary2) {
@@ -55116,11 +56417,11 @@ function handleTasksExport(_req, url, _ctx, _json, taskToSummary2) {
     }
   });
 }
-async function handleTasksBulk(req, _ctx, json4) {
+async function handleTasksBulk(req, _ctx, json5) {
   try {
     const body2 = await req.json();
     if (!body2.ids?.length || !body2.action)
-      return json4({ error: "Missing ids or action" }, 400);
+      return json5({ error: "Missing ids or action" }, 400);
     const results = [];
     for (const id of body2.ids) {
       try {
@@ -55138,84 +56439,84 @@ async function handleTasksBulk(req, _ctx, json4) {
         results.push({ id, success: false, error: e instanceof Error ? e.message : "Failed" });
       }
     }
-    return json4({ results, succeeded: results.filter((r) => r.success).length, failed: results.filter((r) => !r.success).length });
+    return json5({ results, succeeded: results.filter((r) => r.success).length, failed: results.filter((r) => !r.success).length });
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-function handleTasksStatus(_req, url, _ctx, json4) {
+function handleTasksStatus(_req, url, _ctx, json5) {
   try {
     const projectId = url.searchParams.get("project_id") || undefined;
     const agentId = url.searchParams.get("agent_id") || undefined;
-    const status2 = getStatus(projectId ? { project_id: projectId } : undefined, agentId);
-    return json4(status2);
+    const status3 = getStatus(projectId ? { project_id: projectId } : undefined, agentId);
+    return json5(status3);
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-function handleTasksNext(_req, url, _ctx, json4, taskToSummary2) {
+function handleTasksNext(_req, url, _ctx, json5, taskToSummary2) {
   try {
     const projectId = url.searchParams.get("project_id") || undefined;
     const agentId = url.searchParams.get("agent_id") || undefined;
     const fields = parseFieldsParam(url);
     const task3 = getNextTask(agentId, projectId ? { project_id: projectId } : undefined);
-    return json4({ task: task3 ? taskToSummary2(task3, fields) : null });
+    return json5({ task: task3 ? taskToSummary2(task3, fields) : null });
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-function handleTasksActive(_req, url, _ctx, json4) {
+function handleTasksActive(_req, url, _ctx, json5) {
   try {
     const projectId = url.searchParams.get("project_id") || undefined;
     const work = getActiveWork(projectId ? { project_id: projectId } : undefined);
-    return json4({ active: work, count: work.length });
+    return json5({ active: work, count: work.length });
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-function handleTasksStale(_req, url, _ctx, json4, taskToSummary2) {
+function handleTasksStale(_req, url, _ctx, json5, taskToSummary2) {
   try {
     const projectId = url.searchParams.get("project_id") || undefined;
     const minutes2 = parseInt(url.searchParams.get("minutes") || "30", 10);
     const fields = parseFieldsParam(url);
     const tasks = getStaleTasks(minutes2, projectId ? { project_id: projectId } : undefined);
-    return json4({ tasks: tasks.map((t) => taskToSummary2(t, fields)), count: tasks.length });
+    return json5({ tasks: tasks.map((t) => taskToSummary2(t, fields)), count: tasks.length });
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-function handleTasksChanged(_req, url, _ctx, json4, taskToSummary2) {
+function handleTasksChanged(_req, url, _ctx, json5, taskToSummary2) {
   try {
     const since = url.searchParams.get("since");
     if (!since)
-      return json4({ error: "since parameter required (ISO date string)" }, 400);
+      return json5({ error: "since parameter required (ISO date string)" }, 400);
     const projectId = url.searchParams.get("project_id") || undefined;
     const fields = parseFieldsParam(url);
     const tasks = getTasksChangedSince(since, projectId ? { project_id: projectId } : undefined);
-    return json4({ tasks: tasks.map((t) => taskToSummary2(t, fields)), count: tasks.length, since });
+    return json5({ tasks: tasks.map((t) => taskToSummary2(t, fields)), count: tasks.length, since });
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-function handleTasksContext(_req, url, _ctx, json4, taskToSummary2) {
+function handleTasksContext(_req, url, _ctx, json5, taskToSummary2) {
   const agentId = url.searchParams.get("agent_id") || undefined;
   const projectId = url.searchParams.get("project_id") || undefined;
   const format = url.searchParams.get("format") || "text";
   const fields = parseFieldsParam(url);
   const filters = projectId ? { project_id: projectId } : undefined;
-  const status2 = getStatus(filters, agentId);
+  const status3 = getStatus(filters, agentId);
   const next = getNextTask(agentId, filters);
   if (format === "json") {
-    return json4({ status: status2, next_task: next ? taskToSummary2(next, fields) : null });
+    return json5({ status: status3, next_task: next ? taskToSummary2(next, fields) : null });
   }
   const lines = [];
-  lines.push(`Tasks: ${status2.pending} pending | ${status2.in_progress} active | ${status2.completed} done`);
-  if (status2.stale_count > 0)
-    lines.push(`${status2.stale_count} stale tasks stuck in-progress`);
-  if (status2.overdue_recurring > 0)
-    lines.push(`${status2.overdue_recurring} overdue recurring tasks`);
-  if (status2.active_work.length > 0) {
-    lines.push(`Active: ${status2.active_work.slice(0, 3).map((w) => `${w.short_id || w.id.slice(0, 8)} (${w.assigned_to || "?"})`).join(", ")}`);
+  lines.push(`Tasks: ${status3.pending} pending | ${status3.in_progress} active | ${status3.completed} done`);
+  if (status3.stale_count > 0)
+    lines.push(`${status3.stale_count} stale tasks stuck in-progress`);
+  if (status3.overdue_recurring > 0)
+    lines.push(`${status3.overdue_recurring} overdue recurring tasks`);
+  if (status3.active_work.length > 0) {
+    lines.push(`Active: ${status3.active_work.slice(0, 3).map((w) => `${w.short_id || w.id.slice(0, 8)} (${w.assigned_to || "?"})`).join(", ")}`);
   }
   if (next)
     lines.push(`Next up: ${next.short_id || next.id.slice(0, 8)} [${next.priority}] ${next.title}`);
@@ -55223,18 +56524,18 @@ function handleTasksContext(_req, url, _ctx, json4, taskToSummary2) {
 `);
   return new Response(text2, { headers: { "Content-Type": "text/plain" } });
 }
-function handleTaskAttachments(id, _ctx, json4) {
+function handleTaskAttachments(id, _ctx, json5) {
   const task3 = getTask(id);
   if (!task3)
-    return json4({ error: "Task not found" }, 404);
+    return json5({ error: "Task not found" }, 404);
   const evidence = task3.metadata?._evidence || {};
   const attachmentIds = evidence.attachments || [];
-  return json4({ task_id: id, short_id: task3.short_id, attachment_ids: attachmentIds, count: attachmentIds.length, files_changed: evidence.files_changed, commit_hash: evidence.commit_hash, notes: evidence.notes });
+  return json5({ task_id: id, short_id: task3.short_id, attachment_ids: attachmentIds, count: attachmentIds.length, files_changed: evidence.files_changed, commit_hash: evidence.commit_hash, notes: evidence.notes });
 }
-async function handleTaskProgress(id, req, method, _ctx, json4, url) {
+async function handleTaskProgress(id, req, method, _ctx, json5, url) {
   const task3 = getTask(id);
   if (!task3)
-    return json4({ error: "Task not found" }, 404);
+    return json5({ error: "Task not found" }, 404);
   if (method === "GET") {
     const all = listComments(id);
     const progress = all.filter((c) => c.type === "progress");
@@ -55242,7 +56543,7 @@ async function handleTaskProgress(id, req, method, _ctx, json4, url) {
     const format = url?.searchParams.get("format") || "compact";
     const limit = parseBoundedLimit(url?.searchParams.get("limit") || null, 20, 200);
     const progressEntries = format === "full" ? progress : progress.slice(-limit);
-    return json4({
+    return json5({
       task_id: id,
       progress_entries: progressEntries,
       latest,
@@ -55259,27 +56560,27 @@ async function handleTaskProgress(id, req, method, _ctx, json4, url) {
     try {
       const body2 = await req.json();
       if (!body2.message)
-        return json4({ error: "message required" }, 400);
+        return json5({ error: "message required" }, 400);
       const comment2 = logProgress(id, body2.message, body2.pct_complete, body2.agent_id);
-      return json4(comment2, 201);
+      return json5(comment2, 201);
     } catch (e) {
-      return json4({ error: e instanceof Error ? e.message : "Failed to log progress" }, 500);
+      return json5({ error: e instanceof Error ? e.message : "Failed to log progress" }, 500);
     }
   }
   return null;
 }
-function handleGetTask(id, _ctx, json4, taskToSummary2, url) {
+function handleGetTask(id, _ctx, json5, taskToSummary2, url) {
   const task3 = getTask(id);
   if (!task3)
-    return json4({ error: "Task not found" }, 404);
-  return json4(taskToSummary2(task3, url ? parseFieldsParam(url) : undefined));
+    return json5({ error: "Task not found" }, 404);
+  return json5(taskToSummary2(task3, url ? parseFieldsParam(url) : undefined));
 }
-async function handlePatchTask(id, req, _ctx, json4, taskToSummary2) {
+async function handlePatchTask(id, req, _ctx, json5, taskToSummary2) {
   try {
     const body2 = await req.json();
     const task3 = getTask(id);
     if (!task3)
-      return json4({ error: "Task not found" }, 404);
+      return json5({ error: "Task not found" }, 404);
     const ALLOWED = new Set(["title", "description", "status", "priority", "assigned_to", "plan_id", "task_list_id", "tags", "metadata", "due_at", "estimated_minutes", "actual_minutes", "confidence", "retry_count", "max_retries", "retry_after", "task_type"]);
     const safeBody = {};
     for (const [key2, value] of Object.entries(body2)) {
@@ -55291,85 +56592,85 @@ async function handlePatchTask(id, req, _ctx, json4, taskToSummary2) {
       ...safeBody,
       version: clientVersion
     });
-    return json4(taskToSummary2(updated));
+    return json5(taskToSummary2(updated));
   } catch (e) {
-    const mapped = mapTaskError(e, json4);
+    const mapped = mapTaskError(e, json5);
     if (mapped)
       return mapped;
-    return json4({ error: e instanceof Error ? e.message : "Failed to update task" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed to update task" }, 500);
   }
 }
-function handleDeleteTask(id, _ctx, json4) {
+function handleDeleteTask(id, _ctx, json5) {
   const deleted = deleteTask(id);
   if (!deleted)
-    return json4({ error: "Task not found" }, 404);
-  return json4({ success: true });
+    return json5({ error: "Task not found" }, 404);
+  return json5({ success: true });
 }
-function handleStartTask(id, ctx, json4, taskToSummary2) {
+function handleStartTask(id, ctx, json5, taskToSummary2) {
   try {
     const task3 = startTask(id, "dashboard");
     ctx.broadcastEvent({ type: "task", task_id: task3.id, action: "started", agent_id: "dashboard", project_id: task3.project_id });
-    return json4(taskToSummary2(task3));
+    return json5(taskToSummary2(task3));
   } catch (e) {
-    const mapped = mapTaskError(e, json4);
+    const mapped = mapTaskError(e, json5);
     if (mapped)
       return mapped;
-    return json4({ error: e instanceof Error ? e.message : "Failed to start task" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed to start task" }, 500);
   }
 }
-async function handleFailTask(id, req, ctx, json4, taskToSummary2) {
+async function handleFailTask(id, req, ctx, json5, taskToSummary2) {
   try {
     const body2 = await req.json().catch(() => ({}));
     const result = failTask(id, body2.agent_id, body2.reason, { retry: body2.retry, error_code: body2.error_code });
     ctx.broadcastEvent({ type: "task", task_id: id, action: "failed", agent_id: body2.agent_id || null, project_id: result.task.project_id });
-    return json4({ task: taskToSummary2(result.task), retry_task: result.retryTask ? taskToSummary2(result.retryTask) : null });
+    return json5({ task: taskToSummary2(result.task), retry_task: result.retryTask ? taskToSummary2(result.retryTask) : null });
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed to fail task" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed to fail task" }, 500);
   }
 }
-function handleCompleteTask(id, ctx, json4, taskToSummary2) {
+function handleCompleteTask(id, ctx, json5, taskToSummary2) {
   try {
     const task3 = completeTask(id, "dashboard");
     ctx.broadcastEvent({ type: "task", task_id: task3.id, action: "completed", agent_id: "dashboard", project_id: task3.project_id });
-    return json4(taskToSummary2(task3));
+    return json5(taskToSummary2(task3));
   } catch (e) {
-    const mapped = mapTaskError(e, json4);
+    const mapped = mapTaskError(e, json5);
     if (mapped)
       return mapped;
-    return json4({ error: e instanceof Error ? e.message : "Failed to complete task" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed to complete task" }, 500);
   }
 }
-function handleListProjects(url, _ctx, json4) {
+function handleListProjects(url, _ctx, json5) {
   const pFieldsParam = url.searchParams.get("fields");
   const pFields = pFieldsParam ? pFieldsParam.split(",").map((f) => f.trim()).filter(Boolean) : undefined;
   const projects = listProjects();
-  return json4(pFields ? projects.map((p) => Object.fromEntries(pFields.map((f) => [f, p[f] ?? null]))) : projects);
+  return json5(pFields ? projects.map((p) => Object.fromEntries(pFields.map((f) => [f, p[f] ?? null]))) : projects);
 }
-async function handleCreateProject(req, _ctx, json4) {
+async function handleCreateProject(req, _ctx, json5) {
   try {
     const body2 = await req.json();
     if (!body2.name || !body2.path)
-      return json4({ error: "Missing name or path" }, 400);
+      return json5({ error: "Missing name or path" }, 400);
     const project = createProject({ name: body2.name, path: body2.path, description: body2.description });
-    return json4(project, 201);
+    return json5(project, 201);
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed to create project" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed to create project" }, 500);
   }
 }
-function handleDeleteProject(id, _ctx, json4) {
+function handleDeleteProject(id, _ctx, json5) {
   const deleted = deleteProject(id);
   if (!deleted)
-    return json4({ error: "Project not found" }, 404);
-  return json4({ success: true });
+    return json5({ error: "Project not found" }, 404);
+  return json5({ success: true });
 }
-async function handleAgentMe(_req, url, _ctx, json4, taskToSummary2) {
+async function handleAgentMe(_req, url, _ctx, json5, taskToSummary2) {
   try {
     const name = url.searchParams.get("name");
     if (!name)
-      return json4({ error: "Missing name param" }, 400);
+      return json5({ error: "Missing name param" }, 400);
     const agentResult = registerAgent({ name });
     if (isAgentConflict(agentResult))
-      return json4({ error: agentResult.message, conflict: true }, 409);
+      return json5({ error: agentResult.message, conflict: true }, 409);
     const agent = agentResult;
     const tasks = listTasks({ assigned_to: agent.name });
     const agentIdTasks = listTasks({ agent_id: agent.id });
@@ -55377,7 +56678,7 @@ async function handleAgentMe(_req, url, _ctx, json4, taskToSummary2) {
     const pending = allTasks.filter((t) => t.status === "pending");
     const inProgress = allTasks.filter((t) => t.status === "in_progress");
     const completed = allTasks.filter((t) => t.status === "completed");
-    return json4({
+    return json5({
       agent,
       pending_tasks: pending.map((t) => taskToSummary2(t)),
       in_progress_tasks: inProgress.map((t) => taskToSummary2(t)),
@@ -55391,132 +56692,132 @@ async function handleAgentMe(_req, url, _ctx, json4, taskToSummary2) {
     });
   } catch (e) {
     if (e instanceof InvalidAgentNameError)
-      return json4({ error: e.message, suggestions: e.suggestions }, 400);
-    return json4({ error: e instanceof Error ? e.message : "Failed to get agent profile" }, 500);
+      return json5({ error: e.message, suggestions: e.suggestions }, 400);
+    return json5({ error: e instanceof Error ? e.message : "Failed to get agent profile" }, 500);
   }
 }
-function handleAgentQueue(agentId, _ctx, json4, taskToSummary2) {
+function handleAgentQueue(agentId, _ctx, json5, taskToSummary2) {
   const aliasSet = assignedToAliasSet(getDatabase(), agentId);
   const pending = listTasks({ status: "pending" });
   const queue = pending.filter((t) => aliasSet.has((t.assigned_to ?? "").toLowerCase()) || t.agent_id === agentId || !t.assigned_to && !t.locked_by);
   const order = { critical: 0, high: 1, medium: 2, low: 3 };
   queue.sort((a, b) => (order[a.priority] ?? 4) - (order[b.priority] ?? 4) || new Date(a.created_at).getTime() - new Date(b.created_at).getTime());
-  return json4(queue.map((t) => taskToSummary2(t)));
+  return json5(queue.map((t) => taskToSummary2(t)));
 }
-async function handleClaimTask(req, _ctx, json4, taskToSummary2) {
+async function handleClaimTask(req, _ctx, json5, taskToSummary2) {
   try {
     const body2 = await req.json();
     const agentId = body2.agent_id || "anonymous";
     const task3 = claimNextTask(agentId, body2.project_id ? { project_id: body2.project_id } : undefined);
-    return json4({ task: task3 ? taskToSummary2(task3) : null });
+    return json5({ task: task3 ? taskToSummary2(task3) : null });
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed to claim" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed to claim" }, 500);
   }
 }
-function handleListOrgs(_ctx, json4) {
-  return json4(listOrgs());
+function handleListOrgs(_ctx, json5) {
+  return json5(listOrgs());
 }
-async function handleCreateOrg(req, _ctx, json4) {
+async function handleCreateOrg(req, _ctx, json5) {
   try {
     const body2 = await req.json();
     if (!body2.name)
-      return json4({ error: "Missing name" }, 400);
-    return json4(createOrg(body2), 201);
+      return json5({ error: "Missing name" }, 400);
+    return json5(createOrg(body2), 201);
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-async function handleUpdateOrg(id, req, _ctx, json4) {
+async function handleUpdateOrg(id, req, _ctx, json5) {
   try {
     const body2 = await req.json();
-    return json4(updateOrg(id, body2));
+    return json5(updateOrg(id, body2));
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-function handleDeleteOrg(id, _ctx, json4) {
+function handleDeleteOrg(id, _ctx, json5) {
   const deleted = deleteOrg(id);
-  return json4(deleted ? { success: true } : { error: "Not found" }, deleted ? 200 : 404);
+  return json5(deleted ? { success: true } : { error: "Not found" }, deleted ? 200 : 404);
 }
-function handleOrgChart(_ctx, json4) {
-  return json4(getOrgChart());
+function handleOrgChart(_ctx, json5) {
+  return json5(getOrgChart());
 }
-function handleAgentTeam(agentId, _ctx, json4) {
-  return json4(getDirectReports(decodeURIComponent(agentId)));
+function handleAgentTeam(agentId, _ctx, json5) {
+  return json5(getDirectReports(decodeURIComponent(agentId)));
 }
-function handleListAgents(url, _ctx, json4) {
+function handleListAgents(url, _ctx, json5) {
   const aFieldsParam = url.searchParams.get("fields");
   const aFields = aFieldsParam ? aFieldsParam.split(",").map((f) => f.trim()).filter(Boolean) : undefined;
   const agents = listAgents();
-  return json4(aFields ? agents.map((a) => Object.fromEntries(aFields.map((f) => [f, a[f] ?? null]))) : agents);
+  return json5(aFields ? agents.map((a) => Object.fromEntries(aFields.map((f) => [f, a[f] ?? null]))) : agents);
 }
-async function handleRegisterAgent(req, _ctx, json4) {
+async function handleRegisterAgent(req, _ctx, json5) {
   try {
     const body2 = await req.json();
     if (!body2.name)
-      return json4({ error: "Missing name" }, 400);
+      return json5({ error: "Missing name" }, 400);
     const result = registerAgent({ name: body2.name, description: body2.description, session_id: body2.session_id, working_dir: body2.working_dir });
     if (isAgentConflict(result))
-      return json4({ error: result.message, conflict: true }, 409);
-    return json4(result, 201);
+      return json5({ error: result.message, conflict: true }, 409);
+    return json5(result, 201);
   } catch (e) {
     if (e instanceof InvalidAgentNameError)
-      return json4({ error: e.message, suggestions: e.suggestions }, 400);
-    return json4({ error: e instanceof Error ? e.message : "Failed to register agent" }, 500);
+      return json5({ error: e.message, suggestions: e.suggestions }, 400);
+    return json5({ error: e instanceof Error ? e.message : "Failed to register agent" }, 500);
   }
 }
-async function handleUpdateAgent(id, req, _ctx, json4) {
+async function handleUpdateAgent(id, req, _ctx, json5) {
   try {
     const body2 = await req.json();
     const agent = updateAgent(id, body2);
-    return json4(agent);
+    return json5(agent);
   } catch (e) {
     if (e instanceof InvalidAgentNameError)
-      return json4({ error: e.message, suggestions: e.suggestions }, 400);
-    return json4({ error: e instanceof Error ? e.message : "Failed to update agent" }, 500);
+      return json5({ error: e.message, suggestions: e.suggestions }, 400);
+    return json5({ error: e instanceof Error ? e.message : "Failed to update agent" }, 500);
   }
 }
-function handleDeleteAgent(id, _ctx, json4) {
+function handleDeleteAgent(id, _ctx, json5) {
   const deleted = deleteAgent(id);
   if (!deleted)
-    return json4({ error: "Agent not found" }, 404);
-  return json4({ success: true });
+    return json5({ error: "Agent not found" }, 404);
+  return json5({ success: true });
 }
-async function handleBulkDeleteAgents(req, _ctx, json4) {
+async function handleBulkDeleteAgents(req, _ctx, json5) {
   try {
     const body2 = await req.json();
     if (!body2.ids?.length || body2.action !== "delete")
-      return json4({ error: "Missing ids or invalid action" }, 400);
+      return json5({ error: "Missing ids or invalid action" }, 400);
     let succeeded = 0;
     for (const id of body2.ids) {
       if (deleteAgent(id))
         succeeded++;
     }
-    return json4({ succeeded, failed: body2.ids.length - succeeded });
+    return json5({ succeeded, failed: body2.ids.length - succeeded });
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-async function handleBulkDeleteProjects(req, _ctx, json4) {
+async function handleBulkDeleteProjects(req, _ctx, json5) {
   try {
     const body2 = await req.json();
     if (!body2.ids?.length || body2.action !== "delete")
-      return json4({ error: "Missing ids or invalid action" }, 400);
+      return json5({ error: "Missing ids or invalid action" }, 400);
     let succeeded = 0;
     for (const id of body2.ids) {
       if (deleteProject(id))
         succeeded++;
     }
-    return json4({ succeeded, failed: body2.ids.length - succeeded });
+    return json5({ succeeded, failed: body2.ids.length - succeeded });
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-function handleDoctor(_ctx, json4) {
+function handleDoctor(_ctx, json5) {
   const { runTodosDoctor: runTodosDoctor2 } = (init_doctor(), __toCommonJS(exports_doctor));
-  return json4(runTodosDoctor2({ apply: false }));
+  return json5(runTodosDoctor2({ apply: false }));
 }
-function handleReport(_req, url, _ctx, json4) {
+function handleReport(_req, url, _ctx, json5) {
   const days = parseInt(url.searchParams.get("days") || "7", 10);
   const projectId = url.searchParams.get("project_id") || undefined;
   const since = new Date(Date.now() - days * 24 * 60 * 60 * 1000).toISOString();
@@ -55532,62 +56833,62 @@ function handleReport(_req, url, _ctx, json4) {
     byDay[day] = (byDay[day] || 0) + 1;
   }
   const completionRate = changed.length > 0 ? Math.round(completed.length / changed.length * 100) : 0;
-  return json4({ days, period_since: since, total: all.length, stats: stats2, changed: changed.length, completed: completed.length, failed: failed.length, completion_rate: completionRate, by_day: byDay });
+  return json5({ days, period_since: since, total: all.length, stats: stats2, changed: changed.length, completed: completed.length, failed: failed.length, completion_rate: completionRate, by_day: byDay });
 }
-function handleActivity(_req, url, _ctx, json4) {
+function handleActivity(_req, url, _ctx, json5) {
   const limit = parseInt(url.searchParams.get("limit") || "50", 10);
-  return json4(getRecentActivity(limit));
+  return json5(getRecentActivity(limit));
 }
-function handleTaskHistory(id, _ctx, json4, url) {
+function handleTaskHistory(id, _ctx, json5, url) {
   const history = getTaskHistory(id);
   const format = url?.searchParams.get("format") || "compact";
   const limit = parseBoundedLimit(url?.searchParams.get("limit") || null, 20, 500);
-  return json4(format === "full" ? history : history.slice(0, limit));
+  return json5(format === "full" ? history : history.slice(0, limit));
 }
-function handleListWebhooks(_ctx, json4) {
-  return json4(listWebhooks());
+function handleListWebhooks(_ctx, json5) {
+  return json5(listWebhooks());
 }
-async function handleCreateWebhook(req, _ctx, json4) {
+async function handleCreateWebhook(req, _ctx, json5) {
   try {
     const body2 = await req.json();
     if (!body2.url)
-      return json4({ error: "Missing url" }, 400);
-    return json4(createWebhook(body2), 201);
+      return json5({ error: "Missing url" }, 400);
+    return json5(createWebhook(body2), 201);
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-function handleDeleteWebhook(id, _ctx, json4) {
+function handleDeleteWebhook(id, _ctx, json5) {
   const deleted = deleteWebhook(id);
-  return json4(deleted ? { success: true } : { error: "Not found" }, deleted ? 200 : 404);
+  return json5(deleted ? { success: true } : { error: "Not found" }, deleted ? 200 : 404);
 }
-function handleListTemplates(_ctx, json4) {
-  return json4(listTemplates());
+function handleListTemplates(_ctx, json5) {
+  return json5(listTemplates());
 }
-async function handleCreateTemplate(req, _ctx, json4) {
+async function handleCreateTemplate(req, _ctx, json5) {
   try {
     const body2 = await req.json();
     if (!body2.name || !body2.title_pattern)
-      return json4({ error: "Missing name or title_pattern" }, 400);
-    return json4(createTemplate(body2), 201);
+      return json5({ error: "Missing name or title_pattern" }, 400);
+    return json5(createTemplate(body2), 201);
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-function handleDeleteTemplate(id, _ctx, json4) {
+function handleDeleteTemplate(id, _ctx, json5) {
   const deleted = deleteTemplate(id);
-  return json4(deleted ? { success: true } : { error: "Not found" }, deleted ? 200 : 404);
+  return json5(deleted ? { success: true } : { error: "Not found" }, deleted ? 200 : 404);
 }
-function handleListPlans(url, _ctx, json4) {
+function handleListPlans(url, _ctx, json5) {
   const projectId = url.searchParams.get("project_id") || undefined;
   const plans = listPlans(projectId);
-  return json4(plans);
+  return json5(plans);
 }
-async function handleCreatePlan(req, _ctx, json4) {
+async function handleCreatePlan(req, _ctx, json5) {
   try {
     const body2 = await req.json();
     if (!body2.name)
-      return json4({ error: "Missing 'name'" }, 400);
+      return json5({ error: "Missing 'name'" }, 400);
     const plan = createPlan({
       name: body2.name,
       slug: body2.slug,
@@ -55597,49 +56898,49 @@ async function handleCreatePlan(req, _ctx, json4) {
       agent_id: body2.agent_id,
       status: body2.status
     });
-    return json4(plan, 201);
+    return json5(plan, 201);
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed to create plan" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed to create plan" }, 500);
   }
 }
-async function handleBulkDeletePlans(req, _ctx, json4) {
+async function handleBulkDeletePlans(req, _ctx, json5) {
   try {
     const body2 = await req.json();
     if (!body2.ids?.length || body2.action !== "delete")
-      return json4({ error: "Missing ids or invalid action" }, 400);
+      return json5({ error: "Missing ids or invalid action" }, 400);
     let succeeded = 0;
     for (const id of body2.ids) {
       if (deletePlan(id))
         succeeded++;
     }
-    return json4({ succeeded, failed: body2.ids.length - succeeded });
+    return json5({ succeeded, failed: body2.ids.length - succeeded });
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed" }, 500);
   }
 }
-function handleGetPlan(id, _ctx, json4, taskToSummary2) {
+function handleGetPlan(id, _ctx, json5, taskToSummary2) {
   const plan = getPlan(id);
   if (!plan)
-    return json4({ error: "Plan not found" }, 404);
+    return json5({ error: "Plan not found" }, 404);
   const tasks = listTasks({ plan_id: id });
-  return json4({ ...plan, tasks: tasks.map((t) => taskToSummary2(t)) });
+  return json5({ ...plan, tasks: tasks.map((t) => taskToSummary2(t)) });
 }
-async function handleUpdatePlan(id, req, _ctx, json4) {
+async function handleUpdatePlan(id, req, _ctx, json5) {
   try {
     const body2 = await req.json();
     const plan = updatePlan(id, body2);
-    return json4(plan);
+    return json5(plan);
   } catch (e) {
-    return json4({ error: e instanceof Error ? e.message : "Failed to update plan" }, 500);
+    return json5({ error: e instanceof Error ? e.message : "Failed to update plan" }, 500);
   }
 }
-function handleDeletePlan(id, _ctx, json4) {
+function handleDeletePlan(id, _ctx, json5) {
   const deleted = deletePlan(id);
   if (!deleted)
-    return json4({ error: "Plan not found" }, 404);
-  return json4({ success: true });
+    return json5({ error: "Plan not found" }, 404);
+  return json5({ success: true });
 }
-function handleStaticFiles(path, method, ctx, json4, serveStaticFile2) {
+function handleStaticFiles(path, method, ctx, json5, serveStaticFile2) {
   if (!ctx.dashboardExists || method !== "GET" && method !== "HEAD")
     return null;
   if (path !== "/") {
@@ -55647,7 +56948,7 @@ function handleStaticFiles(path, method, ctx, json4, serveStaticFile2) {
     const resolvedFile = resolve16(filePath);
     const resolvedBase = resolve16(ctx.dashboardDir);
     if (!resolvedFile.startsWith(resolvedBase + sep3) && resolvedFile !== resolvedBase) {
-      return json4({ error: "Forbidden" }, 403);
+      return json5({ error: "Forbidden" }, 403);
     }
     const res2 = serveStaticFile2(filePath);
     if (res2)
@@ -55703,6 +57004,19 @@ function buildV1OpenApiDocument(version = getPackageVersion()) {
         TaskManifestReceipt: taskManifestReceiptSchema,
         TaskManifestApplyResult: taskManifestApplyResultSchema,
         TaskManifestApplyResponse: taskManifestApplyResponseSchema,
+        TaskSubtreeTransferExpectedTask: taskSubtreeTransferExpectedTaskSchema,
+        TaskSubtreeTransferSharedPlanSplit: taskSubtreeTransferSharedPlanSplitSchema,
+        TaskSubtreeTransferInspectRequest: taskSubtreeTransferInspectRequestSchema,
+        TaskSubtreeTransferInspection: taskSubtreeTransferInspectionSchema,
+        TaskSubtreeTransferApplyRequest: taskSubtreeTransferApplyRequestSchema,
+        TaskSubtreeTransferTaskImage: taskSubtreeTransferTaskImageSchema,
+        TaskSubtreeTransferPlanImage: taskSubtreeTransferPlanImageSchema,
+        TaskSubtreeTransferImage: taskSubtreeTransferImageSchema,
+        TaskSubtreeTransferReceipt: taskSubtreeTransferReceiptSchema,
+        TaskSubtreeTransferResult: taskSubtreeTransferResultSchema,
+        TaskSubtreeTransferCapability: taskSubtreeTransferCapabilitySchema,
+        TaskSubtreeTransferRollbackRequest: taskSubtreeTransferRollbackRequestSchema,
+        TaskSubtreeTransferReadExactRequest: taskSubtreeTransferReadExactRequestSchema,
         TaskManifestCompensateRequest: taskManifestCompensateRequestSchema,
         TaskManifestCompensationResult: taskManifestCompensationResultSchema,
         TaskManifestCompensateResponse: taskManifestCompensateResponseSchema,
@@ -55907,7 +57221,8 @@ function buildV1OpenApiDocument(version = getPackageVersion()) {
             slug: { type: "string", minLength: 1, pattern: ".*[A-Za-z0-9].*" },
             name: { type: "string" },
             description: { type: "string" },
-            metadata: { type: "object", additionalProperties: true }
+            metadata: { type: "object", additionalProperties: true },
+            project_id: { type: "string", nullable: true }
           }
         },
         CreateTaskCommentInput: {
@@ -57051,6 +58366,160 @@ function buildV1OpenApiDocument(version = getPackageVersion()) {
           }
         }
       },
+      "/v1/task-subtree-transfer/capability": {
+        get: {
+          operationId: "getTaskSubtreeTransferCapability",
+          summary: "Read the current task-subtree-transfer authority capability and tenant",
+          responses: {
+            "200": {
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    additionalProperties: false,
+                    required: ["capability"],
+                    properties: {
+                      capability: { $ref: "#/components/schemas/TaskSubtreeTransferCapability" }
+                    }
+                  }
+                }
+              }
+            },
+            "401": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } },
+            "503": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } }
+          }
+        }
+      },
+      "/v1/task-subtree-transfer/inspect": {
+        post: {
+          operationId: "inspectTaskSubtreeTransfer",
+          summary: "Inspect one exact task subtree and complete source population snapshot",
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: { $ref: "#/components/schemas/TaskSubtreeTransferInspectRequest" }
+              }
+            }
+          },
+          responses: {
+            "200": {
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    additionalProperties: false,
+                    required: ["inspection"],
+                    properties: {
+                      inspection: { $ref: "#/components/schemas/TaskSubtreeTransferInspection" }
+                    }
+                  }
+                }
+              }
+            },
+            "400": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } },
+            "404": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } },
+            "409": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } }
+          }
+        }
+      },
+      "/v1/task-subtree-transfer/apply": {
+        post: {
+          operationId: "applyTaskSubtreeTransfer",
+          summary: "Apply one exact task subtree transfer atomically with CAS and immutable receipt",
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: { $ref: "#/components/schemas/TaskSubtreeTransferApplyRequest" }
+              }
+            }
+          },
+          responses: {
+            "201": {
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    additionalProperties: false,
+                    required: ["result"],
+                    properties: {
+                      result: { $ref: "#/components/schemas/TaskSubtreeTransferResult" }
+                    }
+                  }
+                }
+              }
+            },
+            "400": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } },
+            "409": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } },
+            "503": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } }
+          }
+        }
+      },
+      "/v1/task-subtree-transfer/read-exact": {
+        post: {
+          operationId: "readExactTaskSubtreeTransfer",
+          summary: "Read one exact immutable task-subtree-transfer receipt",
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: { $ref: "#/components/schemas/TaskSubtreeTransferReadExactRequest" }
+              }
+            }
+          },
+          responses: {
+            "200": {
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    additionalProperties: false,
+                    required: ["result"],
+                    properties: {
+                      result: { $ref: "#/components/schemas/TaskSubtreeTransferResult" }
+                    }
+                  }
+                }
+              }
+            },
+            "404": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } }
+          }
+        }
+      },
+      "/v1/task-subtree-transfer/rollback": {
+        post: {
+          operationId: "rollbackTaskSubtreeTransfer",
+          summary: "Rollback one exact task-subtree-transfer receipt with CAS protection",
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: { $ref: "#/components/schemas/TaskSubtreeTransferRollbackRequest" }
+              }
+            }
+          },
+          responses: {
+            "201": {
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    additionalProperties: false,
+                    required: ["result"],
+                    properties: {
+                      result: { $ref: "#/components/schemas/TaskSubtreeTransferResult" }
+                    }
+                  }
+                }
+              }
+            },
+            "400": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } },
+            "404": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } },
+            "409": { content: { "application/json": { schema: { $ref: "#/components/schemas/ErrorResponse" } } } }
+          }
+        }
+      },
       "/v1/task-manifest/capability": {
         get: {
           operationId: "getTaskManifestCapability",
@@ -58004,7 +59473,7 @@ function buildV1OpenApiDocument(version = getPackageVersion()) {
     }
   });
 }
-var taskSchema, taskManifestBoundsSchema, taskManifestCapabilitySchema, taskManifestCapabilityResponseSchema, projectSchema, taskManifestBindingLookupRequestSchema, taskManifestBindingLookupResultSchema, taskManifestSchema, taskManifestReceiptSchema, taskManifestApplyResultSchema, taskManifestApplyResponseSchema, taskManifestCompensateRequestSchema, taskManifestCompensationResultSchema, taskManifestCompensateResponseSchema, taskManifestReadExactRequestSchema, taskManifestBindingLookupResponseSchema, taskListSchema, projectTaskListEnsureReceiptSchema, projectTaskListEnsureResultSchema, projectTaskListRollbackResultSchema, taskCommentSchema, staleLockHandoffInputSchema, staleLockHandoffReceiptSchema, taskGitRefSchema, planSchema, planProjectLinkReceiptSchema, planProjectLinkResultSchema, planProjectLinkRollbackResultSchema, templateTaskSchema, templateSchema, templateVariableSchema, createTemplateTaskInputSchema, projectRegistrationBoundsProperties, projectRegistrationReceiptSchema, projectRegistrationCapabilitySchema, projectRegistrationRequestSchema, projectRegistrationLookupRequestSchema, priorRegistrationAdoptionValidationSchema, projectResourceSchema, projectResourcePageSchema;
+var taskSchema, taskManifestBoundsSchema, taskManifestCapabilitySchema, taskManifestCapabilityResponseSchema, projectSchema, taskManifestBindingLookupRequestSchema, taskManifestBindingLookupResultSchema, taskManifestSchema, taskManifestReceiptSchema, taskManifestApplyResultSchema, taskManifestApplyResponseSchema, taskSubtreeTransferExpectedTaskSchema, taskSubtreeTransferSharedPlanSplitSchema, taskSubtreeTransferInspectRequestSchema, taskSubtreeTransferInspectionSchema, taskSubtreeTransferApplyRequestSchema, taskSubtreeTransferTaskImageSchema, taskSubtreeTransferPlanImageSchema, taskSubtreeTransferImageSchema, taskSubtreeTransferReceiptSchema, taskSubtreeTransferResultSchema, taskSubtreeTransferCapabilitySchema, taskSubtreeTransferRollbackRequestSchema, taskSubtreeTransferReadExactRequestSchema, taskManifestCompensateRequestSchema, taskManifestCompensationResultSchema, taskManifestCompensateResponseSchema, taskManifestReadExactRequestSchema, taskManifestBindingLookupResponseSchema, taskListSchema, projectTaskListEnsureReceiptSchema, projectTaskListEnsureResultSchema, projectTaskListRollbackResultSchema, taskCommentSchema, staleLockHandoffInputSchema, staleLockHandoffReceiptSchema, taskGitRefSchema, planSchema, planProjectLinkReceiptSchema, planProjectLinkResultSchema, planProjectLinkRollbackResultSchema, templateTaskSchema, templateSchema, templateVariableSchema, createTemplateTaskInputSchema, projectRegistrationBoundsProperties, projectRegistrationReceiptSchema, projectRegistrationCapabilitySchema, projectRegistrationRequestSchema, projectRegistrationLookupRequestSchema, priorRegistrationAdoptionValidationSchema, projectResourceSchema, projectResourcePageSchema;
 var init_openapi = __esm(() => {
   init_package_version();
   init_types();
@@ -58282,6 +59751,288 @@ var init_openapi = __esm(() => {
     required: ["result"],
     properties: { result: { $ref: "#/components/schemas/TaskManifestApplyResult" } }
   };
+  taskSubtreeTransferExpectedTaskSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: ["task_id", "version"],
+    properties: {
+      task_id: { type: "string", format: "uuid" },
+      version: { type: "integer", minimum: 1 }
+    }
+  };
+  taskSubtreeTransferSharedPlanSplitSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: ["source_plan_id", "destination_plan_id"],
+    properties: {
+      source_plan_id: { type: "string", format: "uuid" },
+      destination_plan_id: { type: "string", format: "uuid" }
+    }
+  };
+  taskSubtreeTransferInspectRequestSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: [
+      "source_project_id",
+      "destination_project_id",
+      "destination_task_list_id",
+      "root_task_id",
+      "destination_parent_id"
+    ],
+    properties: {
+      source_project_id: { type: "string", format: "uuid" },
+      destination_project_id: { type: "string", format: "uuid" },
+      destination_task_list_id: { type: "string", format: "uuid" },
+      root_task_id: { type: "string", format: "uuid" },
+      destination_parent_id: { type: "string", format: "uuid", nullable: true }
+    }
+  };
+  taskSubtreeTransferInspectionSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: [
+      "source_project_id",
+      "destination_project_id",
+      "destination_task_list_id",
+      "root_task_id",
+      "destination_parent_id",
+      "expected_root_parent_id",
+      "source_population_digest",
+      "expected_tasks",
+      "contained_plan_ids",
+      "shared_plan_ids",
+      "complete"
+    ],
+    properties: {
+      ...taskSubtreeTransferInspectRequestSchema.properties,
+      expected_root_parent_id: { type: "string", format: "uuid", nullable: true },
+      source_population_digest: { type: "string", pattern: "^[0-9a-f]{64}$" },
+      expected_tasks: {
+        type: "array",
+        minItems: 1,
+        items: { $ref: "#/components/schemas/TaskSubtreeTransferExpectedTask" }
+      },
+      contained_plan_ids: {
+        type: "array",
+        items: { type: "string", format: "uuid" }
+      },
+      shared_plan_ids: {
+        type: "array",
+        items: { type: "string", format: "uuid" }
+      },
+      complete: { type: "boolean", enum: [true] }
+    }
+  };
+  taskSubtreeTransferApplyRequestSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: [
+      "version",
+      "operation_id",
+      "step_id",
+      "idempotency_key",
+      "precondition_digest",
+      "source_project_id",
+      "destination_project_id",
+      "destination_task_list_id",
+      "root_task_id",
+      "destination_parent_id",
+      "expected_root_parent_id",
+      "source_population_digest",
+      "expected_tasks",
+      "shared_plan_splits"
+    ],
+    properties: {
+      ...taskSubtreeTransferInspectRequestSchema.properties,
+      version: { type: "integer", enum: [1] },
+      operation_id: { type: "string", minLength: 1, maxLength: 200 },
+      step_id: { type: "string", minLength: 1, maxLength: 200 },
+      idempotency_key: { type: "string", minLength: 1, maxLength: 240 },
+      precondition_digest: { type: "string", pattern: "^[0-9a-f]{64}$" },
+      expected_root_parent_id: { type: "string", format: "uuid", nullable: true },
+      source_population_digest: { type: "string", pattern: "^[0-9a-f]{64}$" },
+      expected_tasks: {
+        type: "array",
+        minItems: 1,
+        items: { $ref: "#/components/schemas/TaskSubtreeTransferExpectedTask" }
+      },
+      shared_plan_splits: {
+        type: "array",
+        items: { $ref: "#/components/schemas/TaskSubtreeTransferSharedPlanSplit" }
+      }
+    }
+  };
+  taskSubtreeTransferTaskImageSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: [
+      "task_id",
+      "project_id",
+      "parent_id",
+      "plan_id",
+      "task_list_id",
+      "version",
+      "updated_at"
+    ],
+    properties: {
+      task_id: { type: "string", format: "uuid" },
+      project_id: { type: "string", format: "uuid", nullable: true },
+      parent_id: { type: "string", format: "uuid", nullable: true },
+      plan_id: { type: "string", format: "uuid", nullable: true },
+      task_list_id: { type: "string", format: "uuid", nullable: true },
+      version: { type: "integer", minimum: 1 },
+      updated_at: { type: "string", format: "date-time" }
+    }
+  };
+  taskSubtreeTransferPlanImageSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: ["plan_id", "project_id", "task_list_id", "updated_at"],
+    properties: {
+      plan_id: { type: "string", format: "uuid" },
+      project_id: { type: "string", format: "uuid", nullable: true },
+      task_list_id: { type: "string", format: "uuid", nullable: true },
+      updated_at: { type: "string", format: "date-time" }
+    }
+  };
+  taskSubtreeTransferImageSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: ["tasks", "plans"],
+    properties: {
+      tasks: {
+        type: "array",
+        items: { $ref: "#/components/schemas/TaskSubtreeTransferTaskImage" }
+      },
+      plans: {
+        type: "array",
+        items: { $ref: "#/components/schemas/TaskSubtreeTransferPlanImage" }
+      }
+    }
+  };
+  taskSubtreeTransferReceiptSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: [
+      "receipt_id",
+      "authority",
+      "route",
+      "schema_version",
+      "kind",
+      "operation_id",
+      "step_id",
+      "idempotency_key",
+      "request_digest",
+      "precondition_digest",
+      "result_digest",
+      "apply_receipt_id",
+      "source_project_id",
+      "destination_project_id",
+      "destination_task_list_id",
+      "root_task_id",
+      "source_population_digest",
+      "prior_image",
+      "post_image",
+      "shared_plan_splits",
+      "created_at"
+    ],
+    properties: {
+      receipt_id: { type: "string", format: "uuid" },
+      authority: { type: "string", enum: ["todos"] },
+      route: { type: "string", enum: ["todos.task-subtree-transfer.v1"] },
+      schema_version: { type: "integer", enum: [1] },
+      kind: { type: "string", enum: ["apply", "rollback"] },
+      operation_id: { type: "string" },
+      step_id: { type: "string" },
+      idempotency_key: { type: "string" },
+      request_digest: { type: "string", pattern: "^[0-9a-f]{64}$" },
+      precondition_digest: { type: "string", pattern: "^[0-9a-f]{64}$" },
+      result_digest: { type: "string", pattern: "^[0-9a-f]{64}$" },
+      apply_receipt_id: { type: "string", format: "uuid", nullable: true },
+      source_project_id: { type: "string", format: "uuid" },
+      destination_project_id: { type: "string", format: "uuid" },
+      destination_task_list_id: { type: "string", format: "uuid" },
+      root_task_id: { type: "string", format: "uuid" },
+      source_population_digest: { type: "string", pattern: "^[0-9a-f]{64}$" },
+      prior_image: { $ref: "#/components/schemas/TaskSubtreeTransferImage" },
+      post_image: { $ref: "#/components/schemas/TaskSubtreeTransferImage" },
+      shared_plan_splits: {
+        type: "array",
+        items: { $ref: "#/components/schemas/TaskSubtreeTransferSharedPlanSplit" }
+      },
+      created_at: { type: "string", format: "date-time" }
+    }
+  };
+  taskSubtreeTransferResultSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: ["duplicate", "receipt", "moved_task_ids", "moved_plan_ids", "complete"],
+    properties: {
+      duplicate: { type: "boolean" },
+      receipt: { $ref: "#/components/schemas/TaskSubtreeTransferReceipt" },
+      moved_task_ids: { type: "array", items: { type: "string", format: "uuid" } },
+      moved_plan_ids: { type: "array", items: { type: "string", format: "uuid" } },
+      complete: { type: "boolean", enum: [true] }
+    }
+  };
+  taskSubtreeTransferCapabilitySchema = {
+    type: "object",
+    additionalProperties: false,
+    required: [
+      "authority",
+      "route",
+      "schema_version",
+      "tenant_id",
+      "backend",
+      "exact_descendant_closure",
+      "complete_source_population_digest",
+      "per_task_version_cas",
+      "explicit_shared_plan_splits",
+      "atomic_apply",
+      "immutable_forward_inverse_receipts",
+      "prior_image_receipts",
+      "cas_protected_rollback",
+      "preserves_descendant_parent_ids",
+      "preserves_task_and_relation_identities"
+    ],
+    properties: {
+      authority: { type: "string", enum: ["todos"] },
+      route: { type: "string", enum: ["todos.task-subtree-transfer.v1"] },
+      schema_version: { type: "integer", enum: [1] },
+      tenant_id: { type: "string", minLength: 1, maxLength: 200 },
+      backend: { type: "string", enum: ["sqlite", "postgresql", "http"] },
+      exact_descendant_closure: { type: "boolean", enum: [true] },
+      complete_source_population_digest: { type: "boolean", enum: [true] },
+      per_task_version_cas: { type: "boolean", enum: [true] },
+      explicit_shared_plan_splits: { type: "boolean", enum: [true] },
+      atomic_apply: { type: "boolean", enum: [true] },
+      immutable_forward_inverse_receipts: { type: "boolean", enum: [true] },
+      prior_image_receipts: { type: "boolean", enum: [true] },
+      cas_protected_rollback: { type: "boolean", enum: [true] },
+      preserves_descendant_parent_ids: { type: "boolean", enum: [true] },
+      preserves_task_and_relation_identities: { type: "boolean", enum: [true] }
+    }
+  };
+  taskSubtreeTransferRollbackRequestSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: ["receipt_id", "operation_id", "step_id", "idempotency_key", "precondition_digest"],
+    properties: {
+      receipt_id: { type: "string", format: "uuid" },
+      operation_id: { type: "string", minLength: 1, maxLength: 200 },
+      step_id: { type: "string", minLength: 1, maxLength: 200 },
+      idempotency_key: { type: "string", minLength: 1, maxLength: 240 },
+      precondition_digest: { type: "string", pattern: "^[0-9a-f]{64}$" }
+    }
+  };
+  taskSubtreeTransferReadExactRequestSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: ["receipt_id"],
+    properties: {
+      receipt_id: { type: "string", format: "uuid" }
+    }
+  };
   taskManifestCompensateRequestSchema = {
     type: "object",
     additionalProperties: false,
@@ -58960,8 +60711,8 @@ var exports_pr_groups = {};
 __export(exports_pr_groups, {
   handlePrGroupHttpRequest: () => handlePrGroupHttpRequest
 });
-function json4(body2, status2 = 200) {
-  return new Response(JSON.stringify(body2), { status: status2, headers: JSON_HEADERS3 });
+function json5(body2, status3 = 200) {
+  return new Response(JSON.stringify(body2), { status: status3, headers: JSON_HEADERS4 });
 }
 function errorStatus2(error) {
   switch (error.code) {
@@ -58995,26 +60746,26 @@ async function handlePrGroupHttpRequest(req, url, ledger, basePath, principal) {
   const method = req.method.toUpperCase();
   try {
     if (!groupId && method === "POST" && action === undefined) {
-      return json4({ error: "unknown PR-group route", code: "PR_GROUP_NOT_FOUND" }, 404);
+      return json5({ error: "unknown PR-group route", code: "PR_GROUP_NOT_FOUND" }, 404);
     }
     if (groupId === "admit" && !action) {
       if (method !== "POST")
-        return json4({ error: "method not allowed" }, 405);
+        return json5({ error: "method not allowed" }, 405);
       const body2 = await readJson2(req);
       if (!body2)
-        return json4({ error: "invalid JSON body", code: "PR_GROUP_INVALID_INPUT" }, 400);
-      return json4(await ledger.admit(body2), 201);
+        return json5({ error: "invalid JSON body", code: "PR_GROUP_INVALID_INPUT" }, 400);
+      return json5(await ledger.admit(body2), 201);
     }
     if (!groupId)
-      return json4({ error: "PR group id is required", code: "PR_GROUP_INVALID_INPUT" }, 400);
+      return json5({ error: "PR group id is required", code: "PR_GROUP_INVALID_INPUT" }, 400);
     if (!action && method === "GET") {
-      return json4({ view: await ledger.get(groupId) });
+      return json5({ view: await ledger.get(groupId) });
     }
     if (action === "events") {
       if (method === "GET") {
         const limit = url.searchParams.has("limit") ? Number(url.searchParams.get("limit")) : undefined;
         const afterSequence = url.searchParams.has("after_sequence") ? Number(url.searchParams.get("after_sequence")) : undefined;
-        return json4({
+        return json5({
           history: await ledger.events(groupId, {
             ...limit !== undefined ? { limit } : {},
             ...afterSequence !== undefined ? { after_sequence: afterSequence } : {}
@@ -59024,72 +60775,49 @@ async function handlePrGroupHttpRequest(req, url, ledger, basePath, principal) {
       if (method === "POST") {
         const body2 = await readJson2(req);
         if (!body2)
-          return json4({ error: "invalid JSON body", code: "PR_GROUP_INVALID_INPUT" }, 400);
-        return json4(await ledger.append({
+          return json5({ error: "invalid JSON body", code: "PR_GROUP_INVALID_INPUT" }, 400);
+        return json5(await ledger.append({
           ...body2,
           group_id: groupId,
           authenticated_actor_id: principal?.actor_id ?? undefined,
           authenticated_actor_run_id: principal?.actor_run_id ?? undefined
         }), 201);
       }
-      return json4({ error: "method not allowed" }, 405);
+      return json5({ error: "method not allowed" }, 405);
     }
     if (action === "recover") {
       if (method !== "POST")
-        return json4({ error: "method not allowed" }, 405);
+        return json5({ error: "method not allowed" }, 405);
       const body2 = await readJson2(req);
       if (!body2)
-        return json4({ error: "invalid JSON body", code: "PR_GROUP_INVALID_INPUT" }, 400);
-      return json4(await ledger.recover({
+        return json5({ error: "invalid JSON body", code: "PR_GROUP_INVALID_INPUT" }, 400);
+      return json5(await ledger.recover({
         ...body2,
         group_id: groupId
       }), 201);
     }
-    return json4({ error: "unknown PR-group route", code: "PR_GROUP_NOT_FOUND" }, 404);
+    return json5({ error: "unknown PR-group route", code: "PR_GROUP_NOT_FOUND" }, 404);
   } catch (cause) {
     if (cause instanceof PrGroupLedgerError) {
-      return json4({
+      return json5({
         error: cause.message,
         code: cause.code,
         details: cause.details,
         authoritative: true
       }, errorStatus2(cause));
     }
-    return json4({
+    return json5({
       error: cause instanceof Error ? cause.message : "internal PR-group error",
       code: "PR_GROUP_ATOMICITY_UNAVAILABLE"
     }, 500);
   }
 }
-var JSON_HEADERS3;
+var JSON_HEADERS4;
 var init_pr_groups = __esm(() => {
   init_types3();
-  JSON_HEADERS3 = { "Content-Type": "application/json" };
+  JSON_HEADERS4 = { "Content-Type": "application/json" };
 });
 
-// src/lib/comment-cursor.ts
-function encodeCommentCursor(comment2) {
-  return Buffer.from(JSON.stringify({ created_at: comment2.created_at, id: comment2.id }), "utf8").toString("base64url");
-}
-function decodeCommentCursor(value) {
-  if (value.length > MAX_COMMENT_CURSOR_LENGTH)
-    throw new Error("invalid comment cursor");
-  let parsed;
-  try {
-    parsed = JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
-  } catch {
-    throw new Error("invalid comment cursor");
-  }
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
-    throw new Error("invalid comment cursor");
-  const cursor = parsed;
-  if (typeof cursor["created_at"] !== "string" || cursor["created_at"].length > 64 || !Number.isFinite(Date.parse(cursor["created_at"])) || typeof cursor["id"] !== "string" || !cursor["id"] || cursor["id"].length > 256) {
-    throw new Error("invalid comment cursor");
-  }
-  return { created_at: cursor["created_at"], id: cursor["id"] };
-}
-var MAX_COMMENT_CURSOR_LENGTH = 1024;
-
 // src/lib/project-task-list-ensure.ts
 import { createHash as createHash17 } from "crypto";
 function canonicalJson2(value) {
@@ -59099,11 +60827,11 @@ function canonicalJson2(value) {
     return `[${value.map(canonicalJson2).join(",")}]`;
   return `{${Object.entries(value).filter(([, item]) => item !== undefined).sort(([left], [right]) => left.localeCompare(right)).map(([key2, item]) => `${JSON.stringify(key2)}:${canonicalJson2(item)}`).join(",")}}`;
 }
-function digest2(value) {
+function digest3(value) {
   return createHash17("sha256").update(canonicalJson2(value)).digest("hex");
 }
 function deriveIdempotencyKey(projectId, slug) {
-  return `ptlk_${digest2({ project_id: projectId, slug }).slice(0, 48)}`;
+  return `ptlk_${digest3({ project_id: projectId, slug }).slice(0, 48)}`;
 }
 function normalizeIdempotencyKey(value, projectId, slug) {
   const key2 = value?.trim() || deriveIdempotencyKey(projectId, slug);
@@ -59113,12 +60841,12 @@ function normalizeIdempotencyKey(value, projectId, slug) {
   return key2;
 }
 function receiptId2(projectId, slug, idempotencyKey2) {
-  return `ptlr_${digest2({ project_id: projectId, slug, idempotency_key: idempotencyKey2 }).slice(0, 48)}`;
+  return `ptlr_${digest3({ project_id: projectId, slug, idempotency_key: idempotencyKey2 }).slice(0, 48)}`;
 }
 function semanticListDigest(list) {
   const metadata = { ...list.metadata ?? {} };
   delete metadata[RECEIPT_METADATA_KEY];
-  return digest2({
+  return digest3({
     project_id: list.project_id,
     slug: list.slug,
     name: list.name,
@@ -59147,7 +60875,7 @@ function receiptFor(store, project, list, idempotencyKey2) {
   }
   return {
     schema_version: PROJECT_TASK_LIST_ENSURE_SCHEMA_VERSION,
-    receipt_id: owned ? marker.receipt_id : `ptlr_existing_${digest2({ project_id: project.id, task_list_id: list.id }).slice(0, 39)}`,
+    receipt_id: owned ? marker.receipt_id : `ptlr_existing_${digest3({ project_id: project.id, task_list_id: list.id }).slice(0, 39)}`,
     idempotency_key: owned ? marker.idempotency_key : idempotencyKey2,
     project_id: project.id,
     task_list_id: list.id,
@@ -59326,7 +61054,7 @@ async function rollbackProjectTaskListEnsure(store, projectId, options) {
     project_id: project.id,
     task_list_id: list.id,
     accepted_receipt_id: options.receipt_id,
-    rollback_receipt_id: `ptlr_inverse_${digest2({ accepted_receipt_id: options.receipt_id }).slice(0, 38)}`,
+    rollback_receipt_id: `ptlr_inverse_${digest3({ accepted_receipt_id: options.receipt_id }).slice(0, 38)}`,
     removed_at: new Date().toISOString()
   };
 }
@@ -59421,11 +61149,11 @@ __export(exports_v1, {
   handleV1Request: () => handleV1Request,
   countSnapshotRecords: () => countSnapshotRecords
 });
-function json5(body2, status2 = 200) {
-  return new Response(JSON.stringify(body2), { status: status2, headers: JSON_HEADERS4 });
+function json6(body2, status3 = 200) {
+  return new Response(JSON.stringify(body2), { status: status3, headers: JSON_HEADERS5 });
 }
-function error(status2, message, extra) {
-  return json5({ error: message, ...extra ?? {} }, status2);
+function error(status3, message, extra) {
+  return json6({ error: message, ...extra ?? {} }, status3);
 }
 function enumQueryParam(url, name, vocabulary) {
   const raw = url.searchParams.get(name);
@@ -59764,6 +61492,9 @@ function contextFromPrincipal(principal, body2) {
 function redactComment3(comment2) {
   return { ...comment2, content: redactEvidenceText(comment2.content) };
 }
+function redactPlanComment2(comment2) {
+  return { ...comment2, content: redactEvidenceText(comment2.content) };
+}
 function normalizeImportSnapshot(raw) {
   const body2 = raw && typeof raw === "object" ? raw : {};
   const arr = (v) => Array.isArray(v) ? v : [];
@@ -59872,6 +61603,9 @@ async function handleV1Request(req, url, dependencies = {}) {
   if (path === "/v1/task-manifest" || path.startsWith("/v1/task-manifest/")) {
     return handleTodosTaskManifestHttpRequest(req, url, (dependencies.getTaskManifestAuthority ?? getCloudTaskManifestAuthority)());
   }
+  if (path === "/v1/task-subtree-transfer" || path.startsWith("/v1/task-subtree-transfer/")) {
+    return handleTodosTaskSubtreeTransferHttpRequest(req, url, (dependencies.getTaskSubtreeTransferAuthority ?? getCloudTaskSubtreeTransferAuthority)());
+  }
   const store = (dependencies.getStorageAdapter ?? getCloudStorageAdapter)();
   const segments = path.split("/").filter(Boolean);
   const resource = segments[1];
@@ -59893,7 +61627,7 @@ async function handleV1Request(req, url, dependencies = {}) {
         const presentSet = new Set(found.map((t) => t.id));
         const present = ids2.filter((i) => presentSet.has(i));
         const missing = ids2.filter((i) => !presentSet.has(i));
-        return json5({
+        return json6({
           requested: ids2.length,
           present_count: present.length,
           missing_count: missing.length,
@@ -59943,11 +61677,11 @@ async function handleV1Request(req, url, dependencies = {}) {
         }
         if (!existing) {
           const task3 = await store.tasks.create({ ...fields, title: body2.title }, contextFromPrincipal(principal, body2));
-          return json5({ task: task3, created: true }, 201);
+          return json6({ task: task3, created: true }, 201);
         }
         try {
           const task3 = await store.tasks.update(existing.id, { ...fields, version: existing.version }, contextFromPrincipal(principal, body2));
-          return json5({ task: task3, created: false });
+          return json6({ task: task3, created: false });
         } catch (e) {
           const msg = e.message || "";
           if (msg.includes("version conflict"))
@@ -59995,7 +61729,7 @@ async function handleV1Request(req, url, dependencies = {}) {
           const tasks = await store.tasks.list(filter);
           const { limit: _l, offset: _o, ...countFilter } = filter;
           const total = await store.tasks.count(countFilter);
-          return json5({ tasks, count: tasks.length, total });
+          return json6({ tasks, count: tasks.length, total });
         }
         if (method === "POST") {
           const body2 = await readJson3(req);
@@ -60020,7 +61754,7 @@ async function handleV1Request(req, url, dependencies = {}) {
           if (!persisted || persisted.id !== created.id || (persisted.parent_id ?? null) !== (body2.parent_id ?? null) || (persisted.plan_id ?? null) !== (body2.plan_id ?? null) || body2.created_by !== undefined && persisted.created_by !== body2.created_by) {
             return error(500, "TASK_CREATE_PERSISTENCE_UNVERIFIED: task create was acknowledged but authoritative readback did not return the same stored task id, parent_id, plan_id, and explicit created_by", { code: "TASK_CREATE_PERSISTENCE_UNVERIFIED" });
           }
-          return json5({ task: persisted }, 201);
+          return json6({ task: persisted }, 201);
         }
         return error(405, `method ${method} not allowed on /v1/tasks`);
       }
@@ -60062,7 +61796,7 @@ async function handleV1Request(req, url, dependencies = {}) {
             new_holder: body3.new_holder,
             reason: body3.reason
           }, contextFromPrincipal(principal));
-          return json5({ receipt });
+          return json6({ receipt });
         }
         if (action === "comments") {
           if (method === "GET") {
@@ -60076,7 +61810,7 @@ async function handleV1Request(req, url, dependencies = {}) {
               if (legacyPage.length > LEGACY_COMMENT_RESPONSE_LIMIT) {
                 return error(426, "task has too many comments for this client; upgrade @hasna/todos to use cursor pagination");
               }
-              return json5({
+              return json6({
                 comments: legacyPage,
                 count: legacyPage.length,
                 has_more: false,
@@ -60101,7 +61835,7 @@ async function handleV1Request(req, url, dependencies = {}) {
             const page = (await store.audit.getCommentsPage(id, { limit: limit + 1, ...before ? { before } : {} }, contextFromPrincipal(principal))).map(redactComment3);
             const hasMore = page.length > limit;
             const comments = hasMore ? page.slice(1) : page;
-            return json5({
+            return json6({
               comments,
               count: comments.length,
               has_more: hasMore,
@@ -60124,7 +61858,7 @@ async function handleV1Request(req, url, dependencies = {}) {
               type: body3.type,
               progress_pct: body3.progress_pct
             }, contextFromPrincipal(principal, body3));
-            return json5({ comment: redactComment3(comment2) }, 201);
+            return json6({ comment: redactComment3(comment2) }, 201);
           }
           return error(405, `method ${method} not allowed on /v1/tasks/:id/comments`);
         }
@@ -60134,7 +61868,7 @@ async function handleV1Request(req, url, dependencies = {}) {
           if (!await store.tasks.get(id))
             return error(404, "task not found");
           const history = await store.audit.getTaskHistory(id);
-          return json5({ history, count: history.length });
+          return json6({ history, count: history.length });
         }
         if (action === "lock" || action === "unlock") {
           if (method !== "POST")
@@ -60146,7 +61880,7 @@ async function handleV1Request(req, url, dependencies = {}) {
             if (typeof store.tasks.lock !== "function")
               return error(501, "task locking is not supported by this storage backend");
             const agentId3 = body3.agent_id || principal.agent || "todos-serve";
-            return json5({ result: await store.tasks.lock(id, agentId3) });
+            return json6({ result: await store.tasks.lock(id, agentId3) });
           }
           if (typeof store.tasks.unlock !== "function")
             return error(501, "task unlocking is not supported by this storage backend");
@@ -60154,7 +61888,7 @@ async function handleV1Request(req, url, dependencies = {}) {
             if (!principal.scopes.includes("todos:*"))
               return error(403, "force unlock requires todos:* scope");
             const released2 = await store.tasks.unlock(id);
-            return json5({ success: released2 });
+            return json6({ success: released2 });
           }
           if (body3.agent_id && body3.agent_id !== principal.agent && !principal.scopes.includes("todos:*")) {
             return error(403, "unlock agent_id must match the authenticated agent");
@@ -60163,7 +61897,7 @@ async function handleV1Request(req, url, dependencies = {}) {
           if (!agentId2)
             return error(403, "unlock requires an agent-bound key or force=true");
           const released = await store.tasks.unlock(id, agentId2);
-          return json5({ success: released });
+          return json6({ success: released });
         }
         if (action === "dependencies") {
           if (!store.dependencies)
@@ -60172,7 +61906,7 @@ async function handleV1Request(req, url, dependencies = {}) {
             if (!await store.tasks.get(id))
               return error(404, "task not found");
             const edges = await store.dependencies.list(id);
-            return json5(edges);
+            return json6(edges);
           }
           if (method === "POST") {
             const body3 = await readJson3(req) ?? {};
@@ -60181,7 +61915,7 @@ async function handleV1Request(req, url, dependencies = {}) {
             }
             try {
               const dependency2 = await store.dependencies.add(id, body3.depends_on, contextFromPrincipal(principal));
-              return json5({ dependency: dependency2 }, 201);
+              return json6({ dependency: dependency2 }, 201);
             } catch (e) {
               const msg = e.message || "";
               if (msg.includes("not found"))
@@ -60195,7 +61929,7 @@ async function handleV1Request(req, url, dependencies = {}) {
             if (!subId)
               return error(400, "dependency target id is required (/v1/tasks/:id/dependencies/:dep)");
             const removed = await store.dependencies.remove(id, subId);
-            return json5({ removed });
+            return json6({ removed });
           }
           return error(405, `method ${method} not allowed on /v1/tasks/:id/dependencies`);
         }
@@ -60206,7 +61940,7 @@ async function handleV1Request(req, url, dependencies = {}) {
             if (!await store.tasks.get(id))
               return error(404, "task not found");
             const verifications = await store.verifications.list(id);
-            return json5({ verifications, count: verifications.length });
+            return json6({ verifications, count: verifications.length });
           }
           if (method === "POST") {
             const body3 = await readJson3(req) ?? {};
@@ -60222,7 +61956,7 @@ async function handleV1Request(req, url, dependencies = {}) {
                 artifact_path: body3.artifact_path,
                 agent_id: body3.agent_id
               }, contextFromPrincipal(principal, body3));
-              return json5({ verification: verification2 }, 201);
+              return json6({ verification: verification2 }, 201);
             } catch (e) {
               const msg = e.message || "";
               if (msg.includes("not found"))
@@ -60239,7 +61973,7 @@ async function handleV1Request(req, url, dependencies = {}) {
             if (!await store.tasks.get(id))
               return error(404, "task not found");
             const commits = await store.commits.list(id);
-            return json5({ commits, count: commits.length });
+            return json6({ commits, count: commits.length });
           }
           if (method === "POST") {
             const body3 = await readJson3(req) ?? {};
@@ -60253,7 +61987,7 @@ async function handleV1Request(req, url, dependencies = {}) {
                 author: body3.author,
                 files_changed: Array.isArray(body3.files_changed) ? body3.files_changed : undefined
               }, contextFromPrincipal(principal));
-              return json5({ commit }, 201);
+              return json6({ commit }, 201);
             } catch (e) {
               const msg = e.message || "";
               if (msg.includes("not found"))
@@ -60270,7 +62004,7 @@ async function handleV1Request(req, url, dependencies = {}) {
             if (!await store.tasks.get(id))
               return error(404, "task not found");
             const refs = await store.gitRefs.list(id);
-            return json5({ refs, count: refs.length });
+            return json6({ refs, count: refs.length });
           }
           if (method === "POST") {
             const body3 = await readJson3(req) ?? {};
@@ -60286,7 +62020,7 @@ async function handleV1Request(req, url, dependencies = {}) {
                 provider: body3.provider,
                 metadata: body3.metadata
               }, contextFromPrincipal(principal));
-              return json5({ ref }, 201);
+              return json6({ ref }, 201);
             } catch (e) {
               const msg = e.message || "";
               if (msg.includes("not found"))
@@ -60302,13 +62036,13 @@ async function handleV1Request(req, url, dependencies = {}) {
         const body2 = actionJson.value && typeof actionJson.value === "object" && !Array.isArray(actionJson.value) ? actionJson.value : {};
         const agentId = typeof body2.agent_id === "string" ? body2.agent_id : principal.agent || "todos-serve";
         if (action === "start" && method === "POST") {
-          return json5({ task: await store.tasks.start(id, agentId) });
+          return json6({ task: await store.tasks.start(id, agentId) });
         }
         if (action === "complete" && method === "POST") {
           const parsed = validateTaskCompletion(actionJson.value);
           if (!parsed.ok)
             return error(400, parsed.message);
-          return json5({
+          return json6({
             task: await store.tasks.complete(id, parsed.agentId || principal.agent || "todos-serve", parsed.options, contextFromPrincipal(principal, body2))
           });
         }
@@ -60316,12 +62050,12 @@ async function handleV1Request(req, url, dependencies = {}) {
           const parsed = validateTaskFailure(actionJson.value);
           if (!parsed.ok)
             return error(400, parsed.message);
-          return json5({
+          return json6({
             result: await store.tasks.fail(id, parsed.agentId || principal.agent || "todos-serve", parsed.reason, { retry: parsed.retry }, contextFromPrincipal(principal, body2))
           });
         }
         if (action === "claim" && method === "POST") {
-          return json5({ task: await store.tasks.claimNext(agentId, {}) });
+          return json6({ task: await store.tasks.claimNext(agentId, {}) });
         }
         return error(404, `unknown task action: ${action}`);
       }
@@ -60344,7 +62078,7 @@ async function handleV1Request(req, url, dependencies = {}) {
             throw e;
           }
         }
-        return task3 ? json5({ task: task3 }) : error(404, "task not found");
+        return task3 ? json6({ task: task3 }) : error(404, "task not found");
       }
       if (method === "PATCH" || method === "PUT") {
         const rawBody = await readJson3(req);
@@ -60363,7 +62097,7 @@ async function handleV1Request(req, url, dependencies = {}) {
         };
         try {
           const task3 = await store.tasks.update(id, patch);
-          return task3 ? json5({ task: task3 }) : error(404, "task not found");
+          return task3 ? json6({ task: task3 }) : error(404, "task not found");
         } catch (e) {
           const msg = e.message || "";
           if (msg.includes("version conflict"))
@@ -60373,7 +62107,7 @@ async function handleV1Request(req, url, dependencies = {}) {
       }
       if (method === "DELETE") {
         await store.tasks.delete(id, contextFromPrincipal(principal));
-        return json5({ deleted: true, id });
+        return json6({ deleted: true, id });
       }
       return error(405, `method ${method} not allowed on /v1/tasks/:id`);
     }
@@ -60381,7 +62115,7 @@ async function handleV1Request(req, url, dependencies = {}) {
       if (!id) {
         if (method === "GET") {
           const projects = await store.projects.list();
-          return json5({ projects, count: projects.length });
+          return json6({ projects, count: projects.length });
         }
         if (method === "POST") {
           const body2 = await readJson3(req);
@@ -60391,13 +62125,13 @@ async function handleV1Request(req, url, dependencies = {}) {
           if (!validated.ok)
             return error(400, validated.message);
           const project = await store.projects.create(validated.input, contextFromPrincipal(principal));
-          return json5({ project }, 201);
+          return json6({ project }, 201);
         }
         return error(405, `method ${method} not allowed on /v1/projects`);
       }
       if (action === "task-list" && subId === "ensure") {
         if (method === "GET") {
-          return json5(await planProjectTaskListEnsure(store, id));
+          return json6(await planProjectTaskListEnsure(store, id));
         }
         if (method !== "POST") {
           return error(405, `method ${method} not allowed on /v1/projects/:id/task-list/ensure`);
@@ -60418,7 +62152,7 @@ async function handleV1Request(req, url, dependencies = {}) {
           expected_project_revision: body2.expected_project_revision,
           ...typeof body2.idempotency_key === "string" ? { idempotency_key: body2.idempotency_key } : {}
         });
-        return json5(result, result.action === "created" ? 201 : 200);
+        return json6(result, result.action === "created" ? 201 : 200);
       }
       if (action === "task-list" && subId === "rollback") {
         if (method !== "POST") {
@@ -60436,7 +62170,7 @@ async function handleV1Request(req, url, dependencies = {}) {
         if (typeof body2.expected_task_list_revision !== "string" || !body2.expected_task_list_revision.trim()) {
           return error(400, "expected_task_list_revision must be a non-empty string from the accepted receipt");
         }
-        return json5(await rollbackProjectTaskListEnsure(store, id, {
+        return json6(await rollbackProjectTaskListEnsure(store, id, {
           receipt_id: body2.receipt_id,
           expected_task_list_revision: body2.expected_task_list_revision
         }));
@@ -60454,11 +62188,11 @@ async function handleV1Request(req, url, dependencies = {}) {
         const unknownField = Object.keys(body2).find((key2) => !["new_slug", "name"].includes(key2));
         if (unknownField)
           return error(400, `unknown project rename field: ${unknownField}`);
-        return json5(await store.projects.rename(id, body2, contextFromPrincipal(principal)));
+        return json6(await store.projects.rename(id, body2, contextFromPrincipal(principal)));
       }
       if (method === "GET") {
         const project = await store.projects.get(id);
-        return project ? json5({ project }) : error(404, "project not found");
+        return project ? json6({ project }) : error(404, "project not found");
       }
       if (method === "PATCH" || method === "PUT") {
         const body2 = await readJson3(req);
@@ -60470,18 +62204,18 @@ async function handleV1Request(req, url, dependencies = {}) {
         if (!await store.projects.get(id))
           return error(404, "project not found");
         const project = await store.projects.update(id, validated.patch);
-        return json5({ project });
+        return json6({ project });
       }
       if (method === "DELETE") {
         await store.projects.delete(id, contextFromPrincipal(principal));
-        return json5({ deleted: true, id });
+        return json6({ deleted: true, id });
       }
       return error(405, `method ${method} not allowed on /v1/projects/:id`);
     }
     if (resource === "plans") {
       if (!id && method === "GET") {
         const plans = await store.plans.list(url.searchParams.get("project_id") ?? undefined);
-        return json5({ plans, count: plans.length });
+        return json6({ plans, count: plans.length });
       }
       if (!id && method === "POST") {
         const body2 = await readJson3(req);
@@ -60499,14 +62233,14 @@ async function handleV1Request(req, url, dependencies = {}) {
           }
         }
         const plan = await store.plans.create(validated.input, contextFromPrincipal(principal, validated.input));
-        return json5({ plan }, 201);
+        return json6({ plan }, 201);
       }
       if (id && action === "project-link" && !subId) {
         if (method === "GET") {
           const projectId = url.searchParams.get("project_id");
           if (!projectId?.trim())
             return error(400, "project_id query parameter is required");
-          return json5(await planPlanProjectLink(store, id, projectId));
+          return json6(await planPlanProjectLink(store, id, projectId));
         }
         if (method !== "POST")
           return error(405, `method ${method} not allowed on /v1/plans/:id/project-link`);
@@ -60527,7 +62261,7 @@ async function handleV1Request(req, url, dependencies = {}) {
           expected_project_revision: body2.expected_project_revision,
           idempotency_key: body2.idempotency_key
         });
-        return json5(result, result.action === "linked" ? 201 : 200);
+        return json6(result, result.action === "linked" ? 201 : 200);
       }
       if (id && action === "project-link" && subId === "rollback") {
         if (method !== "POST")
@@ -60544,14 +62278,69 @@ async function handleV1Request(req, url, dependencies = {}) {
             return error(400, `${field} must be a non-empty string`);
           }
         }
-        return json5(await rollbackPlanProjectLink(store, id, body2.project_id, {
+        return json6(await rollbackPlanProjectLink(store, id, body2.project_id, {
           receipt_id: body2.receipt_id,
           expected_plan_revision: body2.expected_plan_revision
         }));
       }
+      if (id && action === "comments") {
+        if (!await store.plans.get(id))
+          return error(404, "plan not found");
+        if (method === "GET") {
+          if (store.plans.getCommentsPage) {
+            const rawLimit = url.searchParams.get("limit");
+            const cursor = url.searchParams.get("cursor");
+            const limit = rawLimit === null ? DEFAULT_COMMENT_PAGE_SIZE : Number(rawLimit);
+            if (!Number.isSafeInteger(limit) || limit < 1 || limit > MAX_COMMENT_PAGE_SIZE) {
+              return error(400, `limit must be an integer between 1 and ${MAX_COMMENT_PAGE_SIZE}`);
+            }
+            let before;
+            if (cursor) {
+              try {
+                before = decodeCommentCursor(cursor);
+              } catch {
+                return error(400, "invalid comment cursor");
+              }
+            }
+            const page = (await store.plans.getCommentsPage(id, { limit: limit + 1, ...before ? { before } : {} }, contextFromPrincipal(principal))).map(redactPlanComment2);
+            const hasMore = page.length > limit;
+            const comments2 = hasMore ? page.slice(1) : page;
+            return json6({
+              comments: comments2,
+              count: comments2.length,
+              has_more: hasMore,
+              next_cursor: hasMore && comments2[0] ? encodeCommentCursor(comments2[0]) : null
+            });
+          }
+          const comments = (await store.plans.getComments?.(id, contextFromPrincipal(principal)) ?? []).map(redactPlanComment2);
+          return json6({ comments, count: comments.length });
+        }
+        if (method === "POST") {
+          const body2 = await readJson3(req) ?? {};
+          if (typeof body2.content !== "string" || !body2.content.trim()) {
+            return error(400, "content is required");
+          }
+          const target = await store.plans.get(id);
+          if (!target)
+            return error(404, "plan not found");
+          if (!store.plans.addComment) {
+            return error(501, "plan comments are not supported by this storage backend");
+          }
+          const comment2 = await store.plans.addComment({
+            plan_id: id,
+            content: body2.content,
+            agent_id: body2.agent_id ?? principal.agent ?? undefined,
+            session_id: body2.session_id,
+            type: body2.type,
+            progress_pct: body2.progress_pct
+          }, contextFromPrincipal(principal, body2));
+          return json6({ comment: redactPlanComment2(comment2) }, 201);
+        }
+        return error(405, `method ${method} not allowed on /v1/plans/:id/comments`);
+      }
       if (id && method === "GET") {
         const plan = await store.plans.get(id);
-        return plan ? json5({ plan }) : error(404, "plan not found");
+        return plan ? json6({ plan }) : error(404, "plan not found");
       }
       if (id && (method === "PATCH" || method === "PUT")) {
         const body2 = await readJson3(req);
@@ -60591,12 +62380,12 @@ async function handleV1Request(req, url, dependencies = {}) {
           }
         }
         const plan = await store.plans.update(id, body2);
-        return json5({ plan });
+        return json6({ plan });
       }
       if (id && method === "DELETE") {
         if (!await store.plans.delete(id, contextFromPrincipal(principal)))
           return error(404, "plan not found");
-        return json5({ deleted: true, id });
+        return json6({ deleted: true, id });
       }
       if (id)
         return error(405, `method ${method} not allowed on /v1/plans/:id`);
@@ -60605,7 +62394,7 @@ async function handleV1Request(req, url, dependencies = {}) {
       if (!id && method === "GET") {
         const projectId = url.searchParams.get("project_id");
         const templates = (await store.templates.list()).filter((template) => projectId === null || template.project_id === projectId);
-        return json5({ templates, count: templates.length });
+        return json6({ templates, count: templates.length });
       }
       if (!id && method === "POST") {
         const body2 = await readJson3(req);
@@ -60613,13 +62402,13 @@ async function handleV1Request(req, url, dependencies = {}) {
         if (!validated.ok)
           return error(400, validated.message);
         const template = await store.templates.create(validated.input, contextFromPrincipal(principal));
-        return json5({ template: await store.templates.getWithTasks(template.id) }, 201);
+        return json6({ template: await store.templates.getWithTasks(template.id) }, 201);
       }
       if (!id)
         return error(405, `method ${method} not allowed on /v1/templates`);
       if (method === "GET") {
         const template = await store.templates.getWithTasks(id);
-        return template ? json5({ template }) : error(404, "template not found");
+        return template ? json6({ template }) : error(404, "template not found");
       }
       if (method === "PATCH" || method === "PUT") {
         const body2 = await readJson3(req);
@@ -60627,18 +62416,18 @@ async function handleV1Request(req, url, dependencies = {}) {
         if (!validated.ok)
           return error(400, validated.message);
         const template = await store.templates.update(id, validated.patch, contextFromPrincipal(principal));
-        return template ? json5({ template: await store.templates.getWithTasks(id) }) : error(404, "template not found");
+        return template ? json6({ template: await store.templates.getWithTasks(id) }) : error(404, "template not found");
       }
       if (method === "DELETE") {
         const deleted = await store.templates.delete(id, contextFromPrincipal(principal));
-        return deleted ? json5({ deleted: true, id }) : error(404, "template not found");
+        return deleted ? json6({ deleted: true, id }) : error(404, "template not found");
       }
       return error(405, `method ${method} not allowed on /v1/templates/:id`);
     }
     if (resource === "agents") {
       if (!id && method === "GET") {
         const agents = await store.agents.list();
-        return json5({ agents, count: agents.length });
+        return json6({ agents, count: agents.length });
       }
       if (!id && method === "POST") {
         const body2 = await readJson3(req);
@@ -60648,7 +62437,7 @@ async function handleV1Request(req, url, dependencies = {}) {
         if (result && typeof result === "object" && "conflict" in result) {
           return error(409, result.message ?? "agent name conflict", { conflict: true });
         }
-        return json5({ agent: result }, 201);
+        return json6({ agent: result }, 201);
       }
       if (id && action === "heartbeat") {
         if (method !== "POST")
@@ -60657,7 +62446,7 @@ async function handleV1Request(req, url, dependencies = {}) {
           return error(501, "agent heartbeat is not supported by this storage backend");
         }
         const agent = await store.agents.heartbeat(id, contextFromPrincipal(principal));
-        return agent ? json5({ agent }) : error(404, "agent not found");
+        return agent ? json6({ agent }) : error(404, "agent not found");
       }
       if (id && action === "release") {
         if (method !== "POST")
@@ -60672,11 +62461,11 @@ async function handleV1Request(req, url, dependencies = {}) {
         if (!result.released) {
           return error(409, "release denied: session_id does not match agent's current session", { released: false });
         }
-        return json5({ agent: result.agent, released: true });
+        return json6({ agent: result.agent, released: true });
       }
       if (id && method === "GET") {
         const agent = await store.agents.get(id);
-        return agent ? json5({ agent }) : error(404, "agent not found");
+        return agent ? json6({ agent }) : error(404, "agent not found");
       }
     }
     if (resource === "activity" && !id) {
@@ -60685,13 +62474,13 @@ async function handleV1Request(req, url, dependencies = {}) {
       const limitParam = url.searchParams.get("limit");
       const limit = limitParam ? Math.max(1, Math.min(1e4, Number(limitParam) || 50)) : 50;
       const activity = await store.audit.getRecentActivity(limit);
-      return json5({ activity, count: activity.length });
+      return json6({ activity, count: activity.length });
     }
     if (resource === "task-lists") {
       if (!id && method === "GET") {
         const projectId = url.searchParams.get("project_id") ?? undefined;
         const taskLists = await store.taskLists.list(projectId);
-        return json5({ task_lists: taskLists, count: taskLists.length });
+        return json6({ task_lists: taskLists, count: taskLists.length });
       }
       if (!id && method === "POST") {
         const body2 = await readJson3(req);
@@ -60713,17 +62502,17 @@ async function handleV1Request(req, url, dependencies = {}) {
           return error(400, "task-list slug must be non-empty kebab-case");
         }
         const taskList = await store.taskLists.create(body2, contextFromPrincipal(principal));
-        return json5({ task_list: taskList }, 201);
+        return json6({ task_list: taskList }, 201);
       }
       if (id && method === "GET") {
         const taskList = await store.taskLists.get(id);
-        return taskList ? json5({ task_list: taskList }) : error(404, "task list not found");
+        return taskList ? json6({ task_list: taskList }) : error(404, "task list not found");
       }
       if (id && (method === "PATCH" || method === "PUT")) {
         const body2 = await readJson3(req);
         if (!body2)
           return error(400, "invalid JSON body");
-        const unknownField = Object.keys(body2).find((key2) => !["slug", "name", "description", "metadata"].includes(key2));
+        const unknownField = Object.keys(body2).find((key2) => !["slug", "name", "description", "metadata", "project_id"].includes(key2));
         if (unknownField)
           return error(400, `unsupported task-list update field: ${unknownField}`);
         if (Object.keys(body2).length === 0)
@@ -60737,14 +62526,26 @@ async function handleV1Request(req, url, dependencies = {}) {
         if (body2.metadata !== undefined && (!body2.metadata || typeof body2.metadata !== "object" || Array.isArray(body2.metadata))) {
           return error(400, "metadata must be an object");
         }
+        if (body2.project_id !== undefined) {
+          if (body2.project_id !== null && (typeof body2.project_id !== "string" || !body2.project_id.trim())) {
+            return error(400, "project_id must be a non-empty string or null");
+          }
+          if (typeof body2.project_id === "string" && body2.project_id.trim() !== "") {
+            const target = await store.projects.get(body2.project_id.trim());
+            if (!target) {
+              return error(400, `task-list project_id must reference a registered project: ${body2.project_id}`);
+            }
+            body2.project_id = target.id;
+          }
+        }
         if (!await store.taskLists.get(id))
           return error(404, "task list not found");
         const taskList = await store.taskLists.update(id, body2);
-        return json5({ task_list: taskList });
+        return json6({ task_list: taskList });
       }
       if (id && method === "DELETE") {
         const deleted = await store.taskLists.delete(id, contextFromPrincipal(principal));
-        return deleted ? json5({ deleted: true, id }) : error(404, "task list not found");
+        return deleted ? json6({ deleted: true, id }) : error(404, "task list not found");
       }
       return error(405, `method ${method} not allowed on /v1/task-lists${id ? "/:id" : ""}`);
     }
@@ -60755,7 +62556,7 @@ async function handleV1Request(req, url, dependencies = {}) {
         return error(501, "dependency edge listing is not supported by this storage backend");
       }
       const dependencies2 = await store.dependencies.listAll();
-      return json5({ dependencies: dependencies2, count: dependencies2.length });
+      return json6({ dependencies: dependencies2, count: dependencies2.length });
     }
     if (resource === "commits" && id) {
       if (method !== "GET")
@@ -60763,7 +62564,7 @@ async function handleV1Request(req, url, dependencies = {}) {
       if (!store.commits)
         return error(501, "commit links are not supported by this storage backend");
       const commit = await store.commits.find(id);
-      return json5({ commit: commit ?? null });
+      return json6({ commit: commit ?? null });
     }
     if (resource === "refs" && id) {
       if (method !== "GET")
@@ -60777,7 +62578,7 @@ async function handleV1Request(req, url, dependencies = {}) {
         return error(400, "ref path segment has invalid percent encoding");
       }
       const refs = await store.gitRefs.find(decodedRef);
-      return json5({ refs, count: refs.length });
+      return json6({ refs, count: refs.length });
     }
     if (resource === "next" && !id) {
       if (method !== "GET")
@@ -60789,7 +62590,7 @@ async function handleV1Request(req, url, dependencies = {}) {
         ...url.searchParams.get("plan_id") ? { plan_id: url.searchParams.get("plan_id") } : {}
       };
       const task3 = await store.tasks.getNext(agent, filters);
-      return json5({ task: task3 ?? null });
+      return json6({ task: task3 ?? null });
     }
     if (resource === "stats" && method === "GET") {
       const [tasks, tasksAll, projects] = await Promise.all([
@@ -60797,7 +62598,7 @@ async function handleV1Request(req, url, dependencies = {}) {
         store.tasks.count({ include_subtasks: true }),
         store.projects.list()
       ]);
-      return json5({ tasks, tasks_all: tasksAll, subtasks: tasksAll - tasks, projects: projects.length });
+      return json6({ tasks, tasks_all: tasksAll, subtasks: tasksAll - tasks, projects: projects.length });
     }
     if (resource === "integrity" && !id) {
       if (method !== "GET")
@@ -60806,7 +62607,7 @@ async function handleV1Request(req, url, dependencies = {}) {
         return error(501, "referential-integrity reporting is not supported by this storage backend");
       }
       const integrity = await store.integrity.report();
-      return json5({ integrity });
+      return json6({ integrity });
     }
     if (resource === "import") {
       if (method !== "POST")
@@ -60831,7 +62632,7 @@ async function handleV1Request(req, url, dependencies = {}) {
         }
         const operation = completionImports.operations[0];
         const completed = await store.plans.completeAtRevision(operation.id, operation.expected_updated_at, contextFromPrincipal(principal));
-        return json5({
+        return json6({
           result: {
             inserted: 0,
             updated: completed.applied ? 1 : 0,
@@ -60870,17 +62671,17 @@ async function handleV1Request(req, url, dependencies = {}) {
           audit_history_id: failure.auditHistoryId
         });
       }
-      return json5({ result, received });
+      return json6({ result, received });
     }
     return error(404, `unknown /v1 resource: ${resource ?? "(root)"}`);
   } catch (e) {
     if (e instanceof PlanProjectLinkError) {
-      const status2 = e.code === "PLAN_PROJECT_LINK_PLAN_NOT_FOUND" || e.code === "PLAN_PROJECT_LINK_PROJECT_NOT_FOUND" || e.code === "PLAN_PROJECT_LINK_RECEIPT_NOT_FOUND" ? 404 : e.code === "PLAN_PROJECT_LINK_IDEMPOTENCY_KEY_INVALID" ? 400 : e.code === "PLAN_PROJECT_LINK_UNSUPPORTED" ? 501 : 409;
-      return error(status2, e.message, { code: e.code, conflict: status2 === 409, ...e.details });
+      const status3 = e.code === "PLAN_PROJECT_LINK_PLAN_NOT_FOUND" || e.code === "PLAN_PROJECT_LINK_PROJECT_NOT_FOUND" || e.code === "PLAN_PROJECT_LINK_RECEIPT_NOT_FOUND" ? 404 : e.code === "PLAN_PROJECT_LINK_IDEMPOTENCY_KEY_INVALID" ? 400 : e.code === "PLAN_PROJECT_LINK_UNSUPPORTED" ? 501 : 409;
+      return error(status3, e.message, { code: e.code, conflict: status3 === 409, ...e.details });
     }
     if (e instanceof ProjectTaskListEnsureError) {
-      const status2 = e.code === "PROJECT_NOT_FOUND" || e.code === "PROJECT_TASK_LIST_RECEIPT_NOT_FOUND" ? 404 : e.code === "PROJECT_TASK_LIST_IDEMPOTENCY_KEY_INVALID" ? 400 : 409;
-      return error(status2, e.message, { code: e.code, conflict: status2 === 409, ...e.details });
+      const status3 = e.code === "PROJECT_NOT_FOUND" || e.code === "PROJECT_TASK_LIST_RECEIPT_NOT_FOUND" ? 404 : e.code === "PROJECT_TASK_LIST_IDEMPOTENCY_KEY_INVALID" ? 400 : 409;
+      return error(status3, e.message, { code: e.code, conflict: status3 === 409, ...e.details });
     }
     if (e instanceof TaskReferenceAmbiguousError) {
       return error(409, e.message, {
@@ -60902,10 +62703,10 @@ async function handleV1Request(req, url, dependencies = {}) {
       });
     }
     if (e instanceof StaleLockHandoffError) {
-      const status2 = e.code === "STALE_LOCK_HANDOFF_INVALID_TASK_ID" || e.code === "STALE_LOCK_HANDOFF_INVALID_INPUT" ? 400 : e.code === "STALE_LOCK_HANDOFF_ACTOR_MISMATCH" ? 403 : 409;
-      return error(status2, e.message, {
+      const status3 = e.code === "STALE_LOCK_HANDOFF_INVALID_TASK_ID" || e.code === "STALE_LOCK_HANDOFF_INVALID_INPUT" ? 400 : e.code === "STALE_LOCK_HANDOFF_ACTOR_MISMATCH" ? 403 : 409;
+      return error(status3, e.message, {
         code: e.code,
-        conflict: status2 === 409,
+        conflict: status3 === 409,
         ...e.details
       });
     }
@@ -60933,19 +62734,20 @@ async function handleV1Request(req, url, dependencies = {}) {
     return error(500, e.message || "internal error");
   }
 }
-var JSON_HEADERS4, DEFAULT_COMMENT_PAGE_SIZE = 100, MAX_COMMENT_PAGE_SIZE = 500, LEGACY_COMMENT_RESPONSE_LIMIT = 500, RFC3339_DATE_TIME;
+var JSON_HEADERS5, DEFAULT_COMMENT_PAGE_SIZE = 100, MAX_COMMENT_PAGE_SIZE = 500, LEGACY_COMMENT_RESPONSE_LIMIT = 500, RFC3339_DATE_TIME;
 var init_v1 = __esm(() => {
   init_types();
   init_cloud();
   init_pr_groups();
   init_project_registration();
   init_task_manifest();
+  init_task_subtree_transfer();
   init_redaction();
   init_project_task_list_ensure();
   init_plan_project_link();
   init_stale_lock_handoff();
   init_audit_history_import();
-  JSON_HEADERS4 = { "Content-Type": "application/json" };
+  JSON_HEADERS5 = { "Content-Type": "application/json" };
   RFC3339_DATE_TIME = /^(\d{4})-(\d{2})-(\d{2})[Tt]\d{2}:\d{2}:\d{2}(\.\d+)?([Zz]|[+-]\d{2}:\d{2})$/;
 });
 
@@ -61156,7 +62958,7 @@ class SqlitePrGroupLedgerPersistence {
   }
 }
 var sqliteTransactionTails2;
-var init_sqlite3 = __esm(() => {
+var init_sqlite4 = __esm(() => {
   sqliteTransactionTails2 = new WeakMap;
 });
 
@@ -61187,10 +62989,10 @@ function createLocalPrGroupLedger(db = getDatabase()) {
 var init_pr_groups2 = __esm(() => {
   init_database();
   init_ledger();
-  init_sqlite3();
+  init_sqlite4();
   init_types3();
   init_ledger();
-  init_sqlite3();
+  init_sqlite4();
   init_http_client();
   init_postgres();
 });
@@ -61201,7 +63003,7 @@ __export(exports_serve, {
   taskToSummary: () => taskToSummary,
   startServer: () => startServer,
   serveStaticFile: () => serveStaticFile,
-  json: () => json3,
+  json: () => json4,
   checkAuth: () => checkAuth,
   SECURITY_HEADERS: () => SECURITY_HEADERS,
   MIME_TYPES: () => MIME_TYPES
@@ -61287,9 +63089,9 @@ function checkRateLimit(ip) {
   }
   return { allowed: true };
 }
-function json3(data, status2 = 200, headers) {
+function json4(data, status3 = 200, headers) {
   return new Response(JSON.stringify(data), {
-    status: status2,
+    status: status3,
     headers: {
       "Content-Type": "application/json",
       ...SECURITY_HEADERS,
@@ -61432,7 +63234,7 @@ Dashboard not found at: ${dashboardDir}`);
         "Access-Control-Allow-Headers": "Content-Type, X-API-Key, Authorization",
         Vary: "Origin"
       } : undefined;
-      const jsonWithCors = (data, status2 = 200) => json3(data, status2, corsHeaders);
+      const jsonWithCors = (data, status3 = 200) => json4(data, status3, corsHeaders);
       if (method === "OPTIONS") {
         return new Response(null, {
           headers: corsHeaders || {
@@ -61513,13 +63315,13 @@ Dashboard not found at: ${dashboardDir}`);
           return res;
       }
       if (path === "/api/health" && method === "GET") {
-        return handleHealth(ctx, json3);
+        return handleHealth(ctx, json4);
       }
       if (path === "/api/headless" && method === "GET") {
-        return handleHeadlessBoundary(ctx, json3);
+        return handleHeadlessBoundary(ctx, json4);
       }
       if (path === "/api/stats" && method === "GET") {
-        return handleStats(ctx, json3);
+        return handleStats(ctx, json4);
       }
       if (path === "/api/tasks" && method === "GET") {
         return handleListTasks(req, url, ctx, jsonWithCors, taskToSummary);
@@ -61534,16 +63336,16 @@ Dashboard not found at: ${dashboardDir}`);
         return handleTasksExport(req, url, ctx, jsonWithCors, taskToSummary);
       }
       if (path === "/api/tasks/bulk" && method === "POST") {
-        return handleTasksBulk(req, ctx, json3);
+        return handleTasksBulk(req, ctx, json4);
       }
       if (path === "/api/tasks/status" && method === "GET") {
-        return handleTasksStatus(req, url, ctx, json3);
+        return handleTasksStatus(req, url, ctx, json4);
       }
       if (path === "/api/tasks/next" && method === "GET") {
         return handleTasksNext(req, url, ctx, jsonWithCors, taskToSummary);
       }
       if (path === "/api/tasks/active" && method === "GET") {
-        return handleTasksActive(req, url, ctx, json3);
+        return handleTasksActive(req, url, ctx, json4);
       }
       if (path === "/api/tasks/stale" && method === "GET") {
         return handleTasksStale(req, url, ctx, jsonWithCors, taskToSummary);
@@ -61556,11 +63358,11 @@ Dashboard not found at: ${dashboardDir}`);
       }
       const attachmentsMatch = path.match(/^\/api\/tasks\/([^/]+)\/attachments$/);
       if (attachmentsMatch && method === "GET") {
-        return handleTaskAttachments(attachmentsMatch[1], ctx, json3);
+        return handleTaskAttachments(attachmentsMatch[1], ctx, json4);
       }
       const progressMatch = path.match(/^\/api\/tasks\/([^/]+)\/progress$/);
       if (progressMatch) {
-        const res = await handleTaskProgress(progressMatch[1], req, method, ctx, json3, url);
+        const res = await handleTaskProgress(progressMatch[1], req, method, ctx, json4, url);
         if (res !== null)
           return res;
       }
@@ -61574,7 +63376,7 @@ Dashboard not found at: ${dashboardDir}`);
           return handlePatchTask(id, req, ctx, jsonWithCors, taskToSummary);
         }
         if (method === "DELETE") {
-          return handleDeleteTask(id, ctx, json3);
+          return handleDeleteTask(id, ctx, json4);
         }
       }
       const startMatch = path.match(/^\/api\/tasks\/([^/]+)\/start$/);
@@ -61590,7 +63392,7 @@ Dashboard not found at: ${dashboardDir}`);
         return handleCompleteTask(completeMatch[1], ctx, jsonWithCors, taskToSummary);
       }
       if (path === "/api/projects" && method === "GET") {
-        return handleListProjects(url, ctx, json3);
+        return handleListProjects(url, ctx, json4);
       }
       if (path === "/api/agents/me" && method === "GET") {
         return handleAgentMe(req, url, ctx, jsonWithCors, taskToSummary);
@@ -61603,92 +63405,92 @@ Dashboard not found at: ${dashboardDir}`);
         return handleClaimTask(req, ctx, jsonWithCors, taskToSummary);
       }
       if (path === "/api/orgs" && method === "GET") {
-        return handleListOrgs(ctx, json3);
+        return handleListOrgs(ctx, json4);
       }
       if (path === "/api/orgs" && method === "POST") {
-        return handleCreateOrg(req, ctx, json3);
+        return handleCreateOrg(req, ctx, json4);
       }
       const orgMatch = path.match(/^\/api\/orgs\/([^/]+)$/);
       if (orgMatch && method === "PATCH") {
-        return handleUpdateOrg(orgMatch[1], req, ctx, json3);
+        return handleUpdateOrg(orgMatch[1], req, ctx, json4);
       }
       if (orgMatch && method === "DELETE") {
-        return handleDeleteOrg(orgMatch[1], ctx, json3);
+        return handleDeleteOrg(orgMatch[1], ctx, json4);
       }
       if (path === "/api/org" && method === "GET") {
-        return handleOrgChart(ctx, json3);
+        return handleOrgChart(ctx, json4);
       }
       const teamMatch = path.match(/^\/api\/agents\/([^/]+)\/team$/);
       if (teamMatch && method === "GET") {
-        return handleAgentTeam(teamMatch[1], ctx, json3);
+        return handleAgentTeam(teamMatch[1], ctx, json4);
       }
       if (path === "/api/agents" && method === "GET") {
-        return handleListAgents(url, ctx, json3);
+        return handleListAgents(url, ctx, json4);
       }
       if (path === "/api/projects" && method === "POST") {
-        return handleCreateProject(req, ctx, json3);
+        return handleCreateProject(req, ctx, json4);
       }
       const projectDeleteMatch = path.match(/^\/api\/projects\/([^/]+)$/);
       if (projectDeleteMatch && method === "DELETE") {
-        return handleDeleteProject(projectDeleteMatch[1], ctx, json3);
+        return handleDeleteProject(projectDeleteMatch[1], ctx, json4);
       }
       if (path === "/api/agents" && method === "POST") {
-        return handleRegisterAgent(req, ctx, json3);
+        return handleRegisterAgent(req, ctx, json4);
       }
       const agentMatch = path.match(/^\/api\/agents\/([^/]+)$/);
       if (agentMatch && method === "PATCH") {
-        return handleUpdateAgent(agentMatch[1], req, ctx, json3);
+        return handleUpdateAgent(agentMatch[1], req, ctx, json4);
       }
       if (agentMatch && method === "DELETE") {
-        return handleDeleteAgent(agentMatch[1], ctx, json3);
+        return handleDeleteAgent(agentMatch[1], ctx, json4);
       }
       if (path === "/api/agents/bulk" && method === "POST") {
-        return handleBulkDeleteAgents(req, ctx, json3);
+        return handleBulkDeleteAgents(req, ctx, json4);
       }
       if (path === "/api/projects/bulk" && method === "POST") {
-        return handleBulkDeleteProjects(req, ctx, json3);
+        return handleBulkDeleteProjects(req, ctx, json4);
       }
       if (path === "/api/doctor" && method === "GET") {
-        return handleDoctor(ctx, json3);
+        return handleDoctor(ctx, json4);
       }
       if (path === "/api/report" && method === "GET") {
-        return handleReport(req, url, ctx, json3);
+        return handleReport(req, url, ctx, json4);
       }
       if (path === "/api/activity" && method === "GET") {
-        return handleActivity(req, url, ctx, json3);
+        return handleActivity(req, url, ctx, json4);
       }
       const historyMatch = path.match(/^\/api\/tasks\/([^/]+)\/history$/);
       if (historyMatch && method === "GET") {
-        return handleTaskHistory(historyMatch[1], ctx, json3, url);
+        return handleTaskHistory(historyMatch[1], ctx, json4, url);
       }
       if (path === "/api/webhooks" && method === "GET") {
-        return handleListWebhooks(ctx, json3);
+        return handleListWebhooks(ctx, json4);
       }
       if (path === "/api/webhooks" && method === "POST") {
-        return handleCreateWebhook(req, ctx, json3);
+        return handleCreateWebhook(req, ctx, json4);
       }
       const webhookMatch = path.match(/^\/api\/webhooks\/([^/]+)$/);
       if (webhookMatch && method === "DELETE") {
-        return handleDeleteWebhook(webhookMatch[1], ctx, json3);
+        return handleDeleteWebhook(webhookMatch[1], ctx, json4);
       }
       if (path === "/api/templates" && method === "GET") {
-        return handleListTemplates(ctx, json3);
+        return handleListTemplates(ctx, json4);
       }
       if (path === "/api/templates" && method === "POST") {
-        return handleCreateTemplate(req, ctx, json3);
+        return handleCreateTemplate(req, ctx, json4);
       }
       const templateMatch = path.match(/^\/api\/templates\/([^/]+)$/);
       if (templateMatch && method === "DELETE") {
-        return handleDeleteTemplate(templateMatch[1], ctx, json3);
+        return handleDeleteTemplate(templateMatch[1], ctx, json4);
       }
       if (path === "/api/plans" && method === "GET") {
-        return handleListPlans(url, ctx, json3);
+        return handleListPlans(url, ctx, json4);
       }
       if (path === "/api/plans" && method === "POST") {
-        return handleCreatePlan(req, ctx, json3);
+        return handleCreatePlan(req, ctx, json4);
       }
       if (path === "/api/plans/bulk" && method === "POST") {
-        return handleBulkDeletePlans(req, ctx, json3);
+        return handleBulkDeletePlans(req, ctx, json4);
       }
       const planMatch = path.match(/^\/api\/plans\/([^/]+)$/);
       if (planMatch) {
@@ -61697,16 +63499,16 @@ Dashboard not found at: ${dashboardDir}`);
           return handleGetPlan(id, ctx, jsonWithCors, taskToSummary);
         }
         if (method === "PATCH") {
-          return handleUpdatePlan(id, req, ctx, json3);
+          return handleUpdatePlan(id, req, ctx, json4);
         }
         if (method === "DELETE") {
-          return handleDeletePlan(id, ctx, json3);
+          return handleDeletePlan(id, ctx, json4);
         }
       }
       const staticRes = handleStaticFiles(path, method, ctx, jsonWithCors, serveStaticFile);
       if (staticRes)
         return staticRes;
-      return json3({ error: "Not found" }, 404);
+      return json4({ error: "Not found" }, 404);
     }
   });
   const shutdown = () => {