@hasna/todos 0.15.49 → 0.15.51

package/dist/cli/index.js

@@ -2123,7 +2123,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/todos",
-    version: "0.15.49",
+    version: "0.15.51",
     description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
     type: "module",
     main: "dist/index.js",
@@ -2182,6 +2182,7 @@ var init_package = __esm(() => {
     files: [
       "dist",
       "dashboard/dist",
+      "postinstall.js",
       "LICENSE",
       "README.md"
     ],
@@ -2208,7 +2209,7 @@ var init_package = __esm(() => {
       "test:attested-container-compatibility-vector": "bun test scripts/attested-container-compatibility-vector.test.ts",
       "issue:release-review": "bun run scripts/issue-npm-release-agent-review.ts",
       prepublishOnly: "bun run scripts/verify-public-release.ts --mode=publish",
-      postinstall: "mkdir -p $HOME/.hasna/todos $HOME/.hasna/todos/training 2>/dev/null || true"
+      postinstall: "node postinstall.js"
     },
     keywords: [
       "todos",
@@ -2242,13 +2243,15 @@ var init_package = __esm(() => {
     author: "Andrei Hasna <andrei@hasna.com>",
     license: "Apache-2.0",
     dependencies: {
-      "@hasna/contracts": "0.14.0",
+      "@hasna/contracts": "0.14.2",
       "@hasna/events": "^0.1.11",
+      "@hasna/paths": "0.1.0",
       "@modelcontextprotocol/sdk": "^1.12.1",
       chalk: "^5.4.1",
       commander: "^13.1.0",
       ink: "^5.2.0",
       react: "^18.3.1",
+      "signal-exit": "3.0.7",
       zod: "3.25.76"
     },
     overrides: {
@@ -2491,6 +2494,101 @@ var init_types = __esm(() => {
   };
 });
 
+// node_modules/.bun/@hasna+paths@0.1.0/node_modules/@hasna/paths/dist/index.js
+import { homedir } from "os";
+import { join } from "path";
+function assertApp(app) {
+  if (typeof app !== "string" || app.length === 0) {
+    throw new TypeError("paths: app must be a non-empty string");
+  }
+  if (!APP_SLUG_RE.test(app)) {
+    throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
+  }
+}
+function envOf(options) {
+  return options.env ?? process.env;
+}
+function envValue(options, kind) {
+  const value = envOf(options)[KIND_ENV[kind]];
+  return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function isMacOS(platform) {
+  return platform === "darwin";
+}
+function baseDir(kind, options) {
+  const override = envValue(options, kind);
+  if (override)
+    return override;
+  const home = options.home ?? homedir();
+  const platform = options.platform ?? process.platform;
+  if (isMacOS(platform)) {
+    switch (kind) {
+      case "config":
+      case "data":
+        return join(home, "Library", "Application Support", "Hasna");
+      case "cache":
+        return join(home, "Library", "Caches", "Hasna");
+      case "state":
+        return join(home, "Library", "Logs", "Hasna");
+    }
+  }
+  switch (kind) {
+    case "config":
+      return join(home, ".config", "hasna");
+    case "data":
+      return join(home, ".local", "share", "hasna");
+    case "state":
+      return join(home, ".local", "state", "hasna");
+    case "cache":
+      return join(home, ".cache", "hasna");
+  }
+}
+function resolvePath(kind, options) {
+  assertApp(options.app);
+  const appSegment = options.internal === true ? join("internal", options.app) : options.app;
+  return join(baseDir(kind, options), appSegment);
+}
+function dataDir(options) {
+  return resolvePath("data", options);
+}
+var KIND_ENV, APP_SLUG_RE;
+var init_dist = __esm(() => {
+  KIND_ENV = {
+    config: "HASNA_CONFIG_HOME",
+    data: "HASNA_DATA_HOME",
+    state: "HASNA_STATE_HOME",
+    cache: "HASNA_CACHE_HOME"
+  };
+  APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+});
+
+// src/lib/paths.ts
+import { existsSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2, resolve } from "path";
+function effectiveHome(env = process.env) {
+  return env.HOME || env.USERPROFILE || homedir2();
+}
+function legacyHomeDir(env = process.env) {
+  return join2(effectiveHome(env), ".hasna", "todos");
+}
+function resolverHome(env = process.env) {
+  return dataDir({ app: "todos", home: effectiveHome(env), env });
+}
+function adoptResolverHome(resolved, env = process.env) {
+  const dataOverride = env.HASNA_DATA_HOME;
+  if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
+    return true;
+  return existsSync(join2(resolved, "todos.db")) || existsSync(join2(resolved, "config.json"));
+}
+function getTodosDir(env = process.env) {
+  const resolved = resolverHome(env);
+  return resolve(adoptResolverHome(resolved, env) ? resolved : legacyHomeDir(env));
+}
+var init_paths = __esm(() => {
+  init_dist();
+});
+
 // src/lib/sync-utils.ts
 var exports_sync_utils = {};
 __export(exports_sync_utils, {
@@ -2510,22 +2608,22 @@ __export(exports_sync_utils, {
   TODO_SYNC_FINGERPRINT_KEY: () => TODO_SYNC_FINGERPRINT_KEY,
   HOME: () => HOME
 });
-import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
+import { existsSync as existsSync2, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
 import { createHash } from "crypto";
-import { homedir } from "os";
-import { join } from "path";
+import { homedir as homedir3 } from "os";
+import { join as join3 } from "path";
 function getHomeDir() {
-  return process.env["HOME"] || process.env["USERPROFILE"] || homedir();
+  return process.env["HOME"] || process.env["USERPROFILE"] || homedir3();
 }
 function getTodosGlobalDir() {
-  return join(getHomeDir(), ".hasna", "todos");
+  return getTodosDir();
 }
 function ensureDir(dir) {
-  if (!existsSync(dir))
+  if (!existsSync2(dir))
     mkdirSync(dir, { recursive: true });
 }
 function listJsonFiles(dir) {
-  if (!existsSync(dir))
+  if (!existsSync2(dir))
     return [];
   return readdirSync(dir).filter((f) => f.endsWith(".json"));
 }
@@ -2541,14 +2639,14 @@ function writeJsonFile(path, data) {
 `);
 }
 function readHighWaterMark(dir) {
-  const path = join(dir, ".highwatermark");
-  if (!existsSync(path))
+  const path = join3(dir, ".highwatermark");
+  if (!existsSync2(path))
     return 1;
   const val = parseInt(readFileSync(path, "utf-8").trim(), 10);
   return isNaN(val) ? 1 : val;
 }
 function writeHighWaterMark(dir, value) {
-  writeFileSync(join(dir, ".highwatermark"), String(value));
+  writeFileSync(join3(dir, ".highwatermark"), String(value));
 }
 function getFileMtimeMs(path) {
   try {
@@ -2603,6 +2701,7 @@ function hasSyncFingerprintChanged(record) {
 }
 var TODO_SYNC_FINGERPRINT_KEY = "todos_sync_fingerprint", HOME;
 var init_sync_utils = __esm(() => {
+  init_paths();
   HOME = getHomeDir();
 });
 
@@ -2624,10 +2723,10 @@ __export(exports_config, {
   getAgentTaskListId: () => getAgentTaskListId,
   getAgentPoolForProject: () => getAgentPoolForProject
 });
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
-import { dirname, join as join2 } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync2 } from "fs";
+import { dirname, join as join4 } from "path";
 function getConfigPath() {
-  return join2(getTodosGlobalDir(), "config.json");
+  return join4(getTodosGlobalDir(), "config.json");
 }
 function resetConfig() {
   cached = null;
@@ -2638,7 +2737,7 @@ function normalizeAgent(agent) {
 function loadConfig() {
   if (cached)
     return cached;
-  if (!existsSync2(getConfigPath())) {
+  if (!existsSync3(getConfigPath())) {
     cached = {};
     return cached;
   }
@@ -2661,7 +2760,7 @@ function updateConfig(patch) {
 }
 function getTodosAiConfig() {
   const configPath = getConfigPath();
-  if (!existsSync2(configPath))
+  if (!existsSync3(configPath))
     return {};
   const parsed = JSON.parse(readFileSync2(configPath, "utf8"));
   if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
@@ -5721,7 +5820,7 @@ var init_page_validation = __esm(() => {
 // src/cli/cloud-router.ts
 import { resolveStorageClient } from "@hasna/contracts/client/storage";
 import { randomUUID } from "crypto";
-import { resolve as resolvePath } from "path";
+import { resolve as resolvePath2 } from "path";
 function emitTodosLocalFallbackNotice(env) {
   if (todosLocalFallbackNoticeEmitted)
     return;
@@ -6707,11 +6806,11 @@ function resolveCloudProjectRef(projects, ref) {
   const input = ref.trim();
   const normalizedRef = input.toLowerCase();
   const pathLike = input.startsWith(".") || input.includes("/") || input.includes("\\");
-  const normalizedPath = pathLike ? resolvePath(input) : undefined;
+  const normalizedPath = pathLike ? resolvePath2(input) : undefined;
   const slug = cloudProjectSlug(pathLike ? cloudProjectPathBasename(input) : input);
   const matchGroups = [
     uniqueProjectMatches(projects, (project) => project.id.toLowerCase() === normalizedRef),
-    uniqueProjectMatches(projects, (project) => project.path === input || normalizedPath !== undefined && resolvePath(project.path) === normalizedPath),
+    uniqueProjectMatches(projects, (project) => project.path === input || normalizedPath !== undefined && resolvePath2(project.path) === normalizedPath),
     uniqueProjectMatches(projects, (project) => project.name.toLowerCase() === normalizedRef),
     uniqueProjectMatches(projects, (project) => project.task_list_id === input || cloudProjectSlug(project.name) === slug || cloudProjectSlug(cloudProjectPathBasename(project.path)) === slug),
     uniqueProjectMatches(projects, (project) => project.id.toLowerCase().startsWith(normalizedRef))
@@ -11718,9 +11817,9 @@ var init_schema = __esm(() => {
 });
 
 // src/db/machines.ts
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import { hostname as osHostname, platform as osPlatform, arch as osArch } from "os";
-import { resolve } from "path";
+import { resolve as resolve2 } from "path";
 import { spawnSync } from "child_process";
 function parseMetadata(value) {
   if (!value)
@@ -11751,7 +11850,7 @@ function discoverGitRoot(workspacePath) {
 }
 function topologyMetadata(input, existing = {}) {
   const next = { ...existing };
-  const workspacePath = input.workspace_path ? resolve(input.workspace_path) : undefined;
+  const workspacePath = input.workspace_path ? resolve2(input.workspace_path) : undefined;
   const entries = {
     tailscale_name: input.tailscale_name,
     tailscale_ip: input.tailscale_ip,
@@ -11925,7 +12024,7 @@ function getMachineTopologyDiagnostics(opts = {}, db, at = new Date) {
         message: `${project.name} has ${distinctPaths.length} different machine-local paths`
       });
     }
-    if (localRow && !existsSync3(localRow.path)) {
+    if (localRow && !existsSync4(localRow.path)) {
       pathIssues.push({
         type: "path_missing",
         project_id: project.id,
@@ -11936,7 +12035,7 @@ function getMachineTopologyDiagnostics(opts = {}, db, at = new Date) {
         message: `Local path does not exist on this machine: ${localRow.path}`
       });
     }
-    if (!localRow && project.path && machineById.has(localMachine.id) && !existsSync3(project.path)) {
+    if (!localRow && project.path && machineById.has(localMachine.id) && !existsSync4(project.path)) {
       pathIssues.push({
         type: "path_missing",
         project_id: project.id,
@@ -12525,18 +12624,18 @@ __export(exports_database, {
   LOCK_EXPIRY_MINUTES: () => LOCK_EXPIRY_MINUTES
 });
 import { Database } from "bun:sqlite";
-import { existsSync as existsSync4, mkdirSync as mkdirSync2 } from "fs";
-import { dirname as dirname2, join as join3, resolve as resolve2 } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync2 } from "fs";
+import { dirname as dirname2, join as join5, resolve as resolve3 } from "path";
 function isInMemoryDb(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function findNearestProjectDb(startDir) {
   const gitRoot = findGitRoot(startDir);
-  const stopAt = gitRoot ? resolve2(gitRoot) : resolve2(startDir);
-  let dir = resolve2(startDir);
+  const stopAt = gitRoot ? resolve3(gitRoot) : resolve3(startDir);
+  let dir = resolve3(startDir);
   while (true) {
-    const candidate = join3(dir, ".hasna", "todos", "todos.db");
-    if (existsSync4(candidate))
+    const candidate = join5(dir, ".hasna", "todos", "todos.db");
+    if (existsSync5(candidate))
       return candidate;
     if (dir === stopAt)
       break;
@@ -12548,9 +12647,9 @@ function findNearestProjectDb(startDir) {
   return null;
 }
 function findGitRoot(startDir) {
-  let dir = resolve2(startDir);
+  let dir = resolve3(startDir);
   while (true) {
-    if (existsSync4(join3(dir, ".git")))
+    if (existsSync5(join5(dir, ".git")))
       return dir;
     const parent = dirname2(dir);
     if (parent === dir)
@@ -12560,7 +12659,7 @@ function findGitRoot(startDir) {
   return null;
 }
 function getGlobalDbPath() {
-  return join3(getHomeDir(), ".hasna", "todos", "todos.db");
+  return join5(getTodosGlobalDir(), "todos.db");
 }
 function hasExplicitProjectArg(args = process.argv.slice(2)) {
   return args.some((arg) => arg === "--project" || arg.startsWith("--project="));
@@ -12598,7 +12697,7 @@ function getDbPath() {
   if (process.env["TODOS_DB_SCOPE"] === "project") {
     const gitRoot = findGitRoot(cwd);
     if (gitRoot && canCreateScopedProjectDb()) {
-      return join3(gitRoot, ".hasna", "todos", "todos.db");
+      return join5(gitRoot, ".hasna", "todos", "todos.db");
     }
   }
   return getGlobalDbPath();
@@ -12609,8 +12708,8 @@ function getDatabasePath() {
 function ensureDir2(filePath) {
   if (isInMemoryDb(filePath))
     return;
-  const dir = dirname2(resolve2(filePath));
-  if (!existsSync4(dir)) {
+  const dir = dirname2(resolve3(filePath));
+  if (!existsSync5(dir)) {
     mkdirSync2(dir, { recursive: true });
   }
 }
@@ -13453,9 +13552,9 @@ __export(exports_helpers, {
 });
 import chalk from "chalk";
 import { execSync } from "child_process";
-import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2, writeSync } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2, writeSync } from "fs";
 import { tmpdir } from "os";
-import { dirname as dirname3, join as join4, resolve as resolve3, sep } from "path";
+import { dirname as dirname3, join as join6, resolve as resolve4, sep } from "path";
 function jsonModeRequested(argv = process.argv) {
   return argv.some((arg) => arg === "--json" || /^-[a-z]+$/i.test(arg) && arg.includes("j"));
 }
@@ -13527,11 +13626,13 @@ async function resolveTaskIdForCommand(input, cloud = getTodosCloudClient()) {
 }
 function cloudTaskIdCachePath() {
   const home = process.env["HOME"] || process.env["USERPROFILE"];
-  return home ? join4(home, ".hasna", "todos", "cloud-task-id-cache.json") : null;
+  if (!home)
+    return null;
+  return join6(getTodosGlobalDir(), "cloud-task-id-cache.json");
 }
 function readCloudTaskIdCache() {
   const path = cloudTaskIdCachePath();
-  if (!path || !existsSync5(path))
+  if (!path || !existsSync6(path))
     return { version: 1, tasks: [] };
   try {
     const parsed = JSON.parse(readFileSync3(path, "utf8"));
@@ -13595,12 +13696,12 @@ function detectGitRoot() {
   }
 }
 function isPathWithin(child, parent) {
-  const normalizedChild = resolve3(child);
-  const normalizedParent = resolve3(parent);
+  const normalizedChild = resolve4(child);
+  const normalizedParent = resolve4(parent);
   return normalizedChild === normalizedParent || normalizedChild.startsWith(`${normalizedParent}${sep}`);
 }
 function shouldSkipAutoProjectForGitRoot(gitRoot) {
-  const normalized = resolve3(gitRoot);
+  const normalized = resolve4(gitRoot);
   if (process.platform !== "win32" && (normalized === "/tmp" || normalized.startsWith("/tmp/"))) {
     return true;
   }
@@ -13608,7 +13709,7 @@ function shouldSkipAutoProjectForGitRoot(gitRoot) {
 }
 function resolveExplicitProject(input) {
   const db = getDatabase();
-  const byPath = getProjectByPath(resolve3(input), db);
+  const byPath = getProjectByPath(resolve4(input), db);
   if (byPath)
     return byPath;
   const id = resolvePartialId(db, "projects", input);
@@ -13780,6 +13881,7 @@ var init_helpers = __esm(() => {
   init_projects();
   init_lock_display();
   init_package_version();
+  init_sync_utils();
   init_types();
   stdoutRetryBuffer = new SharedArrayBuffer(4);
   stdoutRetrySignal = new Int32Array(stdoutRetryBuffer);
@@ -13869,14 +13971,14 @@ var init_completion_guard = __esm(() => {
 
 // src/lib/event-emission-safety.ts
 import { tmpdir as tmpdir2 } from "os";
-import { resolve as resolve4, sep as sep2 } from "path";
+import { resolve as resolve5, sep as sep2 } from "path";
 function envFlag(name) {
   const value = process.env[name]?.trim().toLowerCase();
   return value === "1" || value === "true" || value === "yes" || value === "on";
 }
 function isUnder(parent, child) {
-  const normalizedParent = resolve4(parent);
-  const normalizedChild = resolve4(child);
+  const normalizedParent = resolve5(parent);
+  const normalizedChild = resolve5(child);
   return normalizedChild === normalizedParent || normalizedChild.startsWith(`${normalizedParent}${sep2}`);
 }
 function databasePathFromDatabase(db) {
@@ -13927,9 +14029,9 @@ __export(exports_workspace_trust, {
   getWorkspaceTrustStatus: () => getWorkspaceTrustStatus,
   checkWorkspacePermission: () => checkWorkspacePermission
 });
-import { relative, resolve as resolve5 } from "path";
+import { relative, resolve as resolve6 } from "path";
 function normalizePath(path) {
-  return resolve5(path);
+  return resolve6(path);
 }
 function unique2(values) {
   return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
@@ -14120,9 +14222,9 @@ __export(exports_runner_sandbox, {
   explainRunnerSandbox: () => explainRunnerSandbox,
   checkRunnerSandbox: () => checkRunnerSandbox
 });
-import { relative as relative2, resolve as resolve6 } from "path";
+import { relative as relative2, resolve as resolve7 } from "path";
 function normalizePath2(path) {
-  return resolve6(path);
+  return resolve7(path);
 }
 function unique3(values) {
   return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
@@ -14326,7 +14428,7 @@ __export(exports_event_hooks, {
 });
 import { createHash as createHash4, randomUUID as randomUUID2 } from "crypto";
 import { appendFileSync, mkdirSync as mkdirSync4 } from "fs";
-import { dirname as dirname4, resolve as resolve7 } from "path";
+import { dirname as dirname4, resolve as resolve8 } from "path";
 import { createConnection } from "net";
 function safeName(name) {
   const trimmed = name.trim();
@@ -14464,7 +14566,7 @@ async function deliverHook(hook, envelope) {
       if (hook.target === "stdout") {
         output2 = line.trim();
       } else if (hook.target === "file") {
-        const filePath = resolve7(hook.file_path);
+        const filePath = resolve8(hook.file_path);
         mkdirSync4(dirname4(filePath), { recursive: true });
         appendFileSync(filePath, line);
       } else if (hook.target === "socket") {
@@ -14585,9 +14687,9 @@ var init_event_hooks = __esm(() => {
 // node_modules/.bun/@hasna+events@0.1.16/node_modules/@hasna/events/dist/index.js
 import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
 import { Buffer as Buffer2 } from "buffer";
-import { existsSync as existsSync6 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join5 } from "path";
+import { existsSync as existsSync7 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join7 } from "path";
 import { createHmac, timingSafeEqual } from "crypto";
 import { randomUUID as randomUUID3 } from "crypto";
 import { spawn } from "child_process";
@@ -14688,7 +14790,7 @@ function channelMatchesEvent(channel, event) {
   return channel.filters.some((filter) => eventMatchesFilter(event, filter));
 }
 function getEventsDataDir(override) {
-  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join5(homedir2(), ".hasna", "events");
+  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join7(homedir4(), ".hasna", "events");
 }
 
 class JsonEventsStore {
@@ -14697,12 +14799,12 @@ class JsonEventsStore {
   channelsPath;
   eventsPath;
   deliveriesPath;
-  constructor(dataDir = getEventsDataDir()) {
-    this.dataDir = dataDir;
-    this.runtime = localJsonRuntime(dataDir);
-    this.channelsPath = join5(dataDir, "channels.json");
-    this.eventsPath = join5(dataDir, "events.json");
-    this.deliveriesPath = join5(dataDir, "deliveries.json");
+  constructor(dataDir2 = getEventsDataDir()) {
+    this.dataDir = dataDir2;
+    this.runtime = localJsonRuntime(dataDir2);
+    this.channelsPath = join7(dataDir2, "channels.json");
+    this.eventsPath = join7(dataDir2, "events.json");
+    this.deliveriesPath = join7(dataDir2, "deliveries.json");
   }
   async init() {
     await mkdir(this.dataDir, { recursive: true, mode: 448 });
@@ -14819,7 +14921,7 @@ class JsonEventsStore {
     };
   }
   async ensureArrayFile(path) {
-    if (!existsSync6(path)) {
+    if (!existsSync7(path)) {
       await writeFile(path, `[]
 `, { encoding: "utf-8", mode: 384 });
     }
@@ -14849,7 +14951,7 @@ class JsonEventsStore {
     });
   }
 }
-function localJsonRuntime(dataDir = getEventsDataDir()) {
+function localJsonRuntime(dataDir2 = getEventsDataDir()) {
   return {
     mode: "local-files",
     name: "json-events-store",
@@ -14862,7 +14964,7 @@ function localJsonRuntime(dataDir = getEventsDataDir()) {
     durable: true,
     idempotency: "best-effort-local",
     replayCursors: true,
-    description: `Local JSON files in ${dataDir}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
+    description: `Local JSON files in ${dataDir2}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
   };
 }
 function encodeLocalJsonEventCursor(offset, options = {}) {
@@ -15041,7 +15143,7 @@ async function dispatchCommand(event, channel) {
     HASNA_EVENT_SCHEMA_VERSION: event.schemaVersion,
     HASNA_EVENT_JSON: eventJson
   };
-  return new Promise((resolve8) => {
+  return new Promise((resolve9) => {
     const child = spawn(channel.command.command, channel.command.args ?? [], {
       cwd: channel.command.cwd,
       env,
@@ -15059,7 +15161,7 @@ async function dispatchCommand(event, channel) {
     });
     child.on("error", (error) => {
       clearTimeout(timeout);
-      resolve8({
+      resolve9({
         attempt: 1,
         status: "failed",
         startedAt,
@@ -15072,7 +15174,7 @@ async function dispatchCommand(event, channel) {
     child.on("close", (code, signal) => {
       clearTimeout(timeout);
       const success = code === 0;
-      resolve8({
+      resolve9({
         attempt: 1,
         status: success ? "success" : "failed",
         startedAt,
@@ -15414,7 +15516,7 @@ function normalizeRetryPolicy(policy) {
   };
 }
 var HASNA_EVENTS_DIR_ENV = "HASNA_EVENTS_DIR", HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME", LOCAL_JSON_EVENT_CURSOR_PREFIX = "local-json-v1:", DEFAULT_EVENT_PAGE_LIMIT = 100, MAX_EVENT_PAGE_LIMIT = 1000, DEFAULT_SIGNATURE_TOLERANCE_MS, EventValidationError, defaultEventTypeCatalog, APP_EVENT_V1_MAX_DATA_BYTES;
-var init_dist = __esm(() => {
+var init_dist2 = __esm(() => {
   DEFAULT_SIGNATURE_TOLERANCE_MS = 5 * 60 * 1000;
   EventValidationError = class EventValidationError extends Error {
     eventType;
@@ -15837,7 +15939,7 @@ function emitSharedTaskEventQuiet(input) {
 }
 var SOURCE = "todos";
 var init_shared_events = __esm(() => {
-  init_dist();
+  init_dist2();
   init_database();
   init_projects();
   init_task_lists();
@@ -16594,14 +16696,14 @@ var init_task_parent_integrity = __esm(() => {
 });
 
 // src/lib/creator-identity.ts
-import { existsSync as existsSync7, rmSync } from "fs";
-import { join as join6 } from "path";
+import { existsSync as existsSync8, rmSync } from "fs";
+import { join as join8 } from "path";
 function identityFilePath() {
-  return join6(getTodosGlobalDir(), "identity.json");
+  return join8(getTodosGlobalDir(), "identity.json");
 }
 function readPersistedIdentity() {
   const path = identityFilePath();
-  if (!existsSync7(path))
+  if (!existsSync8(path))
     return null;
   const parsed = readJsonFile(path);
   if (!parsed || typeof parsed.agent_id !== "string" || !parsed.agent_id.trim())
@@ -16631,7 +16733,7 @@ function persistIdentity(identity) {
 }
 function clearPersistedIdentity() {
   const path = identityFilePath();
-  if (!existsSync7(path))
+  if (!existsSync8(path))
     return false;
   try {
     rmSync(path);
@@ -18164,17 +18266,17 @@ function sanitizeCreateTaskInput(input) {
   return {
     ...input,
     title: sanitizePreWriteText(input.title, "task.title"),
-    description: input.description !== undefined ? sanitizePreWriteText(input.description, "task.description") : undefined,
+    description: input.description == null ? input.description : sanitizePreWriteText(input.description, "task.description"),
     tags: input.tags !== undefined ? sanitizePreWriteValue(input.tags, "task.tags") : undefined,
     metadata: input.metadata !== undefined ? sanitizePreWriteValue(input.metadata, "task.metadata") : undefined,
-    reason: input.reason !== undefined ? sanitizePreWriteText(input.reason, "task.reason") : undefined
+    reason: input.reason == null ? input.reason : sanitizePreWriteText(input.reason, "task.reason")
   };
 }
 function sanitizeUpdateTaskInput(input) {
   return {
     ...input,
     title: input.title !== undefined ? sanitizePreWriteText(input.title, "task.title") : undefined,
-    description: input.description !== undefined ? sanitizePreWriteText(input.description, "task.description") : undefined,
+    description: input.description == null ? input.description : sanitizePreWriteText(input.description, "task.description"),
     tags: input.tags !== undefined ? sanitizePreWriteValue(input.tags, "task.tags") : undefined,
     metadata: input.metadata !== undefined ? sanitizePreWriteValue(input.metadata, "task.metadata") : undefined
   };
@@ -20188,28 +20290,28 @@ var init_boards = __esm(() => {
 
 // src/lib/artifact-store.ts
 import { createHash as createHash5 } from "crypto";
-import { existsSync as existsSync8, mkdirSync as mkdirSync5, readFileSync as readFileSync4, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
-import { basename as basename2, dirname as dirname5, join as join7, resolve as resolve8 } from "path";
+import { existsSync as existsSync9, mkdirSync as mkdirSync5, readFileSync as readFileSync4, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
+import { basename as basename2, dirname as dirname5, join as join9, resolve as resolve9 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 function isInMemoryDb2(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function artifactStoreRoot() {
   if (process.env["HASNA_TODOS_ARTIFACTS_DIR"])
-    return resolve8(process.env["HASNA_TODOS_ARTIFACTS_DIR"]);
+    return resolve9(process.env["HASNA_TODOS_ARTIFACTS_DIR"]);
   if (process.env["TODOS_ARTIFACTS_DIR"])
-    return resolve8(process.env["TODOS_ARTIFACTS_DIR"]);
+    return resolve9(process.env["TODOS_ARTIFACTS_DIR"]);
   const dbPath = getDatabasePath();
   if (isInMemoryDb2(dbPath))
-    return join7(tmpdir3(), "hasna-todos-artifacts");
-  return join7(dirname5(resolve8(dbPath)), "artifacts");
+    return join9(tmpdir3(), "hasna-todos-artifacts");
+  return join9(dirname5(resolve9(dbPath)), "artifacts");
 }
 function artifactStorePath(relativePath) {
   const normalized = relativePath.replace(/\\/g, "/");
   if (normalized.includes("..") || normalized.startsWith("/") || normalized.length === 0) {
     throw new Error("Invalid artifact store path");
   }
-  return join7(artifactStoreRoot(), normalized);
+  return join9(artifactStoreRoot(), normalized);
 }
 function sha2562(buffer) {
   return createHash5("sha256").update(buffer).digest("hex");
@@ -20249,8 +20351,8 @@ function mediaTypeFor(path, textLike) {
   return "application/octet-stream";
 }
 function storeArtifactContent(input) {
-  const sourcePath = resolve8(input.path);
-  if (!existsSync8(sourcePath))
+  const sourcePath = resolve9(input.path);
+  if (!existsSync9(sourcePath))
     return null;
   const sourceStat = statSync2(sourcePath);
   if (!sourceStat.isFile())
@@ -20267,9 +20369,9 @@ function storeArtifactContent(input) {
       redactionStatus = "redacted";
   }
   const storedSha = sha2562(storedBuffer);
-  const relativePath = join7("sha256", storedSha.slice(0, 2), storedSha).replace(/\\/g, "/");
+  const relativePath = join9("sha256", storedSha.slice(0, 2), storedSha).replace(/\\/g, "/");
   const destination = artifactStorePath(relativePath);
-  if (!existsSync8(destination)) {
+  if (!existsSync9(destination)) {
     mkdirSync5(dirname5(destination), { recursive: true });
     writeFileSync3(destination, storedBuffer);
   }
@@ -20329,7 +20431,7 @@ function verifyStoredArtifact(input) {
     };
   }
   const storedPath = artifactStorePath(store.relative_path);
-  if (!existsSync8(storedPath)) {
+  if (!existsSync9(storedPath)) {
     return {
       id: input.id,
       path: input.path,
@@ -21930,8 +22032,8 @@ function normalizeAgentNameInput(name) {
 
 // src/lib/assignee-validation.ts
 import { readFileSync as readFileSync5 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join8 } from "path";
+import { homedir as homedir5 } from "os";
+import { join as join10 } from "path";
 function describeAssigneeFilter(input, ctx) {
   const raw = input.trim();
   const normalized = normalizeAgentNameInput(raw);
@@ -21950,7 +22052,7 @@ function describeAssigneeFilter(input, ctx) {
   };
 }
 function defaultSeatRosterPath() {
-  return process.env["TODOS_SEAT_ROSTER_PATH"] || join8(homedir3(), ".hasna", "identities", "hasna-seats.roster.json");
+  return process.env["TODOS_SEAT_ROSTER_PATH"] || join10(homedir5(), ".hasna", "identities", "hasna-seats.roster.json");
 }
 function loadSeatSlugs(path = defaultSeatRosterPath()) {
   try {
@@ -22756,7 +22858,7 @@ __export(exports_task_routing, {
   setTaskWorkflowPointers: () => setTaskWorkflowPointers,
   getTaskRouteState: () => getTaskRouteState
 });
-import { existsSync as existsSync9, statSync as statSync3 } from "fs";
+import { existsSync as existsSync10, statSync as statSync3 } from "fs";
 function machineLocalPath(project, db) {
   const machineId = process.env["TODOS_MACHINE_ID"];
   if (!machineId)
@@ -22796,7 +22898,7 @@ function routeConcurrencyKey(task, project, taskList, projectPath) {
 }
 function directoryExists(path) {
   try {
-    return existsSync9(path) && statSync3(path).isDirectory();
+    return existsSync10(path) && statSync3(path).isDirectory();
   } catch {
     return false;
   }
@@ -23025,7 +23127,7 @@ __export(exports_task_commands, {
   escapeTerminalControls: () => escapeTerminalControls
 });
 import chalk3 from "chalk";
-import { basename as basename3, resolve as resolve9 } from "path";
+import { basename as basename3, resolve as resolve10 } from "path";
 function escapeTerminalControls(value) {
   return value.replace(/[\u0000-\u001f\u007f-\u009f]/g, (character) => {
     const code = character.charCodeAt(0);
@@ -23068,11 +23170,11 @@ async function cloudDetailGitRefs(cloud, id) {
 function resolveProjectIdOrSlug(input) {
   const db = getDatabase();
   if (isPathLike(input)) {
-    const projectPath = resolve9(input);
+    const projectPath = resolve10(input);
     const byPath2 = getProjectByPath(projectPath, db);
     return (byPath2 ?? ensureProject(basename3(projectPath), projectPath, db)).id;
   }
-  const byPath = getProjectByPath(resolve9(input), db);
+  const byPath = getProjectByPath(resolve10(input), db);
   if (byPath)
     return byPath.id;
   const byId = getProject(input, db);
@@ -23481,7 +23583,7 @@ function registerTaskCommands(program2) {
           task_list_id: taskListId2,
           tags: parseTags(opts.tags),
           metadata: buildExpectationMetadata(opts),
-          working_dir: opts.workingDir ? resolve9(opts.workingDir) : process.cwd(),
+          working_dir: opts.workingDir ? resolve10(opts.workingDir) : process.cwd(),
           project_id: projectId2,
           assigned_to: opts.assign,
           plan_id: plan?.id
@@ -23518,7 +23620,7 @@ function registerTaskCommands(program2) {
         task_list_id: taskListId,
         tags: parseTags(opts.tags),
         metadata: buildExpectationMetadata(opts),
-        working_dir: opts.workingDir ? resolve9(opts.workingDir) : process.cwd(),
+        working_dir: opts.workingDir ? resolve10(opts.workingDir) : process.cwd(),
         project_id: projectId,
         assigned_to: opts.assign,
         plan_id: planId,
@@ -24264,7 +24366,7 @@ ${chalk3.cyan(sid)} ${statusColor(task2.status)} ${prioColor(task2.priority)} ${
           tags: opts.tags ? opts.tags.split(",").map((t) => t.trim()) : undefined,
           plan_id: plan?.id ?? (opts.clearPlan ? null : undefined),
           ...reparent2,
-          working_dir: opts.workingDir ? resolve9(opts.workingDir) : opts.clearWorkingDir ? null : undefined,
+          working_dir: opts.workingDir ? resolve10(opts.workingDir) : opts.clearWorkingDir ? null : undefined,
           estimated_minutes: opts.estimated !== undefined ? parseIntOption(opts.estimated, "--estimated") : undefined,
           sla_minutes: opts.slaMinutes !== undefined || opts.sla !== undefined ? parseIntOption(opts.slaMinutes ?? opts.sla, "--sla-minutes") : undefined,
           due_at: opts.due !== undefined ? opts.due === "" ? null : opts.due.length === 10 ? opts.due + "T00:00:00.000Z" : opts.due : undefined,
@@ -24309,7 +24411,7 @@ ${chalk3.cyan(sid)} ${statusColor(task2.status)} ${prioColor(task2.priority)} ${
         tags: opts.tags ? opts.tags.split(",").map((t) => t.trim()) : undefined,
         plan_id: planId,
         ...reparent,
-        working_dir: opts.workingDir ? resolve9(opts.workingDir) : opts.clearWorkingDir ? null : undefined,
+        working_dir: opts.workingDir ? resolve10(opts.workingDir) : opts.clearWorkingDir ? null : undefined,
         estimated_minutes: opts.estimated !== undefined ? parseIntOption(opts.estimated, "--estimated") : undefined,
         sla_minutes: opts.slaMinutes !== undefined || opts.sla !== undefined ? parseIntOption(opts.slaMinutes ?? opts.sla, "--sla-minutes") : undefined,
         due_at: opts.due !== undefined ? opts.due === "" ? null : opts.due.length === 10 ? opts.due + "T00:00:00.000Z" : opts.due : undefined,
@@ -24827,8 +24929,8 @@ var init_plan_comments = __esm(() => {
 });
 
 // src/lib/plan-artifacts.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync6, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
-import { join as join9, resolve as resolve10 } from "path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync6, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
+import { join as join11, resolve as resolve11 } from "path";
 function assertSafePathSegment(value, label) {
   const trimmed = value.trim();
   if (!trimmed || trimmed === "." || trimmed === ".." || trimmed.includes("/") || trimmed.includes("\\")) {
@@ -24871,7 +24973,7 @@ function resolvePlanArtifactProject(input) {
   const ref = input.project_id || input.project_ref;
   if (!ref)
     throw new Error("Plan artifacts require a project id or project reference");
-  const byPath = getProjectByPath(resolve10(ref), db);
+  const byPath = getProjectByPath(resolve11(ref), db);
   if (byPath)
     return byPath;
   const resolvedId = resolvePartialId(db, "projects", ref);
@@ -24888,8 +24990,8 @@ function resolvePlanArtifactProject(input) {
 function resolvePlanArtifactPaths(input) {
   const project = resolvePlanArtifactProject(input);
   const projectId = assertSafePathSegment(project.id, "project id");
-  const projectRoot = resolve10(project.path);
-  const directory = join9(projectRoot, ".hasna", "todos", "plans", projectId);
+  const projectRoot = resolve11(project.path);
+  const directory = join11(projectRoot, ".hasna", "todos", "plans", projectId);
   const planId = input.plan_id ? assertSafePathSegment(input.plan_id, "plan id") : null;
   const planSlug = input.plan_slug ? assertSafePathSegment(slugify(input.plan_slug), "plan slug") : null;
   const fileName = planId ? planSlug ? `${planSlug}--${planId.slice(0, 8)}.md` : `${planId}.md` : null;
@@ -24897,7 +24999,7 @@ function resolvePlanArtifactPaths(input) {
     project_id: project.id,
     project_root: projectRoot,
     directory,
-    file_path: fileName ? join9(directory, fileName) : directory
+    file_path: fileName ? join11(directory, fileName) : directory
   };
 }
 function resolvePlanArtifactCandidatePaths(plan, db) {
@@ -25063,7 +25165,7 @@ function readPlanArtifact(plan, db) {
     return null;
   const d = db || getDatabase();
   const paths = resolvePlanArtifactCandidatePaths(plan, d);
-  const path = existsSync10(paths.primary.file_path) ? paths.primary.file_path : existsSync10(paths.legacy.file_path) ? paths.legacy.file_path : null;
+  const path = existsSync11(paths.primary.file_path) ? paths.primary.file_path : existsSync11(paths.legacy.file_path) ? paths.legacy.file_path : null;
   if (!path)
     return null;
   const markdown = readFileSync6(path, "utf8");
@@ -25078,7 +25180,7 @@ function inspectPlanArtifact(plan, db) {
     return null;
   const d = db || getDatabase();
   const paths = resolvePlanArtifactCandidatePaths(plan, d);
-  const path = existsSync10(paths.primary.file_path) ? paths.primary.file_path : existsSync10(paths.legacy.file_path) ? paths.legacy.file_path : null;
+  const path = existsSync11(paths.primary.file_path) ? paths.primary.file_path : existsSync11(paths.legacy.file_path) ? paths.legacy.file_path : null;
   if (!path) {
     return {
       path: paths.primary.file_path,
@@ -26554,7 +26656,7 @@ __export(exports_builtin_templates, {
   BUILTIN_TEMPLATES: () => BUILTIN_TEMPLATES
 });
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync5 } from "fs";
-import { join as join10 } from "path";
+import { join as join12 } from "path";
 function templateMetadata(template) {
   return {
     source: BUILTIN_TEMPLATE_LIBRARY_SOURCE,
@@ -26613,7 +26715,7 @@ function writeBuiltinTemplateFiles(directory) {
   mkdirSync7(directory, { recursive: true });
   const files = [];
   for (const entry of exportBuiltinTemplateFiles()) {
-    const path = join10(directory, entry.filename);
+    const path = join12(directory, entry.filename);
     writeFileSync5(path, `${JSON.stringify(entry.template, null, 2)}
 `, "utf-8");
     files.push(path);
@@ -28305,16 +28407,16 @@ var init_saved_search_views = __esm(() => {
 });
 
 // src/lib/claude-tasks.ts
-import { existsSync as existsSync11, readFileSync as readFileSync7, readdirSync as readdirSync2, writeFileSync as writeFileSync6 } from "fs";
-import { join as join11 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync7, readdirSync as readdirSync2, writeFileSync as writeFileSync6 } from "fs";
+import { join as join13 } from "path";
 function getTaskListDir(taskListId) {
-  return join11(HOME, ".claude", "tasks", taskListId);
+  return join13(HOME, ".claude", "tasks", taskListId);
 }
 function readClaudeTask(dir, filename) {
-  return readJsonFile(join11(dir, filename));
+  return readJsonFile(join13(dir, filename));
 }
 function writeClaudeTask(dir, task) {
-  writeJsonFile(join11(dir, `${task.id}.json`), task);
+  writeJsonFile(join13(dir, `${task.id}.json`), task);
 }
 function toClaudeStatus(status) {
   if (status === "pending" || status === "in_progress" || status === "completed") {
@@ -28326,14 +28428,14 @@ function toSqliteStatus(status) {
   return status;
 }
 function readPrefixCounter(dir) {
-  const path = join11(dir, ".prefix-counter");
-  if (!existsSync11(path))
+  const path = join13(dir, ".prefix-counter");
+  if (!existsSync12(path))
     return 0;
   const val = parseInt(readFileSync7(path, "utf-8").trim(), 10);
   return isNaN(val) ? 0 : val;
 }
 function writePrefixCounter(dir, value) {
-  writeFileSync6(join11(dir, ".prefix-counter"), String(value));
+  writeFileSync6(join13(dir, ".prefix-counter"), String(value));
 }
 function formatPrefixedSubject(title, prefix, counter) {
   const padded = String(counter).padStart(5, "0");
@@ -28360,7 +28462,7 @@ function taskToClaudeTask(task, claudeTaskId, existingMeta) {
 }
 function pushToClaudeTaskList(taskListId, projectId, options = {}) {
   const dir = getTaskListDir(taskListId);
-  if (!existsSync11(dir))
+  if (!existsSync12(dir))
     ensureDir(dir);
   const filter = {};
   if (projectId)
@@ -28369,7 +28471,7 @@ function pushToClaudeTaskList(taskListId, projectId, options = {}) {
   const existingByTodosId = new Map;
   const files = listJsonFiles(dir);
   for (const f of files) {
-    const path = join11(dir, f);
+    const path = join13(dir, f);
     const ct = readClaudeTask(dir, f);
     if (ct?.metadata?.["todos_id"]) {
       existingByTodosId.set(ct.metadata["todos_id"], { task: ct, mtimeMs: getFileMtimeMs(path) });
@@ -28458,7 +28560,7 @@ function pushToClaudeTaskList(taskListId, projectId, options = {}) {
 }
 function pullFromClaudeTaskList(taskListId, projectId, options = {}) {
   const dir = getTaskListDir(taskListId);
-  if (!existsSync11(dir)) {
+  if (!existsSync12(dir)) {
     return { pushed: 0, pulled: 0, errors: [`Task list directory not found: ${dir}`] };
   }
   const files = readdirSync2(dir).filter((f) => f.endsWith(".json"));
@@ -28478,7 +28580,7 @@ function pullFromClaudeTaskList(taskListId, projectId, options = {}) {
   }
   for (const f of files) {
     try {
-      const filePath = join11(dir, f);
+      const filePath = join13(dir, f);
       const ct = readClaudeTask(dir, f);
       if (!ct)
         continue;
@@ -28551,20 +28653,20 @@ var init_claude_tasks = __esm(() => {
 });
 
 // src/lib/agent-tasks.ts
-import { existsSync as existsSync12 } from "fs";
-import { join as join12 } from "path";
+import { existsSync as existsSync13 } from "fs";
+import { join as join14 } from "path";
 function agentBaseDir(agent) {
   const key = `TODOS_${agent.toUpperCase()}_TASKS_DIR`;
-  return process.env[key] || getAgentTasksDir(agent) || process.env["TODOS_AGENT_TASKS_DIR"] || join12(getTodosGlobalDir(), "agents");
+  return process.env[key] || getAgentTasksDir(agent) || process.env["TODOS_AGENT_TASKS_DIR"] || join14(getTodosGlobalDir(), "agents");
 }
 function getTaskListDir2(agent, taskListId) {
-  return join12(agentBaseDir(agent), agent, taskListId);
+  return join14(agentBaseDir(agent), agent, taskListId);
 }
 function readAgentTask(dir, filename) {
-  return readJsonFile(join12(dir, filename));
+  return readJsonFile(join14(dir, filename));
 }
 function writeAgentTask(dir, task) {
-  writeJsonFile(join12(dir, `${task.id}.json`), task);
+  writeJsonFile(join14(dir, `${task.id}.json`), task);
 }
 function taskToAgentTask(task, externalId, existingMeta) {
   return withSyncFingerprint({
@@ -28589,7 +28691,7 @@ function metadataKey(agent) {
 }
 function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
   const dir = getTaskListDir2(agent, taskListId);
-  if (!existsSync12(dir))
+  if (!existsSync13(dir))
     ensureDir(dir);
   const filter = {};
   if (projectId)
@@ -28598,7 +28700,7 @@ function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
   const existingByTodosId = new Map;
   const files = listJsonFiles(dir);
   for (const f of files) {
-    const path = join12(dir, f);
+    const path = join14(dir, f);
     const at = readAgentTask(dir, f);
     if (at?.metadata?.["todos_id"]) {
       existingByTodosId.set(at.metadata["todos_id"], { task: at, mtimeMs: getFileMtimeMs(path) });
@@ -28674,7 +28776,7 @@ function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
 }
 function pullFromAgentTaskList(agent, taskListId, projectId, options = {}) {
   const dir = getTaskListDir2(agent, taskListId);
-  if (!existsSync12(dir)) {
+  if (!existsSync13(dir)) {
     return { pushed: 0, pulled: 0, errors: [`Task list directory not found: ${dir}`] };
   }
   const files = listJsonFiles(dir);
@@ -28693,7 +28795,7 @@ function pullFromAgentTaskList(agent, taskListId, projectId, options = {}) {
   }
   for (const f of files) {
     try {
-      const filePath = join12(dir, f);
+      const filePath = join14(dir, f);
       const at = readAgentTask(dir, f);
       if (!at)
         continue;
@@ -29101,8 +29203,8 @@ __export(exports_project_bootstrap, {
   discoverProjectWorkspace: () => discoverProjectWorkspace,
   bootstrapProject: () => bootstrapProject
 });
-import { existsSync as existsSync13, readFileSync as readFileSync8, statSync as statSync4 } from "fs";
-import { basename as basename4, dirname as dirname6, resolve as resolve11 } from "path";
+import { existsSync as existsSync14, readFileSync as readFileSync8, statSync as statSync4 } from "fs";
+import { basename as basename4, dirname as dirname6, resolve as resolve12 } from "path";
 function safeStat(path) {
   try {
     return statSync4(path);
@@ -29111,7 +29213,7 @@ function safeStat(path) {
   }
 }
 function canonicalPath(input) {
-  const resolved = resolve11(input);
+  const resolved = resolve12(input);
   const stats = safeStat(resolved);
   if (stats?.isFile())
     return dirname6(resolved);
@@ -29120,7 +29222,7 @@ function canonicalPath(input) {
 function findUp(start, marker) {
   let current = canonicalPath(start);
   while (true) {
-    if (existsSync13(resolve11(current, marker)))
+    if (existsSync14(resolve12(current, marker)))
       return current;
     const parent = dirname6(current);
     if (parent === current)
@@ -29131,8 +29233,8 @@ function findUp(start, marker) {
 function readPackageJson(path) {
   if (!path)
     return null;
-  const file = resolve11(path, "package.json");
-  if (!existsSync13(file))
+  const file = resolve12(path, "package.json");
+  if (!existsSync14(file))
     return null;
   try {
     const parsed = JSON.parse(readFileSync8(file, "utf-8"));
@@ -29154,7 +29256,7 @@ function workspaceMarker(root, rootPackage) {
   if (rootPackage?.workspaces)
     markers.push("package.json#workspaces");
   for (const marker of ["pnpm-workspace.yaml", "turbo.json", "nx.json", "lerna.json", "rush.json", "bun.lock", "bun.lockb"]) {
-    if (existsSync13(resolve11(root, marker)))
+    if (existsSync14(resolve12(root, marker)))
       markers.push(marker);
   }
   const kind = markers.find((marker) => marker !== "bun.lock" && marker !== "bun.lockb") ?? null;
@@ -29488,9 +29590,9 @@ __export(exports_extract, {
   buildCodebaseIndex: () => buildCodebaseIndex,
   EXTRACT_TAGS: () => EXTRACT_TAGS
 });
-import { existsSync as existsSync14, readFileSync as readFileSync9, statSync as statSync5 } from "fs";
+import { existsSync as existsSync15, readFileSync as readFileSync9, statSync as statSync5 } from "fs";
 import { createHash as createHash7 } from "crypto";
-import { relative as relative3, resolve as resolve12, join as join13 } from "path";
+import { relative as relative3, resolve as resolve13, join as join15 } from "path";
 function stableHash(value) {
   return createHash7("sha256").update(value).digest("hex");
 }
@@ -29498,9 +29600,9 @@ function normalizePathForMatch(value) {
   return value.replace(/\\/g, "/").replace(/^\.\//, "");
 }
 function readGitignorePatterns(basePath) {
-  const root = statSync5(basePath).isFile() ? resolve12(basePath, "..") : basePath;
-  const gitignorePath = join13(root, ".gitignore");
-  if (!existsSync14(gitignorePath))
+  const root = statSync5(basePath).isFile() ? resolve13(basePath, "..") : basePath;
+  const gitignorePath = join15(root, ".gitignore");
+  if (!existsSync15(gitignorePath))
     return [];
   try {
     return readFileSync9(gitignorePath, "utf-8").split(`
@@ -29634,7 +29736,7 @@ function collectFiles(basePath, extensions, excludes, respectGitignore) {
   return files.sort();
 }
 function buildCodebaseIndex(options) {
-  const basePath = resolve12(options.path);
+  const basePath = resolve13(options.path);
   const tags = options.patterns || [...EXTRACT_TAGS];
   const extensions = options.extensions ? new Set(options.extensions.map((e) => e.startsWith(".") ? e : `.${e}`)) : DEFAULT_EXTENSIONS;
   const excludes = options.exclude || [];
@@ -29642,10 +29744,10 @@ function buildCodebaseIndex(options) {
   const files = collectFiles(basePath, extensions, excludes, respectGitignore);
   const indexed = [];
   for (const file of files) {
-    const fullPath = statSync5(basePath).isFile() ? basePath : join13(basePath, file);
+    const fullPath = statSync5(basePath).isFile() ? basePath : join15(basePath, file);
     try {
       const source = readFileSync9(fullPath, "utf-8");
-      const relPath = statSync5(basePath).isFile() ? relative3(resolve12(basePath, ".."), fullPath) : file;
+      const relPath = statSync5(basePath).isFile() ? relative3(resolve13(basePath, ".."), fullPath) : file;
       indexed.push({
         file: relPath,
         checksum: stableHash(source).slice(0, 24),
@@ -29665,7 +29767,7 @@ function buildCodebaseIndex(options) {
   };
 }
 function extractTodos(options, db) {
-  const basePath = resolve12(options.path);
+  const basePath = resolve13(options.path);
   const tags = options.patterns || [...EXTRACT_TAGS];
   const extensions = options.extensions ? new Set(options.extensions.map((e) => e.startsWith(".") ? e : `.${e}`)) : DEFAULT_EXTENSIONS;
   const excludes = options.exclude || [];
@@ -29673,10 +29775,10 @@ function extractTodos(options, db) {
   const files = collectFiles(basePath, extensions, excludes, respectGitignore);
   const allComments = [];
   for (const file of files) {
-    const fullPath = statSync5(basePath).isFile() ? basePath : join13(basePath, file);
+    const fullPath = statSync5(basePath).isFile() ? basePath : join15(basePath, file);
     try {
       const source = readFileSync9(fullPath, "utf-8");
-      const relPath = statSync5(basePath).isFile() ? relative3(resolve12(basePath, ".."), fullPath) : file;
+      const relPath = statSync5(basePath).isFile() ? relative3(resolve13(basePath, ".."), fullPath) : file;
       const comments = extractFromSource(source, relPath, tags);
       allComments.push(...comments);
     } catch {}
@@ -29770,7 +29872,7 @@ async function watchSourceTodos(options, onRun) {
   const interval = Math.max(100, options.interval_ms || 2000);
   const once = options.once !== false && (!options.max_runs || options.max_runs <= 1);
   const maxRuns = options.max_runs ?? (once ? 1 : Number.POSITIVE_INFINITY);
-  const root = resolve12(options.path);
+  const root = resolve13(options.path);
   const runs = [];
   let previous = new Map;
   for (let runNumber = 1;runNumber <= maxRuns; runNumber++) {
@@ -31006,7 +31108,7 @@ __export(exports_project_commands, {
 });
 import chalk5 from "chalk";
 import { readFileSync as readFileSync10, statSync as statSync6 } from "fs";
-import { basename as basename5, resolve as resolve13, sep as sep3 } from "path";
+import { basename as basename5, resolve as resolve14, sep as sep3 } from "path";
 function collectOption(value, previous = []) {
   return [...previous, value];
 }
@@ -31085,8 +31187,8 @@ function countTasksForDeregistration(tasks) {
   };
 }
 function pathIsWithinPrefix(projectPath, prefix) {
-  const normalizedPath = resolve13(projectPath);
-  const normalizedPrefix = resolve13(prefix);
+  const normalizedPath = resolve14(projectPath);
+  const normalizedPrefix = resolve14(prefix);
   return normalizedPath === normalizedPrefix || normalizedPath.startsWith(`${normalizedPrefix}${sep3}`);
 }
 function resolveTaskListFilter(input, projectId) {
@@ -31298,7 +31400,7 @@ function registerProjectCommands(program2) {
     }
     let content;
     if (opts.file !== undefined) {
-      const commentFilePath = resolve13(opts.file);
+      const commentFilePath = resolve14(opts.file);
       let isRegularFile = false;
       try {
         isRegularFile = statSync6(commentFilePath).isFile();
@@ -31723,7 +31825,7 @@ function registerProjectCommands(program2) {
     if (opts.update) {
       const patch = {
         ...opts.name !== undefined ? { name: opts.name } : {},
-        ...opts.path !== undefined ? { path: resolve13(opts.path) } : {},
+        ...opts.path !== undefined ? { path: resolve14(opts.path) } : {},
         ...opts.description !== undefined ? { description: opts.description } : {}
       };
       if (Object.keys(patch).length === 0) {
@@ -31767,7 +31869,7 @@ function registerProjectCommands(program2) {
       return;
     }
     if (opts.add) {
-      const projectPath = resolve13(opts.add);
+      const projectPath = resolve14(opts.add);
       const name = opts.name || basename5(projectPath);
       let parentId;
       if (opts.parent !== undefined) {
@@ -31896,7 +31998,7 @@ function registerProjectCommands(program2) {
       if (!resolved) {
         handleError(new Error(`Project not found: ${projectId}`));
       }
-      const entry = setMachineLocalPath2(resolved, resolve13(projectPath));
+      const entry = setMachineLocalPath2(resolved, resolve14(projectPath));
       if (useJson) {
         output(entry, true);
       } else {
@@ -31958,7 +32060,7 @@ function registerProjectCommands(program2) {
       const patterns = opts.pattern ? opts.pattern.split(",").map((t) => t.trim().toUpperCase()) : undefined;
       const taskListId = opts.list ? resolveTaskListId(opts.list) : undefined;
       const result = extractTodos2({
-        path: resolve13(scanPath),
+        path: resolve14(scanPath),
         patterns,
         project_id: projectId,
         task_list_id: taskListId,
@@ -32019,7 +32121,7 @@ Indexed ${result.index.files.length} file(s), ${result.index.total_symbols} symb
       const taskListId = opts.list ? resolveTaskListId(opts.list) : undefined;
       const maxRuns = opts.maxRuns ? parseInt(opts.maxRuns, 10) : 1;
       const result = await watchSourceTodos2({
-        path: resolve13(scanPath),
+        path: resolve14(scanPath),
         patterns,
         project_id: projectId,
         task_list_id: taskListId,
@@ -32057,7 +32159,7 @@ Indexed ${result.index.files.length} file(s), ${result.index.total_symbols} symb
     const writeOutput = async (content) => {
       if (opts.output) {
         const { writeFileSync: writeFileSync7 } = await import("fs");
-        writeFileSync7(resolve13(opts.output), content.endsWith(`
+        writeFileSync7(resolve14(opts.output), content.endsWith(`
 `) ? content : `${content}
 `);
       } else {
@@ -32075,12 +32177,12 @@ Indexed ${result.index.files.length} file(s), ${result.index.total_symbols} symb
       const exported = opts.encrypt ? createEncryptedBridgeBundle2(bundle, { profile: opts.encryptionProfile }) : bundle;
       const json = JSON.stringify(exported, null, 2);
       await writeOutput(json);
-      emitLocalEventHooksQuiet3({ type: "export.finished", payload: { format: "bridge", encrypted: Boolean(opts.encrypt), project_id: projectId, output: opts.output ? resolve13(opts.output) : null, stats: bundle.stats } });
+      emitLocalEventHooksQuiet3({ type: "export.finished", payload: { format: "bridge", encrypted: Boolean(opts.encrypt), project_id: projectId, output: opts.output ? resolve14(opts.output) : null, stats: bundle.stats } });
       if (!opts.encrypt && !opts.allowPlaintextSensitive) {
         console.error(chalk5.dim("Bridge export redacted sensitive fields. Use --encrypt for an encrypted local bundle when a lossless legacy snapshot is required."));
       }
       if (opts.output && !globalOpts.json) {
-        console.log(chalk5.green(`${opts.encrypt ? "Encrypted bridge export" : "Bridge export"} written to ${resolve13(opts.output)}`));
+        console.log(chalk5.green(`${opts.encrypt ? "Encrypted bridge export" : "Bridge export"} written to ${resolve14(opts.output)}`));
       }
       return;
     }
@@ -32093,7 +32195,7 @@ Indexed ${result.index.files.length} file(s), ${result.index.total_symbols} symb
       await writeOutput(JSON.stringify(tasks, null, 2));
     }
     const { emitLocalEventHooksQuiet: emitLocalEventHooksQuiet2 } = await Promise.resolve().then(() => (init_event_hooks(), exports_event_hooks));
-    emitLocalEventHooksQuiet2({ type: "export.finished", payload: { format: opts.format, project_id: projectId, output: opts.output ? resolve13(opts.output) : null, count: exportedCount } });
+    emitLocalEventHooksQuiet2({ type: "export.finished", payload: { format: opts.format, project_id: projectId, output: opts.output ? resolve14(opts.output) : null, count: exportedCount } });
   });
   program2.command("bridge-import <file>").description("Dry-run or apply a local hasna/todos bridge export bundle").option("--apply", "Apply the import. Defaults to dry-run.").option("--decrypt", "Decrypt an encrypted bridge export before importing").option("--resolve-conflicts", "Safely merge existing local tasks by filling blank fields, unioning tags, and recording unresolved divergences").action(async (file, opts) => {
     const globalOpts = program2.opts();
@@ -32101,13 +32203,13 @@ Indexed ${result.index.files.length} file(s), ${result.index.total_symbols} symb
       const { readFileSync: readFileSync11 } = await import("fs");
       const { importLocalBridgeBundle: importLocalBridgeBundle2 } = await Promise.resolve().then(() => (init_local_bridge(), exports_local_bridge));
       const { decryptBridgeBundle: decryptBridgeBundle2, isEncryptedBridgeBundle: isEncryptedBridgeBundle2 } = await Promise.resolve().then(() => (init_local_encryption(), exports_local_encryption));
-      const parsed = JSON.parse(readFileSync11(resolve13(file), "utf-8"));
+      const parsed = JSON.parse(readFileSync11(resolve14(file), "utf-8"));
       const bundle = isEncryptedBridgeBundle2(parsed) ? opts.decrypt ? decryptBridgeBundle2(parsed) : (() => {
         throw new Error("Bridge bundle is encrypted. Re-run with --decrypt and the configured key environment variable set.");
       })() : parsed;
       const result = importLocalBridgeBundle2(bundle, { dryRun: !opts.apply, conflictStrategy: opts.resolveConflicts ? "safe_merge" : "skip" });
       const { emitLocalEventHooksQuiet: emitLocalEventHooksQuiet2 } = await Promise.resolve().then(() => (init_event_hooks(), exports_event_hooks));
-      emitLocalEventHooksQuiet2({ type: "import.finished", payload: { file: resolve13(file), dry_run: result.dry_run, ok: result.ok, inserted: result.inserted, skipped: result.skipped, conflicts: result.conflicts.length, issues: result.issues.length } });
+      emitLocalEventHooksQuiet2({ type: "import.finished", payload: { file: resolve14(file), dry_run: result.dry_run, ok: result.ok, inserted: result.inserted, skipped: result.skipped, conflicts: result.conflicts.length, issues: result.issues.length } });
       if (globalOpts.json) {
         output(result, true);
         return;
@@ -32137,9 +32239,9 @@ Indexed ${result.index.files.length} file(s), ${result.index.total_symbols} symb
     try {
       const { readFileSync: readFileSync11 } = await import("fs");
       const { importTodosMarkdown: importTodosMarkdown2 } = await Promise.resolve().then(() => (init_todos_md(), exports_todos_md));
-      const result = importTodosMarkdown2(readFileSync11(resolve13(file), "utf-8"), { dryRun: !opts.apply, conflictStrategy: opts.resolveConflicts ? "safe_merge" : "skip" });
+      const result = importTodosMarkdown2(readFileSync11(resolve14(file), "utf-8"), { dryRun: !opts.apply, conflictStrategy: opts.resolveConflicts ? "safe_merge" : "skip" });
       const { emitLocalEventHooksQuiet: emitLocalEventHooksQuiet2 } = await Promise.resolve().then(() => (init_event_hooks(), exports_event_hooks));
-      emitLocalEventHooksQuiet2({ type: "import.finished", payload: { file: resolve13(file), format: "todos.md", dry_run: result.dry_run, ok: result.ok, inserted: result.inserted, skipped: result.skipped, issues: result.issues.length } });
+      emitLocalEventHooksQuiet2({ type: "import.finished", payload: { file: resolve14(file), format: "todos.md", dry_run: result.dry_run, ok: result.ok, inserted: result.inserted, skipped: result.skipped, issues: result.issues.length } });
       if (globalOpts.json) {
         output(result, true);
         return;
@@ -35272,7 +35374,7 @@ async function retryOnTransientPostgresError(fn, attempts = 2, delayMs = 150) {
       lastError = error;
       if (!isTransientPostgresError(error) || attempt === attempts)
         throw error;
-      await new Promise((resolve14) => setTimeout(resolve14, delayMs * attempt));
+      await new Promise((resolve15) => setTimeout(resolve15, delayMs * attempt));
     }
   }
   throw lastError;
@@ -36401,8 +36503,8 @@ class SqliteTodosProjectRegistrationBackend {
   async transaction(fn) {
     const previous = sqliteTransactionTails.get(this.db) ?? Promise.resolve();
     let release;
-    const current = new Promise((resolve14) => {
-      release = resolve14;
+    const current = new Promise((resolve15) => {
+      release = resolve15;
     });
     sqliteTransactionTails.set(this.db, current);
     await previous;
@@ -39165,8 +39267,8 @@ var init_ai = __esm(() => {
 });
 
 // src/lib/access-profiles.ts
-function resolveAccessProfile(envValue) {
-  const raw = (envValue ?? process.env["TODOS_PROFILE"] ?? "full").toLowerCase();
+function resolveAccessProfile(envValue2) {
+  const raw = (envValue2 ?? process.env["TODOS_PROFILE"] ?? "full").toLowerCase();
   if (ACCESS_PROFILES.includes(raw))
     return raw;
   if (raw === "readonly")
@@ -40791,7 +40893,7 @@ function errorResult(runId, error) {
   return createTodosAiFailureResult(runId, "internal_error", "optional AI runtime failed");
 }
 async function withLoadDeadline(operation, controller, timeoutMs) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve15, reject) => {
     let settled = false;
     const settle = (callback) => {
       if (settled)
@@ -40805,11 +40907,11 @@ async function withLoadDeadline(operation, controller, timeoutMs) {
       controller.abort(error);
       settle(() => reject(error));
     }, timeoutMs);
-    Promise.resolve().then(operation).then((value) => settle(() => resolve14(value)), (error) => settle(() => reject(error)));
+    Promise.resolve().then(operation).then((value) => settle(() => resolve15(value)), (error) => settle(() => reject(error)));
   });
 }
 async function withInterrupt(operation, controller) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve15, reject) => {
     let settled = false;
     const settle = (callback) => {
       if (settled)
@@ -40824,7 +40926,7 @@ async function withInterrupt(operation, controller) {
       settle(() => reject(error));
     };
     process.once("SIGINT", onInterrupt);
-    Promise.resolve().then(operation).then((value) => settle(() => resolve14(value)), (error) => settle(() => reject(error)));
+    Promise.resolve().then(operation).then((value) => settle(() => resolve15(value)), (error) => settle(() => reject(error)));
   });
 }
 function throwIfAborted(signal) {
@@ -41112,14 +41214,14 @@ async function findFreePort(start) {
 var DEFAULT_PORT = 19427;
 
 // src/lib/db-backup.ts
-import { existsSync as existsSync15, copyFileSync, mkdirSync as mkdirSync8, readFileSync as readFileSync12, renameSync, statSync as statSync7, writeFileSync as writeFileSync7, unlinkSync } from "fs";
-import { dirname as dirname7, join as join14, resolve as resolve14 } from "path";
+import { existsSync as existsSync16, copyFileSync, mkdirSync as mkdirSync8, readFileSync as readFileSync12, renameSync, statSync as statSync7, writeFileSync as writeFileSync7, unlinkSync } from "fs";
+import { dirname as dirname7, join as join16, resolve as resolve15 } from "path";
 import { Database as Database2 } from "bun:sqlite";
 function resolveDbPath(dbPath) {
   if (dbPath)
-    return resolve14(dbPath);
+    return resolve15(dbPath);
   if (process.env["TODOS_DB_PATH"] && process.env["TODOS_DB_PATH"] !== ":memory:") {
-    return resolve14(process.env["TODOS_DB_PATH"]);
+    return resolve15(process.env["TODOS_DB_PATH"]);
   }
   const db = getDatabase();
   const filename = db.filename;
@@ -41129,7 +41231,7 @@ function resolveDbPath(dbPath) {
 }
 function backupDatabase(outputPath, sourcePath) {
   const source = resolveDbPath(sourcePath);
-  if (!existsSync15(source))
+  if (!existsSync16(source))
     throw new Error(`Database not found: ${source}`);
   mkdirSync8(dirname7(outputPath), { recursive: true });
   closeDatabase();
@@ -41152,9 +41254,9 @@ function backupDatabase(outputPath, sourcePath) {
   };
 }
 function checkDatabaseIntegrity(dbPath) {
-  const path = dbPath ? resolve14(dbPath) : resolveDbPath();
+  const path = dbPath ? resolve15(dbPath) : resolveDbPath();
   const errors = [];
-  if (!existsSync15(path)) {
+  if (!existsSync16(path)) {
     return {
       schema_version: DB_BACKUP_SCHEMA,
       path,
@@ -41217,9 +41319,9 @@ function checkDatabaseIntegrity(dbPath) {
   };
 }
 function defaultBackupPath(dbPath) {
-  const base = dbPath ? dirname7(resolve14(dbPath)) : dirname7(resolveDbPath());
+  const base = dbPath ? dirname7(resolve15(dbPath)) : dirname7(resolveDbPath());
   const stamp = new Date().toISOString().replace(/[:.]/g, "-");
-  return join14(base, "backups", `todos-${stamp}.db`);
+  return join16(base, "backups", `todos-${stamp}.db`);
 }
 var DB_BACKUP_SCHEMA = "todos.db_backup.v1";
 var init_db_backup = __esm(() => {
@@ -41236,7 +41338,7 @@ __export(exports_evidence_redaction, {
   TODOS_EVIDENCE_REDACTION_CONFIRM: () => TODOS_EVIDENCE_REDACTION_CONFIRM
 });
 import { chmodSync } from "fs";
-import { join as join15 } from "path";
+import { join as join17 } from "path";
 function unique4(values) {
   return Array.from(new Set((values ?? []).map((value) => value.trim()).filter(Boolean)));
 }
@@ -41583,7 +41685,7 @@ function redactEvidenceRows(options, db) {
 }
 function defaultEvidenceRedactionBackupPath(dbPath) {
   const base = defaultBackupPath(dbPath);
-  return join15(base.replace(/\.db$/, ""), "pre-redaction.db");
+  return join17(base.replace(/\.db$/, ""), "pre-redaction.db");
 }
 var TODOS_EVIDENCE_REDACTION_SCHEMA = "todos.evidence_redaction.v1", TODOS_EVIDENCE_REDACTION_CONFIRM = "REDACT_TODOS_EVIDENCE";
 var init_evidence_redaction = __esm(() => {
@@ -41599,7 +41701,7 @@ __export(exports_retention_cleanup, {
   applyRetentionCleanup: () => applyRetentionCleanup,
   RETENTION_CLEANUP_CONFIRMATION: () => RETENTION_CLEANUP_CONFIRMATION
 });
-import { existsSync as existsSync16, unlinkSync as unlinkSync2 } from "fs";
+import { existsSync as existsSync17, unlinkSync as unlinkSync2 } from "fs";
 function normalizeScopes(scopes) {
   if (!scopes || scopes.length === 0)
     return [...ALL_SCOPES];
@@ -41802,7 +41904,7 @@ function applyRetentionCleanup(input, db) {
   for (const artifact of report.candidates.artifact_files) {
     try {
       const path = artifactStorePath(artifact.relative_path);
-      if (!existsSync16(path)) {
+      if (!existsSync17(path)) {
         report.warnings.push(`stored artifact already missing: ${artifact.relative_path}`);
         continue;
       }
@@ -42478,8 +42580,8 @@ __export(exports_local_extensions, {
   discoverLocalExtensions: () => discoverLocalExtensions
 });
 import { createHash as createHash13, createVerify } from "crypto";
-import { existsSync as existsSync17, readdirSync as readdirSync3, readFileSync as readFileSync13, statSync as statSync8 } from "fs";
-import { basename as basename6, join as join16, resolve as resolve15 } from "path";
+import { existsSync as existsSync18, readdirSync as readdirSync3, readFileSync as readFileSync13, statSync as statSync8 } from "fs";
+import { basename as basename6, join as join18, resolve as resolve16 } from "path";
 function isObject(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
@@ -42737,11 +42839,11 @@ function verifyExtensionSignature(input) {
   return verifier.verify(input.public_key, decodeSignature(input.signature));
 }
 function inspectExtensionSource(source2) {
-  const resolved = resolve15(source2);
-  if (!existsSync17(resolved))
+  const resolved = resolve16(source2);
+  if (!existsSync18(resolved))
     throw new Error(`extension source not found: ${source2}`);
   const stat = statSync8(resolved);
-  const manifestPath = stat.isDirectory() ? [join16(resolved, "todos.extension.json"), join16(resolved, "extension.json")].find(existsSync17) : resolved;
+  const manifestPath = stat.isDirectory() ? [join18(resolved, "todos.extension.json"), join18(resolved, "extension.json")].find(existsSync18) : resolved;
   if (!manifestPath)
     throw new Error(`extension directory ${source2} is missing todos.extension.json`);
   const raw = readFileSync13(manifestPath);
@@ -42835,26 +42937,26 @@ function testExtensionCompatibility(sourceOrManifest) {
 function projectExtensionSources(projectPath) {
   if (!projectPath)
     return [];
-  const root = resolve15(projectPath);
+  const root = resolve16(projectPath);
   const candidates = [
-    join16(root, "todos.extension.json"),
-    join16(root, ".todos", "todos.extension.json")
+    join18(root, "todos.extension.json"),
+    join18(root, ".todos", "todos.extension.json")
   ];
-  const extensionDir = join16(root, ".todos", "extensions");
-  if (existsSync17(extensionDir)) {
+  const extensionDir = join18(root, ".todos", "extensions");
+  if (existsSync18(extensionDir)) {
     for (const entry2 of readdirSync3(extensionDir)) {
       if (entry2.startsWith("."))
         continue;
-      const full = join16(extensionDir, entry2);
+      const full = join18(extensionDir, entry2);
       if (statSync8(full).isDirectory() || entry2.endsWith(".json"))
         candidates.push(full);
     }
   }
-  return candidates.filter(existsSync17);
+  return candidates.filter(existsSync18);
 }
 function discoverLocalExtensions(options = {}) {
   const config = loadConfig();
-  const projectPath = options.project_path ? resolve15(options.project_path) : null;
+  const projectPath = options.project_path ? resolve16(options.project_path) : null;
   const configuredSources = [
     ...config.extension_sources || [],
     ...projectPath ? config.project_overrides?.[projectPath]?.extension_sources || [] : []
@@ -42862,7 +42964,7 @@ function discoverLocalExtensions(options = {}) {
   const sources = Array.from(new Set([
     ...configuredSources,
     ...projectExtensionSources(projectPath || undefined)
-  ])).map((source2) => projectPath && !source2.startsWith("/") ? resolve15(projectPath, source2) : resolve15(source2));
+  ])).map((source2) => projectPath && !source2.startsWith("/") ? resolve16(projectPath, source2) : resolve16(source2));
   const warnings = [];
   const discovered = [];
   for (const source2 of sources) {
@@ -43122,9 +43224,9 @@ __export(exports_policy_packs, {
   getPolicyPack: () => getPolicyPack,
   explainPolicyPack: () => explainPolicyPack
 });
-import { relative as relative4, resolve as resolve16 } from "path";
+import { relative as relative4, resolve as resolve17 } from "path";
 function normalizePath3(path) {
-  return resolve16(path);
+  return resolve17(path);
 }
 function unique6(values) {
   return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
@@ -43179,7 +43281,7 @@ function commandMatches(commands, pattern) {
 }
 function pathMatches(paths, pattern, root) {
   return paths.filter((path) => {
-    const candidate = path.startsWith("/") ? path : resolve16(root, path);
+    const candidate = path.startsWith("/") ? path : resolve17(root, path);
     if (!isPathInside3(root, candidate))
       return matchesPattern3(path, pattern);
     return matchesPattern3(path, pattern) || matchesPattern3(relative4(root, candidate), pattern);
@@ -48923,8 +49025,8 @@ class SqliteTodosTaskManifestBackend {
   async serialized(run) {
     const previous = sqliteTails.get(this.db) ?? Promise.resolve();
     let release;
-    const current = new Promise((resolve17) => {
-      release = resolve17;
+    const current = new Promise((resolve18) => {
+      release = resolve18;
     });
     const tail = previous.then(() => current);
     sqliteTails.set(this.db, tail);
@@ -51267,8 +51369,8 @@ class SqliteTodosTaskSubtreeTransferBackend {
   async serialized(run) {
     const previous = sqliteTails2.get(this.db) ?? Promise.resolve();
     let release;
-    const current = new Promise((resolve17) => {
-      release = resolve17;
+    const current = new Promise((resolve18) => {
+      release = resolve18;
     });
     const tail = previous.then(() => current);
     sqliteTails2.set(this.db, tail);
@@ -52703,8 +52805,8 @@ var exports_doctor = {};
 __export(exports_doctor, {
   runTodosDoctor: () => runTodosDoctor
 });
-import { chmodSync as chmodSync2, copyFileSync as copyFileSync2, existsSync as existsSync18, mkdirSync as mkdirSync9, statSync as statSync9 } from "fs";
-import { basename as basename7, dirname as dirname8, join as join17 } from "path";
+import { chmodSync as chmodSync2, copyFileSync as copyFileSync2, existsSync as existsSync19, mkdirSync as mkdirSync9, statSync as statSync9 } from "fs";
+import { basename as basename7, dirname as dirname8, join as join19 } from "path";
 function tableExists3(db, table) {
   return Boolean(db.query("SELECT name FROM sqlite_master WHERE type='table' AND name=?").get(table));
 }
@@ -52798,7 +52900,7 @@ function findMissingProjectRoots(db) {
       continue;
     if (!row.path.startsWith("/"))
       continue;
-    if (!existsSync18(row.path))
+    if (!existsSync19(row.path))
       missing++;
   }
   return missing;
@@ -52858,16 +52960,16 @@ function databasePermissionsAreUnsafe(dbPath) {
 function createBackup(dbPath) {
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
     return;
-  if (!existsSync18(dbPath))
+  if (!existsSync19(dbPath))
     return;
   const stamp = now().replace(/[:.]/g, "-");
-  const backupDir = join17(dirname8(dbPath), `${basename7(dbPath)}.backup-${stamp}`);
+  const backupDir = join19(dirname8(dbPath), `${basename7(dbPath)}.backup-${stamp}`);
   const files = [];
   mkdirSync9(backupDir, { recursive: true });
   for (const source2 of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {
-    if (!existsSync18(source2))
+    if (!existsSync19(source2))
       continue;
-    const target = join17(backupDir, basename7(source2));
+    const target = join19(backupDir, basename7(source2));
     copyFileSync2(source2, target);
     files.push(target);
   }
@@ -53126,7 +53228,7 @@ var init_doctor = __esm(() => {
 });
 
 // src/server/routes.ts
-import { join as join18, resolve as resolve17, sep as sep4 } from "path";
+import { join as join20, resolve as resolve18, sep as sep4 } from "path";
 function parseFieldsParam(url) {
   const fieldsParam = url.searchParams.get("fields");
   return fieldsParam ? fieldsParam.split(",").map((f) => f.trim()).filter(Boolean) : undefined;
@@ -53963,9 +54065,9 @@ function handleStaticFiles(path, method, ctx, json5, serveStaticFile2) {
   if (!ctx.dashboardExists || method !== "GET" && method !== "HEAD")
     return null;
   if (path !== "/") {
-    const filePath = join18(ctx.dashboardDir, path);
-    const resolvedFile = resolve17(filePath);
-    const resolvedBase = resolve17(ctx.dashboardDir);
+    const filePath = join20(ctx.dashboardDir, path);
+    const resolvedFile = resolve18(filePath);
+    const resolvedBase = resolve18(ctx.dashboardDir);
     if (!resolvedFile.startsWith(resolvedBase + sep4) && resolvedFile !== resolvedBase) {
       return json5({ error: "Forbidden" }, 403);
     }
@@ -53973,7 +54075,7 @@ function handleStaticFiles(path, method, ctx, json5, serveStaticFile2) {
     if (res2)
       return res2;
   }
-  const indexPath = join18(ctx.dashboardDir, "index.html");
+  const indexPath = join20(ctx.dashboardDir, "index.html");
   const res = serveStaticFile2(indexPath);
   if (res)
     return res;
@@ -54080,7 +54182,7 @@ class TodosShadowOutbox {
         const remaining = deadline - Date.now();
         if (remaining <= 0)
           break;
-        await new Promise((resolve18) => setTimeout(resolve18, Math.min(200, remaining)));
+        await new Promise((resolve19) => setTimeout(resolve19, Math.min(200, remaining)));
       }
     }
     return this.getStats();
@@ -60972,8 +61074,8 @@ var exports_mention_resolver = {};
 __export(exports_mention_resolver, {
   resolveMentions: () => resolveMentions
 });
-import { existsSync as existsSync19, readdirSync as readdirSync4, readFileSync as readFileSync14, statSync as statSync10 } from "fs";
-import { basename as basename8, isAbsolute, join as join19, relative as relative5, resolve as resolve18, sep as sep5 } from "path";
+import { existsSync as existsSync20, readdirSync as readdirSync4, readFileSync as readFileSync14, statSync as statSync10 } from "fs";
+import { basename as basename8, isAbsolute, join as join21, relative as relative5, resolve as resolve19, sep as sep5 } from "path";
 function blankResolution(parsed) {
   return {
     input: parsed.input,
@@ -60996,7 +61098,7 @@ function backlink(kind, key2, label, target = key2) {
   return { kind, key: key2, label, target };
 }
 function normalizeWorkspace(workspace) {
-  return resolve18(workspace || process.cwd());
+  return resolve19(workspace || process.cwd());
 }
 function isInside(root, absolutePath) {
   const rel = relative5(root, absolutePath);
@@ -61064,14 +61166,14 @@ function resolveFile(parsed, workspace) {
     resolution.warnings.push("path is empty or escapes the workspace");
     return resolution;
   }
-  const absolutePath = resolve18(workspace, relPath);
+  const absolutePath = resolve19(workspace, relPath);
   if (!isInside(workspace, absolutePath)) {
     resolution.path = relPath;
     resolution.warnings.push("path escapes the workspace");
     return resolution;
   }
   resolution.path = relPath;
-  if (!existsSync19(absolutePath)) {
+  if (!existsSync20(absolutePath)) {
     resolution.warnings.push("file does not exist in the local workspace");
     return resolution;
   }
@@ -61104,7 +61206,7 @@ function walkSourceFiles(root, current = root, files = []) {
       if (SKIP_DIRS2.has(entry2.name))
         continue;
     }
-    const absolutePath = join19(current, entry2.name);
+    const absolutePath = join21(current, entry2.name);
     if (entry2.isDirectory()) {
       if (!SKIP_DIRS2.has(entry2.name))
         walkSourceFiles(root, absolutePath, files);
@@ -63920,7 +64022,7 @@ __export(exports_release_compatibility, {
   LOCAL_RELEASE_COMPATIBILITY_SCHEMA_VERSION: () => LOCAL_RELEASE_COMPATIBILITY_SCHEMA_VERSION
 });
 import { readFileSync as readFileSync15 } from "fs";
-import { join as join20, resolve as resolve19 } from "path";
+import { join as join22, resolve as resolve20 } from "path";
 import { Database as Database3 } from "bun:sqlite";
 function pass(id, message, details) {
   return { id, status: "passed", message, details };
@@ -63932,7 +64034,7 @@ function warn(id, message, details) {
   return { id, status: "warning", message, details };
 }
 function readPackageJson2(root) {
-  return JSON.parse(readFileSync15(join20(root, "package.json"), "utf8"));
+  return JSON.parse(readFileSync15(join22(root, "package.json"), "utf8"));
 }
 function sortedKeys(value) {
   return Object.keys(value ?? {}).sort((left, right) => left.localeCompare(right));
@@ -64028,7 +64130,7 @@ function checkChangelog() {
   ];
 }
 function createReleaseCompatibilityReport(options = {}) {
-  const root = resolve19(options.root ?? process.cwd());
+  const root = resolve20(options.root ?? process.cwd());
   const packageJson = readPackageJson2(root);
   const simulatedLevels = options.simulated_levels ?? defaultSimulationLevels();
   const checks = [
@@ -69903,7 +70005,7 @@ __export(exports_verification_providers, {
   getVerificationRecord: () => getVerificationRecord,
   discoverVerificationProviderCapabilities: () => discoverVerificationProviderCapabilities
 });
-import { existsSync as existsSync20, readFileSync as readFileSync16 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync16 } from "fs";
 function normalizeName6(name) {
   const normalized = name.trim().toLowerCase();
   if (!/^[a-z0-9][a-z0-9_-]{0,63}$/.test(normalized)) {
@@ -70000,7 +70102,7 @@ function classifyLog(text) {
 async function sleep3(ms) {
   if (ms <= 0)
     return;
-  await new Promise((resolve20) => setTimeout(resolve20, ms));
+  await new Promise((resolve21) => setTimeout(resolve21, ms));
 }
 async function runCommandProvider(provider, input) {
   const commandTemplate = input.command || provider.command;
@@ -70055,7 +70157,7 @@ Timed out after ${provider.timeout_ms}ms`);
   };
 }
 function runCiLogProvider(input) {
-  const text = input.log_text ?? (input.log_path && existsSync20(input.log_path) ? readFileSync16(input.log_path, "utf-8") : "");
+  const text = input.log_text ?? (input.log_path && existsSync21(input.log_path) ? readFileSync16(input.log_path, "utf-8") : "");
   return {
     status: classifyLog(text),
     attempts: 1,
@@ -70067,7 +70169,7 @@ function runBrowserProvider(input) {
   if (!input.artifact_path) {
     return { status: "unknown", attempts: 1, exit_code: null, output_summary: "browser provider needs a screenshot or artifact path" };
   }
-  if (!existsSync20(input.artifact_path)) {
+  if (!existsSync21(input.artifact_path)) {
     return { status: "failed", attempts: 1, exit_code: null, output_summary: `artifact not found: ${input.artifact_path}` };
   }
   return {
@@ -72359,7 +72461,7 @@ __export(exports_local_backups, {
 });
 import { createHash as createHash16 } from "crypto";
 import { readFileSync as readFileSync17, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname9, resolve as resolve20 } from "path";
+import { dirname as dirname9, resolve as resolve21 } from "path";
 import { mkdirSync as mkdirSync10 } from "fs";
 function stableJson2(value) {
   if (value === null || typeof value !== "object")
@@ -72461,14 +72563,14 @@ function createLocalBackup(options = {}, db) {
   return backup;
 }
 function writeLocalBackupFile(backup, outputPath) {
-  const path = resolve20(outputPath);
+  const path = resolve21(outputPath);
   mkdirSync10(dirname9(path), { recursive: true });
   writeFileSync8(path, `${JSON.stringify(backup, null, 2)}
 `);
   return path;
 }
 function readLocalBackupFile(path) {
-  return JSON.parse(readFileSync17(resolve20(path), "utf-8"));
+  return JSON.parse(readFileSync17(resolve21(path), "utf-8"));
 }
 function verifyLocalBackup(value, options = {}, db) {
   const verifiedAt = options.verified_at ?? now();
@@ -72665,7 +72767,7 @@ __export(exports_onboarding_fixtures, {
   TODOS_ONBOARDING_FIXTURE_LIBRARY_VERSION: () => TODOS_ONBOARDING_FIXTURE_LIBRARY_VERSION
 });
 import { mkdirSync as mkdirSync11, writeFileSync as writeFileSync9 } from "fs";
-import { join as join21 } from "path";
+import { join as join23 } from "path";
 function emptyData() {
   return {
     projects: [],
@@ -73001,7 +73103,7 @@ function writeOnboardingFixtureFiles(directory) {
   mkdirSync11(directory, { recursive: true });
   const files = [];
   for (const fixture of allFixtures()) {
-    const path = join21(directory, `${fixture.summary.name}.bridge.json`);
+    const path = join23(directory, `${fixture.summary.name}.bridge.json`);
     writeFileSync9(path, `${JSON.stringify(fixture.bundle, null, 2)}
 `, "utf-8");
     files.push(path);
@@ -78669,7 +78771,7 @@ Last seen: ${agent.last_seen_at}`
             `Suggested names: ${suggestions.slice(0, 8).join(", ")}`,
             allActive.length > 0 ? `Active agents (avoid these names): ${allActive.map((a) => `${a.name} (seen ${Math.round((Date.now() - new Date(a.last_seen_at).getTime()) / 60000)}m ago)`).join(", ")}` : "No active agents.",
             `
-To restrict names, configure agent_pool or project_pools in ~/.hasna/todos/config.json`
+To restrict names, configure agent_pool or project_pools in the todos data home config file (default <data home>/config.json)`
           ];
           return { content: [{ type: "text", text: lines2.join(`
 `) }] };
@@ -79221,16 +79323,16 @@ __export(exports_environment_snapshots, {
   captureEnvironmentSnapshot: () => captureEnvironmentSnapshot
 });
 import { createHash as createHash20 } from "crypto";
-import { existsSync as existsSync21, readFileSync as readFileSync19, statSync as statSync11 } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync19, statSync as statSync11 } from "fs";
 import { hostname as hostname2, platform, arch } from "os";
-import { dirname as dirname10, join as join22, resolve as resolve21 } from "path";
+import { dirname as dirname10, join as join24, resolve as resolve22 } from "path";
 import { tmpdir as tmpdir4 } from "os";
 function sha2567(value) {
   return createHash20("sha256").update(value).digest("hex");
 }
 function fileRecord(root, relativePath) {
-  const path = join22(root, relativePath);
-  if (!existsSync21(path))
+  const path = join24(root, relativePath);
+  if (!existsSync22(path))
     return null;
   const stat = statSync11(path);
   if (!stat.isFile())
@@ -79242,7 +79344,7 @@ function manifestRecord(root, relativePath) {
   const base = fileRecord(root, relativePath);
   if (!base)
     return null;
-  const parsed = readJsonFile(join22(root, relativePath));
+  const parsed = readJsonFile(join24(root, relativePath));
   if (!parsed)
     return { ...base, redacted: {} };
   const redacted = redactValue({
@@ -79337,15 +79439,15 @@ function commandEnv(env, includeValues) {
 function defaultSnapshotDir() {
   const dbPath = getDatabasePath();
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
-    return join22(tmpdir4(), "hasna-todos", "environment-snapshots");
-  return join22(dirname10(resolve21(dbPath)), "environment-snapshots");
+    return join24(tmpdir4(), "hasna-todos", "environment-snapshots");
+  return join24(dirname10(resolve22(dbPath)), "environment-snapshots");
 }
 function snapshotWithId(snapshot) {
   const digest4 = sha2567(JSON.stringify(snapshot)).slice(0, 24);
   return { id: `env_${digest4}`, ...snapshot };
 }
 function captureEnvironmentSnapshot(input = {}) {
-  const root = resolve21(input.root || process.cwd());
+  const root = resolve22(input.root || process.cwd());
   const env = input.env || process.env;
   const warnings = [];
   const manifests = MANIFEST_FILES.map((file) => manifestRecord(root, file)).filter((file) => Boolean(file));
@@ -79385,13 +79487,13 @@ function captureEnvironmentSnapshot(input = {}) {
   });
 }
 function writeEnvironmentSnapshot(snapshot, outputPath) {
-  const path = outputPath ? resolve21(outputPath) : join22(defaultSnapshotDir(), `${snapshot.id}.json`);
+  const path = outputPath ? resolve22(outputPath) : join24(defaultSnapshotDir(), `${snapshot.id}.json`);
   ensureDir(dirname10(path));
   writeJsonFile(path, snapshot);
   return path;
 }
 function readEnvironmentSnapshot(path) {
-  const snapshot = readJsonFile(resolve21(path));
+  const snapshot = readJsonFile(resolve22(path));
   if (!snapshot || snapshot.schema_version !== 1 || typeof snapshot.id !== "string") {
     throw new Error(`Invalid environment snapshot: ${path}`);
   }
@@ -80102,8 +80204,8 @@ class SqlitePrGroupLedgerPersistence {
   async transaction(fn) {
     const previous = sqliteTransactionTails2.get(this.db) ?? Promise.resolve();
     let release;
-    const current = new Promise((resolve22) => {
-      release = resolve22;
+    const current = new Promise((resolve23) => {
+      release = resolve23;
     });
     sqliteTransactionTails2.set(this.db, current);
     await previous;
@@ -80201,27 +80303,27 @@ __export(exports_serve, {
   SECURITY_HEADERS: () => SECURITY_HEADERS,
   MIME_TYPES: () => MIME_TYPES
 });
-import { existsSync as existsSync22 } from "fs";
-import { join as join23, dirname as dirname11, extname } from "path";
+import { existsSync as existsSync23 } from "fs";
+import { join as join25, dirname as dirname11, extname } from "path";
 import { fileURLToPath } from "url";
 function resolveDashboardDir() {
   const candidates = [];
   try {
     const scriptDir = dirname11(fileURLToPath(import.meta.url));
-    candidates.push(join23(scriptDir, "..", "dashboard", "dist"));
-    candidates.push(join23(scriptDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join25(scriptDir, "..", "dashboard", "dist"));
+    candidates.push(join25(scriptDir, "..", "..", "dashboard", "dist"));
   } catch {}
   if (process.argv[1]) {
     const mainDir = dirname11(process.argv[1]);
-    candidates.push(join23(mainDir, "..", "dashboard", "dist"));
-    candidates.push(join23(mainDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join25(mainDir, "..", "dashboard", "dist"));
+    candidates.push(join25(mainDir, "..", "..", "dashboard", "dist"));
   }
-  candidates.push(join23(process.cwd(), "dashboard", "dist"));
+  candidates.push(join25(process.cwd(), "dashboard", "dist"));
   for (const candidate of candidates) {
-    if (existsSync22(candidate))
+    if (existsSync23(candidate))
       return candidate;
   }
-  return join23(process.cwd(), "dashboard", "dist");
+  return join25(process.cwd(), "dashboard", "dist");
 }
 function getProvidedApiKey(req) {
   const headerKey = req.headers.get("x-api-key");
@@ -80293,7 +80395,7 @@ function json4(data, status3 = 200, headers) {
   });
 }
 function serveStaticFile(filePath) {
-  if (!existsSync22(filePath))
+  if (!existsSync23(filePath))
     return null;
   const ext = extname(filePath);
   const contentType = MIME_TYPES[ext] || "application/octet-stream";
@@ -80394,7 +80496,7 @@ data: ${data}
       filteredSseClients.delete(client);
   }
   const dashboardDir = resolveDashboardDir();
-  const dashboardExists = existsSync22(dashboardDir);
+  const dashboardExists = existsSync23(dashboardDir);
   if (!dashboardExists) {
     console.error(`
 Dashboard not found at: ${dashboardDir}`);
@@ -82281,12 +82383,12 @@ __export(exports_config_serve_commands, {
   registerConfigServeCommands: () => registerConfigServeCommands
 });
 import chalk7 from "chalk";
-import { existsSync as existsSync23, mkdirSync as mkdirSync12, readFileSync as readFileSync20, writeFileSync as writeFileSync10 } from "fs";
-import { dirname as dirname12, join as join24 } from "path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync12, readFileSync as readFileSync20, writeFileSync as writeFileSync10 } from "fs";
+import { dirname as dirname12, join as join26 } from "path";
 function registerConfigServeCommands(program2) {
   program2.command("config").description("View or update configuration").option("--get <key>", "Get a config value").option("--set <key=value>", "Set a config value (e.g. completion_guard.enabled=true)").action((opts) => {
     const globalOpts = program2.opts();
-    const configPath = join24(getTodosGlobalDir(), "config.json");
+    const configPath = join26(getTodosGlobalDir(), "config.json");
     if (opts.get) {
       const config2 = loadConfig();
       const keys = opts.get.split(".");
@@ -82323,7 +82425,7 @@ function registerConfigServeCommands(program2) {
       }
       obj[keys[keys.length - 1]] = parsedValue;
       const dir = dirname12(configPath);
-      if (!existsSync23(dir))
+      if (!existsSync24(dir))
         mkdirSync12(dir, { recursive: true });
       writeFileSync10(configPath, JSON.stringify(config2, null, 2));
       if (globalOpts.json) {
@@ -83503,8 +83605,8 @@ __export(exports_routing_doctor, {
   classifyTaskRouting: () => classifyTaskRouting,
   TODOS_ROUTING_DOCTOR_SCHEMA_VERSION: () => TODOS_ROUTING_DOCTOR_SCHEMA_VERSION
 });
-import { copyFileSync as copyFileSync3, existsSync as existsSync24, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11 } from "fs";
-import { basename as basename9, dirname as dirname13, join as join25 } from "path";
+import { copyFileSync as copyFileSync3, existsSync as existsSync25, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11 } from "fs";
+import { basename as basename9, dirname as dirname13, join as join27 } from "path";
 function normalizePath5(path) {
   if (!path)
     return null;
@@ -83806,16 +83908,16 @@ function evaluateTaskRouting(ctx) {
 function createBackup2(dbPath, generatedAt) {
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
     return;
-  if (!existsSync24(dbPath))
+  if (!existsSync25(dbPath))
     return;
   const stamp = generatedAt.replace(/[:.]/g, "-");
-  const backupDir = join25(dirname13(dbPath), `${basename9(dbPath)}.routing-doctor-backup-${stamp}`);
+  const backupDir = join27(dirname13(dbPath), `${basename9(dbPath)}.routing-doctor-backup-${stamp}`);
   const files = [];
   mkdirSync13(backupDir, { recursive: true });
   for (const source3 of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {
-    if (!existsSync24(source3))
+    if (!existsSync25(source3))
       continue;
-    const target = join25(backupDir, basename9(source3));
+    const target = join27(backupDir, basename9(source3));
     copyFileSync3(source3, target);
     files.push(target);
   }
@@ -83919,7 +84021,7 @@ function runRoutingDoctor(options = {}) {
       }
       const applied = repairs.filter((r) => r.applied);
       if (applied.length > 0) {
-        const undoPath = options.undoRecordPath ?? join25(process.cwd(), `todos-routing-doctor-undo-${generatedAt.replace(/[:.]/g, "-")}.json`);
+        const undoPath = options.undoRecordPath ?? join27(process.cwd(), `todos-routing-doctor-undo-${generatedAt.replace(/[:.]/g, "-")}.json`);
         const undoRecord = {
           schema_version: TODOS_ROUTING_DOCTOR_SCHEMA_VERSION,
           purpose: "Undo record for routing-doctor --apply. Restore each field with the prior value below.",
@@ -84018,10 +84120,10 @@ __export(exports_task_route_sources, {
 });
 import { Database as Database4 } from "bun:sqlite";
 import { createHash as createHash21 } from "crypto";
-import { existsSync as existsSync25, readdirSync as readdirSync5, statSync as statSync12 } from "fs";
-import { basename as basename10, dirname as dirname14, join as join26, resolve as resolve22 } from "path";
+import { existsSync as existsSync26, readdirSync as readdirSync5, statSync as statSync12 } from "fs";
+import { basename as basename10, dirname as dirname14, join as join28, resolve as resolve23 } from "path";
 function normalizePath6(input) {
-  return resolve22(input);
+  return resolve23(input);
 }
 function sourceStoreId(sourceDbPath) {
   const digest4 = createHash21("sha256").update(sourceDbPath).digest("hex").slice(0, 16);
@@ -84083,8 +84185,8 @@ function discoverStoresUnderRoot(sourceRoot) {
   const rootPath = normalizePath6(sourceRoot);
   const errors2 = [];
   const stores = [];
-  if (!existsSync25(rootPath)) {
-    const ref = createStoreRef(join26(rootPath, TODO_STORE_RELATIVE_PATH));
+  if (!existsSync26(rootPath)) {
+    const ref = createStoreRef(join28(rootPath, TODO_STORE_RELATIVE_PATH));
     errors2.push({
       ...ref,
       code: "SOURCE_ROOT_MISSING",
@@ -84096,7 +84198,7 @@ function discoverStoresUnderRoot(sourceRoot) {
   try {
     rootStat = statSync12(rootPath);
   } catch (error2) {
-    const ref = createStoreRef(join26(rootPath, TODO_STORE_RELATIVE_PATH));
+    const ref = createStoreRef(join28(rootPath, TODO_STORE_RELATIVE_PATH));
     errors2.push({
       ...ref,
       code: "SOURCE_ROOT_UNREADABLE",
@@ -84109,8 +84211,8 @@ function discoverStoresUnderRoot(sourceRoot) {
     return { stores, errors: errors2 };
   }
   function scanDirectory(dir, depth) {
-    const candidate = join26(dir, TODO_STORE_RELATIVE_PATH);
-    if (existsSync25(candidate)) {
+    const candidate = join28(dir, TODO_STORE_RELATIVE_PATH);
+    if (existsSync26(candidate)) {
       stores.push(createStoreRef(candidate));
     }
     if (depth >= ROOT_SCAN_MAX_DEPTH)
@@ -84130,7 +84232,7 @@ function discoverStoresUnderRoot(sourceRoot) {
     for (const entry2 of entries) {
       if (!entry2.isDirectory() || SKIPPED_SCAN_DIRS.has(entry2.name))
         continue;
-      scanDirectory(join26(dir, entry2.name), depth + 1);
+      scanDirectory(join28(dir, entry2.name), depth + 1);
     }
   }
   scanDirectory(rootPath, 0);
@@ -84156,7 +84258,7 @@ function collectStoreRefs(input) {
   };
 }
 function openReadonlyStore(ref) {
-  if (!existsSync25(ref.source_db_path)) {
+  if (!existsSync26(ref.source_db_path)) {
     throw Object.assign(new Error(`Store does not exist: ${ref.source_db_path}`), { code: "STORE_MISSING" });
   }
   return new Database4(ref.source_db_path, { readonly: true, create: false });
@@ -84330,7 +84432,7 @@ var init_task_route_sources = __esm(() => {
   init_task_crud();
   init_redaction();
   init_task_routing();
-  TODO_STORE_RELATIVE_PATH = join26(".hasna", "todos", "todos.db");
+  TODO_STORE_RELATIVE_PATH = join28(".hasna", "todos", "todos.db");
   SKIPPED_SCAN_DIRS = new Set([
     ".git",
     ".hg",
@@ -85301,9 +85403,14 @@ Blocked:`));
     const globalOpts = program2.opts();
     const json7 = opts.json || globalOpts.json;
     const filters = {};
-    if (opts.project)
-      filters.project_id = opts.project;
+    const projectRef = opts.project ?? globalOpts.project;
+    if (typeof projectRef === "string" && projectRef.trim() === "") {
+      handleError(new Error("--project requires a non-empty project reference"));
+    }
     const cloud = getTodosCloudClient();
+    if (projectRef) {
+      filters.project_id = cloud ? await cloudResolveProjectRef(cloud, projectRef) : resolveExplicitProject(projectRef).id;
+    }
     const work = cloud ? await cloudActiveWork(cloud, Object.keys(filters).length ? filters : {}) : getActiveWork(Object.keys(filters).length ? filters : undefined, getDatabase());
     if (json7) {
       console.log(JSON.stringify(work, null, 2));
@@ -85869,9 +85976,9 @@ Findings`));
       const db = getDatabase();
       const row = db.query("SELECT COUNT(*) as count FROM tasks").get();
       const { statSync: statSync13 } = await import("fs");
-      const { join: join27 } = await import("path");
-      const { getHomeDir: getHomeDir2 } = await Promise.resolve().then(() => (init_sync_utils(), exports_sync_utils));
-      const dbPath = process.env["HASNA_TODOS_DB_PATH"] || process.env["TODOS_DB_PATH"] || join27(getHomeDir2(), ".hasna", "todos", "todos.db");
+      const { join: join29 } = await import("path");
+      const { getTodosGlobalDir: getTodosGlobalDir2 } = await Promise.resolve().then(() => (init_sync_utils(), exports_sync_utils));
+      const dbPath = process.env["HASNA_TODOS_DB_PATH"] || process.env["TODOS_DB_PATH"] || join29(getTodosGlobalDir2(), "todos.db");
       let size = "unknown";
       try {
         size = `${(statSync13(dbPath).size / 1024 / 1024).toFixed(1)} MB`;
@@ -88029,21 +88136,21 @@ __export(exports_mcp_hooks_commands, {
 });
 import chalk10 from "chalk";
 import { execSync as execSync3 } from "child_process";
-import { existsSync as existsSync26, readFileSync as readFileSync22, writeFileSync as writeFileSync13, mkdirSync as mkdirSync14, chmodSync as chmodSync3 } from "fs";
-import { dirname as dirname15, join as join27 } from "path";
+import { existsSync as existsSync27, readFileSync as readFileSync22, writeFileSync as writeFileSync13, mkdirSync as mkdirSync14, chmodSync as chmodSync3 } from "fs";
+import { dirname as dirname15, join as join29 } from "path";
 function getMcpBinaryPath() {
   try {
     const p = execSync3("which todos-mcp", { encoding: "utf-8" }).trim();
     if (p)
       return p;
   } catch {}
-  const bunBin = join27(HOME2, ".bun", "bin", "todos-mcp");
-  if (existsSync26(bunBin))
+  const bunBin = join29(HOME2, ".bun", "bin", "todos-mcp");
+  if (existsSync27(bunBin))
     return bunBin;
   return "todos-mcp";
 }
 function readJsonFile2(path) {
-  if (!existsSync26(path))
+  if (!existsSync27(path))
     return {};
   try {
     return JSON.parse(readFileSync22(path, "utf-8"));
@@ -88053,19 +88160,19 @@ function readJsonFile2(path) {
 }
 function writeJsonFile2(path, data) {
   const dir = dirname15(path);
-  if (!existsSync26(dir))
+  if (!existsSync27(dir))
     mkdirSync14(dir, { recursive: true });
   writeFileSync13(path, JSON.stringify(data, null, 2) + `
 `);
 }
 function readTomlFile(path) {
-  if (!existsSync26(path))
+  if (!existsSync27(path))
     return "";
   return readFileSync22(path, "utf-8");
 }
 function writeTomlFile(path, content) {
   const dir = dirname15(path);
-  if (!existsSync26(dir))
+  if (!existsSync27(dir))
     mkdirSync14(dir, { recursive: true });
   writeFileSync13(path, content);
 }
@@ -88130,7 +88237,7 @@ function unregisterClaude(_global) {
   }
 }
 function registerCodex(binPath) {
-  const configPath = join27(HOME2, ".codex", "config.toml");
+  const configPath = join29(HOME2, ".codex", "config.toml");
   let content = readTomlFile(configPath);
   content = removeTomlBlock(content, "mcp_servers.todos");
   const block = `
@@ -88144,7 +88251,7 @@ args = ["--stdio"]
   console.log(chalk10.green(`Codex CLI: registered in ${configPath}`));
 }
 function unregisterCodex() {
-  const configPath = join27(HOME2, ".codex", "config.toml");
+  const configPath = join29(HOME2, ".codex", "config.toml");
   let content = readTomlFile(configPath);
   if (!content.includes("[mcp_servers.todos]")) {
     console.log(chalk10.dim(`Codex CLI: todos not found in ${configPath}`));
@@ -88156,7 +88263,7 @@ function unregisterCodex() {
   console.log(chalk10.green(`Codex CLI: unregistered from ${configPath}`));
 }
 function registerGemini(binPath) {
-  const configPath = join27(HOME2, ".gemini", "settings.json");
+  const configPath = join29(HOME2, ".gemini", "settings.json");
   const config = readJsonFile2(configPath);
   if (!config["mcpServers"]) {
     config["mcpServers"] = {};
@@ -88170,7 +88277,7 @@ function registerGemini(binPath) {
   console.log(chalk10.green(`Gemini CLI: registered in ${configPath}`));
 }
 function unregisterGemini() {
-  const configPath = join27(HOME2, ".gemini", "settings.json");
+  const configPath = join29(HOME2, ".gemini", "settings.json");
   const config = readJsonFile2(configPath);
   const servers = config["mcpServers"];
   if (!servers || !("todos" in servers)) {
@@ -88204,7 +88311,7 @@ function unregisterTakumi(global) {
   }
 }
 function cursorConfigPath(global) {
-  return global ? join27(HOME2, ".cursor", "mcp.json") : join27(process.cwd(), ".cursor", "mcp.json");
+  return global ? join29(HOME2, ".cursor", "mcp.json") : join29(process.cwd(), ".cursor", "mcp.json");
 }
 function registerCursor(binPath, global) {
   const configPath = cursorConfigPath(global);
@@ -88290,8 +88397,8 @@ function registerMcpHooksCommands(program2) {
       if (p)
         todosBin = p;
     } catch {}
-    const hooksDir = join27(process.cwd(), ".claude", "hooks");
-    if (!existsSync26(hooksDir))
+    const hooksDir = join29(process.cwd(), ".claude", "hooks");
+    if (!existsSync27(hooksDir))
       mkdirSync14(hooksDir, { recursive: true });
     const hookScript = `#!/usr/bin/env bash
 # Auto-generated by: todos hooks install
@@ -88316,11 +88423,11 @@ esac
 
 exit 0
 `;
-    const hookPath = join27(hooksDir, "todos-sync.sh");
+    const hookPath = join29(hooksDir, "todos-sync.sh");
     writeFileSync13(hookPath, hookScript);
     execSync3(`chmod +x "${hookPath}"`);
     console.log(chalk10.green(`Hook script created: ${hookPath}`));
-    const settingsPath = join27(process.cwd(), ".claude", "settings.json");
+    const settingsPath = join29(process.cwd(), ".claude", "settings.json");
     const settings = readJsonFile2(settingsPath);
     if (!settings["hooks"]) {
       settings["hooks"] = {};
@@ -89251,7 +89358,7 @@ Artifacts:`));
       const gitDir = execSync3("git rev-parse --git-dir", { encoding: "utf-8" }).trim();
       const hookPath = `${gitDir}/hooks/post-commit`;
       const marker = "# todos-auto-link";
-      if (existsSync26(hookPath)) {
+      if (existsSync27(hookPath)) {
         const existing = readFileSync22(hookPath, "utf-8");
         if (existing.includes(marker)) {
           console.log(chalk10.yellow("Hook already installed."));
@@ -89278,7 +89385,7 @@ $(dirname "$0")/../../scripts/post-commit-hook.sh
       const gitDir = execSync3("git rev-parse --git-dir", { encoding: "utf-8" }).trim();
       const hookPath = `${gitDir}/hooks/post-commit`;
       const marker = "# todos-auto-link";
-      if (!existsSync26(hookPath)) {
+      if (!existsSync27(hookPath)) {
         console.log(chalk10.dim("No post-commit hook found."));
         return;
       }
@@ -89534,10 +89641,10 @@ var init_delegation_brief = () => {};
 
 // src/lib/delegation-policy.ts
 import { readFileSync as readFileSync23 } from "fs";
-import { homedir as homedir4 } from "os";
-import { join as join28 } from "path";
+import { homedir as homedir6 } from "os";
+import { join as join30 } from "path";
 function defaultDelegationEmbargoPath() {
-  return process.env["TODOS_DELEGATION_EMBARGO_PATH"] || join28(homedir4(), ".hasna", "identities", "delegation-embargo.json");
+  return process.env["TODOS_DELEGATION_EMBARGO_PATH"] || join30(homedir6(), ".hasna", "identities", "delegation-embargo.json");
 }
 function loadDelegationEmbargo(path = defaultDelegationEmbargoPath()) {
   try {
@@ -89882,7 +89989,7 @@ import chalk13 from "chalk";
 import { execSync as execSync4 } from "child_process";
 import { readFileSync as readFileSync25, unlinkSync as unlinkSync3, writeFileSync as writeFileSync14 } from "fs";
 import { tmpdir as tmpdir5 } from "os";
-import { join as join29 } from "path";
+import { join as join31 } from "path";
 function getOrCreateLocalMachineName() {
   return process.env["TODOS_MACHINE_NAME"] || __require("os").hostname() || "unknown";
 }
@@ -89920,7 +90027,7 @@ function remoteTempPath(sshAddress) {
 }
 function readRemoteBridgeBundle(sshAddress) {
   const remotePath = remoteTempPath(sshAddress);
-  const localPath = join29(tmpdir5(), `todos-bridge-pull-${uuid()}.json`);
+  const localPath = join31(tmpdir5(), `todos-bridge-pull-${uuid()}.json`);
   try {
     runSsh(sshAddress, `todos export --format bridge --allow-plaintext-sensitive --output ${shellQuote(remotePath)}`, 120000);
     scpFromRemote(sshAddress, remotePath, localPath);
@@ -89935,7 +90042,7 @@ function readRemoteBridgeBundle(sshAddress) {
   }
 }
 function writeLocalBridgeBundle() {
-  const localPath = join29(tmpdir5(), `todos-bridge-push-${uuid()}.json`);
+  const localPath = join31(tmpdir5(), `todos-bridge-push-${uuid()}.json`);
   writeFileSync14(localPath, JSON.stringify(createLocalBridgeBundle(), null, 2));
   return localPath;
 }
@@ -90994,7 +91101,7 @@ __export(exports_onboarding_commands, {
   registerOnboardingCommands: () => registerOnboardingCommands
 });
 import chalk20 from "chalk";
-import { resolve as resolve23 } from "path";
+import { resolve as resolve24 } from "path";
 function registerOnboardingCommands(program2) {
   program2.command("onboarding").alias("demo-fixtures").description("List, show, write, or import bundled local onboarding fixtures").option("--show <name>", "Show one fixture bridge bundle as JSON").option("--write <dir>", "Write all bundled fixture bridge bundles to a directory").option("--import <name>", "Dry-run or apply an onboarding fixture import").option("--apply", "Apply an onboarding fixture import. Defaults to dry-run.").option("--resolve-conflicts", "Safely merge existing local tasks while preserving divergent fields").action(async (opts) => {
     const globalOpts = program2.opts();
@@ -91010,7 +91117,7 @@ function registerOnboardingCommands(program2) {
         return;
       }
       if (opts.write) {
-        const result = writeOnboardingFixtureFiles2(resolve23(opts.write));
+        const result = writeOnboardingFixtureFiles2(resolve24(opts.write));
         if (globalOpts.json) {
           output(result, true);
           return;
@@ -94511,7 +94618,7 @@ __export(exports_sdk_integration_fixtures, {
   TODOS_SDK_INTEGRATION_FIXTURE_GENERATED_AT: () => TODOS_SDK_INTEGRATION_FIXTURE_GENERATED_AT
 });
 import { mkdirSync as mkdirSync15, writeFileSync as writeFileSync15 } from "fs";
-import { join as join30 } from "path";
+import { join as join32 } from "path";
 function source5(version) {
   return {
     packageName: "@hasna/todos",
@@ -94618,7 +94725,7 @@ function writeSdkIntegrationFixtures(directory, options = {}) {
   ];
   const written = [];
   for (const [name, payload] of files) {
-    const file = join30(directory, name);
+    const file = join32(directory, name);
     writeFileSync15(file, `${JSON.stringify(payload, null, 2)}
 `, "utf-8");
     written.push(file);
@@ -94642,7 +94749,7 @@ __export(exports_sdk_fixture_commands, {
   registerSdkFixtureCommands: () => registerSdkFixtureCommands
 });
 import chalk22 from "chalk";
-import { resolve as resolve24 } from "path";
+import { resolve as resolve25 } from "path";
 function registerSdkFixtureCommands(program2) {
   program2.command("sdk-fixtures").description("List, show, or write local SDK integration fixtures").option("--show", "Print the full fixture pack JSON").option("--write <dir>", "Write fixture pack, bridge fixture, contract snapshots, and example index to a directory").action(async (opts) => {
     const globalOpts = program2.opts();
@@ -94653,7 +94760,7 @@ function registerSdkFixtureCommands(program2) {
         writeSdkIntegrationFixtures: writeSdkIntegrationFixtures2
       } = await Promise.resolve().then(() => (init_sdk_integration_fixtures(), exports_sdk_integration_fixtures));
       if (opts.write) {
-        const result = writeSdkIntegrationFixtures2(resolve24(opts.write));
+        const result = writeSdkIntegrationFixtures2(resolve25(opts.write));
         if (globalOpts.json) {
           console.log(JSON.stringify(result));
           return;
@@ -95472,7 +95579,7 @@ __export(exports_local_backup_commands, {
   registerLocalBackupCommands: () => registerLocalBackupCommands
 });
 import chalk28 from "chalk";
-import { resolve as resolve25 } from "path";
+import { resolve as resolve26 } from "path";
 function globalOptions8(program2) {
   const command = program2;
   return command.optsWithGlobals?.() ?? program2.opts();
@@ -95494,10 +95601,10 @@ function registerLocalBackupCommands(program2) {
       const projectId = opts.projectId ?? autoProject(globalOpts);
       const backupBundle = createLocalBackup2({
         project_id: projectId,
-        output_path: opts.output ? resolve25(opts.output) : undefined
+        output_path: opts.output ? resolve26(opts.output) : undefined
       });
       const result = {
-        output_path: opts.output ? resolve25(opts.output) : null,
+        output_path: opts.output ? resolve26(opts.output) : null,
         backup: backupBundle
       };
       if (opts.json || globalOpts.json) {
@@ -95668,8 +95775,8 @@ class TodosShadowMirror {
   async flush() {
     if (this.idle())
       return;
-    await new Promise((resolve26) => {
-      this.idleResolvers.push(resolve26);
+    await new Promise((resolve27) => {
+      this.idleResolvers.push(resolve27);
       this.pump();
     });
   }
@@ -95681,8 +95788,8 @@ class TodosShadowMirror {
       return;
     const resolvers = this.idleResolvers;
     this.idleResolvers = [];
-    for (const resolve26 of resolvers)
-      resolve26();
+    for (const resolve27 of resolvers)
+      resolve27();
   }
   pump() {
     if (this.pumping)
@@ -98192,6 +98299,41 @@ async function registerOptionalEventsCommands(program3) {
   }
   registerUnavailableEventsCommands(program3);
 }
+function commandForArgs(root, args) {
+  let command = root;
+  for (let index = 0;index < args.length; index += 1) {
+    const arg = args[index];
+    if (arg.startsWith("-")) {
+      const exact = command.options.find((candidate) => candidate.long === arg || candidate.short === arg);
+      const inline = command.options.find((candidate) => candidate.long !== undefined && arg.startsWith(`${candidate.long}=`) || candidate.short !== undefined && arg.startsWith(`${candidate.short}=`));
+      const option = exact ?? inline;
+      if (option?.required || option?.optional) {
+        if (exact)
+          index += 1;
+      } else if (!option && !arg.includes("=")) {
+        const next = args[index + 1];
+        const nextIsCommand = next !== undefined && !next.startsWith("-") && command.commands.some((candidate) => candidate.name() === next || candidate.aliases().includes(next));
+        if (next !== undefined && !next.startsWith("-") && !nextIsCommand)
+          index += 1;
+      }
+      continue;
+    }
+    const child = command.commands.find((candidate) => candidate.name() === arg || candidate.aliases().includes(arg));
+    if (!child)
+      break;
+    command = child;
+  }
+  return command;
+}
+function unsupportedActiveFormatOption(command, args) {
+  if (command.name() !== "active")
+    return null;
+  const activeIndex = args.indexOf("active");
+  if (activeIndex < 0)
+    return null;
+  const format = (arg) => arg === "--format" || arg.startsWith("--format=");
+  return args.slice(activeIndex + 1).find(format) ?? args.slice(0, activeIndex).find(format) ?? null;
+}
 program2.name("todos").description("Universal task management for AI coding agents").version(getPackageVersion()).option("--project <path>", "Project path").option("-j, --json", "Output as JSON").option("--agent <name>", "Agent name").option("--session <id>", "Session ID");
 var authority;
 try {
@@ -98323,6 +98465,10 @@ await registerOptionalEventsCommands(program2);
 registerHelpCommands2(program2, authority.route, remoteCommandCapabilities);
 applyTodosCliHelpVisibility(program2, authority.route, remoteCommandCapabilities);
 try {
+  const activeFormat = unsupportedActiveFormatOption(commandForArgs(program2, process.argv.slice(2)), process.argv.slice(2));
+  if (activeFormat) {
+    throw new Error(`ACTIVE_FORMAT_UNSUPPORTED: ${activeFormat} is not supported by todos active; use --json for machine-readable output`);
+  }
   if (metadataRequested) {
     const unavailableCommand = getUnavailableTodosCliRemoteMetadataCommand(authority.route, remoteCommandCapabilities, process.argv.slice(2));
     if (unavailableCommand) {