@hasna/todos 0.15.47 → 0.15.49

package/dist/index.js

@@ -5531,13 +5531,15 @@ function upsertSecretSafetyConfig(input) {
   saveConfig({ ...config, secret_safety: next });
   return next;
 }
-var DEFAULT_SECRET_PATTERNS, DEFAULT_SECRET_KEY_PATTERN, NON_SECRET_USAGE_KEYS, REDACTION_PLACEHOLDER;
+var XAI_PREFIX, DEFAULT_SECRET_PATTERNS, DEFAULT_SECRET_KEY_PATTERN, NON_SECRET_USAGE_KEYS, REDACTION_PLACEHOLDER;
 var init_redaction = __esm(() => {
   init_config2();
+  XAI_PREFIX = ["x", "ai", "-"].join("");
   DEFAULT_SECRET_PATTERNS = [
     { name: "aws-access-key", regex: /\b(AKIA|ASIA)[0-9A-Z]{16}\b/g, replacement: "[REDACTED_AWS_KEY]" },
     { name: "private-key", regex: /-----BEGIN (?:RSA |EC |OPENSSH |)PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH |)PRIVATE KEY-----/g, replacement: "[REDACTED_PRIVATE_KEY]" },
     { name: "openai-token", regex: /\bsk-[A-Za-z0-9_-]{12,}\b/g, replacement: "[REDACTED_TOKEN]" },
+    { name: `${XAI_PREFIX}token`, regex: /\bxai[-][A-Za-z0-9]{20,80}\b/g, replacement: "[REDACTED_TOKEN]" },
     { name: "npm-token", regex: /\bnpm_[A-Za-z0-9]{20,}\b/g, replacement: "[REDACTED_NPM_TOKEN]" },
     { name: "github-fine-grained-token", regex: /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g, replacement: "[REDACTED_GITHUB_TOKEN]" },
     { name: "github-token", regex: /\bgh[opsu]_[A-Za-z0-9]{20,}\b/g, replacement: "[REDACTED_GITHUB_TOKEN]" },
@@ -9933,6 +9935,12 @@ function listTasks(filter = {}, db) {
   const d = db || getDatabase();
   const { clearExpiredLocks: clearExpiredLocks2 } = (init_database(), __toCommonJS(exports_database));
   clearExpiredLocks2(d);
+  if (filter.limit !== undefined) {
+    const limit = filter.limit;
+    if (!Number.isSafeInteger(limit) || limit <= 0 || limit > MAX_TASK_LIST_LIMIT) {
+      throw new TypeError(`listTasks limit must be a positive integer between 1 and ${MAX_TASK_LIST_LIMIT}; got ${String(limit)}`);
+    }
+  }
   const conditions = [];
   const params = [];
   if (filter.project_id) {
@@ -10466,6 +10474,7 @@ function deleteTask(id, db) {
   }
   return result.changes > 0;
 }
+var MAX_TASK_LIST_LIMIT = 1e5;
 var init_task_crud = __esm(() => {
   init_types();
   init_database();
@@ -13184,7 +13193,7 @@ var init_dispatches = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/todos",
-  version: "0.15.47",
+  version: "0.15.49",
   description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   type: "module",
   main: "dist/index.js",
@@ -13248,6 +13257,7 @@ var package_default = {
   ],
   scripts: {
     build: "rm -rf dist dashboard/dist && cd dashboard && bun install --frozen-lockfile && bun run build && cd .. && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/server/index.ts --outdir dist/server --target bun && bun build src/sdk/index.ts --outdir dist/sdk --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/index.ts src/mcp.ts src/registry.ts src/contracts.ts src/storage.ts src/testing.ts src/project-registration.ts src/task-manifest.ts src/task-subtree-transfer.ts --outdir dist --root src --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && tsc --emitDeclarationOnly --outDir dist",
+    "build:js": "rm -rf dist && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/server/index.ts --outdir dist/server --target bun && bun build src/sdk/index.ts --outdir dist/sdk --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/index.ts src/mcp.ts src/registry.ts src/contracts.ts src/storage.ts src/testing.ts src/project-registration.ts src/task-manifest.ts src/task-subtree-transfer.ts --outdir dist --root src --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && tsc --emitDeclarationOnly --outDir dist",
     "build:server": "rm -rf dist && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/server/index.ts --outdir dist/server --target bun && bun build src/sdk/index.ts --outdir dist/sdk --target bun --external '@hasna/contracts' --external '@hasna/contracts/*' && bun build src/index.ts src/mcp.ts src/registry.ts src/contracts.ts src/storage.ts src/testing.ts src/project-registration.ts src/task-manifest.ts src/task-subtree-transfer.ts --outdir dist --target bun --external '@hasna/contracts' --external '@hasna/contracts/*'",
     migrate: "bun run src/server/index.ts migrate",
     "backfill:comment-redaction": "bun run src/server/index.ts redact-comments",
@@ -13302,7 +13312,7 @@ var package_default = {
   author: "Andrei Hasna <andrei@hasna.com>",
   license: "Apache-2.0",
   dependencies: {
-    "@hasna/contracts": "0.13.4",
+    "@hasna/contracts": "0.14.0",
     "@hasna/events": "^0.1.11",
     "@modelcontextprotocol/sdk": "^1.12.1",
     chalk: "^5.4.1",
@@ -22129,6 +22139,47 @@ function autoDetectFileRelationships(taskId, db) {
 
 // src/lib/task-dedupe.ts
 init_tasks();
+
+// src/lib/dedupe-projection.ts
+init_redaction();
+var DEDUPE_SOURCE_KEY_ALLOWLIST = [
+  "github_url",
+  "github_issue_url",
+  "github_pr_url",
+  "source_url",
+  "url",
+  "external_url",
+  "issue_url",
+  "github_owner",
+  "github_repo",
+  "github_number"
+];
+function projectTasksForDedupe(tasks) {
+  return tasks.map((task2) => {
+    const metadata = {};
+    for (const key of DEDUPE_SOURCE_KEY_ALLOWLIST) {
+      if (key in task2.metadata) {
+        metadata[key] = redactValue(task2.metadata[key]);
+      }
+    }
+    return {
+      id: task2.id,
+      short_id: task2.short_id,
+      title: redactEvidenceText(task2.title),
+      description: task2.description === null || task2.description === undefined ? null : redactEvidenceText(task2.description),
+      status: task2.status,
+      created_at: task2.created_at,
+      updated_at: task2.updated_at,
+      project_id: task2.project_id,
+      task_list_id: task2.task_list_id,
+      assigned_to: task2.assigned_to,
+      priority: task2.priority,
+      metadata
+    };
+  });
+}
+
+// src/lib/task-dedupe.ts
 var DEFAULT_THRESHOLD = 0.74;
 var STOP_WORDS = new Set([
   "a",
@@ -22321,10 +22372,10 @@ function olderFirst(left, right) {
 function findDuplicateTasks(options = {}, db) {
   const d = db || getDatabase();
   const threshold = options.threshold ?? DEFAULT_THRESHOLD;
-  const fingerprints = listTasks({
+  const fingerprints = projectTasksForDedupe(listTasks({
     include_archived: Boolean(options.include_archived),
     limit: options.limit ?? 1000
-  }, d).map(fingerprint);
+  }, d)).map(fingerprint);
   const candidates = [];
   for (let i = 0;i < fingerprints.length; i++) {
     for (let j = i + 1;j < fingerprints.length; j++) {
@@ -27632,6 +27683,30 @@ function changedSinceStampNewer(stamp, since) {
 // src/storage/postgres-adapter.ts
 init_stale_lock_handoff();
 
+// src/storage/postgres-sync.ts
+init_types();
+
+// src/storage/postgres-errors.ts
+function isPostgresUniqueViolation(error) {
+  if (typeof error !== "object" || error === null)
+    return false;
+  const candidate = error;
+  const states = [candidate.code, candidate.errno, candidate.sqlState, candidate.sqlstate];
+  if (typeof candidate.cause === "object" && candidate.cause !== null) {
+    const cause = candidate.cause;
+    states.push(cause.code, cause.errno, cause.sqlState, cause.sqlstate);
+  }
+  return states.some((state) => String(state) === "23505");
+}
+function postgresConstraintName(error) {
+  if (typeof error !== "object" || error === null)
+    return "";
+  const candidate = error;
+  const cause = typeof candidate.cause === "object" && candidate.cause !== null ? candidate.cause : undefined;
+  const constraint = candidate.constraint ?? candidate.constraint_name ?? cause?.constraint ?? cause?.constraint_name;
+  return typeof constraint === "string" ? constraint : "";
+}
+
 // src/storage/postgres-sync.ts
 var DEFAULT_TODOS_POSTGRES_SYNC_TABLE = "todos_sync_records";
 var DEFAULT_TODOS_POSTGRES_CURSOR_TABLE = "todos_sync_cursors";
@@ -27834,53 +27909,98 @@ class PostgresTodosSyncStore {
     if (routingErrors.length > 0) {
       throw new Error(`Invalid snapshot routing metadata: ${routingErrors.join("; ")}`);
     }
-    const existing = await this.client.query(`SELECT object_type, object_id, payload, updated_at, deleted_at, source_machine_id, version
-       FROM ${this.tableName}
-       WHERE service = $1 AND object_type IN ($2, $3) AND deleted_at IS NULL`, [this.service, "projects", "task_lists"]);
-    const existingProjects = [];
-    const existingTaskLists = [];
-    for (const row of existing.rows) {
-      const payload = payloadRecord(row.payload);
-      if (row.object_type === "projects")
-        existingProjects.push(payload);
-      if (row.object_type === "task_lists")
-        existingTaskLists.push(payload);
-    }
-    const destinationErrors = validateSnapshotRoutingDestinationConflicts(snapshot.projects, snapshot.taskLists, existingProjects, existingTaskLists);
-    if (destinationErrors.length > 0) {
-      throw new Error(`Snapshot routing conflicts with destination: ${destinationErrors.join("; ")}`);
-    }
-    const result = { records: 0, objectTypes: {} };
-    const sourceMachineId = context.requestId ?? this.sourceMachineId ?? null;
-    for (const entry of snapshotEntries(snapshot)) {
-      if (entry.deletedAt === null)
-        assertCanonicalScopedSlugEntry(entry);
-      await this.client.query(`INSERT INTO ${this.tableName} (
-          service, object_type, object_id, payload, updated_at,
-          deleted_at, source_machine_id, version
-        ) VALUES ($1, $2, $3, $4::jsonb, $5::timestamptz, $6::timestamptz, $7, $8)
-        ON CONFLICT (service, object_type, object_id) DO UPDATE SET
-          payload = EXCLUDED.payload,
-          updated_at = EXCLUDED.updated_at,
-          deleted_at = EXCLUDED.deleted_at,
-          source_machine_id = EXCLUDED.source_machine_id,
-          version = EXCLUDED.version
-        WHERE ${this.tableName}.updated_at < EXCLUDED.updated_at
-           OR (${this.tableName}.updated_at = EXCLUDED.updated_at
-               AND COALESCE(${this.tableName}.version, 0) <= COALESCE(EXCLUDED.version, 0))`, [
-        this.service,
-        entry.type,
-        entry.id,
-        entry.payload,
-        entry.updatedAt,
-        entry.deletedAt,
-        sourceMachineId,
-        entry.version
-      ]);
-      result.records += 1;
-      result.objectTypes[entry.type] = (result.objectTypes[entry.type] ?? 0) + 1;
+    const push = async (client) => {
+      const existing = await client.query(`SELECT object_type, object_id, payload, updated_at, deleted_at, source_machine_id, version
+         FROM ${this.tableName}
+         WHERE service = $1 AND object_type IN ($2, $3) AND deleted_at IS NULL`, [this.service, "projects", "task_lists"]);
+      const existingProjects = [];
+      const existingTaskLists = [];
+      for (const row of existing.rows) {
+        const payload = payloadRecord(row.payload);
+        if (row.object_type === "projects")
+          existingProjects.push(payload);
+        if (row.object_type === "task_lists")
+          existingTaskLists.push(payload);
+      }
+      const destinationErrors = validateSnapshotRoutingDestinationConflicts(snapshot.projects, snapshot.taskLists, existingProjects, existingTaskLists);
+      if (destinationErrors.length > 0) {
+        throw new ResourceConflictError("SNAPSHOT_DESTINATION_CONFLICT", `Snapshot routing conflicts with destination: ${destinationErrors.join("; ")}`);
+      }
+      const result = { records: 0, objectTypes: {} };
+      const sourceMachineId = context.requestId ?? this.sourceMachineId ?? null;
+      for (const entry of snapshotEntries(snapshot)) {
+        if (entry.deletedAt === null)
+          assertCanonicalScopedSlugEntry(entry);
+        try {
+          await client.query(`INSERT INTO ${this.tableName} (
+              service, object_type, object_id, payload, updated_at,
+              deleted_at, source_machine_id, version
+            ) VALUES ($1, $2, $3, $4::jsonb, $5::timestamptz, $6::timestamptz, $7, $8)
+            ON CONFLICT (service, object_type, object_id) DO UPDATE SET
+              payload = EXCLUDED.payload,
+              updated_at = EXCLUDED.updated_at,
+              deleted_at = EXCLUDED.deleted_at,
+              source_machine_id = EXCLUDED.source_machine_id,
+              version = EXCLUDED.version
+            WHERE ${this.tableName}.updated_at < EXCLUDED.updated_at
+               OR (${this.tableName}.updated_at = EXCLUDED.updated_at
+                   AND COALESCE(${this.tableName}.version, 0) <= COALESCE(EXCLUDED.version, 0))`, [
+            this.service,
+            entry.type,
+            entry.id,
+            entry.payload,
+            entry.updatedAt,
+            entry.deletedAt,
+            sourceMachineId,
+            entry.version
+          ]);
+        } catch (error) {
+          await this.classifySyncInsertConflict(error, entry);
+        }
+        result.records += 1;
+        result.objectTypes[entry.type] = (result.objectTypes[entry.type] ?? 0) + 1;
+      }
+      return result;
+    };
+    if (typeof this.client.transaction === "function") {
+      return this.client.transaction((client) => push(client));
     }
-    return result;
+    return push(this.client);
+  }
+  async classifySyncInsertConflict(error, entry) {
+    if (!isPostgresUniqueViolation(error))
+      throw error;
+    const payload = entry.payload;
+    const taskListSlug = String(payload["slug"] ?? "");
+    const projectSlug = String(payload["task_list_id"] ?? "");
+    const constraintName = postgresConstraintName(error);
+    if (entry.type === "projects" && constraintName.includes("project_task_list_slug_uidx")) {
+      throw new ResourceConflictError("PROJECT_SLUG_CONFLICT", `Project slug "${projectSlug}" already exists`);
+    }
+    if (entry.type === "task_lists" && constraintName.includes("task_list_scope_slug_uidx")) {
+      throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${taskListSlug}" already exists in this scope`);
+    }
+    if (entry.type === "task_lists") {
+      const scope = typeof payload["project_id"] === "string" ? payload["project_id"] : "";
+      const conflict = await this.client.query(`/* todos:classify-sync-task-list-conflict */ SELECT EXISTS (
+          SELECT 1 FROM ${this.tableName}
+          WHERE service = $1 AND object_type = 'task_lists' AND object_id <> $2
+            AND deleted_at IS NULL AND COALESCE(payload->>'project_id','') = $3 AND payload->>'slug' = $4
+        ) AS conflict`, [this.service, entry.id, scope, taskListSlug]);
+      if (conflict.rows[0]?.conflict) {
+        throw new ResourceConflictError("TASK_LIST_SLUG_CONFLICT", `Task list with slug "${taskListSlug}" already exists in this scope`);
+      }
+    } else if (entry.type === "projects") {
+      const conflict = await this.client.query(`/* todos:classify-sync-project-conflict */ SELECT EXISTS (
+          SELECT 1 FROM ${this.tableName}
+          WHERE service = $1 AND object_type = 'projects' AND object_id <> $2
+            AND deleted_at IS NULL AND payload->>'task_list_id' = $3
+        ) AS conflict`, [this.service, entry.id, projectSlug]);
+      if (conflict.rows[0]?.conflict) {
+        throw new ResourceConflictError("PROJECT_SLUG_CONFLICT", `Project slug "${projectSlug}" already exists`);
+      }
+    }
+    throw error;
   }
   async pullSnapshot(options = {}) {
     const params = [this.service];
@@ -30592,27 +30712,9 @@ async function retryOnTransientPostgresError(fn, attempts = 2, delayMs = 150) {
   }
   throw lastError;
 }
-function isPostgresUniqueViolation(error) {
-  if (typeof error !== "object" || error === null)
-    return false;
-  const candidate = error;
-  const states = [candidate.code, candidate.errno, candidate.sqlState, candidate.sqlstate];
-  if (typeof candidate.cause === "object" && candidate.cause !== null) {
-    const cause = candidate.cause;
-    states.push(cause.code, cause.errno, cause.sqlState, cause.sqlstate);
-  }
-  return states.some((state) => String(state) === "23505");
-}
-function postgresConstraintName(error) {
-  if (typeof error !== "object" || error === null)
-    return "";
-  const candidate = error;
-  const cause = typeof candidate.cause === "object" && candidate.cause !== null ? candidate.cause : undefined;
-  const constraint = candidate.constraint ?? candidate.constraint_name ?? cause?.constraint ?? cause?.constraint_name;
-  return typeof constraint === "string" ? constraint : "";
-}
 
 // src/storage/shadow.ts
+init_types();
 var SNAPSHOT_TO_OBJECT_TYPE = {
   tasks: "tasks",
   projects: "projects",
@@ -30754,6 +30856,12 @@ class TodosShadowMirror {
       const message = error instanceof Error ? error.message : String(error);
       const objectType = op.kind === "upsert" ? SNAPSHOT_TO_OBJECT_TYPE[op.key] : op.objectType;
       const id = op.kind === "upsert" ? String(op.record["id"]) : op.id;
+      if (error instanceof ResourceConflictError) {
+        this.metrics.failed += 1;
+        this.metrics.lastError = message;
+        this.onEvent?.({ type: "dropped", objectType, id, error: message });
+        return;
+      }
       this.metrics.retries += 1;
       this.metrics.lastError = message;
       op.attempts += 1;
@@ -31104,6 +31212,7 @@ function assertPostgresAdapterCapabilities(adapter) {
   }
 }
 // src/storage/shadow-outbox.ts
+init_types();
 init_shadow_outbox_schema();
 init_shadow_outbox_schema();
 var MAX_BACKOFF_MS = 5 * 60000;
@@ -31233,6 +31342,12 @@ class TodosShadowOutbox {
       this.onEvent?.({ type: "mirrored", objectType: row.object_type, id: row.object_id, lagMs });
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
+      if (error instanceof ResourceConflictError) {
+        this.metrics.lastError = message;
+        this.db.run(`UPDATE shadow_outbox SET attempts=?, last_error=?, status='failed' WHERE seq=? AND revision=?`, [row.attempts + 1, message, row.seq, row.revision]);
+        this.onEvent?.({ type: "parked", objectType: row.object_type, id: row.object_id, error: message });
+        return;
+      }
       this.metrics.retries += 1;
       this.metrics.lastError = message;
       const attempts = row.attempts + 1;
@@ -68238,6 +68353,7 @@ export {
   queryTasksByWorkflowState,
   queryTasksByLocalFields,
   purgeArtifact,
+  projectTasksForDedupe,
   processDueReminders,
   previewUserScaffold,
   previewTemplate,
@@ -69206,6 +69322,7 @@ export {
   DEFAULT_LEASE_MINUTES,
   DEFAULT_ENCRYPTION_PROFILE,
   DEFAULT_ENCRYPTION_KEY_ENV,
+  DEDUPE_SOURCE_KEY_ALLOWLIST,
   DECISION_STATUSES,
   DECISION_RECORD_SCHEMA,
   DB_BACKUP_SCHEMA,

package/dist/lib/dedupe-projection.d.ts

@@ -0,0 +1,48 @@
+import type { Task, TaskPriority, TaskStatus } from "../types/index.js";
+/**
+ * The ONLY metadata keys the dedup projection carries. This is exactly the
+ * source-key set the fingerprint in `task-dedupe.ts` consumes
+ * (`sourceKeysFor`). Any other metadata — free-form `token`, `api_key`,
+ * `secret`, arbitrary composites — is never projected, so a credential value
+ * sitting in free-form metadata can never reach a dedup workflow's capture.
+ *
+ * Regression O15-00170 (incidents 713001/713022/713043-46/713119): workflows
+ * doing deduplication captured credential-bearing whole-task composites from
+ * `todos list --json` / `--format compact` / `--format csv` because no
+ * package-owned bounded projection existed. This allowlist is the bounded
+ * surface that abstraction provides.
+ */
+export declare const DEDUPE_SOURCE_KEY_ALLOWLIST: readonly ["github_url", "github_issue_url", "github_pr_url", "source_url", "url", "external_url", "issue_url", "github_owner", "github_repo", "github_number"];
+/**
+ * A task reduced to exactly the fields the dedup fingerprint consumes, plus a
+ * bounded source-key metadata object. It deliberately excludes free-form
+ * `metadata`, `tags`, comments, run/plan fields, and every other composite
+ * field of `Task` — the surfaces where credential values leaked. The carried
+ * free-form text (`title`, `description`) is redacted through the same
+ * pattern redactor every other output surface uses, so a credential embedded
+ * in prose never survives into the projection.
+ */
+export interface DedupeTaskProjection {
+    id: string;
+    short_id: string | null;
+    title: string;
+    description: string | null;
+    status: TaskStatus;
+    created_at: string;
+    updated_at: string;
+    project_id: string | null;
+    task_list_id: string | null;
+    assigned_to: string | null;
+    priority: TaskPriority;
+    metadata: Record<string, unknown>;
+}
+/**
+ * Project whole tasks into the bounded dedup shape.
+ *
+ * This is the package-owned "canonical-machine" abstraction: the only way a
+ * dedup workflow may capture task state for deduplication. It never emits a
+ * whole-task composite, so a credential that lives in free-form metadata,
+ * tags, or a nested composite cannot be captured with it.
+ */
+export declare function projectTasksForDedupe(tasks: Task[]): DedupeTaskProjection[];
+//# sourceMappingURL=dedupe-projection.d.ts.map

package/dist/lib/dedupe-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedupe-projection.d.ts","sourceRoot":"","sources":["../../src/lib/dedupe-projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGxE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2BAA2B,gKAW9B,CAAC;AAEX;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,oBAAoB,EAAE,CAyB3E"}

package/dist/lib/redaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/lib/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE9E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AA6FD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUxD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAe1C;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,EAAE,CAOjE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,qBAAqB,IAAI,kBAAkB,CAK1D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,GAAG,kBAAkB,CAQtF"}
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/lib/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE9E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAqGD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUxD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAe1C;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,EAAE,CAOjE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,qBAAqB,IAAI,kBAAkB,CAK1D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,GAAG,kBAAkB,CAQtF"}

package/dist/lib/task-dedupe.d.ts

@@ -1,23 +1,19 @@
 import type { Database } from "bun:sqlite";
 import type { Task } from "../types/index.js";
+import { type DedupeTaskProjection } from "./dedupe-projection.js";
 export interface FindDuplicateTasksOptions {
     threshold?: number;
     limit?: number;
     include_archived?: boolean;
 }
-export interface TaskDuplicateProbe {
-    title: string;
-    description?: string | null;
-    metadata?: Record<string, unknown>;
-}
 export interface TaskDuplicateMatch {
-    task: Task;
+    task: DedupeTaskProjection;
     score: number;
     reasons: string[];
 }
 export interface DuplicateTaskCandidate {
-    primary_task: Task;
-    duplicate_task: Task;
+    primary_task: DedupeTaskProjection;
+    duplicate_task: DedupeTaskProjection;
     score: number;
     reasons: string[];
 }
@@ -55,7 +51,7 @@ export declare function findDuplicateTasks(options?: FindDuplicateTasksOptions,
  * Score a prospective task against local tasks without inserting a temporary
  * row. Producer previews use this to report likely duplicates before apply.
  */
-export declare function findDuplicateTasksForInput(input: TaskDuplicateProbe, options?: FindDuplicateTasksOptions, db?: Database): TaskDuplicateMatch[];
+export declare function findDuplicateTasksForInput(input: DedupeTaskProjection, options?: FindDuplicateTasksOptions, db?: Database): TaskDuplicateMatch[];
 export declare function mergeDuplicateTask(input: MergeDuplicateTaskInput, db?: Database): TaskMergeResult;
 export declare const findDuplicateCandidates: typeof findDuplicateTasks;
 //# sourceMappingURL=task-dedupe.d.ts.map

package/dist/lib/task-dedupe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-dedupe.d.ts","sourceRoot":"","sources":["../../src/lib/task-dedupe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAM9C,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,IAAI,CAAC;IACnB,cAAc,EAAE,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,IAAI,CAAC;IACnB,kBAAkB,EAAE,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AA2ND,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,yBAA8B,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,sBAAsB,EAAE,CAqBnH;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,yBAA8B,EACvC,EAAE,CAAC,EAAE,QAAQ,GACZ,kBAAkB,EAAE,CActB;AAqJD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,eAAe,CAiGjG;AAGD,eAAO,MAAM,uBAAuB,2BAAqB,CAAC"}
+{"version":3,"file":"task-dedupe.d.ts","sourceRoot":"","sources":["../../src/lib/task-dedupe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAK9C,OAAO,EAAyB,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE1F,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,oBAAoB,CAAC;IACnC,cAAc,EAAE,oBAAoB,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,IAAI,CAAC;IACnB,kBAAkB,EAAE,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AA2ND,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,yBAA8B,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,sBAAsB,EAAE,CAwBnH;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,oBAAoB,EAC3B,OAAO,GAAE,yBAA8B,EACvC,EAAE,CAAC,EAAE,QAAQ,GACZ,kBAAkB,EAAE,CActB;AAqJD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,eAAe,CAiGjG;AAGD,eAAO,MAAM,uBAAuB,2BAAqB,CAAC"}