@hasna/todos 0.15.35 → 0.15.46

package/dist/index.js

@@ -2676,6 +2676,20 @@ function ensureSchema(db) {
   ensureIndex("CREATE INDEX IF NOT EXISTS idx_webhook_deliveries_event ON webhook_deliveries(event)");
   ensureColumn("task_comments", "type", "TEXT DEFAULT 'comment'");
   ensureColumn("task_comments", "progress_pct", "INTEGER");
+  ensureTable("plan_comments", `
+    CREATE TABLE plan_comments (
+      id TEXT PRIMARY KEY,
+      plan_id TEXT NOT NULL REFERENCES plans(id) ON DELETE CASCADE,
+      agent_id TEXT,
+      session_id TEXT,
+      content TEXT NOT NULL,
+      type TEXT DEFAULT 'comment' CHECK(type IN ('comment', 'progress', 'note')),
+      progress_pct INTEGER CHECK(progress_pct IS NULL OR (progress_pct >= 0 AND progress_pct <= 100)),
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      machine_id TEXT,
+      synced_at TEXT
+    )`);
+  ensureIndex("CREATE INDEX IF NOT EXISTS idx_plan_comments_plan ON plan_comments(plan_id)");
   ensureColumn("projects", "machine_id", "TEXT");
   ensureColumn("projects", "synced_at", "TEXT");
   ensureColumn("tasks", "machine_id", "TEXT");
@@ -3657,6 +3671,7 @@ var init_machines = __esm(() => {
     "task_lists",
     "plans",
     "task_comments",
+    "plan_comments",
     "sessions",
     "task_history",
     "webhooks",
@@ -4160,20 +4175,16 @@ var init_sync_utils = __esm(() => {
 // src/storage/config.ts
 var exports_config = {};
 __export(exports_config, {
-  parseStorageMode: () => parseStorageMode,
   parseStorageBackend: () => parseStorageBackend,
   loadTodosStorageConfig: () => loadTodosStorageConfig,
   loadStorageConfig: () => loadStorageConfig,
   isTodosShadowEnabled: () => isTodosShadowEnabled,
-  isTodosRemoteStorageEnabled: () => isTodosRemoteStorageEnabled,
   isTodosPostgresBackend: () => isTodosPostgresBackend,
   getTodosStorageShadowEnvName: () => getTodosStorageShadowEnvName,
-  getTodosStorageMode: () => getTodosStorageMode,
   getTodosStorageEnvName: () => getTodosStorageEnvName,
   getTodosStorageDatabaseUrl: () => getTodosStorageDatabaseUrl,
   getTodosStorageDatabaseEnv: () => getTodosStorageDatabaseEnv,
   getTodosStorageBackend: () => getTodosStorageBackend,
-  getStorageMode: () => getStorageMode,
   getStorageDatabaseUrl: () => getStorageDatabaseUrl,
   getStorageDatabaseEnv: () => getStorageDatabaseEnv,
   getCanonicalTodosRdsConfig: () => getCanonicalTodosRdsConfig,
@@ -4183,7 +4194,6 @@ __export(exports_config, {
   TODOS_STORAGE_FALLBACK_ENV: () => TODOS_STORAGE_FALLBACK_ENV,
   TODOS_STORAGE_ENV: () => TODOS_STORAGE_ENV,
   STORAGE_TABLES: () => STORAGE_TABLES,
-  REMOVED_STORAGE_MODE_ENV_KEYS: () => REMOVED_STORAGE_MODE_ENV_KEYS,
   CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV: () => CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV,
   CANONICAL_TODOS_RDS_DATABASE: () => CANONICAL_TODOS_RDS_DATABASE,
   CANONICAL_TODOS_RDS_CLUSTER_ENV: () => CANONICAL_TODOS_RDS_CLUSTER_ENV
@@ -4238,9 +4248,6 @@ function loadStorageConfig(env = process.env) {
 function isTodosPostgresBackend(config) {
   return config.mode === "postgres";
 }
-function isTodosRemoteStorageEnabled(config) {
-  return isTodosPostgresBackend(config);
-}
 function assertTodosRemoteStorageConfig(config) {
   if (!isTodosPostgresBackend(config))
     return;
@@ -4256,32 +4263,15 @@ function parseStorageBackend(value) {
     return "sqlite";
   if (normalized === "postgres" || normalized === "postgresql")
     return "postgres";
-  if (["local", "remote", "cloud", "hybrid", "self_hosted"].includes(normalized)) {
-    throw new Error(`${TODOS_STORAGE_ENV.databaseUrl} selects the backend. Deployment modes no longer exist: ` + `delete the storage-mode variable and set ${TODOS_STORAGE_ENV.databaseUrl} to select the ` + `postgresql backend, or leave it unset for sqlite.`);
-  }
   throw new Error(`Storage backend must be sqlite or postgres`);
 }
-function parseStorageMode(value) {
-  return parseStorageBackend(value);
-}
 function getTodosStorageBackend(env = process.env) {
-  for (const key of REMOVED_STORAGE_MODE_ENV_KEYS) {
-    if (Object.hasOwn(env, key) && env[key] !== undefined) {
-      throw new Error(`${key} was removed. Deployment modes no longer exist: delete the storage-mode variable. ` + `Set ${TODOS_STORAGE_ENV.databaseUrl} to select the postgresql backend, ` + `or leave it unset for sqlite.`);
-    }
-  }
   if (!getTodosStorageDatabaseUrl(env))
     return "sqlite";
   if (isTodosShadowEnabled(env))
     return "sqlite";
   return "postgres";
 }
-function getTodosStorageMode(env = process.env) {
-  return getTodosStorageBackend(env);
-}
-function getStorageMode(env = process.env) {
-  return getTodosStorageBackend(env);
-}
 function isTodosShadowEnabled(env = process.env) {
   return parseBoolean(readStorageEnv(env, "shadow").value, false);
 }
@@ -4348,7 +4338,7 @@ function parsePositiveInteger(value, fallback) {
   }
   return parsed;
 }
-var TODOS_STORAGE_TABLES, STORAGE_TABLES, TODOS_STORAGE_ENV, TODOS_STORAGE_FALLBACK_ENV, REMOVED_STORAGE_MODE_ENV_KEYS, CANONICAL_TODOS_RDS_CLUSTER_ENV = "HASNA_TODOS_RDS_CLUSTER", CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV = "HASNA_TODOS_RDS_RUNTIME_PATH", CANONICAL_TODOS_RDS_DATABASE = "todos";
+var TODOS_STORAGE_TABLES, STORAGE_TABLES, TODOS_STORAGE_ENV, TODOS_STORAGE_FALLBACK_ENV, CANONICAL_TODOS_RDS_CLUSTER_ENV = "HASNA_TODOS_RDS_CLUSTER", CANONICAL_TODOS_RDS_RUNTIME_PATH_ENV = "HASNA_TODOS_RDS_RUNTIME_PATH", CANONICAL_TODOS_RDS_DATABASE = "todos";
 var init_config = __esm(() => {
   TODOS_STORAGE_TABLES = [
     "todos_sync_records",
@@ -4387,12 +4377,6 @@ var init_config = __esm(() => {
     syncBatchSize: "TODOS_SYNC_BATCH_SIZE",
     syncDryRun: "TODOS_SYNC_DRY_RUN"
   };
-  REMOVED_STORAGE_MODE_ENV_KEYS = [
-    "HASNA_TODOS_STORAGE_MODE",
-    "HASNA_TODOS_MODE",
-    "TODOS_STORAGE_MODE",
-    "TODOS_MODE"
-  ];
 });
 
 // src/storage/shadow-outbox-schema.ts
@@ -6857,22 +6841,31 @@ function updateTaskList(id, input, db) {
       throw new TaskListNotFoundError(id);
     const sets = ["updated_at = ?"];
     const params = [now()];
-    if (input.slug !== undefined) {
-      const slug = slugify(input.slug);
-      if (!slug)
-        throw new Error("Invalid task-list slug \u2014 must be non-empty kebab-case");
-      const duplicate = existing.project_id ? d.query("SELECT id FROM task_lists WHERE project_id = ? AND slug = ? AND id != ?").get(existing.project_id, slug, id) : d.query("SELECT id FROM task_lists WHERE project_id IS NULL AND slug = ? AND id != ?").get(slug, id);
+    const projectId = input.project_id === "" || input.project_id === null ? null : input.project_id === undefined ? existing.project_id : input.project_id;
+    const scopeChanged = projectId !== existing.project_id;
+    const effectiveSlug = input.slug !== undefined ? slugify(input.slug) : existing.slug;
+    if (input.slug !== undefined && !effectiveSlug) {
+      throw new Error("Invalid task-list slug \u2014 must be non-empty kebab-case");
+    }
+    if (scopeChanged || input.slug !== undefined && effectiveSlug !== existing.slug) {
+      const duplicate = projectId ? d.query("SELECT id FROM task_lists WHERE project_id = ? AND slug = ? AND id != ?").get(projectId, effectiveSlug, id) : d.query("SELECT id FROM task_lists WHERE project_id IS NULL AND slug = ? AND id != ?").get(effectiveSlug, id);
       if (duplicate) {
-        throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${slug}" already exists in this scope`);
+        throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${effectiveSlug}" already exists in this scope`);
       }
-      if (slug !== existing.slug) {
+      if (scopeChanged || effectiveSlug !== existing.slug) {
         releaseCanonicalSlugClaims("task_list", id, d);
-        if (!claimCanonicalSlug("task_list", taskListSlugScopeKey(existing.project_id), slug, id, d)) {
-          throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${slug}" already exists in this scope`);
+        if (!claimCanonicalSlug("task_list", taskListSlugScopeKey(projectId), effectiveSlug, id, d)) {
+          throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${effectiveSlug}" already exists in this scope`);
         }
       }
+    }
+    if (input.slug !== undefined) {
       sets.push("slug = ?");
-      params.push(slug);
+      params.push(effectiveSlug);
+    }
+    if (projectId !== existing.project_id) {
+      sets.push("project_id = ?");
+      params.push(projectId);
     }
     if (input.name !== undefined) {
       sets.push("name = ?");
@@ -8658,7 +8651,7 @@ function getTaskGraph(taskId, direction = "both", db) {
     const deps = getTaskDependencies(t.id, d);
     const hasUnfinishedDeps = deps.some((dep) => {
       const depTask = getTask(dep.depends_on, d);
-      return depTask && depTask.status !== "completed";
+      return depTask && isBlockingDependencyStatus(depTask.status);
     });
     return { id: t.id, short_id: t.short_id, title: t.title, status: t.status, priority: t.priority, is_blocked: hasUnfinishedDeps };
   }
@@ -8918,7 +8911,7 @@ function getBlockingDeps(id, db) {
   const blocking = [];
   for (const dep of deps) {
     const task = getTask(dep.depends_on, d);
-    if (task && task.status !== "completed")
+    if (task && isBlockingDependencyStatus(task.status))
       blocking.push(task);
   }
   return blocking;
@@ -9242,7 +9235,7 @@ function getNextTask(agentId, filters, db) {
     conditions.push(`id IN (SELECT task_id FROM task_tags WHERE tag IN (${placeholders}))`);
     params.push(...filters.tags);
   }
-  conditions.push("id NOT IN (SELECT td.task_id FROM task_dependencies td JOIN tasks dep ON dep.id = td.depends_on WHERE dep.status != 'completed')");
+  conditions.push("id NOT IN (SELECT td.task_id FROM task_dependencies td JOIN tasks dep ON dep.id = td.depends_on WHERE dep.status NOT IN ('completed', 'cancelled'))");
   const where = conditions.join(" AND ");
   let recentProjectIds = [];
   const assignedAliasParams = [];
@@ -9286,7 +9279,7 @@ function getActiveWork(filters, db) {
 }
 function getTasksChangedSince(since, filters, db) {
   const d = db || getDatabase();
-  const conditions = ["updated_at > ?"];
+  const conditions = ["(julianday(updated_at) IS NULL OR julianday(updated_at) > julianday(?))"];
   const params = [since];
   if (filters?.project_id) {
     conditions.push("project_id = ?");
@@ -9321,8 +9314,8 @@ function failTask(id, agentId, reason, options, db) {
   const safeMeta = sanitizePreWriteValue(meta, "task.failure.metadata");
   const timestamp2 = now();
   const failTx = d.transaction(() => {
-    const res = d.run(`UPDATE tasks SET status = 'failed', reason = ?, locked_by = NULL, locked_at = NULL, metadata = ?, version = version + 1, updated_at = ?
-       WHERE id = ? AND version = ?`, [safeReason, JSON.stringify(safeMeta), timestamp2, id, task.version]);
+    const res = d.run(`UPDATE tasks SET status = 'failed', reason = ?, locked_by = NULL, locked_at = NULL, completed_at = COALESCE(completed_at, ?), metadata = ?, version = version + 1, updated_at = ?
+       WHERE id = ? AND version = ?`, [safeReason, timestamp2, JSON.stringify(safeMeta), timestamp2, id, task.version]);
     if (res.changes === 0) {
       const current = getTask(id, d);
       throw new VersionConflictError(id, task.version, current?.version ?? -1);
@@ -9334,6 +9327,7 @@ function failTask(id, agentId, reason, options, db) {
     status: "failed",
     locked_by: null,
     locked_at: null,
+    completed_at: task.completed_at ?? timestamp2,
     reason: safeReason,
     metadata: safeMeta,
     version: task.version + 1,
@@ -9982,13 +9976,20 @@ function updateTaskStored(id, input, db) {
     if (isTerminalStatus(input.status)) {
       sets.push("locked_by = NULL");
       sets.push("locked_at = NULL");
-    }
-    if (input.status === "completed") {
-      sets.push("completed_at = ?");
-      params.push(completionTimestamp);
+      if (input.status === "completed") {
+        sets.push("completed_at = ?");
+        params.push(completionTimestamp);
+      } else {
+        sets.push("completed_at = COALESCE(completed_at, ?)");
+        params.push(completionTimestamp);
+      }
     } else if (task.status === "completed" && input.completed_at === undefined) {
       sets.push("completed_at = NULL");
     }
+    if (input.status === "in_progress") {
+      sets.push("started_at = COALESCE(started_at, ?)");
+      params.push(timestamp2);
+    }
   }
   if (input.priority !== undefined) {
     sets.push("priority = ?");
@@ -10126,7 +10127,6 @@ function updateTaskStored(id, input, db) {
   if (input.approved_by !== undefined)
     logTaskChange(id, "approve", "approved_by", null, input.approved_by, agentId, d);
   const reopened = input.status !== undefined && input.status !== "completed" && task.status === "completed" && input.completed_at === undefined;
-  const completedNow = input.status === "completed";
   const terminalNow = input.status !== undefined && isTerminalStatus(input.status);
   const updatedTask = {
     ...task,
@@ -10137,7 +10137,8 @@ function updateTaskStored(id, input, db) {
     updated_at: timestamp2,
     locked_by: terminalNow ? null : task.locked_by,
     locked_at: terminalNow ? null : task.locked_at,
-    completed_at: completedNow ? completionTimestamp : reopened ? null : input.completed_at !== undefined ? input.completed_at : task.completed_at,
+    completed_at: input.status === "completed" ? completionTimestamp : input.completed_at !== undefined ? input.completed_at : terminalNow ? task.completed_at ?? completionTimestamp : reopened ? null : task.completed_at,
+    started_at: input.status === "in_progress" ? task.started_at ?? timestamp2 : task.started_at,
     sla_minutes: input.sla_minutes !== undefined ? input.sla_minutes : task.sla_minutes,
     actual_minutes: input.actual_minutes ?? task.actual_minutes,
     confidence: input.confidence !== undefined ? input.confidence : task.confidence,
@@ -10198,6 +10199,9 @@ function deleteTask(id, db) {
     version: row.version
   }, d);
   const result = d.run("DELETE FROM tasks WHERE id = ?", [id]);
+  if (result.changes > 0) {
+    d.run("DELETE FROM task_dependencies WHERE task_id = ? OR depends_on = ?", [id, id]);
+  }
   return result.changes > 0;
 }
 var init_task_crud = __esm(() => {
@@ -12882,10 +12886,10 @@ function cancelDispatch(id, db) {
   _db2.run("UPDATE dispatches SET status = 'cancelled' WHERE id = ?", [id]);
   return getDispatch(id, _db2);
 }
-function updateDispatchStatus(id, status2, opts = {}, db) {
+function updateDispatchStatus(id, status3, opts = {}, db) {
   const _db2 = db ?? getDatabase();
   const error = opts.error ? sanitizePreWriteText(opts.error, "dispatch.error") : null;
-  _db2.run("UPDATE dispatches SET status = ?, error = ?, sent_at = ? WHERE id = ?", [status2, error, opts.sent_at ?? null, id]);
+  _db2.run("UPDATE dispatches SET status = ?, error = ?, sent_at = ? WHERE id = ?", [status3, error, opts.sent_at ?? null, id]);
 }
 function createDispatchLog(log, db) {
   const _db2 = db ?? getDatabase();
@@ -12918,7 +12922,7 @@ var init_dispatches = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/todos",
-  version: "0.15.35",
+  version: "0.15.46",
   description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   type: "module",
   main: "dist/index.js",
@@ -12964,6 +12968,10 @@ var package_default = {
     "./task-manifest": {
       types: "./dist/task-manifest.d.ts",
       import: "./dist/task-manifest.js"
+    },
+    "./task-subtree-transfer": {
+      types: "./dist/task-subtree-transfer.d.ts",
+      import: "./dist/task-subtree-transfer.js"
     }
   },
   workspaces: [
@@ -12977,8 +12985,8 @@ var package_default = {
     "README.md"
   ],
   scripts: {
-    build: "rm -rf dist dashboard/dist && cd dashboard && bun install --frozen-lockfile && bun run build && cd .. && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/server/index.ts --outdir dist/server --target bun && bun build src/sdk/index.ts --outdir dist/sdk --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/index.ts src/mcp.ts src/registry.ts src/contracts.ts src/storage.ts src/testing.ts src/project-registration.ts src/task-manifest.ts --outdir dist --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && tsc --emitDeclarationOnly --outDir dist",
-    "build:server": "rm -rf dist && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/server/index.ts --outdir dist/server --target bun && bun build src/sdk/index.ts --outdir dist/sdk --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/index.ts src/mcp.ts src/registry.ts src/contracts.ts src/storage.ts src/testing.ts src/project-registration.ts src/task-manifest.ts --outdir dist --target bun --external '@hasna/contracts' --external '@hasna/contracts/*'",
+    build: "rm -rf dist dashboard/dist && cd dashboard && bun install --frozen-lockfile && bun run build && cd .. && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/server/index.ts --outdir dist/server --target bun && bun build src/sdk/index.ts --outdir dist/sdk --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/index.ts src/mcp.ts src/registry.ts src/contracts.ts src/storage.ts src/testing.ts src/project-registration.ts src/task-manifest.ts src/task-subtree-transfer.ts --outdir dist --root src --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && tsc --emitDeclarationOnly --outDir dist",
+    "build:server": "rm -rf dist && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/server/index.ts --outdir dist/server --target bun && bun build src/sdk/index.ts --outdir dist/sdk --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/index.ts src/mcp.ts src/registry.ts src/contracts.ts src/storage.ts src/testing.ts src/project-registration.ts src/task-manifest.ts src/task-subtree-transfer.ts --outdir dist --target bun --external '@hasna/contracts' --external '@hasna/contracts/*'",
     migrate: "bun run src/server/index.ts migrate",
     "backfill:comment-redaction": "bun run src/server/index.ts redact-comments",
     "generate:sdk": "bun run scripts/generate-sdk.ts",
@@ -13032,7 +13040,7 @@ var package_default = {
   author: "Andrei Hasna <andrei@hasna.com>",
   license: "Apache-2.0",
   dependencies: {
-    "@hasna/contracts": "0.5.2",
+    "@hasna/contracts": "0.13.4",
     "@hasna/events": "^0.1.11",
     "@modelcontextprotocol/sdk": "^1.12.1",
     chalk: "^5.4.1",
@@ -25218,6 +25226,13 @@ var TODOS_PACKAGE_EXPORTS = [
     types: "./dist/task-manifest.d.ts",
     description: "Transactional package-owned authority for deterministic plan and task graph manifests.",
     stability: "stable"
+  },
+  {
+    subpath: "./task-subtree-transfer",
+    import: "./dist/task-subtree-transfer.js",
+    types: "./dist/task-subtree-transfer.d.ts",
+    description: "Atomic package-owned authority for existing task-subtree project transfers and rollback.",
+    stability: "stable"
   }
 ];
 function source8(version) {
@@ -25410,6 +25425,40 @@ init_tasks();
 init_projects();
 init_plans();
 
+// src/db/plan-comments.ts
+init_types();
+init_database();
+init_plans();
+init_prewrite_secrets();
+function addPlanComment(input, db) {
+  const d = db || getDatabase();
+  if (!getPlan(input.plan_id, d)) {
+    throw new PlanNotFoundError(input.plan_id);
+  }
+  const id = uuid();
+  const timestamp3 = now();
+  d.run(`INSERT INTO plan_comments (id, plan_id, agent_id, session_id, content, type, progress_pct, created_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, [
+    id,
+    input.plan_id,
+    input.agent_id || null,
+    input.session_id || null,
+    sanitizePreWriteText(input.content, "comment.content"),
+    input.type || "comment",
+    input.progress_pct ?? null,
+    timestamp3
+  ]);
+  return getPlanComment(id, d);
+}
+function getPlanComment(id, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM plan_comments WHERE id = ?").get(id);
+}
+function listPlanComments(planId, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM plan_comments WHERE plan_id = ? ORDER BY created_at, rowid").all(planId);
+}
+
 // src/db/agents.ts
 init_types();
 init_database();
@@ -26067,6 +26116,20 @@ init_task_lists();
 init_templates();
 init_audit();
 init_comments();
+
+// src/lib/comment-cursor.ts
+function isStrictlyOlder(comment, before) {
+  return comment.created_at < before.created_at || comment.created_at === before.created_at && comment.id < before.id;
+}
+function compareCommentKeyset(left, right) {
+  if (isStrictlyOlder(left, right))
+    return -1;
+  if (isStrictlyOlder(right, left))
+    return 1;
+  return 0;
+}
+
+// src/storage/local-sqlite.ts
 init_database();
 
 // src/db/integrity.ts
@@ -27087,7 +27150,7 @@ function matchesExtraFilters(task2, filter) {
   }
   if (filter.tags?.length) {
     const taskTags2 = new Set(task2.tags ?? []);
-    if (!filter.tags.every((tag) => taskTags2.has(tag)))
+    if (!filter.tags.some((tag) => taskTags2.has(tag)))
       return false;
   }
   if (filter.include_subtasks !== true && filter.parent_id === undefined && task2.parent_id)
@@ -27163,7 +27226,22 @@ function createLocalSqliteTodosStorageAdapter(options = {}) {
       list: (projectId) => listPlans(projectId, database()),
       update: (id, input) => updatePlan(id, input, database()),
       completeAtRevision: (id, expectedUpdatedAt) => completePlanAtRevision(id, expectedUpdatedAt, database()),
-      delete: (id) => deletePlan(id, database())
+      delete: (id) => deletePlan(id, database()),
+      addComment: (input) => addPlanComment(input, database()),
+      getComments: (planId) => listPlanComments(planId, database()),
+      getCommentsPage: (planId, options2) => {
+        if (options2?.limit !== undefined && (!Number.isSafeInteger(options2.limit) || options2.limit < 1 || options2.limit > 1001)) {
+          throw new Error("Plan comment limit must be an integer between 1 and 1001");
+        }
+        let comments = listPlanComments(planId, database());
+        comments = comments.sort(compareCommentKeyset);
+        if (options2?.before) {
+          const before = options2.before;
+          comments = comments.filter((comment) => isStrictlyOlder(comment, before));
+        }
+        const limit = options2?.limit ?? 100;
+        return comments.slice(-limit);
+      }
     },
     planProjectLinks: {
       apply: (input) => applyPlanProjectLinkSqlite(input, database()),
@@ -27204,10 +27282,10 @@ function createLocalSqliteTodosStorageAdapter(options = {}) {
           throw new Error("Comment limit must be an integer between 1 and 1001");
         }
         let comments = listComments(taskId, database());
-        comments = comments.sort((left, right) => left.created_at.localeCompare(right.created_at) || left.id.localeCompare(right.id));
+        comments = comments.sort(compareCommentKeyset);
         if (options2?.before) {
           const before = options2.before;
-          comments = comments.filter((comment) => comment.created_at < before.created_at || comment.created_at === before.created_at && comment.id < before.id);
+          comments = comments.filter((comment) => isStrictlyOlder(comment, before));
         }
         if (options2?.limit !== undefined)
           comments = comments.slice(-options2.limit);
@@ -27236,6 +27314,59 @@ function createLocalSqliteTodosStorageAdapter(options = {}) {
 init_types();
 import { randomUUID as randomUUID3 } from "crypto";
 init_creator_identity();
+
+// src/lib/instant-compare.ts
+var SQLITE_STAMP = /^(\d{4})-(\d{2})-(\d{2})(?:[ T](\d{2}):(\d{2})(?::(\d{2})(?:\.(\d+))?)?(?:Z|([+-])(\d{2}):(\d{2}))?)?$/;
+var DAYS_IN_MONTH = [31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+function isLeapYear(year) {
+  return year % 4 === 0 && year % 100 !== 0 || year % 400 === 0;
+}
+function sqliteJulianDay(value) {
+  const m = SQLITE_STAMP.exec(value);
+  if (!m)
+    return null;
+  const year = Number(m[1]);
+  const month = Number(m[2]);
+  const day = Number(m[3]);
+  const hour = m[4] === undefined ? 0 : Number(m[4]);
+  const minute = m[5] === undefined ? 0 : Number(m[5]);
+  const second = m[6] === undefined ? 0 : Number(m[6]);
+  const frac = m[7];
+  const sign = m[8];
+  const offsetHour = m[9];
+  const offsetMinute = m[10];
+  if (month < 1 || month > 12)
+    return null;
+  if (hour > 23 || minute > 59 || second > 59)
+    return null;
+  const maxDay = (DAYS_IN_MONTH[month - 1] ?? 0) + (month === 2 && isLeapYear(year) ? 1 : 0);
+  if (day < 1 || day > maxDay)
+    return null;
+  let offsetMinutes = 0;
+  if (sign !== undefined) {
+    const oh = Number(offsetHour ?? "0");
+    const om = Number(offsetMinute ?? "0");
+    if (oh > 23 || om > 59)
+      return null;
+    offsetMinutes = oh * 60 + om;
+    if (sign === "-")
+      offsetMinutes = -offsetMinutes;
+  }
+  const micros = frac === undefined ? 0 : Number((frac + "000000").slice(0, 6));
+  const ms = Date.UTC(year, month - 1, day, hour, minute, second);
+  return (ms + micros / 1000) / 86400000 + 2440587.5 - offsetMinutes / 1440;
+}
+function changedSinceStampNewer(stamp, since) {
+  const stampJd = sqliteJulianDay(stamp);
+  if (stampJd === null)
+    return true;
+  const sinceJd = sqliteJulianDay(since);
+  if (sinceJd === null)
+    return false;
+  return stampJd > sinceJd;
+}
+
+// src/storage/postgres-adapter.ts
 init_stale_lock_handoff();
 
 // src/storage/postgres-sync.ts
@@ -27737,7 +27868,26 @@ function createPostgresTodosStorageAdapter(options) {
       list: async (projectId) => (await store.list("plans")).filter((plan) => projectId === undefined || plan.project_id === projectId).sort((a, b) => a.name.localeCompare(b.name)),
       update: (id, input) => updatePlan2(id, input, store),
       completeAtRevision: (id, expectedUpdatedAt, context) => store.completePlanAtRevision(id, expectedUpdatedAt, context),
-      delete: (id, context) => store.deletePlan(id, context)
+      delete: (id, context) => store.deletePlan(id, context),
+      addComment: (input, context) => addPlanComment2(input, store, context),
+      getComments: async (planId) => {
+        const pages = [];
+        let before;
+        while (true) {
+          const page = await store.listPlanComments(planId, { limit: 1000, ...before ? { before } : {} });
+          if (page.length === 0)
+            break;
+          pages.unshift(page);
+          if (page.length < 1000)
+            break;
+          const oldest = page[0];
+          before = { created_at: oldest.created_at, id: oldest.id };
+        }
+        return pages.flat().map(redactPlanComment).sort((a, b) => a.created_at.localeCompare(b.created_at) || a.id.localeCompare(b.id));
+      },
+      getCommentsPage: async (planId, options2) => {
+        return (await store.listPlanComments(planId, options2)).map(redactPlanComment).sort((a, b) => a.created_at.localeCompare(b.created_at) || a.id.localeCompare(b.id));
+      }
     },
     planProjectLinks: {
       apply: (input, context) => store.applyPlanProjectLink(input, context),
@@ -27831,11 +27981,16 @@ class PostgresJsonRecordStore {
     return context?.requestId ?? this.sourceMachineId ?? null;
   }
   async ensureSchema() {
-    this.schemaReady ??= (async () => {
-      for (const sql of postgresTodosSyncSchemaSql(this.tableName, this.cursorTableName)) {
-        await this.options.client.query(sql);
-      }
-    })();
+    if (!this.schemaReady) {
+      this.schemaReady = (async () => {
+        for (const sql of postgresTodosSyncSchemaSql(this.tableName, this.cursorTableName)) {
+          await this.options.client.query(sql);
+        }
+      })().catch((error) => {
+        this.schemaReady = null;
+        throw error;
+      });
+    }
     await this.schemaReady;
   }
   async get(type, id) {
@@ -27955,6 +28110,27 @@ class PostgresJsonRecordStore {
        LIMIT $${params.length}`, params);
     return result.rows.map((row) => payloadRecord2(row.payload)).reverse();
   }
+  async listPlanComments(planId, options = {}) {
+    await this.ensureSchema();
+    const limit = options.limit ?? 100;
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 1001) {
+      throw new Error("Postgres plan comment limit must be an integer between 1 and 1001");
+    }
+    const params = [this.service, planId];
+    let cursorPredicate = "";
+    if (options.before) {
+      params.push(options.before.created_at, options.before.id);
+      cursorPredicate = `AND (payload->>'created_at', object_id) < ($3, $4)`;
+    }
+    params.push(limit);
+    const result = await this.options.client.query(`/* todos:list-plan-comments */ SELECT payload FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'plan_comments' AND deleted_at IS NULL
+         AND payload->>'plan_id' = $2
+         ${cursorPredicate}
+       ORDER BY payload->>'created_at' DESC, object_id DESC
+       LIMIT $${params.length}`, params);
+    return result.rows.map((row) => payloadRecord2(row.payload)).reverse();
+  }
   async listRecords(type) {
     await this.ensureSchema();
     const result = await this.options.client.query(`SELECT object_type, object_id, payload, updated_at
@@ -29116,6 +29292,15 @@ class PostgresJsonRecordStore {
         WHERE r.service = $1 AND r.object_type = 'tasks' AND r.deleted_at IS NULL
           AND r.payload->>'plan_id' = $2 AND EXISTS (SELECT 1 FROM target)
         RETURNING 1
+      ), deleted_plan_comments AS (
+        UPDATE ${this.tableName} r SET
+          deleted_at = $3::timestamptz,
+          updated_at = $3::timestamptz,
+          source_machine_id = COALESCE($4, r.source_machine_id),
+          version = COALESCE(r.version, 0) + 1
+        WHERE r.service = $1 AND r.object_type = 'plan_comments' AND r.deleted_at IS NULL
+          AND r.payload->>'plan_id' = $2 AND EXISTS (SELECT 1 FROM target)
+        RETURNING 1
       ), deleted_plan AS (
         UPDATE ${this.tableName} r SET
           deleted_at = $3::timestamptz,
@@ -29291,7 +29476,8 @@ async function updateTask2(id, input, store, context) {
     task_list_id: input.task_list_id !== undefined ? input.task_list_id : existing.task_list_id,
     parent_id: input.parent_id !== undefined ? input.parent_id : existing.parent_id,
     created_by: existing.created_by,
-    completed_at: reopened ? null : input.completed_at !== undefined ? input.completed_at : existing.completed_at
+    completed_at: input.status === "completed" ? input.completed_at ?? new Date().toISOString() : input.completed_at !== undefined ? input.completed_at : input.status !== undefined && isTerminalStatus(input.status) ? existing.completed_at ?? new Date().toISOString() : reopened ? null : existing.completed_at,
+    started_at: input.status === "in_progress" ? existing.started_at ?? new Date().toISOString() : existing.started_at
   };
   const storedTask = await store.upsertTaskWithPlanMembershipGuard(task2, [existing.plan_id, effectivePlanId].filter((planId) => Boolean(planId)), input.project_id !== undefined, context, {
     operation: "update",
@@ -29336,7 +29522,8 @@ async function failTask2(id, agentId, reason, options, store) {
     status: "failed",
     assigned_to: task2.assigned_to ?? agentId ?? null,
     reason: reason ?? task2.reason,
-    retry_after: options?.retry_after ?? task2.retry_after
+    retry_after: options?.retry_after ?? task2.retry_after,
+    completed_at: task2.completed_at ?? new Date().toISOString()
   }, store);
   if (!options?.retry)
     return { task: failed };
@@ -29568,7 +29755,7 @@ async function getActiveWork2(filters, store) {
   }));
 }
 async function getChangedSince(since, filters, store) {
-  return (await listTasks2(filters ?? {}, store)).filter((task2) => task2.updated_at > since);
+  return (await listTasks2(filters ?? {}, store)).filter((task2) => changedSinceStampNewer(task2.updated_at ?? "", since));
 }
 async function createProject2(input, store, context) {
   const timestamp3 = new Date().toISOString();
@@ -29784,16 +29971,22 @@ async function createTaskList2(input, store, context) {
 async function updateTaskList2(id, input, store) {
   const list = await requireRecord("task_lists", id, store);
   const patch = definedPatch(input);
+  const projectId = input.project_id === "" || input.project_id === null ? null : input.project_id === undefined ? list.project_id : input.project_id;
   if (input.slug !== undefined) {
     const slug = slugifyRaw(input.slug);
     if (!slug)
       throw new Error("Invalid task-list slug \u2014 must be non-empty kebab-case");
-    const duplicate = (await store.list("task_lists")).find((candidate) => candidate.id !== id && candidate.project_id === list.project_id && candidate.slug === slug);
+    patch.slug = slug;
+  }
+  const effectiveSlug = patch.slug ?? list.slug;
+  if (projectId !== list.project_id || effectiveSlug !== list.slug) {
+    const duplicate = (await store.list("task_lists")).find((candidate) => candidate.id !== id && candidate.project_id === projectId && candidate.slug === effectiveSlug);
     if (duplicate) {
-      throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${slug}" already exists in this scope`);
+      throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${effectiveSlug}" already exists in this scope`);
     }
-    patch.slug = slug;
   }
+  if (projectId !== list.project_id)
+    patch.project_id = projectId;
   return store.upsert("task_lists", {
     ...list,
     ...patch,
@@ -29886,6 +30079,22 @@ async function addComment2(input, store, context) {
 function redactComment(comment) {
   return { ...comment, content: redactEvidenceText(comment.content) };
 }
+async function addPlanComment2(input, store, context) {
+  const comment = {
+    id: randomUUID3(),
+    plan_id: input.plan_id,
+    agent_id: input.agent_id ?? context?.agentId ?? null,
+    session_id: input.session_id ?? context?.sessionId ?? null,
+    content: redactEvidenceText(input.content),
+    type: input.type ?? "comment",
+    progress_pct: input.progress_pct ?? null,
+    created_at: new Date().toISOString()
+  };
+  return store.upsert("plan_comments", comment, context);
+}
+function redactPlanComment(comment) {
+  return { ...comment, content: redactEvidenceText(comment.content) };
+}
 async function exportSnapshot(store) {
   return {
     exportedAt: new Date().toISOString(),
@@ -34901,14 +35110,23 @@ class PostgresTodosProjectRegistrationBackend {
     this.cursorTableName = safeIdentifier(options.cursorTableName ?? "todos_sync_cursors", "cursorTableName");
   }
   async ensureSchema() {
-    this.schemaReady ??= (async () => {
-      for (const statement of postgresTodosSyncSchemaSql(this.tableName, this.cursorTableName)) {
-        await this.client.query(statement);
-      }
-      for (const statement of postgresTodosProjectRegistrationSchemaSql()) {
-        await this.client.query(statement);
+    if (this.schemaReady === null) {
+      const attempt = (async () => {
+        for (const statement of postgresTodosSyncSchemaSql(this.tableName, this.cursorTableName)) {
+          await this.client.query(statement);
+        }
+        for (const statement of postgresTodosProjectRegistrationSchemaSql()) {
+          await this.client.query(statement);
+        }
+      })();
+      this.schemaReady = attempt;
+      try {
+        await attempt;
+      } catch (error) {
+        this.schemaReady = null;
+        throw error;
       }
-    })();
+    }
     await this.schemaReady;
   }
   async transaction(fn) {
@@ -42566,12 +42784,21 @@ class PostgresTodosTaskManifestBackend {
     this.tenantId = options.tenantId ?? "default";
   }
   async ensureSchema() {
-    this.schemaReady ??= (async () => {
-      for (const sql of postgresTodosSyncSchemaSql(this.tableName))
-        await this.client.query(sql);
-      for (const sql of postgresTodosTaskManifestSchemaSql(this.tenantId))
-        await this.client.query(sql);
-    })();
+    if (this.schemaReady === null) {
+      const attempt = (async () => {
+        for (const sql of postgresTodosSyncSchemaSql(this.tableName))
+          await this.client.query(sql);
+        for (const sql of postgresTodosTaskManifestSchemaSql(this.tenantId))
+          await this.client.query(sql);
+      })();
+      this.schemaReady = attempt;
+      try {
+        await attempt;
+      } catch (error) {
+        this.schemaReady = null;
+        throw error;
+      }
+    }
     await this.schemaReady;
   }
   async insertSync(tx, objectType2, objectId, payload, now4) {
@@ -43624,6 +43851,1323 @@ class TodosTaskManifestHttpClient {
 function createTodosTaskManifestHttpClient(options) {
   return new TodosTaskManifestHttpClient(options);
 }
+// src/task-subtree-transfer/types.ts
+var TODOS_TASK_SUBTREE_TRANSFER_ROUTE = "todos.task-subtree-transfer.v1";
+var TODOS_TASK_SUBTREE_TRANSFER_SCHEMA_VERSION = 1;
+
+class TodosTaskSubtreeTransferError extends Error {
+  code;
+  details;
+  constructor(code, message, details = {}) {
+    super(message);
+    this.code = code;
+    this.details = details;
+    this.name = "TodosTaskSubtreeTransferError";
+  }
+}
+
+// src/task-subtree-transfer/canonical.ts
+function taskSubtreeTransferRequestDigest(input) {
+  const { idempotency_key: _idempotencyKey, ...request } = input;
+  return canonicalDigest(request);
+}
+function taskSubtreeTransferRollbackRequestDigest(input) {
+  const { idempotency_key: _idempotencyKey, ...request } = input;
+  return canonicalDigest(request);
+}
+function deriveTodosTaskSubtreeTransferIdempotencyKey(input) {
+  return `tstk_${canonicalDigest({
+    route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+    ...input
+  }).slice(0, 48)}`;
+}
+
+// src/task-subtree-transfer/planner.ts
+function sortedTaskImage(task3) {
+  return {
+    task_id: task3.task_id,
+    project_id: task3.project_id,
+    parent_id: task3.parent_id,
+    plan_id: task3.plan_id,
+    task_list_id: task3.task_list_id,
+    version: task3.version,
+    updated_at: task3.updated_at
+  };
+}
+function sourcePopulationDigest(tasks) {
+  return canonicalDigest(tasks.map((task3) => ({
+    ...sortedTaskImage(task3),
+    archived_at: task3.archived_at ?? null
+  })).sort((left, right) => left.task_id.localeCompare(right.task_id)));
+}
+function closure(tasks, rootTaskId) {
+  const byId = new Map(tasks.map((task3) => [task3.task_id, task3]));
+  if (!byId.has(rootTaskId)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_NOT_FOUND", `Root task not found in the exact source project: ${rootTaskId}`, { root_task_id: rootTaskId });
+  }
+  const children = new Map;
+  for (const task3 of tasks) {
+    if (!task3.parent_id)
+      continue;
+    const siblings = children.get(task3.parent_id) ?? [];
+    siblings.push(task3.task_id);
+    children.set(task3.parent_id, siblings);
+  }
+  for (const ids2 of children.values())
+    ids2.sort();
+  const visiting = new Set;
+  const visited = new Set;
+  const result = [];
+  const visit = (id) => {
+    if (visiting.has(id)) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_HIERARCHY_CYCLE", "Task hierarchy contains a cycle in the requested descendant closure", { task_id: id });
+    }
+    if (visited.has(id))
+      return;
+    const task3 = byId.get(id);
+    if (!task3) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_FOREIGN_REFERENCE", "Task hierarchy references a parent outside the exact source population", { task_id: id });
+    }
+    visiting.add(id);
+    result.push(task3);
+    for (const child of children.get(id) ?? [])
+      visit(child);
+    visiting.delete(id);
+    visited.add(id);
+  };
+  visit(rootTaskId);
+  return result.sort((left, right) => left.task_id.localeCompare(right.task_id));
+}
+function prepareTransfer(snapshot, input) {
+  if (!snapshot.destination_project_found || !snapshot.destination_task_list_found || !snapshot.destination_parent_found) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_FOREIGN_REFERENCE", "Destination project, task list, or parent does not match the exact requested target");
+  }
+  const moved = closure(snapshot.source_tasks, input.root_task_id);
+  const movedIds = new Set(moved.map((task3) => task3.task_id));
+  if (input.destination_parent_id && movedIds.has(input.destination_parent_id)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_HIERARCHY_CYCLE", "Destination parent cannot be inside the transferred subtree", { destination_parent_id: input.destination_parent_id });
+  }
+  const planIds = [...new Set(moved.map((task3) => task3.plan_id).filter((id) => Boolean(id)))].sort();
+  const allPlanTasks = new Map;
+  for (const task3 of snapshot.plan_tasks) {
+    if (!task3.plan_id)
+      continue;
+    const rows = allPlanTasks.get(task3.plan_id) ?? [];
+    rows.push(task3);
+    allPlanTasks.set(task3.plan_id, rows);
+  }
+  const contained = [];
+  const shared = [];
+  const planById = new Map(snapshot.plans.map((plan) => [plan.plan_id, plan]));
+  for (const planId of planIds) {
+    const plan = planById.get(planId);
+    if (!plan || plan.project_id !== input.source_project_id) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_PLAN_CONFLICT", "A moved task references a plan absent from the exact source project", { plan_id: planId });
+    }
+    const members = allPlanTasks.get(planId) ?? [];
+    if (members.length === 0) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_PLAN_CONFLICT", "A moved task references a plan with no authoritative task membership", { plan_id: planId });
+    }
+    if (members.every((task3) => movedIds.has(task3.task_id)))
+      contained.push(planId);
+    else
+      shared.push(planId);
+  }
+  const inspection = {
+    source_project_id: input.source_project_id,
+    destination_project_id: input.destination_project_id,
+    destination_task_list_id: input.destination_task_list_id,
+    root_task_id: input.root_task_id,
+    destination_parent_id: input.destination_parent_id,
+    expected_root_parent_id: moved.find((task3) => task3.task_id === input.root_task_id).parent_id,
+    source_population_digest: sourcePopulationDigest(snapshot.source_tasks),
+    expected_tasks: moved.map((task3) => ({ task_id: task3.task_id, version: task3.version })),
+    contained_plan_ids: contained,
+    shared_plan_ids: shared,
+    complete: true
+  };
+  return {
+    inspection,
+    prior_tasks: moved.map(sortedTaskImage),
+    prior_plans: contained.map((id) => planById.get(id)),
+    task_plan_targets: new Map(moved.map((task3) => [task3.task_id, task3.plan_id]))
+  };
+}
+function validateApplySnapshot(prepared, request, plans) {
+  if (request.expected_root_parent_id !== prepared.inspection.expected_root_parent_id) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "Root parent changed since inspection");
+  }
+  if (request.source_population_digest !== prepared.inspection.source_population_digest) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_POPULATION_DRIFT", "Complete source-project task population changed since inspection");
+  }
+  const expected = request.expected_tasks.map((task3) => ({ task_id: task3.task_id, version: task3.version })).sort((left, right) => left.task_id.localeCompare(right.task_id));
+  if (JSON.stringify(expected) !== JSON.stringify(prepared.inspection.expected_tasks)) {
+    const actualById = new Map(prepared.inspection.expected_tasks.map((task3) => [task3.task_id, task3.version]));
+    const sameIds = expected.length === prepared.inspection.expected_tasks.length && expected.every((task3) => actualById.has(task3.task_id));
+    throw new TodosTaskSubtreeTransferError(sameIds ? "TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT" : "TODOS_TASK_SUBTREE_TRANSFER_CLOSURE_DRIFT", sameIds ? "At least one exact task version changed since inspection" : "Exact descendant closure changed since inspection");
+  }
+  const requestedSources = request.shared_plan_splits.map((mapping) => mapping.source_plan_id).sort();
+  if (JSON.stringify(requestedSources) !== JSON.stringify(prepared.inspection.shared_plan_ids)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_PARTIAL_PLAN", "Shared plans require one exact explicit destination-plan mapping each", {
+      expected_shared_plan_ids: prepared.inspection.shared_plan_ids,
+      received_shared_plan_ids: requestedSources
+    });
+  }
+  const planById = new Map(plans.map((plan) => [plan.plan_id, plan]));
+  const destinationIds = new Set;
+  for (const mapping of request.shared_plan_splits) {
+    if (destinationIds.has(mapping.destination_plan_id)) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_PLAN_CONFLICT", "Two shared source plans cannot collapse into one destination plan");
+    }
+    destinationIds.add(mapping.destination_plan_id);
+    const destination = planById.get(mapping.destination_plan_id);
+    if (!destination || destination.project_id !== request.destination_project_id || destination.task_list_id !== request.destination_task_list_id) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_PLAN_CONFLICT", "Shared-plan destination does not match the exact destination project and task list", { destination_plan_id: mapping.destination_plan_id });
+    }
+    for (const [taskId, planId] of prepared.task_plan_targets) {
+      if (planId === mapping.source_plan_id) {
+        prepared.task_plan_targets.set(taskId, mapping.destination_plan_id);
+      }
+    }
+  }
+}
+
+// src/task-subtree-transfer/schema-sql.ts
+function sqliteTodosTaskSubtreeTransferSchemaSql() {
+  return `
+    CREATE TABLE IF NOT EXISTS todos_task_subtree_transfer_receipts (
+      receipt_id TEXT PRIMARY KEY,
+      tenant_id TEXT NOT NULL,
+      kind TEXT NOT NULL CHECK(kind IN ('apply', 'rollback')),
+      operation_id TEXT NOT NULL,
+      step_id TEXT NOT NULL,
+      idempotency_key TEXT NOT NULL,
+      request_digest TEXT NOT NULL,
+      precondition_digest TEXT NOT NULL,
+      result_digest TEXT NOT NULL,
+      apply_receipt_id TEXT,
+      request_json TEXT NOT NULL,
+      result_json TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      UNIQUE(tenant_id, kind, operation_id, step_id),
+      UNIQUE(tenant_id, kind, idempotency_key)
+    );
+    CREATE TRIGGER IF NOT EXISTS todos_task_subtree_transfer_receipts_immutable_update
+      BEFORE UPDATE ON todos_task_subtree_transfer_receipts BEGIN
+        SELECT RAISE(ABORT, 'todos task subtree transfer receipts are immutable');
+      END;
+    CREATE TRIGGER IF NOT EXISTS todos_task_subtree_transfer_receipts_immutable_delete
+      BEFORE DELETE ON todos_task_subtree_transfer_receipts BEGIN
+        SELECT RAISE(ABORT, 'todos task subtree transfer receipts are immutable');
+      END;
+  `;
+}
+function ensureSqliteTodosTaskSubtreeTransferSchema(db) {
+  db.exec(sqliteTodosTaskSubtreeTransferSchemaSql());
+}
+function postgresTodosTaskSubtreeTransferSchemaSql() {
+  return [
+    `CREATE TABLE IF NOT EXISTS todos_task_subtree_transfer_receipts (
+      receipt_id text PRIMARY KEY,
+      tenant_id text NOT NULL,
+      kind text NOT NULL CHECK(kind IN ('apply', 'rollback')),
+      operation_id text NOT NULL,
+      step_id text NOT NULL,
+      idempotency_key text NOT NULL,
+      request_digest text NOT NULL,
+      precondition_digest text NOT NULL,
+      result_digest text NOT NULL,
+      apply_receipt_id text,
+      request_json jsonb NOT NULL,
+      result_json jsonb NOT NULL,
+      created_at timestamptz NOT NULL,
+      UNIQUE(tenant_id, kind, operation_id, step_id),
+      UNIQUE(tenant_id, kind, idempotency_key)
+    )`,
+    `CREATE OR REPLACE FUNCTION reject_todos_task_subtree_transfer_receipt_mutation()
+      RETURNS trigger LANGUAGE plpgsql AS $$
+      BEGIN
+        RAISE EXCEPTION 'todos task subtree transfer receipts are immutable';
+      END $$`,
+    `DROP TRIGGER IF EXISTS todos_task_subtree_transfer_receipts_immutable_update
+      ON todos_task_subtree_transfer_receipts`,
+    `CREATE TRIGGER todos_task_subtree_transfer_receipts_immutable_update
+      BEFORE UPDATE OR DELETE ON todos_task_subtree_transfer_receipts
+      FOR EACH ROW EXECUTE FUNCTION reject_todos_task_subtree_transfer_receipt_mutation()`
+  ];
+}
+
+// src/task-subtree-transfer/postgres.ts
+function safeIdentifier3(value, fallback) {
+  const candidate = value ?? fallback;
+  if (!/^[a-z_][a-z0-9_]*$/.test(candidate)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "PostgreSQL table name must be a safe identifier");
+  }
+  return candidate;
+}
+function timestamp4(value) {
+  return value instanceof Date ? value.toISOString() : new Date(String(value)).toISOString();
+}
+function payloadOf(row) {
+  return typeof row.payload === "string" ? JSON.parse(row.payload) : row.payload;
+}
+function taskRecord(row) {
+  const payload = payloadOf(row);
+  return {
+    task_id: String(payload.id ?? row.object_id),
+    project_id: payload.project_id == null ? null : String(payload.project_id),
+    parent_id: payload.parent_id == null ? null : String(payload.parent_id),
+    plan_id: payload.plan_id == null ? null : String(payload.plan_id),
+    task_list_id: payload.task_list_id == null ? null : String(payload.task_list_id),
+    version: Number(payload.version ?? row.version ?? 1),
+    updated_at: timestamp4(payload.updated_at ?? row.updated_at),
+    archived_at: payload.archived_at == null ? null : String(payload.archived_at)
+  };
+}
+function planRecord(row) {
+  const payload = payloadOf(row);
+  return {
+    plan_id: String(payload.id ?? row.object_id),
+    project_id: payload.project_id == null ? null : String(payload.project_id),
+    task_list_id: payload.task_list_id == null ? null : String(payload.task_list_id),
+    updated_at: timestamp4(payload.updated_at ?? row.updated_at)
+  };
+}
+
+class PostgresTodosTaskSubtreeTransferBackend {
+  client;
+  kind = "postgresql";
+  service;
+  tableName;
+  tenantId;
+  schemaReady = null;
+  constructor(client, options = {}) {
+    this.client = client;
+    this.service = options.service ?? "todos";
+    this.tableName = safeIdentifier3(options.tableName, DEFAULT_TODOS_POSTGRES_SYNC_TABLE);
+    this.tenantId = options.tenantId ?? "default";
+  }
+  async ensureSchema() {
+    if (this.schemaReady === null) {
+      const attempt = (async () => {
+        for (const sql of postgresTodosSyncSchemaSql(this.tableName))
+          await this.client.query(sql);
+        for (const sql of postgresTodosTaskSubtreeTransferSchemaSql())
+          await this.client.query(sql);
+      })();
+      this.schemaReady = attempt;
+      try {
+        await attempt;
+      } catch (error) {
+        this.schemaReady = null;
+        throw error;
+      }
+    }
+    await this.schemaReady;
+  }
+  async snapshot(client, input, forUpdate = false) {
+    const lock = forUpdate ? " FOR UPDATE" : "";
+    const source9 = await client.query(`SELECT object_id, payload, updated_at, version FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'tasks' AND deleted_at IS NULL
+         AND payload->>'project_id' = $2 ORDER BY object_id${lock}`, [this.service, input.source_project_id]);
+    const allTasks = await client.query(`SELECT object_id, payload, updated_at, version FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'tasks' AND deleted_at IS NULL ORDER BY object_id${lock}`, [this.service]);
+    const plans = await client.query(`SELECT object_id, payload, updated_at, version FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'plans' AND deleted_at IS NULL ORDER BY object_id${lock}`, [this.service]);
+    const destinationProject = await client.query(`SELECT 1 FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'projects' AND object_id = $2
+         AND deleted_at IS NULL LIMIT 1${lock}`, [this.service, input.destination_project_id]);
+    const destinationList = await client.query(`SELECT 1 FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'task_lists' AND object_id = $2
+         AND deleted_at IS NULL AND payload->>'project_id' = $3 LIMIT 1`, [this.service, input.destination_task_list_id, input.destination_project_id]);
+    const destinationParent = input.destination_parent_id === null ? true : (await client.query(`SELECT 1 FROM ${this.tableName}
+         WHERE service = $1 AND object_type = 'tasks' AND object_id = $2
+           AND deleted_at IS NULL AND payload->>'project_id' = $3 LIMIT 1`, [this.service, input.destination_parent_id, input.destination_project_id])).rows.length === 1;
+    return {
+      source_tasks: source9.rows.map(taskRecord),
+      plan_tasks: allTasks.rows.map(taskRecord),
+      plans: plans.rows.map(planRecord),
+      destination_project_found: destinationProject.rows.length === 1,
+      destination_task_list_found: destinationList.rows.length === 1,
+      destination_parent_found: destinationParent
+    };
+  }
+  async inspect(input) {
+    await this.ensureSchema();
+    return prepareTransfer(await this.snapshot(this.client, input), input).inspection;
+  }
+  async insertPayload(client, task3, update, now4) {
+    const current = await client.query(`SELECT payload FROM ${this.tableName}
+       WHERE service = $1 AND object_type = 'tasks' AND object_id = $2
+         AND deleted_at IS NULL FOR UPDATE`, [this.service, task3.task_id]);
+    const row = current.rows[0];
+    if (!row)
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_NOT_FOUND", `Task not found: ${task3.task_id}`);
+    const payload = payloadOf(row);
+    if (Number(payload.version ?? 1) !== task3.version) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "Task changed during transfer", { task_id: task3.task_id });
+    }
+    const next = {
+      ...payload,
+      ...update,
+      version: task3.version + 1,
+      updated_at: now4
+    };
+    const result = await client.query(`UPDATE ${this.tableName} SET payload = $1::jsonb, updated_at = $2, version = $3
+       WHERE service = $4 AND object_type = 'tasks' AND object_id = $5
+         AND deleted_at IS NULL AND version = $6
+       RETURNING object_id`, [canonicalJson(next), now4, task3.version + 1, this.service, task3.task_id, task3.version]);
+    if (result.rows.length !== 1) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "Task CAS failed", { task_id: task3.task_id });
+    }
+  }
+  async apply(input, options) {
+    await this.ensureSchema();
+    if (!this.client.transaction) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ATOMICITY_UNAVAILABLE", "PostgreSQL subtree transfer requires an authoritative transaction-capable client");
+    }
+    return this.client.transaction(async (tx) => {
+      await tx.query("SELECT pg_advisory_xact_lock(hashtextextended('todos:task-parent-integrity', 0))");
+      const requestDigest = taskSubtreeTransferRequestDigest(input);
+      const existing = await tx.query(`SELECT result_json, request_digest, precondition_digest, idempotency_key
+         FROM todos_task_subtree_transfer_receipts
+         WHERE tenant_id = $1 AND kind = 'apply'
+           AND (idempotency_key = $2 OR (operation_id = $3 AND step_id = $4))
+         ORDER BY created_at ASC LIMIT 1`, [this.tenantId, input.idempotency_key, input.operation_id, input.step_id]);
+      if (existing.rows[0]) {
+        const row = existing.rows[0];
+        if (row.request_digest !== requestDigest || row.precondition_digest !== input.precondition_digest || row.idempotency_key !== input.idempotency_key) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_IDEMPOTENCY_CONFLICT", "The operation was already accepted for a different request");
+        }
+        return { ...typeof row.result_json === "string" ? JSON.parse(row.result_json) : row.result_json, duplicate: true };
+      }
+      const snapshot = await this.snapshot(tx, input, true);
+      const prepared = prepareTransfer(snapshot, input);
+      validateApplySnapshot(prepared, input, snapshot.plans);
+      const now4 = options.now?.() ?? new Date().toISOString();
+      const priorImage = {
+        tasks: prepared.prior_tasks,
+        plans: prepared.prior_plans
+      };
+      for (const task3 of prepared.prior_tasks) {
+        await this.insertPayload(tx, task3, {
+          project_id: input.destination_project_id,
+          task_list_id: input.destination_task_list_id,
+          plan_id: prepared.task_plan_targets.get(task3.task_id) ?? null,
+          parent_id: task3.task_id === input.root_task_id ? input.destination_parent_id : task3.parent_id
+        }, now4);
+      }
+      if (options.faultInjector && await options.faultInjector("after_task_writes"))
+        throw new Error("Injected task-subtree-transfer fault at after_task_writes");
+      for (const plan of prepared.prior_plans) {
+        const row = await tx.query(`SELECT payload FROM ${this.tableName}
+           WHERE service = $1 AND object_type = 'plans' AND object_id = $2
+             AND deleted_at IS NULL FOR UPDATE`, [this.service, plan.plan_id]);
+        const current = row.rows[0] ? payloadOf(row.rows[0]) : null;
+        if (!current || String(current.project_id ?? "") !== String(plan.project_id ?? "") || (current.task_list_id ?? null) !== plan.task_list_id || timestamp4(current.updated_at ?? row.rows[0]?.updated_at) !== plan.updated_at) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "Contained plan changed during transfer", { plan_id: plan.plan_id });
+        }
+        const result2 = await tx.query(`UPDATE ${this.tableName} SET payload = jsonb_set(jsonb_set(jsonb_set(payload, '{project_id}', to_jsonb($1::text)), '{task_list_id}', to_jsonb($2::text)), '{updated_at}', to_jsonb($3::text)), updated_at = $3
+           WHERE service = $4 AND object_type = 'plans' AND object_id = $5 AND deleted_at IS NULL
+           RETURNING object_id`, [input.destination_project_id, input.destination_task_list_id, now4, this.service, plan.plan_id]);
+        if (result2.rows.length !== 1) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "Contained plan update did not affect exactly one row", { plan_id: plan.plan_id });
+        }
+      }
+      if (options.faultInjector && await options.faultInjector("after_plan_writes"))
+        throw new Error("Injected task-subtree-transfer fault at after_plan_writes");
+      const postImage = {
+        tasks: prepared.prior_tasks.map((task3) => ({
+          ...task3,
+          project_id: input.destination_project_id,
+          task_list_id: input.destination_task_list_id,
+          plan_id: prepared.task_plan_targets.get(task3.task_id) ?? null,
+          parent_id: task3.task_id === input.root_task_id ? input.destination_parent_id : task3.parent_id,
+          version: task3.version + 1,
+          updated_at: now4
+        })),
+        plans: prepared.prior_plans.map((plan) => ({ ...plan, project_id: input.destination_project_id, task_list_id: input.destination_task_list_id, updated_at: now4 }))
+      };
+      const resultDigest = canonicalDigest({ route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE, request_digest: requestDigest, prior_image: priorImage, post_image: postImage });
+      const receipt = {
+        receipt_id: deterministicUuid(TODOS_TASK_SUBTREE_TRANSFER_ROUTE, "apply", input.operation_id, input.step_id, input.idempotency_key, requestDigest),
+        authority: "todos",
+        route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+        schema_version: 1,
+        kind: "apply",
+        operation_id: input.operation_id,
+        step_id: input.step_id,
+        idempotency_key: input.idempotency_key,
+        request_digest: requestDigest,
+        precondition_digest: input.precondition_digest,
+        result_digest: resultDigest,
+        apply_receipt_id: null,
+        source_project_id: input.source_project_id,
+        destination_project_id: input.destination_project_id,
+        destination_task_list_id: input.destination_task_list_id,
+        root_task_id: input.root_task_id,
+        source_population_digest: input.source_population_digest,
+        prior_image: priorImage,
+        post_image: postImage,
+        shared_plan_splits: input.shared_plan_splits,
+        created_at: now4
+      };
+      const result = { duplicate: false, receipt, moved_task_ids: prepared.prior_tasks.map((task3) => task3.task_id), moved_plan_ids: prepared.prior_plans.map((plan) => plan.plan_id), complete: true };
+      await tx.query(`INSERT INTO todos_task_subtree_transfer_receipts (
+          receipt_id, tenant_id, kind, operation_id, step_id, idempotency_key,
+          request_digest, precondition_digest, result_digest, apply_receipt_id,
+          request_json, result_json, created_at
+        ) VALUES ($1, $2, 'apply', $3, $4, $5, $6, $7, $8, NULL, $9::jsonb, $10::jsonb, $11)`, [receipt.receipt_id, this.tenantId, receipt.operation_id, receipt.step_id, receipt.idempotency_key, receipt.request_digest, receipt.precondition_digest, receipt.result_digest, canonicalJson(input), canonicalJson(result), now4]);
+      if (options.faultInjector && await options.faultInjector("after_receipt_write"))
+        throw new Error("Injected task-subtree-transfer fault at after_receipt_write");
+      return result;
+    });
+  }
+  async readExact(receiptId2) {
+    await this.ensureSchema();
+    const row = await this.client.query(`SELECT result_json FROM todos_task_subtree_transfer_receipts WHERE tenant_id = $1 AND receipt_id = $2 LIMIT 1`, [this.tenantId, receiptId2]);
+    if (!row.rows[0])
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_RECEIPT_NOT_FOUND", `Transfer receipt not found: ${receiptId2}`);
+    return { ...typeof row.rows[0].result_json === "string" ? JSON.parse(String(row.rows[0].result_json)) : row.rows[0].result_json, duplicate: false };
+  }
+  async rollback(input, options) {
+    await this.ensureSchema();
+    if (!this.client.transaction)
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ATOMICITY_UNAVAILABLE", "PostgreSQL subtree rollback requires a transaction-capable client");
+    return this.client.transaction(async (tx) => {
+      await tx.query("SELECT pg_advisory_xact_lock(hashtextextended('todos:task-parent-integrity', 0))");
+      const requestDigest = taskSubtreeTransferRollbackRequestDigest(input);
+      const existing = await tx.query(`SELECT result_json, request_digest, precondition_digest, idempotency_key
+         FROM todos_task_subtree_transfer_receipts
+         WHERE tenant_id = $1 AND kind = 'rollback'
+           AND (idempotency_key = $2 OR (operation_id = $3 AND step_id = $4))
+         ORDER BY created_at ASC LIMIT 1`, [this.tenantId, input.idempotency_key, input.operation_id, input.step_id]);
+      if (existing.rows[0]) {
+        const row = existing.rows[0];
+        if (row.request_digest !== requestDigest || row.precondition_digest !== input.precondition_digest || row.idempotency_key !== input.idempotency_key)
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_IDEMPOTENCY_CONFLICT", "The rollback operation was already accepted for a different request");
+        return { ...typeof row.result_json === "string" ? JSON.parse(String(row.result_json)) : row.result_json, duplicate: true };
+      }
+      const applyRow = await tx.query(`SELECT result_json FROM todos_task_subtree_transfer_receipts WHERE tenant_id = $1 AND kind = 'apply' AND receipt_id = $2 LIMIT 1`, [this.tenantId, input.receipt_id]);
+      if (!applyRow.rows[0])
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_RECEIPT_NOT_FOUND", `Apply receipt not found: ${input.receipt_id}`);
+      const applied = typeof applyRow.rows[0].result_json === "string" ? JSON.parse(String(applyRow.rows[0].result_json)) : applyRow.rows[0].result_json;
+      if (applied.receipt.operation_id !== input.operation_id) {
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Rollback operation does not match the apply receipt");
+      }
+      const expectedPrecondition = canonicalDigest({ route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE, direction: "rollback", operation_id: input.operation_id, step_id: input.step_id, apply_receipt_id: input.receipt_id, apply_result_digest: applied.receipt.result_digest });
+      if (input.precondition_digest !== expectedPrecondition)
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_DIGEST_MISMATCH", "Rollback precondition digest does not match the exact apply receipt", { expected_precondition_digest: expectedPrecondition });
+      const now4 = options.now?.() ?? new Date().toISOString();
+      for (const task3 of applied.receipt.post_image.tasks) {
+        const row = await tx.query(`SELECT payload FROM ${this.tableName} WHERE service = $1 AND object_type = 'tasks' AND object_id = $2 AND deleted_at IS NULL FOR UPDATE`, [this.service, task3.task_id]);
+        if (!row.rows[0])
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Transferred task disappeared", { task_id: task3.task_id });
+        const payload = payloadOf(row.rows[0]);
+        if (Number(payload.version ?? 1) !== task3.version || String(payload.project_id ?? "") !== String(task3.project_id ?? "") || (payload.parent_id ?? null) !== task3.parent_id || (payload.plan_id ?? null) !== task3.plan_id || (payload.task_list_id ?? null) !== task3.task_list_id)
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Transferred task changed after apply", { task_id: task3.task_id });
+      }
+      for (const task3 of applied.receipt.prior_image.tasks) {
+        const row = await tx.query(`SELECT payload FROM ${this.tableName} WHERE service = $1 AND object_type = 'tasks' AND object_id = $2 AND deleted_at IS NULL`, [this.service, task3.task_id]);
+        const payload = row.rows[0] ? payloadOf(row.rows[0]) : null;
+        if (!payload)
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Task disappeared during rollback", { task_id: task3.task_id });
+        const next = { ...payload, project_id: task3.project_id, task_list_id: task3.task_list_id, plan_id: task3.plan_id, parent_id: task3.parent_id, version: task3.version + 2, updated_at: now4 };
+        const result2 = await tx.query(`UPDATE ${this.tableName} SET payload = $1::jsonb, updated_at = $2, version = $3
+           WHERE service = $4 AND object_type = 'tasks' AND object_id = $5 AND deleted_at IS NULL AND version = $6
+           RETURNING object_id`, [canonicalJson(next), now4, task3.version + 2, this.service, task3.task_id, task3.version + 1]);
+        if (result2.rows.length !== 1) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Task rollback did not affect exactly one row", { task_id: task3.task_id });
+        }
+      }
+      if (options.faultInjector && await options.faultInjector("after_rollback_task_writes"))
+        throw new Error("Injected task-subtree-transfer fault at after_rollback_task_writes");
+      for (const plan of applied.receipt.prior_image.plans) {
+        const post = applied.receipt.post_image.plans.find((candidate) => candidate.plan_id === plan.plan_id);
+        const result2 = await tx.query(`UPDATE ${this.tableName}
+           SET payload = jsonb_set(
+             jsonb_set(
+               jsonb_set(payload, '{project_id}', to_jsonb($1::text)),
+               '{task_list_id}',
+               COALESCE(to_jsonb($2::text), 'null'::jsonb)
+             ),
+             '{updated_at}',
+             to_jsonb($3::text)
+           ), updated_at = $3
+           WHERE service = $4 AND object_type = 'plans' AND object_id = $5 AND deleted_at IS NULL
+             AND payload->>'project_id' = $6 AND COALESCE(payload->>'task_list_id', '') = COALESCE($7, '') AND payload->>'updated_at' = $8
+           RETURNING object_id`, [plan.project_id, plan.task_list_id, now4, this.service, plan.plan_id, post.project_id, post.task_list_id, post.updated_at]);
+        if (result2.rows.length !== 1) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Contained plan rollback did not affect exactly one row", { plan_id: plan.plan_id });
+        }
+      }
+      if (options.faultInjector && await options.faultInjector("after_rollback_plan_writes"))
+        throw new Error("Injected task-subtree-transfer fault at after_rollback_plan_writes");
+      const restored = {
+        tasks: applied.receipt.prior_image.tasks.map((task3) => ({ ...task3, version: task3.version + 2, updated_at: now4 })),
+        plans: applied.receipt.prior_image.plans.map((plan) => ({ ...plan, updated_at: now4 }))
+      };
+      const resultDigest = canonicalDigest({ route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE, direction: "rollback", apply_receipt_id: input.receipt_id, prior_image: applied.receipt.post_image, post_image: restored });
+      const receipt = { ...applied.receipt, receipt_id: deterministicUuid(TODOS_TASK_SUBTREE_TRANSFER_ROUTE, "rollback", input.operation_id, input.step_id, input.idempotency_key, input.receipt_id), kind: "rollback", operation_id: input.operation_id, step_id: input.step_id, idempotency_key: input.idempotency_key, request_digest: requestDigest, precondition_digest: input.precondition_digest, result_digest: resultDigest, apply_receipt_id: input.receipt_id, prior_image: applied.receipt.post_image, post_image: restored, created_at: now4 };
+      const result = { duplicate: false, receipt, moved_task_ids: applied.moved_task_ids, moved_plan_ids: applied.moved_plan_ids, complete: true };
+      await tx.query(`INSERT INTO todos_task_subtree_transfer_receipts (
+          receipt_id, tenant_id, kind, operation_id, step_id, idempotency_key,
+          request_digest, precondition_digest, result_digest, apply_receipt_id,
+          request_json, result_json, created_at
+        ) VALUES ($1, $2, 'rollback', $3, $4, $5, $6, $7, $8, $9, $10::jsonb, $11::jsonb, $12)`, [receipt.receipt_id, this.tenantId, receipt.operation_id, receipt.step_id, receipt.idempotency_key, receipt.request_digest, receipt.precondition_digest, receipt.result_digest, receipt.apply_receipt_id, canonicalJson(input), canonicalJson(result), now4]);
+      if (options.faultInjector && await options.faultInjector("after_rollback_receipt_write"))
+        throw new Error("Injected task-subtree-transfer fault at after_rollback_receipt_write");
+      return result;
+    });
+  }
+}
+
+// src/task-subtree-transfer/sqlite.ts
+var sqliteTails2 = new WeakMap;
+async function fault3(options, point) {
+  if (options.faultInjector && await options.faultInjector(point) === true) {
+    throw new Error(`Injected task-subtree-transfer fault at ${point}`);
+  }
+}
+function parseResult(value, duplicate) {
+  return { ...JSON.parse(value), duplicate };
+}
+function rowImage(row) {
+  return {
+    task_id: String(row.id),
+    project_id: row.project_id == null ? null : String(row.project_id),
+    parent_id: row.parent_id == null ? null : String(row.parent_id),
+    plan_id: row.plan_id == null ? null : String(row.plan_id),
+    task_list_id: row.task_list_id == null ? null : String(row.task_list_id),
+    version: Number(row.version),
+    updated_at: String(row.updated_at),
+    archived_at: row.archived_at == null ? null : String(row.archived_at)
+  };
+}
+function planImage(row) {
+  return {
+    plan_id: String(row.id),
+    project_id: row.project_id == null ? null : String(row.project_id),
+    task_list_id: row.task_list_id == null ? null : String(row.task_list_id),
+    updated_at: String(row.updated_at)
+  };
+}
+function imageFromTaskRow(row) {
+  const image = rowImage(row);
+  const { archived_at: _archivedAt, ...withoutArchive } = image;
+  return withoutArchive;
+}
+function imageFromPlanRow(row) {
+  return planImage(row);
+}
+function receiptId2(input) {
+  return deterministicUuid(TODOS_TASK_SUBTREE_TRANSFER_ROUTE, "apply", input.operation_id, input.step_id, input.idempotency_key, taskSubtreeTransferRequestDigest(input));
+}
+function rollbackReceiptId(input) {
+  return deterministicUuid(TODOS_TASK_SUBTREE_TRANSFER_ROUTE, "rollback", input.operation_id, input.step_id, input.idempotency_key, input.receipt_id);
+}
+function taskWhere(db, taskId) {
+  const row = db.query(`SELECT id, project_id, parent_id, plan_id, task_list_id, version, updated_at, archived_at
+     FROM tasks WHERE id = ? LIMIT 1`).get(taskId);
+  if (!row) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_NOT_FOUND", `Task not found: ${taskId}`, { task_id: taskId });
+  }
+  return row;
+}
+
+class SqliteTodosTaskSubtreeTransferBackend {
+  db;
+  tenantId;
+  kind = "sqlite";
+  constructor(db, tenantId = "default") {
+    this.db = db;
+    this.tenantId = tenantId;
+    ensureSqliteTodosTaskSubtreeTransferSchema(db);
+  }
+  async serialized(run) {
+    const previous = sqliteTails2.get(this.db) ?? Promise.resolve();
+    let release;
+    const current = new Promise((resolve10) => {
+      release = resolve10;
+    });
+    const tail = previous.then(() => current);
+    sqliteTails2.set(this.db, tail);
+    await previous;
+    try {
+      this.db.exec("BEGIN IMMEDIATE");
+      try {
+        const result = await run();
+        this.db.exec("COMMIT");
+        return result;
+      } catch (error) {
+        this.db.exec("ROLLBACK");
+        throw error;
+      }
+    } finally {
+      release();
+      if (sqliteTails2.get(this.db) === tail)
+        sqliteTails2.delete(this.db);
+    }
+  }
+  snapshot(input) {
+    const sourceTasks = this.db.query(`SELECT id, project_id, parent_id, plan_id, task_list_id, version, updated_at, archived_at
+       FROM tasks WHERE project_id = ? ORDER BY id`).all(input.source_project_id).map(rowImage);
+    const allTasks = this.db.query(`SELECT id, project_id, parent_id, plan_id, task_list_id, version, updated_at, archived_at
+       FROM tasks ORDER BY id`).all().map(rowImage);
+    const plans = this.db.query(`SELECT id, project_id, task_list_id, updated_at
+       FROM plans ORDER BY id`).all().map(planImage);
+    const destinationProjectFound = Boolean(this.db.query("SELECT id FROM projects WHERE id = ? LIMIT 1").get(input.destination_project_id));
+    const destinationTaskList = this.db.query("SELECT id FROM task_lists WHERE id = ? AND project_id = ? LIMIT 1").get(input.destination_task_list_id, input.destination_project_id);
+    const destinationParentFound = input.destination_parent_id === null || Boolean(this.db.query("SELECT id FROM tasks WHERE id = ? AND project_id = ? LIMIT 1").get(input.destination_parent_id, input.destination_project_id));
+    return {
+      source_tasks: sourceTasks,
+      plan_tasks: allTasks,
+      plans,
+      destination_project_found: destinationProjectFound,
+      destination_task_list_found: Boolean(destinationTaskList),
+      destination_parent_found: destinationParentFound
+    };
+  }
+  async inspect(input) {
+    return this.serialized(() => prepareTransfer(this.snapshot(input), input).inspection);
+  }
+  async apply(input, options) {
+    return this.serialized(async () => {
+      const requestDigest = taskSubtreeTransferRequestDigest(input);
+      const existing = this.db.query(`SELECT result_json, request_digest, precondition_digest, idempotency_key
+         FROM todos_task_subtree_transfer_receipts
+         WHERE tenant_id = ? AND kind = 'apply'
+           AND (idempotency_key = ? OR (operation_id = ? AND step_id = ?))
+         ORDER BY created_at ASC LIMIT 1`).get(this.tenantId, input.idempotency_key, input.operation_id, input.step_id);
+      if (existing) {
+        if (existing.request_digest !== requestDigest || existing.precondition_digest !== input.precondition_digest || existing.idempotency_key !== input.idempotency_key) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_IDEMPOTENCY_CONFLICT", "The operation/step or idempotency key was already accepted for a different request");
+        }
+        return parseResult(String(existing.result_json), true);
+      }
+      const snapshot = this.snapshot(input);
+      const prepared = prepareTransfer(snapshot, input);
+      validateApplySnapshot(prepared, input, snapshot.plans);
+      const priorImage = {
+        tasks: prepared.prior_tasks,
+        plans: prepared.prior_plans
+      };
+      const now4 = options.now?.() ?? new Date().toISOString();
+      const movedTaskIds = prepared.prior_tasks.map((task3) => task3.task_id);
+      for (const task3 of prepared.prior_tasks) {
+        const current = imageFromTaskRow(taskWhere(this.db, task3.task_id));
+        if (canonicalJson(current) !== canonicalJson(task3)) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "A task changed after inspection", { task_id: task3.task_id });
+        }
+      }
+      for (const task3 of prepared.prior_tasks) {
+        const targetPlan = prepared.task_plan_targets.get(task3.task_id) ?? null;
+        const parentId = task3.task_id === input.root_task_id ? input.destination_parent_id : task3.parent_id;
+        const result2 = this.db.query(`UPDATE tasks
+           SET project_id = ?, task_list_id = ?, plan_id = ?, parent_id = ?, version = version + 1, updated_at = ?
+           WHERE id = ? AND version = ?`).run(input.destination_project_id, input.destination_task_list_id, targetPlan, parentId, now4, task3.task_id, task3.version);
+        if (result2.changes !== 1) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "A task version changed during the atomic transfer", { task_id: task3.task_id });
+        }
+      }
+      await fault3(options, "after_task_writes");
+      for (const plan of prepared.prior_plans) {
+        const result2 = this.db.query(`UPDATE plans SET project_id = ?, task_list_id = ?, updated_at = ?
+           WHERE id = ? AND project_id IS ? AND task_list_id IS ? AND updated_at = ?`).run(input.destination_project_id, input.destination_task_list_id, now4, plan.plan_id, plan.project_id, plan.task_list_id, plan.updated_at);
+        if (result2.changes !== 1) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_CAS_CONFLICT", "A contained plan changed during the atomic transfer", { plan_id: plan.plan_id });
+        }
+      }
+      await fault3(options, "after_plan_writes");
+      const postImage = {
+        tasks: prepared.prior_tasks.map((task3) => ({
+          ...task3,
+          project_id: input.destination_project_id,
+          task_list_id: input.destination_task_list_id,
+          plan_id: prepared.task_plan_targets.get(task3.task_id) ?? null,
+          parent_id: task3.task_id === input.root_task_id ? input.destination_parent_id : task3.parent_id,
+          version: task3.version + 1,
+          updated_at: now4
+        })),
+        plans: prepared.prior_plans.map((plan) => ({
+          ...plan,
+          project_id: input.destination_project_id,
+          task_list_id: input.destination_task_list_id,
+          updated_at: now4
+        }))
+      };
+      const resultDigest = canonicalDigest({
+        route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+        request_digest: requestDigest,
+        prior_image: priorImage,
+        post_image: postImage
+      });
+      const receipt = {
+        receipt_id: receiptId2(input),
+        authority: "todos",
+        route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+        schema_version: 1,
+        kind: "apply",
+        operation_id: input.operation_id,
+        step_id: input.step_id,
+        idempotency_key: input.idempotency_key,
+        request_digest: requestDigest,
+        precondition_digest: input.precondition_digest,
+        result_digest: resultDigest,
+        apply_receipt_id: null,
+        source_project_id: input.source_project_id,
+        destination_project_id: input.destination_project_id,
+        destination_task_list_id: input.destination_task_list_id,
+        root_task_id: input.root_task_id,
+        source_population_digest: input.source_population_digest,
+        prior_image: priorImage,
+        post_image: postImage,
+        shared_plan_splits: input.shared_plan_splits,
+        created_at: now4
+      };
+      const result = {
+        duplicate: false,
+        receipt,
+        moved_task_ids: movedTaskIds,
+        moved_plan_ids: prepared.prior_plans.map((plan) => plan.plan_id),
+        complete: true
+      };
+      this.db.query(`INSERT INTO todos_task_subtree_transfer_receipts (
+          receipt_id, tenant_id, kind, operation_id, step_id, idempotency_key,
+          request_digest, precondition_digest, result_digest, apply_receipt_id,
+          request_json, result_json, created_at
+        ) VALUES (?, ?, 'apply', ?, ?, ?, ?, ?, ?, NULL, ?, ?, ?)`).run(receipt.receipt_id, this.tenantId, receipt.operation_id, receipt.step_id, receipt.idempotency_key, receipt.request_digest, receipt.precondition_digest, receipt.result_digest, canonicalJson(input), canonicalJson(result), now4);
+      await fault3(options, "after_receipt_write");
+      return result;
+    });
+  }
+  async readExact(receiptIdValue) {
+    const row = this.db.query(`SELECT result_json FROM todos_task_subtree_transfer_receipts
+       WHERE tenant_id = ? AND receipt_id = ? LIMIT 1`).get(this.tenantId, receiptIdValue);
+    if (!row) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_RECEIPT_NOT_FOUND", `Transfer receipt not found: ${receiptIdValue}`);
+    }
+    return parseResult(String(row.result_json), false);
+  }
+  async rollback(input, options) {
+    return this.serialized(async () => {
+      const requestDigest = taskSubtreeTransferRollbackRequestDigest(input);
+      const existing = this.db.query(`SELECT result_json, request_digest, precondition_digest, idempotency_key
+         FROM todos_task_subtree_transfer_receipts
+         WHERE tenant_id = ? AND kind = 'rollback'
+           AND (idempotency_key = ? OR (operation_id = ? AND step_id = ?))
+         ORDER BY created_at ASC LIMIT 1`).get(this.tenantId, input.idempotency_key, input.operation_id, input.step_id);
+      if (existing) {
+        if (existing.request_digest !== requestDigest || existing.precondition_digest !== input.precondition_digest || existing.idempotency_key !== input.idempotency_key) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_IDEMPOTENCY_CONFLICT", "The rollback operation/step or idempotency key was already accepted for a different request");
+        }
+        return parseResult(String(existing.result_json), true);
+      }
+      const applyRow = this.db.query(`SELECT result_json FROM todos_task_subtree_transfer_receipts
+         WHERE tenant_id = ? AND kind = 'apply' AND receipt_id = ? LIMIT 1`).get(this.tenantId, input.receipt_id);
+      if (!applyRow) {
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_RECEIPT_NOT_FOUND", `Apply receipt not found: ${input.receipt_id}`);
+      }
+      const applied = parseResult(String(applyRow.result_json), false);
+      if (applied.receipt.operation_id !== input.operation_id) {
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Rollback operation does not match the apply receipt");
+      }
+      const expectedPrecondition = canonicalDigest({
+        route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+        direction: "rollback",
+        operation_id: input.operation_id,
+        step_id: input.step_id,
+        apply_receipt_id: input.receipt_id,
+        apply_result_digest: applied.receipt.result_digest
+      });
+      if (input.precondition_digest !== expectedPrecondition) {
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_DIGEST_MISMATCH", "Rollback precondition digest does not match the exact apply receipt", { expected_precondition_digest: expectedPrecondition });
+      }
+      const now4 = options.now?.() ?? new Date().toISOString();
+      for (const task3 of applied.receipt.post_image.tasks) {
+        const current = imageFromTaskRow(taskWhere(this.db, task3.task_id));
+        if (canonicalJson(current) !== canonicalJson(task3)) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Rollback refused because a transferred task changed after apply", { task_id: task3.task_id });
+        }
+      }
+      for (const plan of applied.receipt.post_image.plans) {
+        const row = this.db.query("SELECT id, project_id, task_list_id, updated_at FROM plans WHERE id = ? LIMIT 1").get(plan.plan_id);
+        if (!row || canonicalJson(imageFromPlanRow(row)) !== canonicalJson(plan)) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Rollback refused because a transferred plan changed after apply", { plan_id: plan.plan_id });
+        }
+      }
+      for (const task3 of applied.receipt.prior_image.tasks) {
+        const result2 = this.db.query(`UPDATE tasks SET project_id = ?, task_list_id = ?, plan_id = ?, parent_id = ?,
+             version = version + 1, updated_at = ?
+           WHERE id = ? AND version = ?`).run(task3.project_id, task3.task_list_id, task3.plan_id, task3.parent_id, now4, task3.task_id, applied.receipt.post_image.tasks.find((candidate) => candidate.task_id === task3.task_id).version);
+        if (result2.changes !== 1) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Rollback task CAS failed", { task_id: task3.task_id });
+        }
+      }
+      await fault3(options, "after_rollback_task_writes");
+      for (const plan of applied.receipt.prior_image.plans) {
+        const post = applied.receipt.post_image.plans.find((candidate) => candidate.plan_id === plan.plan_id);
+        const result2 = this.db.query(`UPDATE plans SET project_id = ?, task_list_id = ?, updated_at = ?
+           WHERE id = ? AND project_id IS ? AND task_list_id IS ? AND updated_at = ?`).run(plan.project_id, plan.task_list_id, now4, plan.plan_id, post.project_id, post.task_list_id, post.updated_at);
+        if (result2.changes !== 1) {
+          throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_ROLLBACK_CONFLICT", "Rollback plan CAS failed", { plan_id: plan.plan_id });
+        }
+      }
+      await fault3(options, "after_rollback_plan_writes");
+      const restored = {
+        tasks: applied.receipt.prior_image.tasks.map((task3) => ({
+          ...task3,
+          version: applied.receipt.post_image.tasks.find((candidate) => candidate.task_id === task3.task_id).version + 1,
+          updated_at: now4
+        })),
+        plans: applied.receipt.prior_image.plans.map((plan) => ({ ...plan, updated_at: now4 }))
+      };
+      const resultDigest = canonicalDigest({
+        route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+        direction: "rollback",
+        apply_receipt_id: input.receipt_id,
+        prior_image: applied.receipt.post_image,
+        post_image: restored
+      });
+      const receipt = {
+        ...applied.receipt,
+        receipt_id: rollbackReceiptId(input),
+        kind: "rollback",
+        step_id: input.step_id,
+        idempotency_key: input.idempotency_key,
+        request_digest: requestDigest,
+        precondition_digest: input.precondition_digest,
+        result_digest: resultDigest,
+        apply_receipt_id: input.receipt_id,
+        prior_image: applied.receipt.post_image,
+        post_image: restored,
+        created_at: now4
+      };
+      const result = {
+        duplicate: false,
+        receipt,
+        moved_task_ids: applied.moved_task_ids,
+        moved_plan_ids: applied.moved_plan_ids,
+        complete: true
+      };
+      this.db.query(`INSERT INTO todos_task_subtree_transfer_receipts (
+          receipt_id, tenant_id, kind, operation_id, step_id, idempotency_key,
+          request_digest, precondition_digest, result_digest, apply_receipt_id,
+          request_json, result_json, created_at
+        ) VALUES (?, ?, 'rollback', ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(receipt.receipt_id, this.tenantId, receipt.operation_id, receipt.step_id, receipt.idempotency_key, receipt.request_digest, receipt.precondition_digest, receipt.result_digest, receipt.apply_receipt_id, canonicalJson(input), canonicalJson(result), now4);
+      await fault3(options, "after_rollback_receipt_write");
+      return result;
+    });
+  }
+}
+
+// src/task-subtree-transfer/authority.ts
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var DIGEST = /^[0-9a-f]{64}$/i;
+function boundedString(value, field2, max = 200) {
+  if (typeof value !== "string" || value.length === 0 || value.length > max) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", `${field2} must be a non-empty bounded string`);
+  }
+  return value;
+}
+function uuid3(value, field2) {
+  const parsed = boundedString(value, field2, 80);
+  if (!UUID.test(parsed)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", `${field2} must be a UUID`);
+  }
+  return parsed;
+}
+function digest2(value, field2) {
+  const parsed = boundedString(value, field2, 64);
+  if (!DIGEST.test(parsed)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", `${field2} must be a SHA-256 digest`);
+  }
+  return parsed.toLowerCase();
+}
+function nullableUuid(value, field2) {
+  if (value === null)
+    return null;
+  return uuid3(value, field2);
+}
+function strictObject(input, fields) {
+  if (input === null || typeof input !== "object" || Array.isArray(input)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "Request must be a JSON object");
+  }
+  const object = input;
+  const allowed = new Set(fields);
+  for (const key2 of Object.keys(object)) {
+    if (!allowed.has(key2)) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", `Unknown field: ${key2}`);
+    }
+  }
+  return object;
+}
+var INSPECT_FIELDS = [
+  "source_project_id",
+  "destination_project_id",
+  "destination_task_list_id",
+  "root_task_id",
+  "destination_parent_id"
+];
+function parseTodosTaskSubtreeTransferInspect(input) {
+  const value = strictObject(input, INSPECT_FIELDS);
+  const request = {
+    source_project_id: uuid3(value.source_project_id, "source_project_id"),
+    destination_project_id: uuid3(value.destination_project_id, "destination_project_id"),
+    destination_task_list_id: uuid3(value.destination_task_list_id, "destination_task_list_id"),
+    root_task_id: uuid3(value.root_task_id, "root_task_id"),
+    destination_parent_id: nullableUuid(value.destination_parent_id, "destination_parent_id")
+  };
+  if (request.source_project_id === request.destination_project_id) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "source_project_id and destination_project_id must identify different Projects");
+  }
+  return request;
+}
+var APPLY_FIELDS = [
+  ...INSPECT_FIELDS,
+  "version",
+  "operation_id",
+  "step_id",
+  "idempotency_key",
+  "precondition_digest",
+  "expected_root_parent_id",
+  "source_population_digest",
+  "expected_tasks",
+  "shared_plan_splits"
+];
+function parseTodosTaskSubtreeTransferApply(input) {
+  const value = strictObject(input, APPLY_FIELDS);
+  if (value.version !== 1) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "version must be 1");
+  }
+  if (!Array.isArray(value.expected_tasks) || value.expected_tasks.length === 0) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "expected_tasks must be a non-empty array");
+  }
+  const expected_tasks = value.expected_tasks.map((item, index) => {
+    const row = strictObject(item, ["task_id", "version"]);
+    const version = row.version;
+    if (!Number.isSafeInteger(version) || Number(version) < 1) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", `expected_tasks.${index}.version must be a positive integer`);
+    }
+    return { task_id: uuid3(row.task_id, `expected_tasks.${index}.task_id`), version: Number(version) };
+  });
+  const ids2 = new Set;
+  for (const row of expected_tasks) {
+    if (ids2.has(row.task_id)) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "expected_tasks must not contain duplicate task IDs");
+    }
+    ids2.add(row.task_id);
+  }
+  if (!Array.isArray(value.shared_plan_splits)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "shared_plan_splits must be an array");
+  }
+  const shared_plan_splits = value.shared_plan_splits.map((item, index) => {
+    const row = strictObject(item, ["source_plan_id", "destination_plan_id"]);
+    return {
+      source_plan_id: uuid3(row.source_plan_id, `shared_plan_splits.${index}.source_plan_id`),
+      destination_plan_id: uuid3(row.destination_plan_id, `shared_plan_splits.${index}.destination_plan_id`)
+    };
+  });
+  return {
+    ...parseTodosTaskSubtreeTransferInspect({
+      source_project_id: value.source_project_id,
+      destination_project_id: value.destination_project_id,
+      destination_task_list_id: value.destination_task_list_id,
+      root_task_id: value.root_task_id,
+      destination_parent_id: value.destination_parent_id
+    }),
+    version: 1,
+    operation_id: boundedString(value.operation_id, "operation_id"),
+    step_id: boundedString(value.step_id, "step_id"),
+    idempotency_key: boundedString(value.idempotency_key, "idempotency_key", 240),
+    precondition_digest: digest2(value.precondition_digest, "precondition_digest"),
+    expected_root_parent_id: nullableUuid(value.expected_root_parent_id, "expected_root_parent_id"),
+    source_population_digest: digest2(value.source_population_digest, "source_population_digest"),
+    expected_tasks,
+    shared_plan_splits
+  };
+}
+function parseTodosTaskSubtreeTransferRollback(input) {
+  const value = strictObject(input, [
+    "receipt_id",
+    "operation_id",
+    "step_id",
+    "idempotency_key",
+    "precondition_digest"
+  ]);
+  return {
+    receipt_id: uuid3(value.receipt_id, "receipt_id"),
+    operation_id: boundedString(value.operation_id, "operation_id"),
+    step_id: boundedString(value.step_id, "step_id"),
+    idempotency_key: boundedString(value.idempotency_key, "idempotency_key", 240),
+    precondition_digest: digest2(value.precondition_digest, "precondition_digest")
+  };
+}
+function deriveTodosTaskSubtreeTransferApplyPreconditionDigest(input) {
+  const {
+    source_project_id,
+    destination_project_id,
+    destination_task_list_id,
+    root_task_id,
+    expected_root_parent_id,
+    destination_parent_id,
+    source_population_digest,
+    expected_tasks,
+    shared_plan_splits
+  } = input;
+  return canonicalDigest({
+    route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+    direction: "apply",
+    source_project_id,
+    destination_project_id,
+    destination_task_list_id,
+    root_task_id,
+    expected_root_parent_id,
+    destination_parent_id,
+    source_population_digest,
+    expected_tasks,
+    shared_plan_splits
+  });
+}
+function deriveTodosTaskSubtreeTransferRollbackPreconditionDigest(input) {
+  return canonicalDigest({
+    route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+    direction: "rollback",
+    apply_receipt_id: input.receipt_id,
+    operation_id: input.operation_id,
+    step_id: input.step_id,
+    apply_result_digest: input.apply_result_digest
+  });
+}
+function resolveTenantId2(value) {
+  const tenant = value ?? "default";
+  if (!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/.test(tenant)) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "tenantId must be a bounded exact authority identifier");
+  }
+  return tenant;
+}
+
+class PackageOwnedTodosTaskSubtreeTransferAuthority {
+  backend;
+  tenantId;
+  backendOptions;
+  constructor(backend, options = {}) {
+    this.backend = backend;
+    this.tenantId = resolveTenantId2(options.tenantId);
+    this.backendOptions = { ...options, tenantId: this.tenantId };
+  }
+  async capability() {
+    return {
+      authority: "todos",
+      route: TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
+      schema_version: TODOS_TASK_SUBTREE_TRANSFER_SCHEMA_VERSION,
+      tenant_id: this.tenantId,
+      backend: this.backend.kind,
+      exact_descendant_closure: true,
+      complete_source_population_digest: true,
+      per_task_version_cas: true,
+      explicit_shared_plan_splits: true,
+      atomic_apply: true,
+      immutable_forward_inverse_receipts: true,
+      prior_image_receipts: true,
+      cas_protected_rollback: true,
+      preserves_descendant_parent_ids: true,
+      preserves_task_and_relation_identities: true
+    };
+  }
+  async inspect(input) {
+    return this.backend.inspect(parseTodosTaskSubtreeTransferInspect(input));
+  }
+  async apply(input) {
+    const request = parseTodosTaskSubtreeTransferApply(input);
+    const expected = deriveTodosTaskSubtreeTransferApplyPreconditionDigest(request);
+    if (request.precondition_digest !== expected) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_DIGEST_MISMATCH", "precondition_digest does not match the exact transfer target and source snapshot", { expected_precondition_digest: expected });
+    }
+    const requestDigest = taskSubtreeTransferRequestDigest(request);
+    const expectedKey = deriveTodosTaskSubtreeTransferIdempotencyKey({
+      operation_id: request.operation_id,
+      step_id: request.step_id,
+      direction: "apply",
+      target_selector: request.root_task_id,
+      request_digest: requestDigest,
+      precondition_digest: request.precondition_digest
+    });
+    if (request.idempotency_key !== expectedKey) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_IDEMPOTENCY_MISMATCH", "idempotency_key does not match the exact transfer request", { expected_idempotency_key: expectedKey });
+    }
+    return this.backend.apply(request, this.backendOptions);
+  }
+  async readExact(receiptIdValue) {
+    return this.backend.readExact(uuid3(receiptIdValue, "receipt_id"));
+  }
+  async rollback(input) {
+    const request = parseTodosTaskSubtreeTransferRollback(input);
+    const requestDigest = taskSubtreeTransferRollbackRequestDigest(request);
+    const expectedKey = deriveTodosTaskSubtreeTransferIdempotencyKey({
+      operation_id: request.operation_id,
+      step_id: request.step_id,
+      direction: "rollback",
+      target_selector: request.receipt_id,
+      request_digest: requestDigest,
+      precondition_digest: request.precondition_digest
+    });
+    if (request.idempotency_key !== expectedKey) {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_IDEMPOTENCY_MISMATCH", "rollback idempotency_key does not match the exact rollback request", { expected_idempotency_key: expectedKey });
+    }
+    return this.backend.rollback(request, this.backendOptions);
+  }
+}
+function createSqliteTodosTaskSubtreeTransferAuthority(options) {
+  return new PackageOwnedTodosTaskSubtreeTransferAuthority(new SqliteTodosTaskSubtreeTransferBackend(options.database, resolveTenantId2(options.tenantId)), options);
+}
+function createPostgresTodosTaskSubtreeTransferAuthority(client, options = {}) {
+  return new PackageOwnedTodosTaskSubtreeTransferAuthority(new PostgresTodosTaskSubtreeTransferBackend(client, options), options);
+}
+// src/task-subtree-transfer/http.ts
+var JSON_HEADERS3 = { "Content-Type": "application/json" };
+var REQUEST_BYTES = 2 * 1024 * 1024;
+var RESPONSE_BYTES = 8 * 1024 * 1024;
+function json3(body2, status2 = 200) {
+  return new Response(JSON.stringify(body2), { status: status2, headers: JSON_HEADERS3 });
+}
+function status2(error) {
+  switch (error.code) {
+    case "TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT":
+    case "TODOS_TASK_SUBTREE_TRANSFER_FOREIGN_REFERENCE":
+    case "TODOS_TASK_SUBTREE_TRANSFER_HIERARCHY_CYCLE":
+      return 400;
+    case "TODOS_TASK_SUBTREE_TRANSFER_RECEIPT_NOT_FOUND":
+    case "TODOS_TASK_SUBTREE_TRANSFER_NOT_FOUND":
+      return 404;
+    case "TODOS_TASK_SUBTREE_TRANSFER_ATOMICITY_UNAVAILABLE":
+      return 503;
+    default:
+      return 409;
+  }
+}
+async function boundedText2(message, limit) {
+  if (!message.body)
+    return "";
+  const reader = message.body.getReader();
+  const decoder = new TextDecoder;
+  let bytes = 0;
+  let text = "";
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done)
+        break;
+      bytes += value.byteLength;
+      if (bytes > limit) {
+        await reader.cancel();
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "Task-subtree-transfer HTTP body exceeds the byte bound");
+      }
+      text += decoder.decode(value, { stream: true });
+    }
+    return text + decoder.decode();
+  } finally {
+    reader.releaseLock();
+  }
+}
+async function readBody(request) {
+  const declaredLength = Number(request.headers.get("content-length") ?? 0);
+  if (Number.isFinite(declaredLength) && declaredLength > REQUEST_BYTES) {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "Task-subtree-transfer request exceeds the byte bound");
+  }
+  const text = await boundedText2(request, REQUEST_BYTES);
+  try {
+    return JSON.parse(text);
+  } catch {
+    throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "Invalid JSON body");
+  }
+}
+async function handleTodosTaskSubtreeTransferHttpRequest(request, url, authority, basePath = "/v1/task-subtree-transfer") {
+  if (url.pathname !== basePath && !url.pathname.startsWith(`${basePath}/`))
+    return null;
+  const action = url.pathname.slice(basePath.length).split("/").filter(Boolean).join("/");
+  try {
+    if ((action === "" || action === "capability") && request.method === "GET") {
+      return json3({ capability: await authority.capability() });
+    }
+    if (request.method !== "POST")
+      return json3({ error: "method not allowed" }, 405);
+    if (action === "inspect")
+      return json3({ inspection: await authority.inspect(await readBody(request)) });
+    if (action === "apply")
+      return json3({ result: await authority.apply(await readBody(request)) }, 201);
+    if (action === "rollback")
+      return json3({ result: await authority.rollback(await readBody(request)) }, 201);
+    if (action === "read-exact") {
+      const input = await readBody(request);
+      if (!input || typeof input.receipt_id !== "string") {
+        throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_INVALID_INPUT", "receipt_id is required");
+      }
+      return json3({ result: await authority.readExact(input.receipt_id) });
+    }
+    return json3({ error: "unknown task-subtree-transfer route" }, 404);
+  } catch (cause) {
+    if (cause instanceof TodosTaskSubtreeTransferError) {
+      return json3({
+        error: cause.message,
+        code: cause.code,
+        details: cause.details,
+        authoritative: true
+      }, status2(cause));
+    }
+    return json3({ error: "internal task-subtree-transfer error" }, 500);
+  }
+}
+
+class TodosTaskSubtreeTransferHttpClient {
+  baseUrl;
+  fetchImpl;
+  headers;
+  constructor(options) {
+    this.baseUrl = options.baseUrl.replace(/\/+$/, "");
+    this.fetchImpl = options.fetch ?? globalThis.fetch;
+    this.headers = {
+      ...options.headers,
+      ...options.apiKey ? { Authorization: `Bearer ${options.apiKey}` } : {},
+      "Content-Type": "application/json"
+    };
+  }
+  async request(action, init = {}) {
+    const response = await this.fetchImpl(`${this.baseUrl}/v1/task-subtree-transfer${action}`, {
+      ...init,
+      headers: { ...this.headers, ...init.headers ?? {} }
+    });
+    const text = await boundedText2(response, RESPONSE_BYTES);
+    let payload;
+    try {
+      payload = JSON.parse(text);
+    } catch {
+      throw new TodosTaskSubtreeTransferError("TODOS_TASK_SUBTREE_TRANSFER_HTTP_ERROR", `Task-subtree-transfer HTTP ${response.status} returned invalid JSON`);
+    }
+    if (!response.ok) {
+      throw new TodosTaskSubtreeTransferError(typeof payload.code === "string" ? payload.code : "TODOS_TASK_SUBTREE_TRANSFER_HTTP_ERROR", typeof payload.error === "string" ? payload.error : `Task-subtree-transfer HTTP ${response.status}`, payload.details && typeof payload.details === "object" ? payload.details : {});
+    }
+    return payload;
+  }
+  async capability() {
+    return (await this.request("/capability")).capability;
+  }
+  async inspect(input) {
+    return (await this.request("/inspect", { method: "POST", body: JSON.stringify(input) })).inspection;
+  }
+  async apply(input) {
+    return (await this.request("/apply", { method: "POST", body: JSON.stringify(input) })).result;
+  }
+  async readExact(receiptId3) {
+    return (await this.request("/read-exact", { method: "POST", body: JSON.stringify({ receipt_id: receiptId3 }) })).result;
+  }
+  async rollback(input) {
+    return (await this.request("/rollback", { method: "POST", body: JSON.stringify(input) })).result;
+  }
+}
+function createTodosTaskSubtreeTransferHttpClient(options) {
+  return new TodosTaskSubtreeTransferHttpClient(options);
+}
 // src/ai-tools.ts
 import { createHash as createHash16 } from "crypto";
 // src/cli/cloud-router.ts
@@ -43635,26 +45179,26 @@ var retryCapabilityCache = new Map;
 var taskCreatorCapabilityCache = new Map;
 var gitRefCapabilityCache = new Map;
 var remoteCommandCapabilityCache = new Map;
-var LEGACY_STORAGE_MODE_KEYS = [
-  "HASNA_TODOS_STORAGE_MODE",
-  "HASNA_TODOS_MODE",
-  "TODOS_STORAGE_MODE",
-  "TODOS_MODE"
-];
-function assertNoLegacyStorageMode(env = process.env) {
-  for (const key2 of LEGACY_STORAGE_MODE_KEYS) {
-    if (Object.hasOwn(env, key2) && env[key2] !== undefined) {
-      throw new Error(`REMOTE_STORAGE_MODE_REMOVED: ${key2} was removed. Deployment modes no longer exist: delete the storage-mode variable. ` + `The client uses the on-box SQLite store, or the HTTP API selected by ` + `HASNA_TODOS_API_URL + HASNA_TODOS_API_KEY. ` + `On the server, set HASNA_TODOS_DATABASE_URL to select the postgresql backend, ` + `or leave it unset for sqlite.`);
-    }
-  }
+var todosLocalFallbackNoticeEmitted = false;
+function emitTodosLocalFallbackNotice(env) {
+  if (todosLocalFallbackNoticeEmitted)
+    return;
+  todosLocalFallbackNoticeEmitted = true;
+  const notice = {
+    event: "todos-local-fallback",
+    transport: "sqlite",
+    source: "default",
+    apiUrlPresent: Boolean(env.HASNA_TODOS_API_URL?.trim()),
+    apiKeyPresent: Boolean(env.HASNA_TODOS_API_KEY?.trim()),
+    notice: "No hosted API config (HASNA_TODOS_API_URL + HASNA_TODOS_API_KEY) is present; " + "using local SQLite. Hosted todos are NOT visible in this output."
+  };
+  console.error(JSON.stringify(notice));
 }
-function resolveTodosCliStorageMode(env = process.env) {
-  assertNoLegacyStorageMode(env);
+function resolveTodosCliTransport(env = process.env) {
   const urlValue = env.HASNA_TODOS_API_URL?.trim();
   const keyValue = env.HASNA_TODOS_API_KEY?.trim();
   if (urlValue && keyValue) {
     return {
-      mode: "http",
       transport: "http",
       selected: true,
       source: "HASNA_TODOS_API_URL+HASNA_TODOS_API_KEY"
@@ -43666,15 +45210,15 @@ function resolveTodosCliStorageMode(env = process.env) {
   if (keyValue) {
     throw new Error("REMOTE_API_URL_MISSING: remote Todos storage requires HASNA_TODOS_API_URL; local SQLite fallback is disabled");
   }
+  emitTodosLocalFallbackNotice(env);
   return {
-    mode: "sqlite",
     transport: "sqlite",
     selected: false,
     source: "default"
   };
 }
 function requestedTransport(env) {
-  return resolveTodosCliStorageMode(env).transport;
+  return resolveTodosCliTransport(env).transport;
 }
 function normalizeRemoteAuthorityUrl(value) {
   const trimmed = value?.trim();
@@ -43708,13 +45252,13 @@ function normalizeRemoteAuthorityUrl(value) {
 function getTodosRemoteAuthorityConfigStatus(env = process.env) {
   let resolution;
   try {
-    resolution = resolveTodosCliStorageMode(env);
+    resolution = resolveTodosCliTransport(env);
   } catch (error) {
     const issue = error instanceof Error ? error.message : String(error);
     return {
       selected: true,
       ok: false,
-      mode: "invalid",
+      transport: "invalid",
       api_url_configured: Boolean(env.HASNA_TODOS_API_URL?.trim()),
       api_key_configured: Boolean(env.HASNA_TODOS_API_KEY?.trim()),
       v1_base_url: null,
@@ -43722,12 +45266,12 @@ function getTodosRemoteAuthorityConfigStatus(env = process.env) {
       local_fallback: false
     };
   }
-  const { mode, selected } = resolution;
+  const { transport, selected } = resolution;
   if (!selected) {
     return {
       selected: false,
       ok: true,
-      mode,
+      transport,
       api_url_configured: false,
       api_key_configured: false,
       v1_base_url: null,
@@ -43752,7 +45296,7 @@ function getTodosRemoteAuthorityConfigStatus(env = process.env) {
   return {
     selected: true,
     ok: issues.length === 0,
-    mode,
+    transport,
     api_url_configured: apiUrl !== null,
     api_key_configured: apiKeyConfigured,
     v1_base_url: apiUrl ? `${apiUrl}/v1` : null,
@@ -43761,24 +45305,24 @@ function getTodosRemoteAuthorityConfigStatus(env = process.env) {
   };
 }
 function requireTodosRemoteAuthorityEnv(env) {
-  const status2 = getTodosRemoteAuthorityConfigStatus(env);
-  if (!status2.ok)
-    throw new Error(status2.issues[0]);
+  const status3 = getTodosRemoteAuthorityConfigStatus(env);
+  if (!status3.ok)
+    throw new Error(status3.issues[0]);
   return {
     ...env,
-    HASNA_TODOS_API_URL: status2.v1_base_url.replace(/\/v1$/, ""),
+    HASNA_TODOS_API_URL: status3.v1_base_url.replace(/\/v1$/, ""),
     HASNA_TODOS_API_KEY: env.HASNA_TODOS_API_KEY.trim()
   };
 }
 function classifyRemoteRequestError(baseUrl, route, error) {
-  const status2 = error && typeof error === "object" ? error.status : undefined;
-  if (status2 === 401) {
+  const status3 = error && typeof error === "object" ? error.status : undefined;
+  if (status3 === 401) {
     throw new Error(`REMOTE_API_UNAUTHORIZED: configured Todos authority ${baseUrl} rejected HASNA_TODOS_API_KEY for ${route}; ` + "local SQLite fallback is disabled", { cause: error });
   }
-  if (status2 === 403) {
+  if (status3 === 403) {
     throw new Error(`REMOTE_API_FORBIDDEN: configured Todos authority ${baseUrl} denied ${route}; local SQLite fallback is disabled`, { cause: error });
   }
-  if (status2 === 409) {
+  if (status3 === 409) {
     const body2 = error && typeof error === "object" ? error.body : undefined;
     if (body2 && typeof body2 === "object" && !Array.isArray(body2)) {
       const remoteError = body2;
@@ -43788,17 +45332,18 @@ function classifyRemoteRequestError(baseUrl, route, error) {
     }
     throw error;
   }
-  if (typeof status2 === "number" && status2 >= 300 && status2 < 400) {
+  if (typeof status3 === "number" && status3 >= 300 && status3 < 400) {
     throw new Error(`REMOTE_API_REDIRECT_REJECTED: configured Todos authority ${baseUrl} redirected ${route}; ` + "authenticated redirects are disabled to prevent credential leakage", { cause: error });
   }
-  if (typeof status2 === "number" && status2 >= 500) {
-    throw new Error(`REMOTE_API_UNAVAILABLE: configured Todos authority ${baseUrl} returned HTTP ${status2} for ${route}; ` + "local SQLite fallback is disabled", { cause: error });
+  if (typeof status3 === "number" && status3 >= 500) {
+    throw new Error(`REMOTE_API_UNAVAILABLE: configured Todos authority ${baseUrl} returned HTTP ${status3} for ${route}; ` + "local SQLite fallback is disabled", { cause: error });
   }
   const message = error instanceof Error ? error.message : String(error);
   if (error instanceof Error && error.name === "AbortError" || /abort|timed?\s*out/i.test(message)) {
-    throw new Error(`REMOTE_API_TIMEOUT: configured Todos authority ${baseUrl} timed out for ${route}; local SQLite fallback is disabled`, { cause: error });
+    const unboundedNote = route === "/tasks" ? "; this is likely an UNBOUNDED task read timing out (bounded task reads from this authority return in ~1 s) \u2014 retry with a bounded/count-specific shape such as todos list --limit; local SQLite fallback is disabled" : "; local SQLite fallback is disabled";
+    throw new Error(`REMOTE_API_TIMEOUT: configured Todos authority ${baseUrl} timed out for ${route}${unboundedNote}`, { cause: error });
   }
-  if (status2 === undefined) {
+  if (status3 === undefined) {
     throw new Error(`REMOTE_API_UNREACHABLE: configured Todos authority ${baseUrl} could not be reached for ${route}; ` + "local SQLite fallback is disabled", { cause: error });
   }
   throw error;
@@ -43866,8 +45411,8 @@ async function requiredRemoteRoute(client, route, request, recognized404Codes =
   try {
     return await request();
   } catch (error) {
-    const status2 = error && typeof error === "object" ? error.status : undefined;
-    if (status2 === 404 || status2 === 405) {
+    const status3 = error && typeof error === "object" ? error.status : undefined;
+    if (status3 === 404 || status3 === 405) {
       const body2 = error && typeof error === "object" ? error.body : undefined;
       const code = body2 && typeof body2 === "object" && !Array.isArray(body2) ? body2.code : undefined;
       if (typeof code === "string" && recognized404Codes.includes(code))
@@ -43884,11 +45429,10 @@ function getTodosCloudClient(env = process.env, requestTimeoutMs = REMOTE_REQUES
     fetchImpl: (input, init) => globalThis.fetch(input, { ...init, redirect: "manual" }),
     timeoutMs: requestTimeoutMs
   });
-  if (resolved.transport === "cloud-http")
-    return protectRemoteClient(resolved.client, requestTimeoutMs);
   const transportName = resolved.transport;
-  if (transportName === "http")
+  if (transportName === "cloud-http" || transportName === "http") {
     return protectRemoteClient(resolved.client, requestTimeoutMs);
+  }
   return null;
 }
 function unwrapTask(raw) {
@@ -44039,9 +45583,9 @@ async function cloudListTasks(client, filter = {}) {
   const { status: _status, limit, offset, ...baseFilter } = filter;
   const start = offset ?? 0;
   const windowEnd = typeof limit === "number" ? start + limit : undefined;
-  const pages = await Promise.all(statuses.map((status2) => requestCloudTaskPage(client, {
+  const pages = await Promise.all(statuses.map((status3) => requestCloudTaskPage(client, {
     ...baseFilter,
-    status: status2,
+    status: status3,
     ...windowEnd === undefined ? {} : { limit: windowEnd }
   })));
   const seen = new Set;
@@ -44319,11 +45863,11 @@ init_audit();
 init_database();
 function upsertCheckpoint(task_id, step, updates, db) {
   const d = db || getDatabase();
-  const timestamp4 = now();
+  const timestamp5 = now();
   const existing = d.query("SELECT id FROM task_checkpoints WHERE task_id = ? AND step = ?").get(task_id, step);
   const id = existing?.id ?? uuid();
   const agentId = updates.agent_id ?? null;
-  const status2 = updates.status ?? "pending";
+  const status3 = updates.status ?? "pending";
   const data = updates.data ? JSON.stringify(updates.data) : JSON.stringify({});
   const error = updates.error ?? null;
   const attempt = updates.attempt ?? 1;
@@ -44337,22 +45881,22 @@ function upsertCheckpoint(task_id, step, updates, db) {
     task_id,
     agentId,
     step,
-    status2,
+    status3,
     data,
     error,
     attempt,
     maxAttempts,
     startedAt,
     completedAt2,
-    timestamp4,
-    status2,
+    timestamp5,
+    status3,
     data,
     error,
     attempt,
     maxAttempts,
     startedAt,
     completedAt2,
-    timestamp4
+    timestamp5
   ]);
   return rowToCheckpoint(d.query("SELECT * FROM task_checkpoints WHERE id = ?").get(id));
 }
@@ -44415,10 +45959,10 @@ function stepForGate(gate) {
     throw new Error("Approval gate name is required");
   return `approval:${trimmed}`;
 }
-function approvalStatusToCheckpointStatus(status2) {
-  if (status2 === "approved")
+function approvalStatusToCheckpointStatus(status3) {
+  if (status3 === "approved")
     return "completed";
-  if (status2 === "pending")
+  if (status3 === "pending")
     return "pending";
   return "failed";
 }
@@ -44440,12 +45984,12 @@ function isExpired(expiresAt, at = new Date) {
   return Boolean(expiresAt && new Date(expiresAt).getTime() <= at.getTime());
 }
 function gateFromCheckpoint(checkpoint) {
-  const status2 = checkpointStatusToApprovalStatus(checkpoint);
+  const status3 = checkpointStatusToApprovalStatus(checkpoint);
   return {
     id: checkpoint.id,
     task_id: checkpoint.task_id,
     gate: String(checkpoint.data["approval_gate_name"] || checkpoint.step.replace(/^approval:/, "")),
-    status: status2,
+    status: status3,
     reviewer: typeof checkpoint.data["reviewer"] === "string" ? checkpoint.data["reviewer"] : null,
     requester: typeof checkpoint.data["requester"] === "string" ? checkpoint.data["requester"] : null,
     reason: typeof checkpoint.data["reason"] === "string" ? checkpoint.data["reason"] : null,
@@ -44490,13 +46034,13 @@ function logApprovalEvent(taskId, action, gate, agentId, db) {
     });
   }
 }
-function writeGate(input, status2, decision, db) {
+function writeGate(input, status3, decision, db) {
   const d = db || getDatabase();
   ensureTask(input.task_id, d);
   const step = stepForGate(input.gate);
   const existing = getCheckpoint(input.task_id, step, d);
   const existingData = existing?.data || {};
-  const timestamp4 = decision?.decided_at || now();
+  const timestamp5 = decision?.decided_at || now();
   const existingRunId = typeof existingData["run_id"] === "string" ? existingData["run_id"] : undefined;
   const runId = input.run_id ? resolveTaskRunId(input.run_id, d) : existingRunId;
   const data = {
@@ -44504,7 +46048,7 @@ function writeGate(input, status2, decision, db) {
     ...input.metadata || {},
     approval_gate: true,
     approval_gate_name: input.gate.trim(),
-    approval_status: status2,
+    approval_status: status3,
     requester: input.requester ?? existingData["requester"] ?? null,
     reviewer: input.reviewer ?? decision?.decided_by ?? existingData["reviewer"] ?? null,
     reason: decision?.reason ?? input.reason ?? existingData["reason"] ?? null,
@@ -44517,11 +46061,11 @@ function writeGate(input, status2, decision, db) {
   };
   const checkpoint = upsertCheckpoint(input.task_id, step, {
     agent_id: decision?.decided_by || input.requester || input.reviewer,
-    status: approvalStatusToCheckpointStatus(status2),
+    status: approvalStatusToCheckpointStatus(status3),
     data,
-    error: status2 === "rejected" || status2 === "expired" ? String(data.reason || status2) : null,
-    started_at: existing?.started_at || timestamp4,
-    completed_at: status2 === "pending" ? null : timestamp4
+    error: status3 === "rejected" || status3 === "expired" ? String(data.reason || status3) : null,
+    started_at: existing?.started_at || timestamp5,
+    completed_at: status3 === "pending" ? null : timestamp5
   }, d);
   return gateFromCheckpoint(checkpoint);
 }
@@ -45369,7 +46913,7 @@ async function executeListTasks(adapter, state, request, input) {
   const planId = boundedOptionalString(record, "plan_id", TODOS_AI_READ_TOOL_LIMITS.max_identifier_bytes);
   const taskListId = boundedOptionalString(record, "task_list_id", TODOS_AI_READ_TOOL_LIMITS.max_identifier_bytes);
   const assignedTo = boundedOptionalString(record, "assigned_to", TODOS_AI_READ_TOOL_LIMITS.max_filter_string_bytes);
-  const status2 = boundedEnum(record, "status", TASK_STATUSES);
+  const status3 = boundedEnum(record, "status", TASK_STATUSES);
   const priority = boundedEnum(record, "priority", TASK_PRIORITIES);
   const tags = boundedTags(record);
   if (projectId !== undefined)
@@ -45380,8 +46924,8 @@ async function executeListTasks(adapter, state, request, input) {
     filter.task_list_id = taskListId;
   if (assignedTo !== undefined)
     filter.assigned_to = assignedTo;
-  if (status2 !== undefined)
-    filter.status = status2;
+  if (status3 !== undefined)
+    filter.status = status3;
   if (priority !== undefined)
     filter.priority = priority;
   if (tags !== undefined)
@@ -45723,29 +47267,29 @@ function getNativeStorageStatus(env = process.env) {
   };
 }
 function getNativeStorageSyncPlan(env = process.env, options = {}) {
-  const status2 = getNativeStorageStatus(env);
+  const status3 = getNativeStorageStatus(env);
   const steps = [
     "Read local SQLite snapshot",
-    status2.remote_enabled ? "Prepare Postgres sync table upserts" : "Skip remote database writes in local mode",
-    status2.object_storage.configured ? "Plan S3 artifact object writes" : "Keep artifact storage local",
+    status3.remote_enabled ? "Prepare Postgres sync table upserts" : "Skip remote database writes in local mode",
+    status3.object_storage.configured ? "Plan S3 artifact object writes" : "Keep artifact storage local",
     "Report planned changes without opening network connections"
   ];
   return {
-    ok: status2.ok,
+    ok: status3.ok,
     service: "todos",
     dry_run: true,
     no_network: true,
-    status: status2,
+    status: status3,
     postgres: {
-      required: status2.remote_enabled,
-      configured: status2.database.configured,
+      required: status3.remote_enabled,
+      configured: status3.database.configured,
       schema_sql: options.includeSchemaSql ? postgresTodosSyncSchemaSql() : []
     },
     object_storage: {
-      required: status2.remote_enabled,
-      configured: status2.object_storage.configured,
-      bucket: status2.object_storage.bucket,
-      prefix: status2.object_storage.prefix
+      required: status3.remote_enabled,
+      configured: status3.object_storage.configured,
+      bucket: status3.object_storage.bucket,
+      prefix: status3.object_storage.prefix
     },
     steps
   };
@@ -45851,8 +47395,8 @@ function resolveTaskList(task3, project, db) {
   }
   return null;
 }
-function isTerminal2(status2) {
-  return status2 === "completed" || status2 === "cancelled" || status2 === "failed";
+function isTerminal2(status3) {
+  return status3 === "completed" || status3 === "cancelled" || status3 === "failed";
 }
 function routeConcurrencyKey(task3, project, taskList, projectPath) {
   if (project?.id)
@@ -46033,7 +47577,7 @@ function setTaskWorkflowPointers(taskId, input, db) {
     latest_evaluation_path: pointerPatch(previous.latest_evaluation_path, input, "latest_evaluation_path"),
     workflow_state: pointerPatch(previous.workflow_state, input, "workflow_state")
   });
-  const timestamp4 = now();
+  const timestamp5 = now();
   const {
     current_workflow_invocation_id,
     current_run_id,
@@ -46049,7 +47593,7 @@ function setTaskWorkflowPointers(taskId, input, db) {
     workflow_invocation: {
       schema_version: TASK_WORKFLOW_POINTER_SCHEMA_VERSION,
       ...next,
-      updated_at: timestamp4,
+      updated_at: timestamp5,
       updated_by: input.actor ?? null
     }
   };
@@ -46083,8 +47627,8 @@ function normalizePath3(input) {
   return resolve10(input);
 }
 function sourceStoreId(sourceDbPath) {
-  const digest2 = createHash17("sha256").update(sourceDbPath).digest("hex").slice(0, 16);
-  return `sqlite:${digest2}`;
+  const digest3 = createHash17("sha256").update(sourceDbPath).digest("hex").slice(0, 16);
+  return `sqlite:${digest3}`;
 }
 function inferSourceRepoPath(sourceDbPath) {
   const normalized = normalizePath3(sourceDbPath);
@@ -46855,7 +48399,7 @@ function rowToSnapshot(row) {
 function saveSnapshot(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp4 = now();
+  const timestamp5 = now();
   d.run(`INSERT INTO context_snapshots (id, agent_id, task_id, project_id, snapshot_type, plan_summary, files_open, attempts, blockers, next_steps, metadata, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -46869,7 +48413,7 @@ function saveSnapshot(input, db) {
     JSON.stringify(input.blockers || []),
     input.next_steps || null,
     JSON.stringify(input.metadata || {}),
-    timestamp4
+    timestamp5
   ]);
   return {
     id,
@@ -46883,7 +48427,7 @@ function saveSnapshot(input, db) {
     blockers: input.blockers || [],
     next_steps: input.next_steps || null,
     metadata: input.metadata || {},
-    created_at: timestamp4
+    created_at: timestamp5
   };
 }
 function getLatestSnapshot(agentId, taskId, db) {
@@ -46999,7 +48543,7 @@ function createKnowledgeRecord(input, db) {
   if (!title)
     throw new Error("Knowledge record title is required");
   const d = db || getDatabase();
-  const timestamp4 = now();
+  const timestamp5 = now();
   const id = uuid();
   d.run(`INSERT INTO project_knowledge_records (
       id, record_type, title, content, decision, rationale, alternatives,
@@ -47019,8 +48563,8 @@ function createKnowledgeRecord(input, db) {
     input.snapshot_id || null,
     JSON.stringify(normalizeTags(input.tags)),
     JSON.stringify(input.metadata || {}),
-    timestamp4,
-    timestamp4
+    timestamp5,
+    timestamp5
   ]);
   return getKnowledgeRecord(id, d);
 }
@@ -47211,9 +48755,9 @@ function normalizeText4(value) {
   const trimmed = value.trim();
   return trimmed.length > 0 ? trimmed : null;
 }
-function assertStatus(status2) {
-  if (!VALID_STATUSES.has(status2))
-    throw new Error(`Invalid risk status: ${status2}`);
+function assertStatus(status3) {
+  if (!VALID_STATUSES.has(status3))
+    throw new Error(`Invalid risk status: ${status3}`);
 }
 function assertSeverity(severity) {
   if (!VALID_SEVERITIES2.has(severity))
@@ -47258,16 +48802,16 @@ function createRisk(input, db) {
   const title = input.title.trim();
   if (!title)
     throw new Error("Risk title is required");
-  const status2 = input.status || "open";
+  const status3 = input.status || "open";
   const severity = input.severity || "medium";
   const probability = input.probability || "medium";
-  assertStatus(status2);
+  assertStatus(status3);
   assertSeverity(severity);
   assertProbability(probability);
   const d = db || getDatabase();
-  const timestamp4 = now();
+  const timestamp5 = now();
   const id = uuid();
-  const closedAt = status2 === "resolved" || status2 === "accepted" ? timestamp4 : null;
+  const closedAt = status3 === "resolved" || status3 === "accepted" ? timestamp5 : null;
   d.run(`INSERT INTO project_risks (
       id, title, description, status, severity, probability, owner, mitigation, due_at,
       project_id, plan_id, task_id, tags, metadata, created_at, updated_at, closed_at
@@ -47275,7 +48819,7 @@ function createRisk(input, db) {
     id,
     title,
     normalizeText4(input.description),
-    status2,
+    status3,
     severity,
     probability,
     normalizeText4(input.owner),
@@ -47286,8 +48830,8 @@ function createRisk(input, db) {
     resolveKnownId2("tasks", input.task_id, d),
     JSON.stringify(normalizeTags2(input.tags)),
     JSON.stringify(input.metadata || {}),
-    timestamp4,
-    timestamp4,
+    timestamp5,
+    timestamp5,
     closedAt
   ]);
   return getRisk(id, d);
@@ -47370,8 +48914,8 @@ function updateRisk(id, input, db) {
   d.run(`UPDATE project_risks SET ${sets.join(", ")} WHERE id = ?`, params);
   return getRisk(resolved, d);
 }
-function closeRisk(id, status2 = "resolved", db) {
-  return updateRisk(id, { status: status2 }, db);
+function closeRisk(id, status3 = "resolved", db) {
+  return updateRisk(id, { status: status3 }, db);
 }
 function buildRiskFilters(options, db) {
   const conditions = [];
@@ -47469,7 +49013,7 @@ function scoreHealth(scope, scopeId, db) {
     const blockers = d.query(`SELECT dep.id, dep.short_id, dep.title, dep.status
          FROM task_dependencies td
          JOIN tasks dep ON dep.id = td.depends_on
-         WHERE td.task_id = ? AND dep.status != 'completed'`).all(task3.id);
+         WHERE td.task_id = ? AND dep.status NOT IN ('completed', 'cancelled')`).all(task3.id);
     return { id: task3.id, short_id: task3.short_id, title: redactEvidenceText(task3.title), blockers };
   }).filter((entry2) => entry2.blockers.length > 0);
   const overdue = tasks.filter((task3) => activeTaskIds.has(task3.id) && Boolean(task3.due_at && task3.due_at < generatedAt)).map((task3) => ({ id: task3.id, short_id: task3.short_id, title: redactEvidenceText(task3.title), due_at: task3.due_at }));
@@ -47499,7 +49043,7 @@ function scoreHealth(scope, scopeId, db) {
   };
   const totalPenalty = Object.values(penalties).reduce((sum, penalty) => sum + penalty, 0);
   const score = Math.max(0, 100 - Math.min(100, totalPenalty));
-  const status2 = score < 40 ? "critical" : score < 70 ? "at_risk" : score < 85 ? "watch" : "healthy";
+  const status3 = score < 40 ? "critical" : score < 70 ? "at_risk" : score < 85 ? "watch" : "healthy";
   const recommendations = [];
   if (blocked.length > 0)
     recommendations.push("Clear blocking dependencies before starting more work.");
@@ -47523,7 +49067,7 @@ function scoreHealth(scope, scopeId, db) {
     scope,
     scope_id: scopeInfo.id,
     score,
-    status: status2,
+    status: status3,
     components: {
       total_tasks: tasks.length,
       blocked_tasks: blocked.length,
@@ -47770,7 +49314,7 @@ function createRetrospective(input, db) {
   const d = db || getDatabase();
   const report = buildReport(input, d);
   const scope = scopeFromInput(input, d);
-  const timestamp4 = now();
+  const timestamp5 = now();
   if (input.create_followups) {
     for (const followUp of report.follow_up_tasks) {
       const task3 = createTask({
@@ -47786,7 +49330,7 @@ function createRetrospective(input, db) {
   }
   const id = uuid();
   d.run(`INSERT INTO local_retrospectives (id, title, scope, project_id, plan_id, agent_id, report_json, created_at, updated_at)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, [id, report.title, report.scope, scope.projectId, scope.planId, input.agent_id || null, JSON.stringify(report), timestamp4, timestamp4]);
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, [id, report.title, report.scope, scope.projectId, scope.planId, input.agent_id || null, JSON.stringify(report), timestamp5, timestamp5]);
   return getRetrospective(id, d);
 }
 function getRetrospective(id, db) {
@@ -48075,7 +49619,7 @@ function createApiKey(input, db) {
   if (!name)
     throw new Error("API key name is required");
   const key2 = generatePlaintextKey();
-  const timestamp4 = now();
+  const timestamp5 = now();
   const id = uuid();
   const prefix = key2.slice(0, 12);
   d.run(`INSERT INTO api_keys (id, name, key_hash, prefix, permissions, created_at, expires_at)
@@ -48085,7 +49629,7 @@ function createApiKey(input, db) {
     hashApiKey(key2),
     prefix,
     JSON.stringify(input.permissions?.length ? input.permissions : ["*"]),
-    timestamp4,
+    timestamp5,
     input.expires_at || null
   ]);
   const row = d.query("SELECT * FROM api_keys WHERE id = ?").get(id);
@@ -48139,15 +49683,15 @@ function rowToSession(row) {
 function createSession(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp4 = now();
+  const timestamp5 = now();
   d.run(`INSERT INTO sessions (id, agent_id, project_id, working_dir, started_at, last_activity, metadata)
      VALUES (?, ?, ?, ?, ?, ?, ?)`, [
     id,
     input.agent_id || null,
     input.project_id || null,
     input.working_dir || null,
-    timestamp4,
-    timestamp4,
+    timestamp5,
+    timestamp5,
     JSON.stringify(input.metadata || {})
   ]);
   return getSession(id, d);
@@ -48320,7 +49864,7 @@ function rowToArtifact2(row) {
 function addArtifact(input, db, dbPath) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp4 = now();
+  const timestamp5 = now();
   const storageMode = input.storage_mode ?? "copy";
   const stored = storeArtifactFile({
     artifactId: id,
@@ -48345,8 +49889,8 @@ function addArtifact(input, db, dbPath) {
     stored.sizeBytes,
     input.redaction_status ?? "none",
     JSON.stringify(input.metadata ?? {}),
-    timestamp4,
-    timestamp4
+    timestamp5,
+    timestamp5
   ]);
   return getArtifact(id, d);
 }
@@ -48379,14 +49923,14 @@ function listArtifacts(filter = {}, db) {
 }
 function updateArtifactRedaction(id, redactionStatus, db) {
   const d = db || getDatabase();
-  const timestamp4 = now();
-  d.run("UPDATE artifacts SET redaction_status = ?, updated_at = ? WHERE id = ? AND deleted_at IS NULL", [redactionStatus, timestamp4, id]);
+  const timestamp5 = now();
+  d.run("UPDATE artifacts SET redaction_status = ?, updated_at = ? WHERE id = ? AND deleted_at IS NULL", [redactionStatus, timestamp5, id]);
   return getArtifact(id, d);
 }
 function softDeleteArtifact(id, db) {
   const d = db || getDatabase();
-  const timestamp4 = now();
-  const result = d.run("UPDATE artifacts SET deleted_at = ?, updated_at = ? WHERE id = ? AND deleted_at IS NULL", [timestamp4, timestamp4, id]);
+  const timestamp5 = now();
+  const result = d.run("UPDATE artifacts SET deleted_at = ?, updated_at = ? WHERE id = ? AND deleted_at IS NULL", [timestamp5, timestamp5, id]);
   return result.changes > 0;
 }
 function purgeArtifact(id, db, dbPath) {
@@ -48524,7 +50068,7 @@ init_redaction();
 function createHandoff(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp4 = now();
+  const timestamp5 = now();
   d.run(`INSERT INTO handoffs (id, agent_id, project_id, session_id, summary, completed, in_progress, blockers, next_steps, task_ids, relevant_files, run_ids, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -48539,7 +50083,7 @@ function createHandoff(input, db) {
     toJson(input.task_ids),
     toJson(input.relevant_files),
     toJson(input.run_ids),
-    timestamp4
+    timestamp5
   ]);
   return {
     id,
@@ -48554,7 +50098,7 @@ function createHandoff(input, db) {
     task_ids: input.task_ids || null,
     relevant_files: input.relevant_files || null,
     run_ids: input.run_ids || null,
-    created_at: timestamp4,
+    created_at: timestamp5,
     acknowledged_by: []
   };
 }
@@ -49066,7 +50610,7 @@ function upsertVerificationProvider(input) {
   const name = normalizeName(input.name);
   const config = loadConfig();
   const existing = config.verification_providers?.[name];
-  const timestamp4 = new Date().toISOString();
+  const timestamp5 = new Date().toISOString();
   const provider = {
     ...existing,
     name,
@@ -49077,8 +50621,8 @@ function upsertVerificationProvider(input) {
     capabilities: input.capabilities ?? existing?.capabilities,
     retry: input.retry ? retryConfig(input.retry) : existing?.retry,
     timeout_ms: timeoutMs(input.timeout_ms ?? existing?.timeout_ms),
-    created_at: existing?.created_at || timestamp4,
-    updated_at: timestamp4
+    created_at: existing?.created_at || timestamp5,
+    updated_at: timestamp5
   };
   saveConfig({
     ...config,
@@ -49639,7 +51183,7 @@ function upsertPolicyPack(input) {
   const existing = config.policy_packs?.[input.name];
   const root = normalizePath4(input.root || existing?.root || process.cwd());
   const base = existing || defaultPolicyPack(input.name, root);
-  const timestamp4 = new Date().toISOString();
+  const timestamp5 = new Date().toISOString();
   const pack = {
     ...base,
     name: input.name,
@@ -49657,8 +51201,8 @@ function upsertPolicyPack(input) {
     require_artifact: input.require_artifact ?? base.require_artifact,
     evidence_min_count: input.evidence_min_count ?? base.evidence_min_count,
     branch_pattern: input.branch_pattern ?? base.branch_pattern,
-    created_at: existing?.created_at || timestamp4,
-    updated_at: timestamp4
+    created_at: existing?.created_at || timestamp5,
+    updated_at: timestamp5
   };
   saveConfig({
     ...config,
@@ -50000,7 +51544,7 @@ function summarizeOutput(stdout, stderr) {
 function upsertAgentRunAdapter(input) {
   const config = loadConfig();
   const existing = config.agent_run_adapters?.[input.name];
-  const timestamp4 = new Date().toISOString();
+  const timestamp5 = new Date().toISOString();
   const adapter = {
     ...existing,
     name: input.name,
@@ -50008,8 +51552,8 @@ function upsertAgentRunAdapter(input) {
     sandbox: input.sandbox ?? existing?.sandbox,
     cwd: input.cwd ?? existing?.cwd,
     env: input.env ?? existing?.env,
-    created_at: existing?.created_at || timestamp4,
-    updated_at: timestamp4
+    created_at: existing?.created_at || timestamp5,
+    updated_at: timestamp5
   };
   saveConfig({
     ...config,
@@ -50133,7 +51677,7 @@ async function runNextAgentDispatch(input = {}, db) {
     proc.exited
   ]);
   const outputSummary = summarizeOutput(stdout, stderr);
-  const status2 = exitCode === 0 ? "completed" : "failed";
+  const status3 = exitCode === 0 ? "completed" : "failed";
   addTaskRunCommand({
     run_id: next.run.id,
     command,
@@ -50142,15 +51686,15 @@ async function runNextAgentDispatch(input = {}, db) {
     output_summary: outputSummary ?? undefined,
     agent_id: next.run.agent_id ?? undefined
   }, d);
-  const completed = { ...running, state: status2, completed_at: new Date().toISOString(), last_error: exitCode === 0 ? undefined : outputSummary || `exit ${exitCode}` };
+  const completed = { ...running, state: status3, completed_at: new Date().toISOString(), last_error: exitCode === 0 ? undefined : outputSummary || `exit ${exitCode}` };
   updateDispatcherMetadata(next.run.id, completed, d);
   finishTaskRun({
     run_id: next.run.id,
-    status: status2,
-    summary: outputSummary || `agent run ${status2}`,
+    status: status3,
+    summary: outputSummary || `agent run ${status3}`,
     agent_id: next.run.agent_id ?? undefined
   }, d);
-  return { run_id: next.run.id, task_id: next.run.task_id, command, dry_run: false, status: status2, exit_code: exitCode, output_summary: outputSummary };
+  return { run_id: next.run.id, task_id: next.run.task_id, command, dry_run: false, status: status3, exit_code: exitCode, output_summary: outputSummary };
 }
 function listAgentRuns(filter = {}, db) {
   let runs = listAgentRunQueue(db).map(toAgentRun);
@@ -51119,10 +52663,10 @@ function extractEmbeddedBridge(markdown) {
   const match = markdown.match(/<!--\s*hasna\.todos\.bridge\s*\n([\s\S]*?)\n\s*-->/);
   if (!match)
     return null;
-  const json3 = match[1].split(`
+  const json4 = match[1].split(`
 `).map((line) => line.replace(/^  /, "")).join(`
 `);
-  return JSON.parse(json3);
+  return JSON.parse(json4);
 }
 function frontmatterValue(markdown, key2) {
   const match = markdown.match(/^---\n([\s\S]*?)\n---/);
@@ -51143,14 +52687,14 @@ function parseTaskLine(line, currentPlan) {
   const match = line.match(/^\s*[-*]\s+\[([ xX])\]\s+(.+)$/);
   if (!match)
     return null;
-  const status2 = match[1].toLowerCase() === "x" ? "completed" : "pending";
+  const status3 = match[1].toLowerCase() === "x" ? "completed" : "pending";
   const rawTitle = stripInlineMetadata(match[2]).replace(/^\*\*(.*?)\*\*$/, "$1");
   const tags = [...rawTitle.matchAll(/(^|\s)#([A-Za-z0-9_-]+)/g)].map((tag) => tag[2]);
   const assignee = rawTitle.match(/(^|\s)@([A-Za-z0-9_-]+)/)?.[2];
   const title = rawTitle.replace(/(^|\s)#[A-Za-z0-9_-]+/g, "").replace(/(^|\s)@[A-Za-z0-9_-]+/g, "").replace(/\s+/g, " ").trim();
   return {
     title,
-    status: status2,
+    status: status3,
     priority: "medium",
     tags,
     assigned_to: assignee,
@@ -52755,7 +54299,7 @@ function normalizeJiraIssue(raw) {
   if (!summary)
     return null;
   const statusRec = asRecord3(fields.status);
-  const status2 = typeof statusRec?.name === "string" ? statusRec.name : undefined;
+  const status3 = typeof statusRec?.name === "string" ? statusRec.name : undefined;
   const labels = labelNames2(fields.labels);
   const description = typeof fields.description === "string" ? fields.description.slice(0, 8000) : typeof asRecord3(fields.description)?.content === "string" ? String(asRecord3(fields.description)?.content).slice(0, 8000) : undefined;
   return {
@@ -52764,13 +54308,13 @@ function normalizeJiraIssue(raw) {
     external_id: key2,
     title: `[${key2}] ${summary}`,
     description,
-    status: status2,
+    status: status3,
     priority: priorityFromJira(fields.priority),
     tags: [...labels.slice(0, 10), "jira-import"],
     url: typeof raw.self === "string" ? raw.self : undefined,
     raw_metadata: {
       jira_key: key2,
-      jira_status: status2,
+      jira_status: status3,
       jira_priority: asRecord3(fields.priority)?.name,
       jira_id: raw.id
     }
@@ -55515,6 +57059,10 @@ function importBundle(bundle, options = {}, db) {
   }
   for (const dep of bundle.dependencies) {
     try {
+      if (!getTask(dep.task_id, d) || !getTask(dep.depends_on, d)) {
+        bump(result.skipped, "dependencies");
+        continue;
+      }
       d.run("INSERT OR IGNORE INTO task_dependencies (task_id, depends_on) VALUES (?, ?)", [dep.task_id, dep.depends_on]);
       bump(result.created, "dependencies");
     } catch (e) {
@@ -56320,11 +57868,11 @@ function createTuiDashboardSnapshot(options = {}, db) {
   const d = db || getDatabase();
   const limit = limited(options.limit);
   const filter = projectFilter(options.project_id);
-  const counts = TASK_STATUSES2.reduce((acc, status2) => {
-    acc[status2] = countTasks({ ...filter, status: status2 }, d);
+  const counts = TASK_STATUSES2.reduce((acc, status3) => {
+    acc[status3] = countTasks({ ...filter, status: status3 }, d);
     return acc;
   }, { total: 0 });
-  counts.total = TASK_STATUSES2.reduce((sum, status2) => sum + counts[status2], 0);
+  counts.total = TASK_STATUSES2.reduce((sum, status3) => sum + counts[status3], 0);
   const projectRows = listProjects(d).filter((project) => !options.project_id || project.id === options.project_id).slice(0, limit).map((project) => ({
     id: project.id,
     name: project.name,
@@ -57525,12 +59073,12 @@ function captureGit(root, warnings) {
   }
   const branch = runLocalCommand(root, ["git", "branch", "--show-current"]);
   const commit = runLocalCommand(root, ["git", "rev-parse", "HEAD"]);
-  const status2 = runLocalCommand(root, ["git", "status", "--porcelain=v1"]);
+  const status3 = runLocalCommand(root, ["git", "status", "--porcelain=v1"]);
   if (commit.exitCode !== 0)
     warnings.push(`git commit unavailable: ${commit.stderr || commit.stdout || "unknown error"}`);
-  if (status2.exitCode !== 0)
-    warnings.push(`git status unavailable: ${status2.stderr || status2.stdout || "unknown error"}`);
-  const lines = status2.stdout ? status2.stdout.split(/\r?\n/).filter(Boolean) : [];
+  if (status3.exitCode !== 0)
+    warnings.push(`git status unavailable: ${status3.stderr || status3.stdout || "unknown error"}`);
+  const lines = status3.stdout ? status3.stdout.split(/\r?\n/).filter(Boolean) : [];
   return {
     present: true,
     branch: branch.stdout || null,
@@ -57572,8 +59120,8 @@ function defaultSnapshotDir() {
   return join18(dirname15(resolve17(dbPath)), "environment-snapshots");
 }
 function snapshotWithId(snapshot) {
-  const digest2 = sha2566(JSON.stringify(snapshot)).slice(0, 24);
-  return { id: `env_${digest2}`, ...snapshot };
+  const digest3 = sha2566(JSON.stringify(snapshot)).slice(0, 24);
+  return { id: `env_${digest3}`, ...snapshot };
 }
 function captureEnvironmentSnapshot(input = {}) {
   const root = resolve17(input.root || process.cwd());
@@ -57773,7 +59321,7 @@ function createDecisionRecord(input, db) {
   const ts = now();
   const sequenceNum = nextSequenceNum(input.project_id, d);
   const shortRef = buildShortRef(input.project_id, sequenceNum, d);
-  const status2 = input.status ?? "proposed";
+  const status3 = input.status ?? "proposed";
   d.run(`INSERT INTO decision_records (
       id, project_id, task_id, plan_id, agent_id, sequence_num, short_ref,
       title, status, context, decision, consequences, alternatives, tags,
@@ -57787,7 +59335,7 @@ function createDecisionRecord(input, db) {
     sequenceNum,
     shortRef,
     input.title,
-    status2,
+    status3,
     input.context ?? null,
     input.decision,
     input.consequences ?? null,
@@ -57865,15 +59413,15 @@ function updateDecisionRecord(id, input, db) {
   ]);
   return getDecisionRecord(id, d);
 }
-function setDecisionStatus(id, status2, db) {
-  if (!DECISION_STATUSES.includes(status2)) {
-    throw new Error(`Invalid decision status: ${status2}`);
+function setDecisionStatus(id, status3, db) {
+  if (!DECISION_STATUSES.includes(status3)) {
+    throw new Error(`Invalid decision status: ${status3}`);
   }
   const d = db || getDatabase();
   const existing = getDecisionRecord(id, d);
   if (!existing)
     throw new Error(`Decision record not found: ${id}`);
-  d.run(`UPDATE decision_records SET status = ?, updated_at = ? WHERE id = ?`, [status2, now(), id]);
+  d.run(`UPDATE decision_records SET status = ?, updated_at = ? WHERE id = ?`, [status3, now(), id]);
   return getDecisionRecord(id, d);
 }
 function supersedeDecisionRecord(id, input, db) {
@@ -58154,17 +59702,17 @@ function buildReportExportData(input, db) {
         throw new Error("Project not found");
       projectId = project.id;
       title = `Project: ${project.name}`;
-      const status2 = getStatus({ project_id: project.id }, undefined, undefined, d);
+      const status3 = getStatus({ project_id: project.id }, undefined, undefined, d);
       sections.push(section("overview", "Overview", [
         `Name: ${project.name}`,
         `Path: ${project.path}`,
         `Prefix: ${project.task_prefix ?? "\u2014"}`
       ]), section("status", "Status", [
-        `Pending: ${status2.pending}`,
-        `In progress: ${status2.in_progress}`,
-        `Completed: ${status2.completed}`,
-        `Total: ${status2.total}`,
-        `Stale: ${status2.stale_count}`
+        `Pending: ${status3.pending}`,
+        `In progress: ${status3.in_progress}`,
+        `Completed: ${status3.completed}`,
+        `Total: ${status3.total}`,
+        `Stale: ${status3.stale_count}`
       ]));
       const tasks = listTasks({ project_id: project.id, limit: 50 }, d);
       sections.push(section("tasks", "Recent tasks", tasks.length ? tasks.map(taskLine2) : ["No tasks"]));
@@ -58985,8 +60533,8 @@ function getGitStatus(root, branch, includeGitStatus) {
     return { has_git: false, current_branch: null, branch_exists: false, dirty_files: [] };
   const currentBranch = runGit3(root, ["rev-parse", "--abbrev-ref", "HEAD"]);
   const branchExists = runGit3(root, ["show-ref", "--verify", `refs/heads/${branch}`]) !== null;
-  const status2 = runGit3(root, ["status", "--short"]) || "";
-  const dirtyFiles = status2.split(`
+  const status3 = runGit3(root, ["status", "--short"]) || "";
+  const dirtyFiles = status3.split(`
 `).map((line) => line.trim()).filter(Boolean).map((line) => normalizePath6(line.replace(/^.. /, "").replace(/^.* -> /, ""))).filter((path) => Boolean(path));
   return { has_git: true, current_branch: currentBranch || null, branch_exists: branchExists, dirty_files: dirtyFiles };
 }
@@ -59384,8 +60932,8 @@ var AGENT_WORKFLOW_DEMO_SCHEMA = "todos.agent_workflow_demo.v1";
 var DEMO_DEFAULT_AGENT = "demoagent";
 var DEMO_DEFAULT_PROJECT = "Agent Workflow Demo";
 var DEMO_PROJECT_PATH = "/tmp/todos-agent-workflow-demo";
-function pushStep(steps, action, detail, status2 = "ok") {
-  steps.push({ step: steps.length + 1, action, detail, status: status2 });
+function pushStep(steps, action, detail, status3 = "ok") {
+  steps.push({ step: steps.length + 1, action, detail, status: status3 });
 }
 function setupEphemeralDemoDb(options = {}) {
   const prevPath = process.env["TODOS_DB_PATH"];
@@ -59512,7 +61060,7 @@ function runAgentWorkflowDemo(options = {}) {
     pushStep(steps, "complete_run_record", `Run record status=${finishedRecord.status}`);
     completeTask(third.id, agent.id, d, { notes: "Demo: finished via agent run + run record" });
     pushStep(steps, "complete_task", `Completed ${third.short_id ?? third.id.slice(0, 8)}`);
-    const status2 = getStatus({ project_id: project.id }, agent.id, undefined, d);
+    const status3 = getStatus({ project_id: project.id }, agent.id, undefined, d);
     const tasks = listTasks({ project_id: project.id }, d).map((t) => ({
       id: t.id,
       short_id: t.short_id,
@@ -59544,14 +61092,14 @@ function runAgentWorkflowDemo(options = {}) {
         objective: finishedRecord.objective
       },
       status_summary: {
-        pending: status2.pending,
-        in_progress: status2.in_progress,
-        completed: status2.completed,
-        total: status2.total
+        pending: status3.pending,
+        in_progress: status3.in_progress,
+        completed: status3.completed,
+        total: status3.total
       },
       steps,
       completed_at: exportedAt2,
-      message: `Demo complete: ${status2.completed}/${status2.total} tasks done, 1 agent run, 1 run record`
+      message: `Demo complete: ${status3.completed}/${status3.total} tasks done, 1 agent run, 1 run record`
     };
   } finally {
     if (dbHandle)
@@ -60525,8 +62073,8 @@ function rowToOrg(row) {
 function createOrg(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp4 = now();
-  d.run(`INSERT INTO orgs (id, name, description, metadata, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)`, [id, input.name, input.description || null, JSON.stringify(input.metadata || {}), timestamp4, timestamp4]);
+  const timestamp5 = now();
+  d.run(`INSERT INTO orgs (id, name, description, metadata, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)`, [id, input.name, input.description || null, JSON.stringify(input.metadata || {}), timestamp5, timestamp5]);
   return getOrg(id, d);
 }
 function getOrg(id, db) {
@@ -60774,10 +62322,10 @@ function getCriticalPath2(opts, db) {
 function addKgEdge(sourceId, sourceType, targetId, targetType, relationType, weight = 1, metadata, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp4 = now();
+  const timestamp5 = now();
   d.run(`INSERT OR IGNORE INTO kg_edges (id, source_id, source_type, target_id, target_type, relation_type, weight, metadata, created_at)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, [id, sourceId, sourceType, targetId, targetType, relationType, weight, JSON.stringify(metadata || {}), timestamp4]);
-  return { id, source_id: sourceId, source_type: sourceType, target_id: targetId, target_type: targetType, relation_type: relationType, weight, metadata: metadata || {}, created_at: timestamp4 };
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, [id, sourceId, sourceType, targetId, targetType, relationType, weight, JSON.stringify(metadata || {}), timestamp5]);
+  return { id, source_id: sourceId, source_type: sourceType, target_id: targetId, target_type: targetType, relation_type: relationType, weight, metadata: metadata || {}, created_at: timestamp5 };
 }
 function removeKgEdges(sourceId, targetId, relationType, db) {
   const d = db || getDatabase();
@@ -61677,7 +63225,7 @@ function runSavedSearch(filters = {}, scope = "tasks", db) {
 function saveSearchView(input, db) {
   const d = db || getDatabase();
   const name = normalizeName3(input.name);
-  const timestamp4 = now();
+  const timestamp5 = now();
   const existing = getSearchView(name, d);
   if (existing) {
     d.run(`UPDATE saved_search_views
@@ -61686,7 +63234,7 @@ function saveSearchView(input, db) {
       input.description ?? existing.description,
       normalizeScope(input.scope ?? existing.scope),
       JSON.stringify(input.filters ?? existing.filters),
-      timestamp4,
+      timestamp5,
       existing.id
     ]);
     return getSearchView(existing.id, d);
@@ -61699,8 +63247,8 @@ function saveSearchView(input, db) {
     input.description ?? null,
     normalizeScope(input.scope),
     JSON.stringify(input.filters ?? {}),
-    timestamp4,
-    timestamp4
+    timestamp5,
+    timestamp5
   ]);
   return getSearchView(id, d);
 }
@@ -61742,14 +63290,14 @@ function readClaudeTask(dir, filename) {
 function writeClaudeTask(dir, task3) {
   writeJsonFile(join23(dir, `${task3.id}.json`), task3);
 }
-function toClaudeStatus(status2) {
-  if (status2 === "pending" || status2 === "in_progress" || status2 === "completed") {
-    return status2;
+function toClaudeStatus(status3) {
+  if (status3 === "pending" || status3 === "in_progress" || status3 === "completed") {
+    return status3;
   }
   return "completed";
 }
-function toSqliteStatus(status2) {
-  return status2;
+function toSqliteStatus(status3) {
+  return status3;
 }
 function readPrefixCounter(dir) {
   const path = join23(dir, ".prefix-counter");
@@ -62710,7 +64258,7 @@ init_database();
 function logTrace(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp4 = now();
+  const timestamp5 = now();
   d.run(`INSERT INTO task_traces (id, task_id, agent_id, trace_type, name, input_summary, output_summary, duration_ms, tokens, cost_usd, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -62723,7 +64271,7 @@ function logTrace(input, db) {
     input.duration_ms ?? null,
     input.tokens ?? null,
     input.cost_usd ?? null,
-    timestamp4
+    timestamp5
   ]);
   return {
     id,
@@ -62736,7 +64284,7 @@ function logTrace(input, db) {
     duration_ms: input.duration_ms ?? null,
     tokens: input.tokens ?? null,
     cost_usd: input.cost_usd ?? null,
-    created_at: timestamp4
+    created_at: timestamp5
   };
 }
 function getTaskTraces(taskId, db) {
@@ -62760,7 +64308,7 @@ init_database();
 init_tasks();
 function setBudget(agentId, opts, db) {
   const d = db || getDatabase();
-  const timestamp4 = now();
+  const timestamp5 = now();
   d.run(`INSERT INTO agent_budgets (agent_id, max_concurrent, max_cost_usd, max_task_minutes, period_hours, created_at, updated_at)
      VALUES (?, ?, ?, ?, ?, ?, ?)
      ON CONFLICT(agent_id) DO UPDATE SET
@@ -62774,13 +64322,13 @@ function setBudget(agentId, opts, db) {
     opts.max_cost_usd ?? null,
     opts.max_task_minutes ?? null,
     opts.period_hours ?? 24,
-    timestamp4,
-    timestamp4,
+    timestamp5,
+    timestamp5,
     opts.max_concurrent ?? null,
     opts.max_cost_usd ?? null,
     opts.max_task_minutes ?? null,
     opts.period_hours ?? null,
-    timestamp4
+    timestamp5
   ]);
   return getBudget(agentId, d);
 }
@@ -63083,11 +64631,11 @@ function resolveWorkflowState(input, projectPath) {
     return { input, state: byCanonical, matched_by: "canonical_status" };
   throw new Error(`Unknown workflow state: ${input}`);
 }
-function stateForCanonicalStatus(status2, projectPath) {
-  const configured = (getWorkflowConfig(projectPath)?.states || []).map(normalizeState).find((state) => Boolean(state && state.canonical_status === status2));
+function stateForCanonicalStatus(status3, projectPath) {
+  const configured = (getWorkflowConfig(projectPath)?.states || []).map(normalizeState).find((state) => Boolean(state && state.canonical_status === status3));
   if (configured)
     return configured;
-  return listWorkflowStates(projectPath).find((state) => state.canonical_status === status2) || resolveWorkflowState(status2, projectPath).state;
+  return listWorkflowStates(projectPath).find((state) => state.canonical_status === status3) || resolveWorkflowState(status3, projectPath).state;
 }
 function getTaskWorkflowState(taskId, db, projectPath) {
   const d = db || getDatabase();
@@ -63251,9 +64799,9 @@ function unpackFixture(input) {
   const contextPack = input["context_pack"];
   return isObject(contextPack) ? contextPack : input;
 }
-function approvalStatus(status2) {
-  if (status2 === "approved" || status2 === "rejected" || status2 === "expired")
-    return status2;
+function approvalStatus(status3) {
+  if (status3 === "approved" || status3 === "rejected" || status3 === "expired")
+    return status3;
   return "pending";
 }
 function approvalsFromFixture(fixture, runs) {
@@ -63350,17 +64898,17 @@ function simulateAgentReplay(input, options = {}) {
     if (["completed", "failed", "cancelled"].includes(runStatus))
       currentStatus = runStatus;
     for (const command of asArray2(run["commands"])) {
-      const status2 = normalizedStatus(command["status"]);
+      const status3 = normalizedStatus(command["status"]);
       const commandText = text(command["command"]) || "command";
       push({
         type: "command",
         source: "run.commands",
         label: commandText,
-        status: status2,
+        status: status3,
         command: commandText,
         message: text(command["output_summary"])
       });
-      if (status2 === "failed")
+      if (status3 === "failed")
         failures.push({ source: "run.commands", message: text(command["output_summary"]) || "command failed", command: commandText });
     }
     for (const file of asArray2(run["files"])) {
@@ -63377,17 +64925,17 @@ function simulateAgentReplay(input, options = {}) {
     }
   }
   for (const verification2 of verifications) {
-    const status2 = normalizedStatus(verification2["status"]);
+    const status3 = normalizedStatus(verification2["status"]);
     const commandText = text(verification2["command"]) || "verification";
     push({
       type: "command",
       source: "traceability.verifications",
       label: commandText,
-      status: status2,
+      status: status3,
       command: commandText,
       message: text(verification2["output_summary"])
     });
-    if (status2 === "failed")
+    if (status3 === "failed")
       failures.push({ source: "traceability.verifications", message: text(verification2["output_summary"]) || "verification failed", command: commandText });
   }
   const approvals = approvalsFromFixture(fixture, runs);
@@ -63923,7 +65471,7 @@ function installLocalExtension(input) {
   const validation = inspected.validation;
   if (!validation.ok)
     throw new Error(`extension manifest invalid: ${validation.errors.join("; ")}`);
-  const timestamp4 = new Date().toISOString();
+  const timestamp5 = new Date().toISOString();
   const config = loadConfig();
   const existing = config.extension_registry?.[inspected.manifest.name];
   const trusted = Boolean(input.trust);
@@ -63943,8 +65491,8 @@ function installLocalExtension(input) {
       ...trusted ? [] : ["extension installed as needs_review until trusted explicitly"]
     ],
     diagnostics: testExtensionCompatibility(inspected.source),
-    installed_at: existing?.installed_at || timestamp4,
-    updated_at: timestamp4
+    installed_at: existing?.installed_at || timestamp5,
+    updated_at: timestamp5
   };
   saveConfig({
     ...config,
@@ -64306,9 +65854,9 @@ async function sendToTmux(target, message, delayMs, options = false) {
   ensureTmuxAvailable();
   if (!opts.confirmBusy) {
     const pane = await inspectTmuxPane(target);
-    const status2 = tmuxPaneBusyStatus(pane);
-    if (status2.busy) {
-      throw new Error(`tmux target "${target}" appears busy (${status2.reason}). Re-run with --confirm-busy to send anyway.`);
+    const status3 = tmuxPaneBusyStatus(pane);
+    if (status3.busy) {
+      throw new Error(`tmux target "${target}" appears busy (${status3.reason}). Re-run with --confirm-busy to send anyway.`);
     }
   }
   const sendProc = Bun.spawn(["tmux", "send-keys", "-t", target, message, ""], {
@@ -64453,10 +66001,10 @@ function normalizeStatus(value) {
   return "open";
 }
 function normalizeResolutionStatus(value) {
-  const status2 = normalizeStatus(value || "resolved");
-  if (status2 === "open")
+  const status3 = normalizeStatus(value || "resolved");
+  if (status3 === "open")
     throw new Error("resolve-missing status must be resolved or ignored");
-  return status2;
+  return status3;
 }
 function redactOptional(value, max = 2000) {
   if (!value)
@@ -64494,7 +66042,7 @@ function compactFinding(finding2) {
     metadata_keys: Object.keys(finding2.metadata).sort()
   };
 }
-function previewFinding(existing, next, timestamp4) {
+function previewFinding(existing, next, timestamp5) {
   return {
     ...existing,
     run_id: next.run_id,
@@ -64505,9 +66053,9 @@ function previewFinding(existing, next, timestamp4) {
     summary: next.summary,
     artifact_path: next.artifact_path,
     metadata: next.metadata,
-    last_seen_at: timestamp4,
-    resolved_at: next.status === "open" ? null : existing.resolved_at || timestamp4,
-    updated_at: timestamp4
+    last_seen_at: timestamp5,
+    resolved_at: next.status === "open" ? null : existing.resolved_at || timestamp5,
+    updated_at: timestamp5
   };
 }
 function upsertAction(existing, next) {
@@ -64557,7 +66105,7 @@ function sameFinding(left, right) {
 function upsertTaskFinding(input, db) {
   const d = db || getDatabase();
   assertTask(input.task_id, d);
-  const timestamp4 = input.observed_at || now();
+  const timestamp5 = input.observed_at || now();
   const warnings = [];
   const next = nextFinding(input, d);
   const existing = getFindingByFingerprint(input.task_id, next.fingerprint, d);
@@ -64568,10 +66116,10 @@ function upsertTaskFinding(input, db) {
       schema_version: TASK_FINDING_UPSERT_SCHEMA_VERSION,
       local_only: true,
       dry_run: true,
-      processed_at: timestamp4,
+      processed_at: timestamp5,
       action: action2,
       fingerprint: next.fingerprint,
-      finding: existing ? compactFinding(previewFinding(existing, next, timestamp4)) : null,
+      finding: existing ? compactFinding(previewFinding(existing, next, timestamp5)) : null,
       warnings
     };
   }
@@ -64592,17 +66140,17 @@ function upsertTaskFinding(input, db) {
       next.summary,
       next.artifact_path,
       JSON.stringify(next.metadata),
-      timestamp4,
-      timestamp4,
-      next.status === "open" ? null : timestamp4,
-      timestamp4,
-      timestamp4
+      timestamp5,
+      timestamp5,
+      next.status === "open" ? null : timestamp5,
+      timestamp5,
+      timestamp5
     ]);
     return {
       schema_version: TASK_FINDING_UPSERT_SCHEMA_VERSION,
       local_only: true,
       dry_run: false,
-      processed_at: timestamp4,
+      processed_at: timestamp5,
       action: "created",
       fingerprint: next.fingerprint,
       finding: compactFinding(getFindingByFingerprint(input.task_id, next.fingerprint, d)),
@@ -64614,7 +66162,7 @@ function upsertTaskFinding(input, db) {
       schema_version: TASK_FINDING_UPSERT_SCHEMA_VERSION,
       local_only: true,
       dry_run: false,
-      processed_at: timestamp4,
+      processed_at: timestamp5,
       action: "matched",
       fingerprint: next.fingerprint,
       finding: compactFinding(existing),
@@ -64634,16 +66182,16 @@ function upsertTaskFinding(input, db) {
     next.summary,
     next.artifact_path,
     JSON.stringify(next.metadata),
-    timestamp4,
-    next.status === "open" ? null : existing.resolved_at || timestamp4,
-    timestamp4,
+    timestamp5,
+    next.status === "open" ? null : existing.resolved_at || timestamp5,
+    timestamp5,
     existing.id
   ]);
   return {
     schema_version: TASK_FINDING_UPSERT_SCHEMA_VERSION,
     local_only: true,
     dry_run: false,
-    processed_at: timestamp4,
+    processed_at: timestamp5,
     action,
     fingerprint: next.fingerprint,
     finding: compactFinding(getFindingByFingerprint(input.task_id, next.fingerprint, d)),
@@ -64680,8 +66228,8 @@ function listCompactTaskFindings(filter = {}, db) {
 function resolveMissingTaskFindings(input, db) {
   const d = db || getDatabase();
   assertTask(input.task_id, d);
-  const timestamp4 = input.resolved_at || now();
-  const status2 = normalizeResolutionStatus(input.status);
+  const timestamp5 = input.resolved_at || now();
+  const status3 = normalizeResolutionStatus(input.status);
   const runId = resolveRunForTask(input.run_id, input.task_id, d);
   const present = new Set(input.fingerprints.map(normalizeTaskFindingFingerprint));
   const warnings = [];
@@ -64700,7 +66248,7 @@ function resolveMissingTaskFindings(input, db) {
       schema_version: TASK_FINDING_RESOLVE_MISSING_SCHEMA_VERSION,
       local_only: true,
       dry_run: true,
-      processed_at: timestamp4,
+      processed_at: timestamp5,
       action: candidates.length > 0 ? "preview" : "noop",
       task_id: input.task_id,
       source: input.source ? redactOptional(input.source, 120) : null,
@@ -64723,10 +66271,10 @@ function resolveMissingTaskFindings(input, db) {
   const tx = d.transaction(() => {
     for (const finding2 of candidates) {
       d.run("UPDATE task_findings SET status = ?, resolved_at = ?, metadata = ?, updated_at = ? WHERE id = ? AND status = 'open'", [
-        status2,
-        timestamp4,
+        status3,
+        timestamp5,
         JSON.stringify({ ...finding2.metadata, ...metadataPatch }),
-        timestamp4,
+        timestamp5,
         finding2.id
       ]);
     }
@@ -64738,8 +66286,8 @@ function resolveMissingTaskFindings(input, db) {
     schema_version: TASK_FINDING_RESOLVE_MISSING_SCHEMA_VERSION,
     local_only: true,
     dry_run: false,
-    processed_at: timestamp4,
-    action: updated.length > 0 ? status2 : "noop",
+    processed_at: timestamp5,
+    action: updated.length > 0 ? status3 : "noop",
     task_id: input.task_id,
     source: input.source ? redactOptional(input.source, 120) : null,
     run_id: runId,
@@ -65632,7 +67180,7 @@ init_tasks();
 init_task_relations();
 init_config2();
 var LOCAL_CAPACITY_SCHEMA_VERSION = 1;
-function timestamp4() {
+function timestamp5() {
   return new Date().toISOString();
 }
 function todayIso() {
@@ -65716,7 +67264,7 @@ function upsertCapacityProfile(input) {
   const store = readStore2();
   const key2 = profileKey(agentId, projectId);
   const existing = store.profiles[key2];
-  const now4 = timestamp4();
+  const now4 = timestamp5();
   const profile = {
     id: existing?.id ?? key2,
     agent_id: agentId,
@@ -65797,7 +67345,7 @@ function getPlanningForecast(input = {}, db) {
   return {
     schema_version: LOCAL_CAPACITY_SCHEMA_VERSION,
     local_only: true,
-    generated_at: timestamp4(),
+    generated_at: timestamp5(),
     filters: {
       project_id: input.project_id ?? null,
       plan_id: input.plan_id ?? null,
@@ -66185,6 +67733,8 @@ export {
   testTerminalNotificationRule,
   testLocalEventHook,
   tasksFromTemplate,
+  taskSubtreeTransferRollbackRequestDigest,
+  taskSubtreeTransferRequestDigest,
   taskManifestRequestDigest,
   taskManifestCompensationRequestDigest,
   taskFromTemplate,
@@ -66207,6 +67757,7 @@ export {
   startTaskRun,
   startTask,
   startFocusSession,
+  sqliteTodosTaskSubtreeTransferSchemaSql,
   sqliteTodosTaskManifestSchemaSql,
   sqliteTodosProjectRegistrationSchemaSql,
   softDeleteArtifact,
@@ -66398,6 +67949,7 @@ export {
   previewInstalledTemplate,
   previewInboxIntake,
   previewBuiltinTemplate,
+  postgresTodosTaskSubtreeTransferSchemaSql,
   postgresTodosTaskManifestSchemaSql,
   postgresTodosSyncSchemaSql,
   postgresTodosProjectRegistrationSchemaSql,
@@ -66406,6 +67958,9 @@ export {
   planPlanProjectLink,
   pauseFocusSession,
   patrolTasks,
+  parseTodosTaskSubtreeTransferRollback,
+  parseTodosTaskSubtreeTransferInspect,
+  parseTodosTaskSubtreeTransferApply,
   parseTodosTaskManifestCompensation,
   parseTodosTaskManifestBindingLookup,
   parseTodosTaskManifest,
@@ -66413,7 +67968,6 @@ export {
   parseTodosAiOutputSchema,
   parseTodosAiJson,
   parseTmuxTarget,
-  parseStorageMode,
   parseStorageBackend,
   parseRecurrenceRule,
   parseQuietHours,
@@ -66564,7 +68118,6 @@ export {
   issueToTask,
   isWorktreePath,
   isValidRecurrenceRule,
-  isTodosRemoteStorageEnabled,
   isTodosPostgresBackend,
   isTodosAiUpdateTaskResult,
   isTodosAiRuntimeEvent,
@@ -66604,6 +68157,7 @@ export {
   importActivityLog,
   hasSecretFindings,
   hasActiveApiKeys,
+  handleTodosTaskSubtreeTransferHttpRequest,
   handleTodosTaskManifestHttpRequest,
   handleTodosProjectRegistrationHttpRequest,
   getWorkspaceTrustStatus,
@@ -66617,7 +68171,6 @@ export {
   getUnlockImpact,
   getTraceStats,
   getTopologyDocs,
-  getTodosStorageMode,
   getTodosStorageEnvName,
   getTodosStorageDatabaseUrl,
   getTodosStorageDatabaseEnv,
@@ -66662,7 +68215,6 @@ export {
   getTaskBoard,
   getTask,
   getStoredHandoffAsPacket,
-  getStorageMode,
   getStorageDatabaseUrl,
   getStorageDatabaseEnv,
   getStatus,
@@ -66921,6 +68473,9 @@ export {
   detectInboxSourceType,
   detectCyclesFromEdges,
   describeTerminalNotificationRule,
+  deriveTodosTaskSubtreeTransferRollbackPreconditionDigest,
+  deriveTodosTaskSubtreeTransferIdempotencyKey,
+  deriveTodosTaskSubtreeTransferApplyPreconditionDigest,
   deriveTodosTaskManifestIdempotencyKey,
   deriveTodosTaskManifestCompensationPreconditionDigest,
   deriveTodosTaskManifestApplyPreconditionDigest,
@@ -66957,6 +68512,7 @@ export {
   createVerificationEvidence,
   createUserScaffold,
   createTuiDashboardSnapshot,
+  createTodosTaskSubtreeTransferHttpClient,
   createTodosTaskManifestHttpClient,
   createTodosStorageAdapter,
   createTodosS3ArtifactStore,
@@ -66971,6 +68527,7 @@ export {
   createTaskList,
   createTaskBoard,
   createTask,
+  createSqliteTodosTaskSubtreeTransferAuthority,
   createSqliteTodosTaskManifestAuthority,
   createSessionRecoveryHandoff,
   createSession,
@@ -66986,6 +68543,7 @@ export {
   createReminder,
   createReleaseCompatibilityReport,
   createProject,
+  createPostgresTodosTaskSubtreeTransferAuthority,
   createPostgresTodosTaskManifestAuthority,
   createPostgresTodosSyncStore,
   createPostgresTodosStorageAdapter,
@@ -67154,6 +68712,8 @@ export {
   VersionConflictError,
   VERIFICATION_EVIDENCE_SCHEMA,
   USER_SCAFFOLD_SCHEMA,
+  TodosTaskSubtreeTransferHttpClient,
+  TodosTaskSubtreeTransferError,
   TodosTaskManifestHttpClient,
   TodosTaskManifestError,
   TodosProjectRegistrationHttpClient,
@@ -67165,6 +68725,8 @@ export {
   TaskNotFoundError,
   TaskListNotFoundError,
   TUI_DASHBOARD_VIEWS,
+  TODOS_TASK_SUBTREE_TRANSFER_SCHEMA_VERSION,
+  TODOS_TASK_SUBTREE_TRANSFER_ROUTE,
   TODOS_TASK_ROUTE_STATE_SCHEMA_VERSION,
   TODOS_TASK_MANIFEST_SCHEMA_VERSION,
   TODOS_TASK_MANIFEST_ROUTE,
@@ -67271,6 +68833,7 @@ export {
   PostgresTodosProjectRegistrationBackend,
   PlanProjectLinkError,
   PlanNotFoundError,
+  PackageOwnedTodosTaskSubtreeTransferAuthority,
   PackageOwnedTodosTaskManifestAuthority,
   PackageOwnedTodosProjectRegistrationAuthority,
   PROJECT_DEPENDENCY_GRAPH_SCHEMA,