@hasna/todos 0.15.50 → 0.15.52

package/dist/index.js

@@ -4075,23 +4075,118 @@ var init_identity_mapping = __esm(() => {
   });
 });
 
-// src/lib/sync-utils.ts
-import { existsSync as existsSync2, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
-import { createHash } from "crypto";
+// node_modules/.bun/@hasna+paths@0.1.0/node_modules/@hasna/paths/dist/index.js
 import { homedir } from "os";
 import { join } from "path";
+function assertApp(app) {
+  if (typeof app !== "string" || app.length === 0) {
+    throw new TypeError("paths: app must be a non-empty string");
+  }
+  if (!APP_SLUG_RE.test(app)) {
+    throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
+  }
+}
+function envOf(options) {
+  return options.env ?? process.env;
+}
+function envValue(options, kind) {
+  const value = envOf(options)[KIND_ENV[kind]];
+  return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function isMacOS(platform) {
+  return platform === "darwin";
+}
+function baseDir(kind, options) {
+  const override = envValue(options, kind);
+  if (override)
+    return override;
+  const home = options.home ?? homedir();
+  const platform = options.platform ?? process.platform;
+  if (isMacOS(platform)) {
+    switch (kind) {
+      case "config":
+      case "data":
+        return join(home, "Library", "Application Support", "Hasna");
+      case "cache":
+        return join(home, "Library", "Caches", "Hasna");
+      case "state":
+        return join(home, "Library", "Logs", "Hasna");
+    }
+  }
+  switch (kind) {
+    case "config":
+      return join(home, ".config", "hasna");
+    case "data":
+      return join(home, ".local", "share", "hasna");
+    case "state":
+      return join(home, ".local", "state", "hasna");
+    case "cache":
+      return join(home, ".cache", "hasna");
+  }
+}
+function resolvePath(kind, options) {
+  assertApp(options.app);
+  const appSegment = options.internal === true ? join("internal", options.app) : options.app;
+  return join(baseDir(kind, options), appSegment);
+}
+function dataDir(options) {
+  return resolvePath("data", options);
+}
+var KIND_ENV, APP_SLUG_RE;
+var init_dist = __esm(() => {
+  KIND_ENV = {
+    config: "HASNA_CONFIG_HOME",
+    data: "HASNA_DATA_HOME",
+    state: "HASNA_STATE_HOME",
+    cache: "HASNA_CACHE_HOME"
+  };
+  APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+});
+
+// src/lib/paths.ts
+import { existsSync as existsSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2, resolve as resolve2 } from "path";
+function effectiveHome(env = process.env) {
+  return env.HOME || env.USERPROFILE || homedir2();
+}
+function legacyHomeDir(env = process.env) {
+  return join2(effectiveHome(env), ".hasna", "todos");
+}
+function resolverHome(env = process.env) {
+  return dataDir({ app: "todos", home: effectiveHome(env), env });
+}
+function adoptResolverHome(resolved, env = process.env) {
+  const dataOverride = env.HASNA_DATA_HOME;
+  if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
+    return true;
+  return existsSync2(join2(resolved, "todos.db")) || existsSync2(join2(resolved, "config.json"));
+}
+function getTodosDir(env = process.env) {
+  const resolved = resolverHome(env);
+  return resolve2(adoptResolverHome(resolved, env) ? resolved : legacyHomeDir(env));
+}
+var init_paths = __esm(() => {
+  init_dist();
+});
+
+// src/lib/sync-utils.ts
+import { existsSync as existsSync3, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
+import { createHash } from "crypto";
+import { homedir as homedir3 } from "os";
+import { join as join3 } from "path";
 function getHomeDir() {
-  return process.env["HOME"] || process.env["USERPROFILE"] || homedir();
+  return process.env["HOME"] || process.env["USERPROFILE"] || homedir3();
 }
 function getTodosGlobalDir() {
-  return join(getHomeDir(), ".hasna", "todos");
+  return getTodosDir();
 }
 function ensureDir(dir) {
-  if (!existsSync2(dir))
+  if (!existsSync3(dir))
     mkdirSync(dir, { recursive: true });
 }
 function listJsonFiles(dir) {
-  if (!existsSync2(dir))
+  if (!existsSync3(dir))
     return [];
   return readdirSync(dir).filter((f) => f.endsWith(".json"));
 }
@@ -4107,14 +4202,14 @@ function writeJsonFile(path, data) {
 `);
 }
 function readHighWaterMark(dir) {
-  const path = join(dir, ".highwatermark");
-  if (!existsSync2(path))
+  const path = join3(dir, ".highwatermark");
+  if (!existsSync3(path))
     return 1;
   const val = parseInt(readFileSync(path, "utf-8").trim(), 10);
   return isNaN(val) ? 1 : val;
 }
 function writeHighWaterMark(dir, value) {
-  writeFileSync(join(dir, ".highwatermark"), String(value));
+  writeFileSync(join3(dir, ".highwatermark"), String(value));
 }
 function getFileMtimeMs(path) {
   try {
@@ -4169,6 +4264,7 @@ function hasSyncFingerprintChanged(record) {
 }
 var TODO_SYNC_FINGERPRINT_KEY = "todos_sync_fingerprint", HOME;
 var init_sync_utils = __esm(() => {
+  init_paths();
   HOME = getHomeDir();
 });
 
@@ -4479,18 +4575,18 @@ __export(exports_database, {
   LOCK_EXPIRY_MINUTES: () => LOCK_EXPIRY_MINUTES
 });
 import { Database } from "bun:sqlite";
-import { existsSync as existsSync3, mkdirSync as mkdirSync2 } from "fs";
-import { dirname, join as join2, resolve as resolve2 } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2 } from "fs";
+import { dirname, join as join4, resolve as resolve3 } from "path";
 function isInMemoryDb(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function findNearestProjectDb(startDir) {
   const gitRoot = findGitRoot(startDir);
-  const stopAt = gitRoot ? resolve2(gitRoot) : resolve2(startDir);
-  let dir = resolve2(startDir);
+  const stopAt = gitRoot ? resolve3(gitRoot) : resolve3(startDir);
+  let dir = resolve3(startDir);
   while (true) {
-    const candidate = join2(dir, ".hasna", "todos", "todos.db");
-    if (existsSync3(candidate))
+    const candidate = join4(dir, ".hasna", "todos", "todos.db");
+    if (existsSync4(candidate))
       return candidate;
     if (dir === stopAt)
       break;
@@ -4502,9 +4598,9 @@ function findNearestProjectDb(startDir) {
   return null;
 }
 function findGitRoot(startDir) {
-  let dir = resolve2(startDir);
+  let dir = resolve3(startDir);
   while (true) {
-    if (existsSync3(join2(dir, ".git")))
+    if (existsSync4(join4(dir, ".git")))
       return dir;
     const parent = dirname(dir);
     if (parent === dir)
@@ -4514,7 +4610,7 @@ function findGitRoot(startDir) {
   return null;
 }
 function getGlobalDbPath() {
-  return join2(getHomeDir(), ".hasna", "todos", "todos.db");
+  return join4(getTodosGlobalDir(), "todos.db");
 }
 function hasExplicitProjectArg(args = process.argv.slice(2)) {
   return args.some((arg) => arg === "--project" || arg.startsWith("--project="));
@@ -4552,7 +4648,7 @@ function getDbPath() {
   if (process.env["TODOS_DB_SCOPE"] === "project") {
     const gitRoot = findGitRoot(cwd);
     if (gitRoot && canCreateScopedProjectDb()) {
-      return join2(gitRoot, ".hasna", "todos", "todos.db");
+      return join4(gitRoot, ".hasna", "todos", "todos.db");
     }
   }
   return getGlobalDbPath();
@@ -4563,8 +4659,8 @@ function getDatabasePath() {
 function ensureDir2(filePath) {
   if (isInMemoryDb(filePath))
     return;
-  const dir = dirname(resolve2(filePath));
-  if (!existsSync3(dir)) {
+  const dir = dirname(resolve3(filePath));
+  if (!existsSync4(dir)) {
     mkdirSync2(dir, { recursive: true });
   }
 }
@@ -4741,10 +4837,10 @@ var init_database = __esm(() => {
 });
 
 // src/lib/config.ts
-import { existsSync as existsSync4, readFileSync as readFileSync2 } from "fs";
-import { dirname as dirname2, join as join3 } from "path";
+import { existsSync as existsSync5, readFileSync as readFileSync2 } from "fs";
+import { dirname as dirname2, join as join5 } from "path";
 function getConfigPath() {
-  return join3(getTodosGlobalDir(), "config.json");
+  return join5(getTodosGlobalDir(), "config.json");
 }
 function normalizeAgent(agent) {
   return agent.trim().toLowerCase();
@@ -4752,7 +4848,7 @@ function normalizeAgent(agent) {
 function loadConfig() {
   if (cached)
     return cached;
-  if (!existsSync4(getConfigPath())) {
+  if (!existsSync5(getConfigPath())) {
     cached = {};
     return cached;
   }
@@ -4775,7 +4871,7 @@ function updateConfig(patch) {
 }
 function getTodosAiConfig() {
   const configPath = getConfigPath();
-  if (!existsSync4(configPath))
+  if (!existsSync5(configPath))
     return {};
   const parsed = JSON.parse(readFileSync2(configPath, "utf8"));
   if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
@@ -5393,14 +5489,14 @@ var init_completion_guard = __esm(() => {
 
 // src/lib/event-emission-safety.ts
 import { tmpdir } from "os";
-import { resolve as resolve3, sep } from "path";
+import { resolve as resolve4, sep } from "path";
 function envFlag(name) {
   const value = process.env[name]?.trim().toLowerCase();
   return value === "1" || value === "true" || value === "yes" || value === "on";
 }
 function isUnder(parent, child) {
-  const normalizedParent = resolve3(parent);
-  const normalizedChild = resolve3(child);
+  const normalizedParent = resolve4(parent);
+  const normalizedChild = resolve4(child);
   return normalizedChild === normalizedParent || normalizedChild.startsWith(`${normalizedParent}${sep}`);
 }
 function databasePathFromDatabase(db) {
@@ -5561,9 +5657,9 @@ var init_redaction = __esm(() => {
 });
 
 // src/lib/workspace-trust.ts
-import { relative, resolve as resolve4 } from "path";
+import { relative, resolve as resolve5 } from "path";
 function normalizePath(path) {
-  return resolve4(path);
+  return resolve5(path);
 }
 function unique2(values) {
   return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
@@ -5745,9 +5841,9 @@ var init_workspace_trust = __esm(() => {
 });
 
 // src/lib/runner-sandbox.ts
-import { relative as relative2, resolve as resolve5 } from "path";
+import { relative as relative2, resolve as resolve6 } from "path";
 function normalizePath2(path) {
-  return resolve5(path);
+  return resolve6(path);
 }
 function unique3(values) {
   return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
@@ -5940,7 +6036,7 @@ var init_runner_sandbox = __esm(() => {
 // src/lib/event-hooks.ts
 import { createHash as createHash2, randomUUID } from "crypto";
 import { appendFileSync, mkdirSync as mkdirSync3 } from "fs";
-import { dirname as dirname3, resolve as resolve6 } from "path";
+import { dirname as dirname3, resolve as resolve7 } from "path";
 import { createConnection } from "net";
 function safeName(name) {
   const trimmed = name.trim();
@@ -6078,7 +6174,7 @@ async function deliverHook(hook, envelope) {
       if (hook.target === "stdout") {
         output = line.trim();
       } else if (hook.target === "file") {
-        const filePath = resolve6(hook.file_path);
+        const filePath = resolve7(hook.file_path);
         mkdirSync3(dirname3(filePath), { recursive: true });
         appendFileSync(filePath, line);
       } else if (hook.target === "socket") {
@@ -6199,9 +6295,9 @@ var init_event_hooks = __esm(() => {
 // node_modules/.bun/@hasna+events@0.1.16/node_modules/@hasna/events/dist/index.js
 import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
 import { Buffer as Buffer2 } from "buffer";
-import { existsSync as existsSync5 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join4 } from "path";
+import { existsSync as existsSync6 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join6 } from "path";
 import { createHmac, timingSafeEqual } from "crypto";
 import { randomUUID as randomUUID2 } from "crypto";
 import { spawn } from "child_process";
@@ -6302,7 +6398,7 @@ function channelMatchesEvent(channel, event) {
   return channel.filters.some((filter) => eventMatchesFilter(event, filter));
 }
 function getEventsDataDir(override) {
-  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join4(homedir2(), ".hasna", "events");
+  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join6(homedir4(), ".hasna", "events");
 }
 
 class JsonEventsStore {
@@ -6311,12 +6407,12 @@ class JsonEventsStore {
   channelsPath;
   eventsPath;
   deliveriesPath;
-  constructor(dataDir = getEventsDataDir()) {
-    this.dataDir = dataDir;
-    this.runtime = localJsonRuntime(dataDir);
-    this.channelsPath = join4(dataDir, "channels.json");
-    this.eventsPath = join4(dataDir, "events.json");
-    this.deliveriesPath = join4(dataDir, "deliveries.json");
+  constructor(dataDir2 = getEventsDataDir()) {
+    this.dataDir = dataDir2;
+    this.runtime = localJsonRuntime(dataDir2);
+    this.channelsPath = join6(dataDir2, "channels.json");
+    this.eventsPath = join6(dataDir2, "events.json");
+    this.deliveriesPath = join6(dataDir2, "deliveries.json");
   }
   async init() {
     await mkdir(this.dataDir, { recursive: true, mode: 448 });
@@ -6433,7 +6529,7 @@ class JsonEventsStore {
     };
   }
   async ensureArrayFile(path) {
-    if (!existsSync5(path)) {
+    if (!existsSync6(path)) {
       await writeFile(path, `[]
 `, { encoding: "utf-8", mode: 384 });
     }
@@ -6463,7 +6559,7 @@ class JsonEventsStore {
     });
   }
 }
-function localJsonRuntime(dataDir = getEventsDataDir()) {
+function localJsonRuntime(dataDir2 = getEventsDataDir()) {
   return {
     mode: "local-files",
     name: "json-events-store",
@@ -6476,7 +6572,7 @@ function localJsonRuntime(dataDir = getEventsDataDir()) {
     durable: true,
     idempotency: "best-effort-local",
     replayCursors: true,
-    description: `Local JSON files in ${dataDir}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
+    description: `Local JSON files in ${dataDir2}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
   };
 }
 function encodeLocalJsonEventCursor(offset, options = {}) {
@@ -6655,7 +6751,7 @@ async function dispatchCommand(event, channel) {
     HASNA_EVENT_SCHEMA_VERSION: event.schemaVersion,
     HASNA_EVENT_JSON: eventJson
   };
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     const child = spawn(channel.command.command, channel.command.args ?? [], {
       cwd: channel.command.cwd,
       env,
@@ -6673,7 +6769,7 @@ async function dispatchCommand(event, channel) {
     });
     child.on("error", (error) => {
       clearTimeout(timeout);
-      resolve7({
+      resolve8({
         attempt: 1,
         status: "failed",
         startedAt,
@@ -6686,7 +6782,7 @@ async function dispatchCommand(event, channel) {
     child.on("close", (code, signal) => {
       clearTimeout(timeout);
       const success = code === 0;
-      resolve7({
+      resolve8({
         attempt: 1,
         status: success ? "success" : "failed",
         startedAt,
@@ -7028,7 +7124,7 @@ function normalizeRetryPolicy(policy) {
   };
 }
 var HASNA_EVENTS_DIR_ENV = "HASNA_EVENTS_DIR", HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME", LOCAL_JSON_EVENT_CURSOR_PREFIX = "local-json-v1:", DEFAULT_EVENT_PAGE_LIMIT = 100, MAX_EVENT_PAGE_LIMIT = 1000, DEFAULT_SIGNATURE_TOLERANCE_MS, EventValidationError, defaultEventTypeCatalog, APP_EVENT_V1_MAX_DATA_BYTES;
-var init_dist = __esm(() => {
+var init_dist2 = __esm(() => {
   DEFAULT_SIGNATURE_TOLERANCE_MS = 5 * 60 * 1000;
   EventValidationError = class EventValidationError extends Error {
     eventType;
@@ -7451,7 +7547,7 @@ function emitSharedTaskEventQuiet(input) {
 }
 var SOURCE = "todos";
 var init_shared_events = __esm(() => {
-  init_dist();
+  init_dist2();
   init_database();
   init_projects();
   init_task_lists();
@@ -7459,7 +7555,7 @@ var init_shared_events = __esm(() => {
 });
 
 // src/lib/secret-redaction.ts
-import { readFileSync as readFileSync3, existsSync as existsSync6 } from "fs";
+import { readFileSync as readFileSync3, existsSync as existsSync7 } from "fs";
 function registerCustomRedactor(fn) {
   customRedactors.push(fn);
 }
@@ -7524,7 +7620,7 @@ function scanAndRedactText(text, options = {}) {
   };
 }
 function scanFileForSecrets(path, options = {}) {
-  if (!existsSync6(path))
+  if (!existsSync7(path))
     throw new Error(`File not found: ${path}`);
   const content = readFileSync3(path, "utf8");
   return scanAndRedactText(content, options);
@@ -9782,17 +9878,17 @@ function sanitizeCreateTaskInput(input) {
   return {
     ...input,
     title: sanitizePreWriteText(input.title, "task.title"),
-    description: input.description !== undefined ? sanitizePreWriteText(input.description, "task.description") : undefined,
+    description: input.description == null ? input.description : sanitizePreWriteText(input.description, "task.description"),
     tags: input.tags !== undefined ? sanitizePreWriteValue(input.tags, "task.tags") : undefined,
     metadata: input.metadata !== undefined ? sanitizePreWriteValue(input.metadata, "task.metadata") : undefined,
-    reason: input.reason !== undefined ? sanitizePreWriteText(input.reason, "task.reason") : undefined
+    reason: input.reason == null ? input.reason : sanitizePreWriteText(input.reason, "task.reason")
   };
 }
 function sanitizeUpdateTaskInput(input) {
   return {
     ...input,
     title: input.title !== undefined ? sanitizePreWriteText(input.title, "task.title") : undefined,
-    description: input.description !== undefined ? sanitizePreWriteText(input.description, "task.description") : undefined,
+    description: input.description == null ? input.description : sanitizePreWriteText(input.description, "task.description"),
     tags: input.tags !== undefined ? sanitizePreWriteValue(input.tags, "task.tags") : undefined,
     metadata: input.metadata !== undefined ? sanitizePreWriteValue(input.metadata, "task.metadata") : undefined
   };
@@ -11646,28 +11742,28 @@ var init_boards = __esm(() => {
 
 // src/lib/artifact-store.ts
 import { createHash as createHash3 } from "crypto";
-import { existsSync as existsSync7, mkdirSync as mkdirSync4, readFileSync as readFileSync4, rmSync, statSync as statSync2, writeFileSync as writeFileSync2 } from "fs";
-import { basename, dirname as dirname4, join as join5, resolve as resolve7 } from "path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync4, readFileSync as readFileSync4, rmSync, statSync as statSync2, writeFileSync as writeFileSync2 } from "fs";
+import { basename, dirname as dirname4, join as join7, resolve as resolve8 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 function isInMemoryDb2(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function artifactStoreRoot() {
   if (process.env["HASNA_TODOS_ARTIFACTS_DIR"])
-    return resolve7(process.env["HASNA_TODOS_ARTIFACTS_DIR"]);
+    return resolve8(process.env["HASNA_TODOS_ARTIFACTS_DIR"]);
   if (process.env["TODOS_ARTIFACTS_DIR"])
-    return resolve7(process.env["TODOS_ARTIFACTS_DIR"]);
+    return resolve8(process.env["TODOS_ARTIFACTS_DIR"]);
   const dbPath = getDatabasePath();
   if (isInMemoryDb2(dbPath))
-    return join5(tmpdir2(), "hasna-todos-artifacts");
-  return join5(dirname4(resolve7(dbPath)), "artifacts");
+    return join7(tmpdir2(), "hasna-todos-artifacts");
+  return join7(dirname4(resolve8(dbPath)), "artifacts");
 }
 function artifactStorePath(relativePath) {
   const normalized = relativePath.replace(/\\/g, "/");
   if (normalized.includes("..") || normalized.startsWith("/") || normalized.length === 0) {
     throw new Error("Invalid artifact store path");
   }
-  return join5(artifactStoreRoot(), normalized);
+  return join7(artifactStoreRoot(), normalized);
 }
 function sha256(buffer) {
   return createHash3("sha256").update(buffer).digest("hex");
@@ -11707,8 +11803,8 @@ function mediaTypeFor(path, textLike) {
   return "application/octet-stream";
 }
 function storeArtifactContent(input) {
-  const sourcePath = resolve7(input.path);
-  if (!existsSync7(sourcePath))
+  const sourcePath = resolve8(input.path);
+  if (!existsSync8(sourcePath))
     return null;
   const sourceStat = statSync2(sourcePath);
   if (!sourceStat.isFile())
@@ -11725,9 +11821,9 @@ function storeArtifactContent(input) {
       redactionStatus = "redacted";
   }
   const storedSha = sha256(storedBuffer);
-  const relativePath = join5("sha256", storedSha.slice(0, 2), storedSha).replace(/\\/g, "/");
+  const relativePath = join7("sha256", storedSha.slice(0, 2), storedSha).replace(/\\/g, "/");
   const destination = artifactStorePath(relativePath);
-  if (!existsSync7(destination)) {
+  if (!existsSync8(destination)) {
     mkdirSync4(dirname4(destination), { recursive: true });
     writeFileSync2(destination, storedBuffer);
   }
@@ -11787,7 +11883,7 @@ function verifyStoredArtifact(input) {
     };
   }
   const storedPath = artifactStorePath(store.relative_path);
-  if (!existsSync7(storedPath)) {
+  if (!existsSync8(storedPath)) {
     return {
       id: input.id,
       path: input.path,
@@ -11862,20 +11958,20 @@ function importStoredArtifactContent(content) {
 }
 function getArtifactStoreRoot(dbPath) {
   if (process.env["HASNA_TODOS_ARTIFACTS_DIR"])
-    return resolve7(process.env["HASNA_TODOS_ARTIFACTS_DIR"]);
+    return resolve8(process.env["HASNA_TODOS_ARTIFACTS_DIR"]);
   if (process.env["TODOS_ARTIFACTS_DIR"])
-    return resolve7(process.env["TODOS_ARTIFACTS_DIR"]);
+    return resolve8(process.env["TODOS_ARTIFACTS_DIR"]);
   const path = dbPath ?? getDatabasePath();
   if (isInMemoryDb2(path))
-    return join5(tmpdir2(), "hasna-todos-artifacts");
-  return join5(dirname4(resolve7(path)), "artifacts");
+    return join7(tmpdir2(), "hasna-todos-artifacts");
+  return join7(dirname4(resolve8(path)), "artifacts");
 }
 function computeContentHash(path) {
-  return sha256(readFileSync4(resolve7(path)));
+  return sha256(readFileSync4(resolve8(path)));
 }
 function storeArtifactFile(input) {
-  const sourcePath = resolve7(input.sourcePath);
-  if (!existsSync7(sourcePath)) {
+  const sourcePath = resolve8(input.sourcePath);
+  if (!existsSync8(sourcePath)) {
     throw new Error(`Source file not found: ${input.sourcePath}`);
   }
   if (!statSync2(sourcePath).isFile()) {
@@ -11888,7 +11984,7 @@ function storeArtifactFile(input) {
   let localPath = sourcePath;
   if (storageMode === "copy") {
     const fileName = input.name && input.name.trim().length > 0 ? basename(input.name) : basename(sourcePath);
-    const destination = join5(getArtifactStoreRoot(input.dbPath), input.artifactId, fileName);
+    const destination = join7(getArtifactStoreRoot(input.dbPath), input.artifactId, fileName);
     mkdirSync4(dirname4(destination), { recursive: true });
     writeFileSync2(destination, buffer);
     localPath = destination;
@@ -11898,7 +11994,7 @@ function storeArtifactFile(input) {
 function deleteStoredArtifactFile(localPath, storageMode, _dbPath2) {
   if (storageMode === "reference")
     return false;
-  if (!localPath || !existsSync7(localPath))
+  if (!localPath || !existsSync8(localPath))
     return false;
   rmSync(localPath, { force: true });
   try {
@@ -11923,7 +12019,7 @@ function buildArtifactExportManifest(artifacts, dbPath) {
   };
 }
 function writeArtifactExportManifest(manifest, outputPath) {
-  const destination = resolve7(outputPath);
+  const destination = resolve8(outputPath);
   mkdirSync4(dirname4(destination), { recursive: true });
   writeFileSync2(destination, `${JSON.stringify(manifest, null, 2)}
 `);
@@ -13193,7 +13289,7 @@ var init_dispatches = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/todos",
-  version: "0.15.50",
+  version: "0.15.52",
   description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
   type: "module",
   main: "dist/index.js",
@@ -13252,6 +13348,7 @@ var package_default = {
   files: [
     "dist",
     "dashboard/dist",
+    "postinstall.js",
     "LICENSE",
     "README.md"
   ],
@@ -13278,7 +13375,7 @@ var package_default = {
     "test:attested-container-compatibility-vector": "bun test scripts/attested-container-compatibility-vector.test.ts",
     "issue:release-review": "bun run scripts/issue-npm-release-agent-review.ts",
     prepublishOnly: "bun run scripts/verify-public-release.ts --mode=publish",
-    postinstall: "mkdir -p $HOME/.hasna/todos $HOME/.hasna/todos/training 2>/dev/null || true"
+    postinstall: "node postinstall.js"
   },
   keywords: [
     "todos",
@@ -13312,13 +13409,15 @@ var package_default = {
   author: "Andrei Hasna <andrei@hasna.com>",
   license: "Apache-2.0",
   dependencies: {
-    "@hasna/contracts": "0.14.0",
+    "@hasna/contracts": "0.14.2",
     "@hasna/events": "^0.1.11",
+    "@hasna/paths": "0.1.0",
     "@modelcontextprotocol/sdk": "^1.12.1",
     chalk: "^5.4.1",
     commander: "^13.1.0",
     ink: "^5.2.0",
     react: "^18.3.1",
+    "signal-exit": "3.0.7",
     zod: "3.25.76"
   },
   overrides: {
@@ -13327,7 +13426,7 @@ var package_default = {
     zod: "3.25.76"
   },
   devDependencies: {
-    "@types/bun": "^1.2.4",
+    "@types/bun": "1.3.14",
     "@types/react": "^18.3.18",
     "bun-types": "1.3.9",
     "hasna-deployment-contracts": "npm:@hasna/contracts@0.10.4",
@@ -16553,7 +16652,7 @@ function todosAiExitCodeForResult(result) {
 }
 // src/lib/onboarding-fixtures.ts
 import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync3 } from "fs";
-import { join as join6 } from "path";
+import { join as join8 } from "path";
 
 // src/lib/local-bridge.ts
 init_database();
@@ -17490,7 +17589,7 @@ function writeOnboardingFixtureFiles(directory) {
   mkdirSync5(directory, { recursive: true });
   const files = [];
   for (const fixture of allFixtures()) {
-    const path = join6(directory, `${fixture.summary.name}.bridge.json`);
+    const path = join8(directory, `${fixture.summary.name}.bridge.json`);
     writeFileSync3(path, `${JSON.stringify(fixture.bundle, null, 2)}
 `, "utf-8");
     files.push(path);
@@ -17508,7 +17607,7 @@ function importOnboardingFixture(options = {}) {
 init_database();
 import { createHash as createHash4 } from "crypto";
 import { readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
-import { dirname as dirname5, resolve as resolve8 } from "path";
+import { dirname as dirname5, resolve as resolve9 } from "path";
 import { mkdirSync as mkdirSync6 } from "fs";
 var TODOS_LOCAL_BACKUP_KIND = "hasna.todos.local-backup";
 var TODOS_LOCAL_BACKUP_SCHEMA_VERSION = 1;
@@ -17615,14 +17714,14 @@ function createLocalBackup(options = {}, db) {
   return backup;
 }
 function writeLocalBackupFile(backup, outputPath) {
-  const path = resolve8(outputPath);
+  const path = resolve9(outputPath);
   mkdirSync6(dirname5(path), { recursive: true });
   writeFileSync4(path, `${JSON.stringify(backup, null, 2)}
 `);
   return path;
 }
 function readLocalBackupFile(path) {
-  return JSON.parse(readFileSync5(resolve8(path), "utf-8"));
+  return JSON.parse(readFileSync5(resolve9(path), "utf-8"));
 }
 function verifyLocalBackup(value, options = {}, db) {
   const verifiedAt = options.verified_at ?? now();
@@ -18316,7 +18415,7 @@ function renderLocalSnapshotMarkdown(snapshot) {
 }
 // src/lib/sdk-integration-fixtures.ts
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync5 } from "fs";
-import { join as join7 } from "path";
+import { join as join9 } from "path";
 
 // src/cli-mcp-parity.ts
 function source4(version) {
@@ -20287,7 +20386,7 @@ function writeSdkIntegrationFixtures(directory, options = {}) {
   ];
   const written = [];
   for (const [name, payload] of files) {
-    const file = join7(directory, name);
+    const file = join9(directory, name);
     writeFileSync5(file, `${JSON.stringify(payload, null, 2)}
 `, "utf-8");
     written.push(file);
@@ -21570,7 +21669,7 @@ function renderLocalAuditLedgerMarkdown(ledger) {
 init_migrations();
 init_schema();
 import { readFileSync as readFileSync6 } from "fs";
-import { join as join8, resolve as resolve9 } from "path";
+import { join as join10, resolve as resolve10 } from "path";
 import { Database as Database2 } from "bun:sqlite";
 var LOCAL_RELEASE_COMPATIBILITY_SCHEMA_VERSION = 1;
 var EXPECTED_PACKAGE_NAME = "@hasna/todos";
@@ -21616,7 +21715,7 @@ function warn(id, message, details) {
   return { id, status: "warning", message, details };
 }
 function readPackageJson(root) {
-  return JSON.parse(readFileSync6(join8(root, "package.json"), "utf8"));
+  return JSON.parse(readFileSync6(join10(root, "package.json"), "utf8"));
 }
 function sortedKeys(value) {
   return Object.keys(value ?? {}).sort((left, right) => left.localeCompare(right));
@@ -21712,7 +21811,7 @@ function checkChangelog() {
   ];
 }
 function createReleaseCompatibilityReport(options = {}) {
-  const root = resolve9(options.root ?? process.cwd());
+  const root = resolve10(options.root ?? process.cwd());
   const packageJson = readPackageJson(root);
   const simulatedLevels = options.simulated_levels ?? defaultSimulationLevels();
   const checks = [
@@ -30707,7 +30806,7 @@ async function retryOnTransientPostgresError(fn, attempts = 2, delayMs = 150) {
       lastError = error;
       if (!isTransientPostgresError(error) || attempt === attempts)
         throw error;
-      await new Promise((resolve10) => setTimeout(resolve10, delayMs * attempt));
+      await new Promise((resolve11) => setTimeout(resolve11, delayMs * attempt));
     }
   }
   throw lastError;
@@ -30808,8 +30907,8 @@ class TodosShadowMirror {
   async flush() {
     if (this.idle())
       return;
-    await new Promise((resolve10) => {
-      this.idleResolvers.push(resolve10);
+    await new Promise((resolve11) => {
+      this.idleResolvers.push(resolve11);
       this.pump();
     });
   }
@@ -30821,8 +30920,8 @@ class TodosShadowMirror {
       return;
     const resolvers = this.idleResolvers;
     this.idleResolvers = [];
-    for (const resolve10 of resolvers)
-      resolve10();
+    for (const resolve11 of resolvers)
+      resolve11();
   }
   pump() {
     if (this.pumping)
@@ -31301,7 +31400,7 @@ class TodosShadowOutbox {
         const remaining = deadline - Date.now();
         if (remaining <= 0)
           break;
-        await new Promise((resolve10) => setTimeout(resolve10, Math.min(200, remaining)));
+        await new Promise((resolve11) => setTimeout(resolve11, Math.min(200, remaining)));
       }
     }
     return this.getStats();
@@ -32605,7 +32704,7 @@ class TodosClient {
     return this._fetchWithRetry(path, { method: "DELETE" });
   }
   _sleep(ms) {
-    return new Promise((resolve10) => setTimeout(resolve10, ms));
+    return new Promise((resolve11) => setTimeout(resolve11, ms));
   }
   async getHealth() {
     return this._get("/api/health");
@@ -34262,8 +34361,8 @@ class SqlitePrGroupLedgerPersistence {
   async transaction(fn) {
     const previous = sqliteTransactionTails.get(this.db) ?? Promise.resolve();
     let release;
-    const current = new Promise((resolve10) => {
-      release = resolve10;
+    const current = new Promise((resolve11) => {
+      release = resolve11;
     });
     sqliteTransactionTails.set(this.db, current);
     await previous;
@@ -36281,8 +36380,8 @@ class SqliteTodosProjectRegistrationBackend {
   async transaction(fn) {
     const previous = sqliteTransactionTails2.get(this.db) ?? Promise.resolve();
     let release;
-    const current = new Promise((resolve10) => {
-      release = resolve10;
+    const current = new Promise((resolve11) => {
+      release = resolve11;
     });
     sqliteTransactionTails2.set(this.db, current);
     await previous;
@@ -42561,8 +42660,8 @@ class SqliteTodosTaskManifestBackend {
   async serialized(run) {
     const previous = sqliteTails.get(this.db) ?? Promise.resolve();
     let release;
-    const current = new Promise((resolve10) => {
-      release = resolve10;
+    const current = new Promise((resolve11) => {
+      release = resolve11;
     });
     const tail = previous.then(() => current);
     sqliteTails.set(this.db, tail);
@@ -44903,8 +45002,8 @@ class SqliteTodosTaskSubtreeTransferBackend {
   async serialized(run) {
     const previous = sqliteTails2.get(this.db) ?? Promise.resolve();
     let release;
-    const current = new Promise((resolve10) => {
-      release = resolve10;
+    const current = new Promise((resolve11) => {
+      release = resolve11;
     });
     const tail = previous.then(() => current);
     sqliteTails2.set(this.db, tail);
@@ -45655,15 +45754,23 @@ function normalizeRemoteAuthorityUrl(value) {
   if (url.search || url.hash) {
     throw new Error("REMOTE_API_URL_INVALID: HASNA_TODOS_API_URL must not contain a query or fragment; local SQLite fallback is disabled");
   }
-  if (url.pathname !== "/" && url.pathname !== "/v1" && url.pathname !== "/v1/") {
-    throw new Error("REMOTE_API_URL_INVALID: HASNA_TODOS_API_URL must be an authority root or end in /v1, not /api/v1 or another path; " + "local SQLite fallback is disabled");
+  const path = url.pathname.replace(/\/+$/, "");
+  const segments = path.split("/").filter(Boolean);
+  const reservedGatewaySegments = new Set(["api", "v1"]);
+  const isRoot = path === "";
+  const isV1Root = segments.length === 1 && segments[0] === "v1";
+  const isAppRoot = segments.length === 1 && !reservedGatewaySegments.has(segments[0].toLowerCase());
+  const isAppV1Root = segments.length === 2 && segments[1] === "v1" && !reservedGatewaySegments.has(segments[0].toLowerCase());
+  if (!isRoot && !isV1Root && !isAppRoot && !isAppV1Root) {
+    throw new Error("REMOTE_API_URL_INVALID: HASNA_TODOS_API_URL must be an authority root, /v1, or <app>[/v1], not /api/v1 or another path; " + "local SQLite fallback is disabled");
   }
   const hostname2 = url.hostname.toLowerCase();
   const loopback = hostname2 === "localhost" || hostname2 === "::1" || hostname2 === "[::1]" || /^127(?:\.\d{1,3}){3}$/.test(hostname2);
   if (url.protocol === "http:" && !loopback) {
     throw new Error("REMOTE_API_URL_INVALID: plaintext HTTP is allowed only for loopback Todos authorities; local SQLite fallback is disabled");
   }
-  return url.origin;
+  const rootPath = isV1Root || isAppV1Root ? path.slice(0, -"/v1".length) : path;
+  return rootPath ? `${url.origin}${rootPath}` : url.origin;
 }
 function getTodosRemoteAuthorityConfigStatus(env = process.env) {
   let resolution;
@@ -46217,8 +46324,8 @@ var DANGEROUS_TOOLS = new Set([
   "merge_tasks",
   "cancel_agent_run"
 ]);
-function resolveAccessProfile(envValue) {
-  const raw = (envValue ?? process.env["TODOS_PROFILE"] ?? "full").toLowerCase();
+function resolveAccessProfile(envValue2) {
+  const raw = (envValue2 ?? process.env["TODOS_PROFILE"] ?? "full").toLowerCase();
   if (ACCESS_PROFILES.includes(raw))
     return raw;
   if (raw === "readonly")
@@ -47761,8 +47868,8 @@ init_task_crud();
 init_redaction();
 import { Database as Database3 } from "bun:sqlite";
 import { createHash as createHash17 } from "crypto";
-import { existsSync as existsSync9, readdirSync as readdirSync2, statSync as statSync4 } from "fs";
-import { basename as basename2, dirname as dirname6, join as join9, resolve as resolve10 } from "path";
+import { existsSync as existsSync10, readdirSync as readdirSync2, statSync as statSync4 } from "fs";
+import { basename as basename2, dirname as dirname6, join as join11, resolve as resolve11 } from "path";
 
 // src/lib/task-routing.ts
 init_database();
@@ -47770,7 +47877,7 @@ init_projects();
 init_task_crud();
 init_task_lifecycle();
 init_task_lists();
-import { existsSync as existsSync8, statSync as statSync3 } from "fs";
+import { existsSync as existsSync9, statSync as statSync3 } from "fs";
 var DEFAULT_STALE_IN_PROGRESS_MS = 3 * 24 * 60 * 60 * 1000;
 var TERMINAL_WORKFLOW_STATES = new Set([
   "failed",
@@ -47825,7 +47932,7 @@ function routeConcurrencyKey(task3, project, taskList, projectPath) {
 }
 function directoryExists(path) {
   try {
-    return existsSync8(path) && statSync3(path).isDirectory();
+    return existsSync9(path) && statSync3(path).isDirectory();
   } catch {
     return false;
   }
@@ -48026,7 +48133,7 @@ function pointerPatch(previous, input, key2) {
 
 // src/lib/task-route-sources.ts
 var TASK_ROUTE_SOURCE_DISCOVERY_SCHEMA_VERSION = "todos.task_route_sources.v1";
-var TODO_STORE_RELATIVE_PATH = join9(".hasna", "todos", "todos.db");
+var TODO_STORE_RELATIVE_PATH = join11(".hasna", "todos", "todos.db");
 var ROOT_SCAN_MAX_DEPTH = 5;
 var SKIPPED_SCAN_DIRS = new Set([
   ".git",
@@ -48040,7 +48147,7 @@ var SKIPPED_SCAN_DIRS = new Set([
   ".cache"
 ]);
 function normalizePath3(input) {
-  return resolve10(input);
+  return resolve11(input);
 }
 function sourceStoreId(sourceDbPath) {
   const digest3 = createHash17("sha256").update(sourceDbPath).digest("hex").slice(0, 16);
@@ -48102,8 +48209,8 @@ function discoverStoresUnderRoot(sourceRoot) {
   const rootPath = normalizePath3(sourceRoot);
   const errors2 = [];
   const stores = [];
-  if (!existsSync9(rootPath)) {
-    const ref = createStoreRef(join9(rootPath, TODO_STORE_RELATIVE_PATH));
+  if (!existsSync10(rootPath)) {
+    const ref = createStoreRef(join11(rootPath, TODO_STORE_RELATIVE_PATH));
     errors2.push({
       ...ref,
       code: "SOURCE_ROOT_MISSING",
@@ -48115,7 +48222,7 @@ function discoverStoresUnderRoot(sourceRoot) {
   try {
     rootStat = statSync4(rootPath);
   } catch (error) {
-    const ref = createStoreRef(join9(rootPath, TODO_STORE_RELATIVE_PATH));
+    const ref = createStoreRef(join11(rootPath, TODO_STORE_RELATIVE_PATH));
     errors2.push({
       ...ref,
       code: "SOURCE_ROOT_UNREADABLE",
@@ -48128,8 +48235,8 @@ function discoverStoresUnderRoot(sourceRoot) {
     return { stores, errors: errors2 };
   }
   function scanDirectory(dir, depth) {
-    const candidate = join9(dir, TODO_STORE_RELATIVE_PATH);
-    if (existsSync9(candidate)) {
+    const candidate = join11(dir, TODO_STORE_RELATIVE_PATH);
+    if (existsSync10(candidate)) {
       stores.push(createStoreRef(candidate));
     }
     if (depth >= ROOT_SCAN_MAX_DEPTH)
@@ -48149,7 +48256,7 @@ function discoverStoresUnderRoot(sourceRoot) {
     for (const entry2 of entries) {
       if (!entry2.isDirectory() || SKIPPED_SCAN_DIRS.has(entry2.name))
         continue;
-      scanDirectory(join9(dir, entry2.name), depth + 1);
+      scanDirectory(join11(dir, entry2.name), depth + 1);
     }
   }
   scanDirectory(rootPath, 0);
@@ -48175,7 +48282,7 @@ function collectStoreRefs(input) {
   };
 }
 function openReadonlyStore(ref) {
-  if (!existsSync9(ref.source_db_path)) {
+  if (!existsSync10(ref.source_db_path)) {
     throw Object.assign(new Error(`Store does not exist: ${ref.source_db_path}`), { code: "STORE_MISSING" });
   }
   return new Database3(ref.source_db_path, { readonly: true, create: false });
@@ -48487,8 +48594,8 @@ init_plans();
 init_database();
 init_projects();
 init_tasks();
-import { existsSync as existsSync10, mkdirSync as mkdirSync8, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "fs";
-import { join as join10, resolve as resolve11 } from "path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync8, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "fs";
+import { join as join12, resolve as resolve12 } from "path";
 var PLAN_MARKDOWN_SCHEMA = "hasna.todos.plan/v1";
 function assertSafePathSegment(value, label) {
   const trimmed = value.trim();
@@ -48532,7 +48639,7 @@ function resolvePlanArtifactProject(input) {
   const ref = input.project_id || input.project_ref;
   if (!ref)
     throw new Error("Plan artifacts require a project id or project reference");
-  const byPath = getProjectByPath(resolve11(ref), db);
+  const byPath = getProjectByPath(resolve12(ref), db);
   if (byPath)
     return byPath;
   const resolvedId = resolvePartialId(db, "projects", ref);
@@ -48549,8 +48656,8 @@ function resolvePlanArtifactProject(input) {
 function resolvePlanArtifactPaths(input) {
   const project = resolvePlanArtifactProject(input);
   const projectId = assertSafePathSegment(project.id, "project id");
-  const projectRoot = resolve11(project.path);
-  const directory = join10(projectRoot, ".hasna", "todos", "plans", projectId);
+  const projectRoot = resolve12(project.path);
+  const directory = join12(projectRoot, ".hasna", "todos", "plans", projectId);
   const planId = input.plan_id ? assertSafePathSegment(input.plan_id, "plan id") : null;
   const planSlug = input.plan_slug ? assertSafePathSegment(slugify(input.plan_slug), "plan slug") : null;
   const fileName = planId ? planSlug ? `${planSlug}--${planId.slice(0, 8)}.md` : `${planId}.md` : null;
@@ -48558,7 +48665,7 @@ function resolvePlanArtifactPaths(input) {
     project_id: project.id,
     project_root: projectRoot,
     directory,
-    file_path: fileName ? join10(directory, fileName) : directory
+    file_path: fileName ? join12(directory, fileName) : directory
   };
 }
 function resolvePlanArtifactCandidatePaths(plan, db) {
@@ -48724,7 +48831,7 @@ function readPlanArtifact(plan, db) {
     return null;
   const d = db || getDatabase();
   const paths = resolvePlanArtifactCandidatePaths(plan, d);
-  const path = existsSync10(paths.primary.file_path) ? paths.primary.file_path : existsSync10(paths.legacy.file_path) ? paths.legacy.file_path : null;
+  const path = existsSync11(paths.primary.file_path) ? paths.primary.file_path : existsSync11(paths.legacy.file_path) ? paths.legacy.file_path : null;
   if (!path)
     return null;
   const markdown = readFileSync7(path, "utf8");
@@ -48739,7 +48846,7 @@ function inspectPlanArtifact(plan, db) {
     return null;
   const d = db || getDatabase();
   const paths = resolvePlanArtifactCandidatePaths(plan, d);
-  const path = existsSync10(paths.primary.file_path) ? paths.primary.file_path : existsSync10(paths.legacy.file_path) ? paths.legacy.file_path : null;
+  const path = existsSync11(paths.primary.file_path) ? paths.primary.file_path : existsSync11(paths.legacy.file_path) ? paths.legacy.file_path : null;
   if (!path) {
     return {
       path: paths.primary.file_path,
@@ -49828,8 +49935,8 @@ function renderRetrospectiveMarkdown(record) {
 init_database();
 init_projects();
 init_task_lists();
-import { existsSync as existsSync11, readFileSync as readFileSync8, statSync as statSync5 } from "fs";
-import { basename as basename3, dirname as dirname7, resolve as resolve12 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync8, statSync as statSync5 } from "fs";
+import { basename as basename3, dirname as dirname7, resolve as resolve13 } from "path";
 function safeStat(path) {
   try {
     return statSync5(path);
@@ -49838,7 +49945,7 @@ function safeStat(path) {
   }
 }
 function canonicalPath(input) {
-  const resolved = resolve12(input);
+  const resolved = resolve13(input);
   const stats2 = safeStat(resolved);
   if (stats2?.isFile())
     return dirname7(resolved);
@@ -49847,7 +49954,7 @@ function canonicalPath(input) {
 function findUp(start, marker) {
   let current = canonicalPath(start);
   while (true) {
-    if (existsSync11(resolve12(current, marker)))
+    if (existsSync12(resolve13(current, marker)))
       return current;
     const parent = dirname7(current);
     if (parent === current)
@@ -49858,8 +49965,8 @@ function findUp(start, marker) {
 function readPackageJson2(path) {
   if (!path)
     return null;
-  const file = resolve12(path, "package.json");
-  if (!existsSync11(file))
+  const file = resolve13(path, "package.json");
+  if (!existsSync12(file))
     return null;
   try {
     const parsed = JSON.parse(readFileSync8(file, "utf-8"));
@@ -49881,7 +49988,7 @@ function workspaceMarker(root, rootPackage) {
   if (rootPackage?.workspaces)
     markers.push("package.json#workspaces");
   for (const marker of ["pnpm-workspace.yaml", "turbo.json", "nx.json", "lerna.json", "rush.json", "bun.lock", "bun.lockb"]) {
-    if (existsSync11(resolve12(root, marker)))
+    if (existsSync12(resolve13(root, marker)))
       markers.push(marker);
   }
   const kind = markers.find((marker) => marker !== "bun.lock" && marker !== "bun.lockb") ?? null;
@@ -50219,18 +50326,18 @@ var gatherTrainingData = async (options = {}) => {
 };
 // src/lib/model-config.ts
 init_sync_utils();
-import { existsSync as existsSync12, mkdirSync as mkdirSync9, readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "fs";
-import { join as join11 } from "path";
+import { existsSync as existsSync13, mkdirSync as mkdirSync9, readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "fs";
+import { join as join13 } from "path";
 var DEFAULT_MODEL = "gpt-4o-mini";
 function getConfigDir() {
   return getTodosGlobalDir();
 }
 function getConfigPath2() {
-  return join11(getConfigDir(), "config.json");
+  return join13(getConfigDir(), "config.json");
 }
 function readConfig() {
   const configPath = getConfigPath2();
-  if (!existsSync12(configPath))
+  if (!existsSync13(configPath))
     return {};
   try {
     const raw = readFileSync9(configPath, "utf-8");
@@ -50241,7 +50348,7 @@ function readConfig() {
 }
 function writeConfig(config) {
   const configDir = getConfigDir();
-  if (!existsSync12(configDir)) {
+  if (!existsSync13(configDir)) {
     mkdirSync9(configDir, { recursive: true });
   }
   writeFileSync7(getConfigPath2(), JSON.stringify(config, null, 2) + `
@@ -50989,7 +51096,7 @@ init_database();
 init_tasks();
 init_config2();
 init_redaction();
-import { existsSync as existsSync13, readFileSync as readFileSync10 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync10 } from "fs";
 var DEFAULT_RETRY = {
   attempts: 1,
   backoff_ms: 0
@@ -51097,7 +51204,7 @@ function classifyLog(text) {
 async function sleep2(ms) {
   if (ms <= 0)
     return;
-  await new Promise((resolve13) => setTimeout(resolve13, ms));
+  await new Promise((resolve14) => setTimeout(resolve14, ms));
 }
 async function runCommandProvider(provider, input) {
   const commandTemplate = input.command || provider.command;
@@ -51152,7 +51259,7 @@ Timed out after ${provider.timeout_ms}ms`);
   };
 }
 function runCiLogProvider(input) {
-  const text = input.log_text ?? (input.log_path && existsSync13(input.log_path) ? readFileSync10(input.log_path, "utf-8") : "");
+  const text = input.log_text ?? (input.log_path && existsSync14(input.log_path) ? readFileSync10(input.log_path, "utf-8") : "");
   return {
     status: classifyLog(text),
     attempts: 1,
@@ -51164,7 +51271,7 @@ function runBrowserProvider(input) {
   if (!input.artifact_path) {
     return { status: "unknown", attempts: 1, exit_code: null, output_summary: "browser provider needs a screenshot or artifact path" };
   }
-  if (!existsSync13(input.artifact_path)) {
+  if (!existsSync14(input.artifact_path)) {
     return { status: "failed", attempts: 1, exit_code: null, output_summary: `artifact not found: ${input.artifact_path}` };
   }
   return {
@@ -51458,9 +51565,9 @@ init_database();
 init_tasks();
 init_task_runs();
 init_config2();
-import { relative as relative3, resolve as resolve13 } from "path";
+import { relative as relative3, resolve as resolve14 } from "path";
 function normalizePath4(path) {
-  return resolve13(path);
+  return resolve14(path);
 }
 function unique4(values) {
   return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
@@ -51515,7 +51622,7 @@ function commandMatches(commands, pattern) {
 }
 function pathMatches(paths, pattern, root) {
   return paths.filter((path) => {
-    const candidate = path.startsWith("/") ? path : resolve13(root, path);
+    const candidate = path.startsWith("/") ? path : resolve14(root, path);
     if (!isPathInside3(root, candidate))
       return matchesPattern4(path, pattern);
     return matchesPattern4(path, pattern) || matchesPattern4(relative3(root, candidate), pattern);
@@ -51810,20 +51917,20 @@ function resourceDiagnostics() {
 }
 // src/lib/sandbox-profiles.ts
 init_sync_utils();
-import { existsSync as existsSync14, readFileSync as readFileSync11, writeFileSync as writeFileSync9, mkdirSync as mkdirSync11 } from "fs";
-import { join as join12, dirname as dirname9 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync11, writeFileSync as writeFileSync9, mkdirSync as mkdirSync11 } from "fs";
+import { join as join14, dirname as dirname9 } from "path";
 var SANDBOX_PROFILE_VERSION = "todos.sandbox-profile.v1";
 function getProfilesPath() {
   if (process.env["TODOS_SANDBOX_PROFILES_PATH"]) {
     return process.env["TODOS_SANDBOX_PROFILES_PATH"];
   }
-  const localDir = join12(process.cwd(), ".todos");
-  const local = join12(localDir, "sandbox-profiles.json");
-  if (existsSync14(localDir))
+  const localDir = join14(process.cwd(), ".todos");
+  const local = join14(localDir, "sandbox-profiles.json");
+  if (existsSync15(localDir))
     return local;
-  if (existsSync14(local))
+  if (existsSync15(local))
     return local;
-  return join12(getHomeDir(), ".hasna", "todos", "sandbox-profiles.json");
+  return join14(getTodosGlobalDir(), "sandbox-profiles.json");
 }
 var cached2 = null;
 function resetSandboxProfileCache() {
@@ -51855,7 +51962,7 @@ function loadSandboxProfiles() {
   if (cached2)
     return cached2;
   const path = getProfilesPath();
-  if (!existsSync14(path)) {
+  if (!existsSync15(path)) {
     cached2 = getDefaultSandboxProfiles();
     return cached2;
   }
@@ -52235,9 +52342,9 @@ init_task_commits();
 
 // src/lib/git-traceability.ts
 init_task_commits();
-import { existsSync as existsSync15, readFileSync as readFileSync12 } from "fs";
+import { existsSync as existsSync16, readFileSync as readFileSync12 } from "fs";
 import { spawnSync as spawnSync2 } from "child_process";
-import { resolve as resolve14 } from "path";
+import { resolve as resolve15 } from "path";
 var GIT_TRACEABILITY_SCHEMA_VERSION = "todos.git_traceability.v1";
 function runGit(args, cwd) {
   const result = spawnSync2("git", args, { cwd, encoding: "utf8" });
@@ -52280,8 +52387,8 @@ function inspectGitCommit(sha, cwd) {
   };
 }
 function loadCiSnapshot(path) {
-  const target = path ? resolve14(path) : resolve14(process.cwd(), ".todos", "ci-snapshot.json");
-  if (!existsSync15(target))
+  const target = path ? resolve15(path) : resolve15(process.cwd(), ".todos", "ci-snapshot.json");
+  if (!existsSync16(target))
     return null;
   try {
     const parsed = JSON.parse(readFileSync12(target, "utf8"));
@@ -52377,8 +52484,8 @@ function formatTraceabilityReport(report) {
 `);
 }
 // src/lib/mention-resolver.ts
-import { existsSync as existsSync16, readdirSync as readdirSync3, readFileSync as readFileSync13, statSync as statSync6 } from "fs";
-import { basename as basename4, isAbsolute, join as join13, relative as relative4, resolve as resolve15, sep as sep2 } from "path";
+import { existsSync as existsSync17, readdirSync as readdirSync3, readFileSync as readFileSync13, statSync as statSync6 } from "fs";
+import { basename as basename4, isAbsolute, join as join15, relative as relative4, resolve as resolve16, sep as sep2 } from "path";
 init_database();
 init_plans();
 init_task_runs();
@@ -52457,7 +52564,7 @@ function backlink(kind, key2, label, target = key2) {
   return { kind, key: key2, label, target };
 }
 function normalizeWorkspace(workspace) {
-  return resolve15(workspace || process.cwd());
+  return resolve16(workspace || process.cwd());
 }
 function isInside(root, absolutePath) {
   const rel = relative4(root, absolutePath);
@@ -52525,14 +52632,14 @@ function resolveFile(parsed, workspace) {
     resolution.warnings.push("path is empty or escapes the workspace");
     return resolution;
   }
-  const absolutePath = resolve15(workspace, relPath);
+  const absolutePath = resolve16(workspace, relPath);
   if (!isInside(workspace, absolutePath)) {
     resolution.path = relPath;
     resolution.warnings.push("path escapes the workspace");
     return resolution;
   }
   resolution.path = relPath;
-  if (!existsSync16(absolutePath)) {
+  if (!existsSync17(absolutePath)) {
     resolution.warnings.push("file does not exist in the local workspace");
     return resolution;
   }
@@ -52565,7 +52672,7 @@ function walkSourceFiles(root, current = root, files = []) {
       if (SKIP_DIRS.has(entry2.name))
         continue;
     }
-    const absolutePath = join13(current, entry2.name);
+    const absolutePath = join15(current, entry2.name);
     if (entry2.isDirectory()) {
       if (!SKIP_DIRS.has(entry2.name))
         walkSourceFiles(root, absolutePath, files);
@@ -53918,7 +54025,7 @@ function getAdapterDocsFingerprint() {
 // src/lib/inbox-intake.ts
 init_database();
 init_tasks();
-import { existsSync as existsSync17, readFileSync as readFileSync14 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync14 } from "fs";
 import { basename as basename5 } from "path";
 import { createHash as createHash19 } from "crypto";
 init_secret_redaction();
@@ -53964,7 +54071,7 @@ function loadRawContent(input) {
     }
   }
   if (input.file_path) {
-    if (!existsSync17(input.file_path))
+    if (!existsSync18(input.file_path))
       throw new Error(`File not found: ${input.file_path}`);
     const raw = readFileSync14(input.file_path, "utf8");
     const name = basename5(input.file_path).toLowerCase();
@@ -54585,7 +54692,7 @@ function formatNlIntakePreviewText(preview) {
 // src/lib/issue-importers.ts
 init_database();
 init_tasks();
-import { existsSync as existsSync18, readFileSync as readFileSync15 } from "fs";
+import { existsSync as existsSync19, readFileSync as readFileSync15 } from "fs";
 var ISSUE_IMPORT_SCHEMA = "todos.issue_import.v1";
 var ISSUE_SOURCES = ["github", "linear", "jira", "auto"];
 var GITHUB_LABEL_PRIORITY = {
@@ -54804,7 +54911,7 @@ function parseIssueExport(data, source9 = "auto") {
   return normalized;
 }
 function loadIssueExportFromFile(path) {
-  if (!existsSync18(path))
+  if (!existsSync19(path))
     throw new Error(`File not found: ${path}`);
   return JSON.parse(readFileSync15(path, "utf8"));
 }
@@ -54965,8 +55072,8 @@ todos import issues ./linear.json --source linear --dry-run
 init_sync_utils();
 init_database();
 init_secret_redaction();
-import { existsSync as existsSync19, mkdirSync as mkdirSync12, writeFileSync as writeFileSync10 } from "fs";
-import { join as join14, dirname as dirname10 } from "path";
+import { existsSync as existsSync20, mkdirSync as mkdirSync12, writeFileSync as writeFileSync10 } from "fs";
+import { join as join16, dirname as dirname10 } from "path";
 var RUN_RECORD_SCHEMA = "todos.run_record.v1";
 var RUN_RECORD_STATUSES = ["active", "completed", "failed", "archived"];
 function parseJsonArray3(raw, fallback = []) {
@@ -55159,7 +55266,7 @@ function buildRunReplayBundle(id, db) {
 }
 function exportRunReplay(id, outputPath, db) {
   const bundle = buildRunReplayBundle(id, db);
-  const path = outputPath ?? join14(process.cwd(), ".todos", "replays", `${id.slice(0, 8)}.json`);
+  const path = outputPath ?? join16(process.cwd(), ".todos", "replays", `${id.slice(0, 8)}.json`);
   mkdirSync12(dirname10(path), { recursive: true });
   writeFileSync10(path, JSON.stringify(bundle, null, 2));
   const d = db || getDatabase();
@@ -55199,15 +55306,15 @@ function formatRunRecordMarkdown(record) {
 `;
 }
 function getDefaultReplayDir() {
-  const local = join14(process.cwd(), ".todos", "replays");
-  if (existsSync19(join14(process.cwd(), ".todos")))
+  const local = join16(process.cwd(), ".todos", "replays");
+  if (existsSync20(join16(process.cwd(), ".todos")))
     return local;
-  return join14(getHomeDir(), ".hasna", "todos", "replays");
+  return join16(getTodosGlobalDir(), "replays");
 }
 // src/lib/release-checks.ts
 init_secret_redaction();
-import { existsSync as existsSync20, readFileSync as readFileSync16, readdirSync as readdirSync4, statSync as statSync7 } from "fs";
-import { join as join15, relative as relative5 } from "path";
+import { existsSync as existsSync21, readFileSync as readFileSync16, readdirSync as readdirSync4, statSync as statSync7 } from "fs";
+import { join as join17, relative as relative5 } from "path";
 var RELEASE_CHECK_SCHEMA = "todos.release_check.v1";
 var FORBIDDEN_DIST_PATTERNS = [
   {
@@ -55220,16 +55327,16 @@ var FORBIDDEN_DIST_PATTERNS = [
 ];
 var REQUIRED_BINS = ["todos", "todos-mcp", "todos-serve"];
 function readPackageJson3(root) {
-  const path = join15(root, "package.json");
-  if (!existsSync20(path))
+  const path = join17(root, "package.json");
+  if (!existsSync21(path))
     throw new Error(`package.json not found in ${root}`);
   return JSON.parse(readFileSync16(path, "utf8"));
 }
 function walkFiles(dir, acc = []) {
-  if (!existsSync20(dir))
+  if (!existsSync21(dir))
     return acc;
   for (const entry2 of readdirSync4(dir)) {
-    const full = join15(dir, entry2);
+    const full = join17(dir, entry2);
     const st = statSync7(full);
     if (st.isDirectory())
       walkFiles(full, acc);
@@ -55247,8 +55354,8 @@ function auditPackageContents(root) {
     checks.push({ id: "files_dist", severity: "error", message: "package.json files must include dist" });
   }
   for (const pattern of files) {
-    const target = join15(root, pattern);
-    if (!existsSync20(target)) {
+    const target = join17(root, pattern);
+    if (!existsSync21(target)) {
       checks.push({ id: `files_missing_${pattern}`, severity: "error", message: `Published file path missing: ${pattern}` });
     }
   }
@@ -55262,8 +55369,8 @@ function auditPackageContents(root) {
       checks.push({ id: `bin_${name}`, severity: "error", message: `Missing bin entry: ${name}` });
       continue;
     }
-    const binPath = join15(root, rel);
-    if (!existsSync20(binPath)) {
+    const binPath = join17(root, rel);
+    if (!existsSync21(binPath)) {
       checks.push({ id: `bin_path_${name}`, severity: "error", message: `Bin file missing: ${rel}` });
     } else {
       checks.push({ id: `bin_ok_${name}`, severity: "info", message: `Bin present: ${name} \u2192 ${rel}` });
@@ -55280,8 +55387,8 @@ function auditPackageContents(root) {
 }
 function scanDistArtifacts(root) {
   const checks = [];
-  const distDir = join15(root, "dist");
-  if (!existsSync20(distDir)) {
+  const distDir = join17(root, "dist");
+  if (!existsSync21(distDir)) {
     checks.push({ id: "dist_missing", severity: "error", message: "dist/ directory not found \u2014 run bun run build" });
     return checks;
   }
@@ -55591,15 +55698,15 @@ function renderReleaseNotesMarkdown(document) {
 // src/lib/db-backup.ts
 init_database();
 init_migrations();
-import { existsSync as existsSync21, copyFileSync, mkdirSync as mkdirSync13, readFileSync as readFileSync17, renameSync, statSync as statSync8, writeFileSync as writeFileSync11, unlinkSync } from "fs";
-import { dirname as dirname11, join as join16, resolve as resolve16 } from "path";
+import { existsSync as existsSync22, copyFileSync, mkdirSync as mkdirSync13, readFileSync as readFileSync17, renameSync, statSync as statSync8, writeFileSync as writeFileSync11, unlinkSync } from "fs";
+import { dirname as dirname11, join as join18, resolve as resolve17 } from "path";
 import { Database as Database4 } from "bun:sqlite";
 var DB_BACKUP_SCHEMA = "todos.db_backup.v1";
 function resolveDbPath(dbPath) {
   if (dbPath)
-    return resolve16(dbPath);
+    return resolve17(dbPath);
   if (process.env["TODOS_DB_PATH"] && process.env["TODOS_DB_PATH"] !== ":memory:") {
-    return resolve16(process.env["TODOS_DB_PATH"]);
+    return resolve17(process.env["TODOS_DB_PATH"]);
   }
   const db = getDatabase();
   const filename = db.filename;
@@ -55609,7 +55716,7 @@ function resolveDbPath(dbPath) {
 }
 function backupDatabase(outputPath, sourcePath) {
   const source9 = resolveDbPath(sourcePath);
-  if (!existsSync21(source9))
+  if (!existsSync22(source9))
     throw new Error(`Database not found: ${source9}`);
   mkdirSync13(dirname11(outputPath), { recursive: true });
   closeDatabase();
@@ -55632,13 +55739,13 @@ function backupDatabase(outputPath, sourcePath) {
   };
 }
 function restoreDatabase(backupPath, targetPath) {
-  if (!existsSync21(backupPath))
+  if (!existsSync22(backupPath))
     throw new Error(`Backup not found: ${backupPath}`);
   const integrity = checkDatabaseIntegrity(backupPath);
   if (!integrity.ok) {
     throw new Error(`Backup failed integrity check: ${integrity.errors.join("; ")}`);
   }
-  const target = targetPath ? resolve16(targetPath) : resolveDbPath();
+  const target = targetPath ? resolve17(targetPath) : resolveDbPath();
   mkdirSync13(dirname11(target), { recursive: true });
   closeDatabase();
   const staging = `${target}.restore.tmp`;
@@ -55648,7 +55755,7 @@ function restoreDatabase(backupPath, targetPath) {
   copyFileSync(backupPath, staging);
   for (const sidecar of [`${target}-wal`, `${target}-shm`]) {
     try {
-      if (existsSync21(sidecar))
+      if (existsSync22(sidecar))
         unlinkSync(sidecar);
     } catch {}
   }
@@ -55663,9 +55770,9 @@ function restoreDatabase(backupPath, targetPath) {
   };
 }
 function checkDatabaseIntegrity(dbPath) {
-  const path = dbPath ? resolve16(dbPath) : resolveDbPath();
+  const path = dbPath ? resolve17(dbPath) : resolveDbPath();
   const errors2 = [];
-  if (!existsSync21(path)) {
+  if (!existsSync22(path)) {
     return {
       schema_version: DB_BACKUP_SCHEMA,
       path,
@@ -55728,7 +55835,7 @@ function checkDatabaseIntegrity(dbPath) {
   };
 }
 function compactDatabase(dbPath) {
-  const path = dbPath ? resolve16(dbPath) : resolveDbPath();
+  const path = dbPath ? resolve17(dbPath) : resolveDbPath();
   const before = statSync8(path).size;
   const db = new Database4(path);
   db.exec("VACUUM");
@@ -55738,7 +55845,7 @@ function compactDatabase(dbPath) {
   return { path, bytes_before: before, bytes_after: after };
 }
 function migrationDryRun(dbPath) {
-  const path = dbPath ? resolve16(dbPath) : resolveDbPath();
+  const path = dbPath ? resolve17(dbPath) : resolveDbPath();
   const db = new Database4(path, { readonly: true });
   let current = 0;
   try {
@@ -55762,13 +55869,13 @@ function migrationDryRun(dbPath) {
   };
 }
 function defaultBackupPath(dbPath) {
-  const base = dbPath ? dirname11(resolve16(dbPath)) : dirname11(resolveDbPath());
+  const base = dbPath ? dirname11(resolve17(dbPath)) : dirname11(resolveDbPath());
   const stamp = new Date().toISOString().replace(/[:.]/g, "-");
-  return join16(base, "backups", `todos-${stamp}.db`);
+  return join18(base, "backups", `todos-${stamp}.db`);
 }
 function readBackupManifest(backupPath) {
   const manifestPath = `${backupPath}.json`;
-  if (!existsSync21(manifestPath))
+  if (!existsSync22(manifestPath))
     return null;
   try {
     return JSON.parse(readFileSync17(manifestPath, "utf8"));
@@ -56289,15 +56396,15 @@ ${SCHEMA_ENTITIES.map((e) => `- **${e}**: \`${JSON_SCHEMAS[e].schema_version}\``
 }
 function exportSchemasToDirectory(dir) {
   const { mkdirSync: mkdirSync14, writeFileSync: writeFileSync12 } = __require("fs");
-  const { join: join17 } = __require("path");
+  const { join: join19 } = __require("path");
   mkdirSync14(dir, { recursive: true });
   const written = [];
   for (const entity of SCHEMA_ENTITIES) {
-    const path = join17(dir, `${entity}.${JSON_SCHEMAS[entity].schema_version.replace(/\./g, "-")}.json`);
+    const path = join19(dir, `${entity}.${JSON_SCHEMAS[entity].schema_version.replace(/\./g, "-")}.json`);
     writeFileSync12(path, JSON.stringify(JSON_SCHEMAS[entity], null, 2));
     written.push(path);
   }
-  const catalogPath = join17(dir, "catalog.json");
+  const catalogPath = join19(dir, "catalog.json");
   writeFileSync12(catalogPath, JSON.stringify({
     catalog_version: JSON_SCHEMA_CATALOG_VERSION,
     semver: SCHEMA_SEMVER,
@@ -58832,7 +58939,7 @@ init_templates();
 init_database();
 init_templates();
 import { mkdirSync as mkdirSync16, writeFileSync as writeFileSync14 } from "fs";
-import { join as join17 } from "path";
+import { join as join19 } from "path";
 var BUILTIN_TEMPLATE_LIBRARY_VERSION = "2026-05-21";
 var BUILTIN_TEMPLATE_LIBRARY_SOURCE = "bundled-local-template-library";
 var TEMPLATE_LIBRARY_SCHEMA = "todos.template_library.v1";
@@ -59108,7 +59215,7 @@ function writeBuiltinTemplateFiles(directory) {
   mkdirSync16(directory, { recursive: true });
   const files = [];
   for (const entry2 of exportBuiltinTemplateFiles()) {
-    const path = join17(directory, entry2.filename);
+    const path = join19(directory, entry2.filename);
     writeFileSync14(path, `${JSON.stringify(entry2.template, null, 2)}
 `, "utf-8");
     files.push(path);
@@ -59400,9 +59507,9 @@ init_tasks();
 init_redaction();
 init_sync_utils();
 import { createHash as createHash20 } from "crypto";
-import { existsSync as existsSync22, readFileSync as readFileSync20, statSync as statSync9 } from "fs";
+import { existsSync as existsSync23, readFileSync as readFileSync20, statSync as statSync9 } from "fs";
 import { hostname as hostname3, platform, arch } from "os";
-import { dirname as dirname15, join as join18, resolve as resolve17 } from "path";
+import { dirname as dirname15, join as join20, resolve as resolve18 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 var MANIFEST_FILES = ["package.json", "dashboard/package.json", "sdk/package.json"];
 var LOCKFILES = ["bun.lock", "bun.lockb", "package-lock.json", "npm-shrinkwrap.json"];
@@ -59424,8 +59531,8 @@ function sha2566(value) {
   return createHash20("sha256").update(value).digest("hex");
 }
 function fileRecord(root, relativePath) {
-  const path = join18(root, relativePath);
-  if (!existsSync22(path))
+  const path = join20(root, relativePath);
+  if (!existsSync23(path))
     return null;
   const stat = statSync9(path);
   if (!stat.isFile())
@@ -59437,7 +59544,7 @@ function manifestRecord(root, relativePath) {
   const base = fileRecord(root, relativePath);
   if (!base)
     return null;
-  const parsed = readJsonFile(join18(root, relativePath));
+  const parsed = readJsonFile(join20(root, relativePath));
   if (!parsed)
     return { ...base, redacted: {} };
   const redacted = redactValue({
@@ -59532,15 +59639,15 @@ function commandEnv(env, includeValues) {
 function defaultSnapshotDir() {
   const dbPath = getDatabasePath();
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
-    return join18(tmpdir3(), "hasna-todos", "environment-snapshots");
-  return join18(dirname15(resolve17(dbPath)), "environment-snapshots");
+    return join20(tmpdir3(), "hasna-todos", "environment-snapshots");
+  return join20(dirname15(resolve18(dbPath)), "environment-snapshots");
 }
 function snapshotWithId(snapshot) {
   const digest3 = sha2566(JSON.stringify(snapshot)).slice(0, 24);
   return { id: `env_${digest3}`, ...snapshot };
 }
 function captureEnvironmentSnapshot(input = {}) {
-  const root = resolve17(input.root || process.cwd());
+  const root = resolve18(input.root || process.cwd());
   const env = input.env || process.env;
   const warnings = [];
   const manifests = MANIFEST_FILES.map((file) => manifestRecord(root, file)).filter((file) => Boolean(file));
@@ -59580,13 +59687,13 @@ function captureEnvironmentSnapshot(input = {}) {
   });
 }
 function writeEnvironmentSnapshot(snapshot, outputPath) {
-  const path = outputPath ? resolve17(outputPath) : join18(defaultSnapshotDir(), `${snapshot.id}.json`);
+  const path = outputPath ? resolve18(outputPath) : join20(defaultSnapshotDir(), `${snapshot.id}.json`);
   ensureDir(dirname15(path));
   writeJsonFile(path, snapshot);
   return path;
 }
 function readEnvironmentSnapshot(path) {
-  const snapshot = readJsonFile(resolve17(path));
+  const snapshot = readJsonFile(resolve18(path));
   if (!snapshot || snapshot.schema_version !== 1 || typeof snapshot.id !== "string") {
     throw new Error(`Invalid environment snapshot: ${path}`);
   }
@@ -59675,7 +59782,7 @@ init_projects();
 init_plans();
 import { createHash as createHash21 } from "crypto";
 import { mkdirSync as mkdirSync18, writeFileSync as writeFileSync16 } from "fs";
-import { dirname as dirname16, join as join19 } from "path";
+import { dirname as dirname16, join as join21 } from "path";
 var DECISION_RECORD_SCHEMA = "todos.decision_record.v1";
 var KNOWLEDGE_SNAPSHOT_SCHEMA = "todos.knowledge_snapshot.v1";
 var DECISION_STATUSES = ["proposed", "accepted", "deprecated", "superseded", "rejected"];
@@ -59905,7 +60012,7 @@ function exportDecisionRecord(id, outputPath, format = "markdown", db) {
   if (!record)
     throw new Error(`Decision record not found: ${id}`);
   const content = format === "markdown" ? formatDecisionRecordMarkdown(record) : JSON.stringify(record, null, 2);
-  const path = outputPath ?? join19(process.cwd(), ".todos", "decisions", `${record.short_ref}.${format === "markdown" ? "md" : "json"}`);
+  const path = outputPath ?? join21(process.cwd(), ".todos", "decisions", `${record.short_ref}.${format === "markdown" ? "md" : "json"}`);
   mkdirSync18(dirname16(path), { recursive: true });
   writeFileSync16(path, content, "utf8");
   return { path, content };
@@ -60053,7 +60160,7 @@ function exportKnowledgeSnapshot(id, outputPath, format = "markdown", db) {
     throw new Error(`Knowledge snapshot not found: ${id}`);
   const content = format === "markdown" ? formatKnowledgeSnapshotMarkdown(record) : JSON.stringify(record, null, 2);
   const slug = record.title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 40);
-  const path = outputPath ?? join19(process.cwd(), ".todos", "knowledge", `${slug || record.id.slice(0, 8)}.${format === "markdown" ? "md" : "json"}`);
+  const path = outputPath ?? join21(process.cwd(), ".todos", "knowledge", `${slug || record.id.slice(0, 8)}.${format === "markdown" ? "md" : "json"}`);
   mkdirSync18(dirname16(path), { recursive: true });
   writeFileSync16(path, content, "utf8");
   return { path, content };
@@ -60352,8 +60459,8 @@ todos report export --kind retrospective --days 14 --format markdown --out retro
 `;
 }
 // src/lib/command-aliases.ts
-import { existsSync as existsSync23, readFileSync as readFileSync21, writeFileSync as writeFileSync18, mkdirSync as mkdirSync20 } from "fs";
-import { join as join20 } from "path";
+import { existsSync as existsSync24, readFileSync as readFileSync21, writeFileSync as writeFileSync18, mkdirSync as mkdirSync20 } from "fs";
+import { join as join22 } from "path";
 var COMMAND_ALIASES_SCHEMA = "todos.command_aliases.v1";
 var RESERVED = new Set([...listTopLevelCommands(), "help", "version", "alias", "shortcuts"]);
 var BUILTIN_SHORTCUTS = [
@@ -60372,7 +60479,7 @@ var BUILTIN_SHORTCUTS = [
   { pattern: /^reports?$/, argv: ["report", "docs"], explain: "Report export documentation" }
 ];
 function aliasesPath(cwd = process.cwd()) {
-  return join20(cwd, ".todos", "aliases.json");
+  return join22(cwd, ".todos", "aliases.json");
 }
 function emptyStore() {
   return { schema_version: COMMAND_ALIASES_SCHEMA, aliases: {}, updated_at: new Date(0).toISOString() };
@@ -60389,7 +60496,7 @@ function validateAliasName(name) {
 }
 function loadAliasStore(cwd) {
   const path = aliasesPath(cwd);
-  if (!existsSync23(path))
+  if (!existsSync24(path))
     return emptyStore();
   const parsed = JSON.parse(readFileSync21(path, "utf8"));
   if (parsed.schema_version !== COMMAND_ALIASES_SCHEMA) {
@@ -60399,7 +60506,7 @@ function loadAliasStore(cwd) {
 }
 function saveAliasStore(store, cwd) {
   const path = aliasesPath(cwd);
-  mkdirSync20(join20(path, ".."), { recursive: true });
+  mkdirSync20(join22(path, ".."), { recursive: true });
   store.updated_at = new Date().toISOString();
   writeFileSync18(path, JSON.stringify(store, null, 2), "utf8");
 }
@@ -61054,18 +61161,18 @@ function createBranchWorkPlan(input, db) {
 init_database();
 init_templates();
 init_plans();
-import { existsSync as existsSync24, readFileSync as readFileSync22, writeFileSync as writeFileSync19, mkdirSync as mkdirSync21 } from "fs";
-import { join as join21 } from "path";
+import { existsSync as existsSync25, readFileSync as readFileSync22, writeFileSync as writeFileSync19, mkdirSync as mkdirSync21 } from "fs";
+import { join as join23 } from "path";
 var USER_SCAFFOLD_SCHEMA = "todos.user_scaffold.v1";
 var SCAFFOLD_KINDS = ["task", "project", "plan", "checklist", "contract", "verification_policy"];
 function storeDir(cwd = process.cwd()) {
-  return join21(cwd, ".todos", "scaffolds");
+  return join23(cwd, ".todos", "scaffolds");
 }
 function storePath(cwd) {
-  return join21(storeDir(cwd), "store.json");
+  return join23(storeDir(cwd), "store.json");
 }
 function versionsDir(cwd) {
-  return join21(storeDir(cwd), "versions");
+  return join23(storeDir(cwd), "versions");
 }
 function slugify4(name) {
   return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
@@ -61075,7 +61182,7 @@ function emptyStore2() {
 }
 function loadUserScaffoldStore(cwd) {
   const path = storePath(cwd);
-  if (!existsSync24(path))
+  if (!existsSync25(path))
     return emptyStore2();
   const parsed = JSON.parse(readFileSync22(path, "utf8"));
   if (parsed.schema_version !== USER_SCAFFOLD_SCHEMA) {
@@ -61090,7 +61197,7 @@ function saveUserScaffoldStore(store, cwd) {
 }
 function snapshotVersion(scaffold, cwd) {
   mkdirSync21(versionsDir(cwd), { recursive: true });
-  const path = join21(versionsDir(cwd), `${scaffold.id}-v${scaffold.version}.json`);
+  const path = join23(versionsDir(cwd), `${scaffold.id}-v${scaffold.version}.json`);
   writeFileSync19(path, JSON.stringify(scaffold, null, 2), "utf8");
 }
 function listUserScaffolds(kind, cwd) {
@@ -61337,7 +61444,7 @@ function listLinkedTemplates(db, cwd) {
 // src/lib/agent-workflow-demo.ts
 init_database();
 import { mkdtempSync } from "fs";
-import { join as join22 } from "path";
+import { join as join24 } from "path";
 import { tmpdir as tmpdir4 } from "os";
 init_projects();
 init_task_lists();
@@ -61358,7 +61465,7 @@ function setupEphemeralDemoDb(options = {}) {
   if (options.db_path) {
     db_path = options.db_path;
   } else if (options.persist) {
-    db_path = join22(mkdtempSync(join22(tmpdir4(), "todos-demo-")), "todos.db");
+    db_path = join24(mkdtempSync(join24(tmpdir4(), "todos-demo-")), "todos.db");
   } else {
     db_path = ":memory:";
   }
@@ -63695,16 +63802,16 @@ function runSearchView(idOrName, db) {
 init_tasks();
 init_config2();
 init_sync_utils();
-import { existsSync as existsSync25, readFileSync as readFileSync23, readdirSync as readdirSync5, writeFileSync as writeFileSync20 } from "fs";
-import { join as join23 } from "path";
+import { existsSync as existsSync26, readFileSync as readFileSync23, readdirSync as readdirSync5, writeFileSync as writeFileSync20 } from "fs";
+import { join as join25 } from "path";
 function getTaskListDir(taskListId) {
-  return join23(HOME, ".claude", "tasks", taskListId);
+  return join25(HOME, ".claude", "tasks", taskListId);
 }
 function readClaudeTask(dir, filename) {
-  return readJsonFile(join23(dir, filename));
+  return readJsonFile(join25(dir, filename));
 }
 function writeClaudeTask(dir, task3) {
-  writeJsonFile(join23(dir, `${task3.id}.json`), task3);
+  writeJsonFile(join25(dir, `${task3.id}.json`), task3);
 }
 function toClaudeStatus(status3) {
   if (status3 === "pending" || status3 === "in_progress" || status3 === "completed") {
@@ -63716,14 +63823,14 @@ function toSqliteStatus(status3) {
   return status3;
 }
 function readPrefixCounter(dir) {
-  const path = join23(dir, ".prefix-counter");
-  if (!existsSync25(path))
+  const path = join25(dir, ".prefix-counter");
+  if (!existsSync26(path))
     return 0;
   const val = parseInt(readFileSync23(path, "utf-8").trim(), 10);
   return isNaN(val) ? 0 : val;
 }
 function writePrefixCounter(dir, value) {
-  writeFileSync20(join23(dir, ".prefix-counter"), String(value));
+  writeFileSync20(join25(dir, ".prefix-counter"), String(value));
 }
 function formatPrefixedSubject(title, prefix, counter) {
   const padded = String(counter).padStart(5, "0");
@@ -63750,7 +63857,7 @@ function taskToClaudeTask(task3, claudeTaskId, existingMeta) {
 }
 function pushToClaudeTaskList(taskListId, projectId, options = {}) {
   const dir = getTaskListDir(taskListId);
-  if (!existsSync25(dir))
+  if (!existsSync26(dir))
     ensureDir(dir);
   const filter = {};
   if (projectId)
@@ -63759,7 +63866,7 @@ function pushToClaudeTaskList(taskListId, projectId, options = {}) {
   const existingByTodosId = new Map;
   const files = listJsonFiles(dir);
   for (const f of files) {
-    const path = join23(dir, f);
+    const path = join25(dir, f);
     const ct = readClaudeTask(dir, f);
     if (ct?.metadata?.["todos_id"]) {
       existingByTodosId.set(ct.metadata["todos_id"], { task: ct, mtimeMs: getFileMtimeMs(path) });
@@ -63848,7 +63955,7 @@ function pushToClaudeTaskList(taskListId, projectId, options = {}) {
 }
 function pullFromClaudeTaskList(taskListId, projectId, options = {}) {
   const dir = getTaskListDir(taskListId);
-  if (!existsSync25(dir)) {
+  if (!existsSync26(dir)) {
     return { pushed: 0, pulled: 0, errors: [`Task list directory not found: ${dir}`] };
   }
   const files = readdirSync5(dir).filter((f) => f.endsWith(".json"));
@@ -63868,7 +63975,7 @@ function pullFromClaudeTaskList(taskListId, projectId, options = {}) {
   }
   for (const f of files) {
     try {
-      const filePath = join23(dir, f);
+      const filePath = join25(dir, f);
       const ct = readClaudeTask(dir, f);
       if (!ct)
         continue;
@@ -63939,20 +64046,20 @@ function syncClaudeTaskList(taskListId, projectId, options = {}) {
 init_tasks();
 init_sync_utils();
 init_config2();
-import { existsSync as existsSync26 } from "fs";
-import { join as join24 } from "path";
+import { existsSync as existsSync27 } from "fs";
+import { join as join26 } from "path";
 function agentBaseDir(agent) {
   const key2 = `TODOS_${agent.toUpperCase()}_TASKS_DIR`;
-  return process.env[key2] || getAgentTasksDir(agent) || process.env["TODOS_AGENT_TASKS_DIR"] || join24(getTodosGlobalDir(), "agents");
+  return process.env[key2] || getAgentTasksDir(agent) || process.env["TODOS_AGENT_TASKS_DIR"] || join26(getTodosGlobalDir(), "agents");
 }
 function getTaskListDir2(agent, taskListId) {
-  return join24(agentBaseDir(agent), agent, taskListId);
+  return join26(agentBaseDir(agent), agent, taskListId);
 }
 function readAgentTask(dir, filename) {
-  return readJsonFile(join24(dir, filename));
+  return readJsonFile(join26(dir, filename));
 }
 function writeAgentTask(dir, task3) {
-  writeJsonFile(join24(dir, `${task3.id}.json`), task3);
+  writeJsonFile(join26(dir, `${task3.id}.json`), task3);
 }
 function taskToAgentTask(task3, externalId, existingMeta) {
   return withSyncFingerprint({
@@ -63977,7 +64084,7 @@ function metadataKey(agent) {
 }
 function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
   const dir = getTaskListDir2(agent, taskListId);
-  if (!existsSync26(dir))
+  if (!existsSync27(dir))
     ensureDir(dir);
   const filter = {};
   if (projectId)
@@ -63986,7 +64093,7 @@ function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
   const existingByTodosId = new Map;
   const files = listJsonFiles(dir);
   for (const f of files) {
-    const path = join24(dir, f);
+    const path = join26(dir, f);
     const at = readAgentTask(dir, f);
     if (at?.metadata?.["todos_id"]) {
       existingByTodosId.set(at.metadata["todos_id"], { task: at, mtimeMs: getFileMtimeMs(path) });
@@ -64062,7 +64169,7 @@ function pushToAgentTaskList(agent, taskListId, projectId, options = {}) {
 }
 function pullFromAgentTaskList(agent, taskListId, projectId, options = {}) {
   const dir = getTaskListDir2(agent, taskListId);
-  if (!existsSync26(dir)) {
+  if (!existsSync27(dir)) {
     return { pushed: 0, pulled: 0, errors: [`Task list directory not found: ${dir}`] };
   }
   const files = listJsonFiles(dir);
@@ -64081,7 +64188,7 @@ function pullFromAgentTaskList(agent, taskListId, projectId, options = {}) {
   }
   for (const f of files) {
     try {
-      const filePath = join24(dir, f);
+      const filePath = join26(dir, f);
       const at = readAgentTask(dir, f);
       if (!at)
         continue;
@@ -64221,9 +64328,9 @@ function syncWithAgents(agents, taskListIdByAgent, projectId, direction = "both"
 // src/lib/extract.ts
 init_tasks();
 init_task_files();
-import { existsSync as existsSync27, readFileSync as readFileSync24, statSync as statSync10 } from "fs";
+import { existsSync as existsSync28, readFileSync as readFileSync24, statSync as statSync10 } from "fs";
 import { createHash as createHash22 } from "crypto";
-import { relative as relative6, resolve as resolve18, join as join25 } from "path";
+import { relative as relative6, resolve as resolve19, join as join27 } from "path";
 var EXTRACT_TAGS = ["TODO", "FIXME", "HACK", "XXX", "BUG", "NOTE"];
 var DEFAULT_EXTENSIONS = new Set([
   ".ts",
@@ -64293,9 +64400,9 @@ function normalizePathForMatch(value) {
   return value.replace(/\\/g, "/").replace(/^\.\//, "");
 }
 function readGitignorePatterns(basePath) {
-  const root = statSync10(basePath).isFile() ? resolve18(basePath, "..") : basePath;
-  const gitignorePath = join25(root, ".gitignore");
-  if (!existsSync27(gitignorePath))
+  const root = statSync10(basePath).isFile() ? resolve19(basePath, "..") : basePath;
+  const gitignorePath = join27(root, ".gitignore");
+  if (!existsSync28(gitignorePath))
     return [];
   try {
     return readFileSync24(gitignorePath, "utf-8").split(`
@@ -64429,7 +64536,7 @@ function collectFiles(basePath, extensions, excludes, respectGitignore) {
   return files.sort();
 }
 function buildCodebaseIndex(options) {
-  const basePath = resolve18(options.path);
+  const basePath = resolve19(options.path);
   const tags = options.patterns || [...EXTRACT_TAGS];
   const extensions = options.extensions ? new Set(options.extensions.map((e) => e.startsWith(".") ? e : `.${e}`)) : DEFAULT_EXTENSIONS;
   const excludes = options.exclude || [];
@@ -64437,10 +64544,10 @@ function buildCodebaseIndex(options) {
   const files = collectFiles(basePath, extensions, excludes, respectGitignore);
   const indexed = [];
   for (const file of files) {
-    const fullPath = statSync10(basePath).isFile() ? basePath : join25(basePath, file);
+    const fullPath = statSync10(basePath).isFile() ? basePath : join27(basePath, file);
     try {
       const source9 = readFileSync24(fullPath, "utf-8");
-      const relPath = statSync10(basePath).isFile() ? relative6(resolve18(basePath, ".."), fullPath) : file;
+      const relPath = statSync10(basePath).isFile() ? relative6(resolve19(basePath, ".."), fullPath) : file;
       indexed.push({
         file: relPath,
         checksum: stableHash(source9).slice(0, 24),
@@ -64460,7 +64567,7 @@ function buildCodebaseIndex(options) {
   };
 }
 function extractTodos(options, db) {
-  const basePath = resolve18(options.path);
+  const basePath = resolve19(options.path);
   const tags = options.patterns || [...EXTRACT_TAGS];
   const extensions = options.extensions ? new Set(options.extensions.map((e) => e.startsWith(".") ? e : `.${e}`)) : DEFAULT_EXTENSIONS;
   const excludes = options.exclude || [];
@@ -64468,10 +64575,10 @@ function extractTodos(options, db) {
   const files = collectFiles(basePath, extensions, excludes, respectGitignore);
   const allComments = [];
   for (const file of files) {
-    const fullPath = statSync10(basePath).isFile() ? basePath : join25(basePath, file);
+    const fullPath = statSync10(basePath).isFile() ? basePath : join27(basePath, file);
     try {
       const source9 = readFileSync24(fullPath, "utf-8");
-      const relPath = statSync10(basePath).isFile() ? relative6(resolve18(basePath, ".."), fullPath) : file;
+      const relPath = statSync10(basePath).isFile() ? relative6(resolve19(basePath, ".."), fullPath) : file;
       const comments = extractFromSource(source9, relPath, tags);
       allComments.push(...comments);
     } catch {}
@@ -64565,7 +64672,7 @@ async function watchSourceTodos(options, onRun) {
   const interval = Math.max(100, options.interval_ms || 2000);
   const once = options.once !== false && (!options.max_runs || options.max_runs <= 1);
   const maxRuns = options.max_runs ?? (once ? 1 : Number.POSITIVE_INFINITY);
-  const root = resolve18(options.path);
+  const root = resolve19(options.path);
   const runs = [];
   let previous = new Map;
   for (let runNumber = 1;runNumber <= maxRuns; runNumber++) {
@@ -65447,8 +65554,8 @@ function renderAgentReplaySimulationMarkdown(simulation) {
 // src/lib/local-extensions.ts
 init_config2();
 import { createHash as createHash24, createVerify } from "crypto";
-import { existsSync as existsSync28, readdirSync as readdirSync6, readFileSync as readFileSync26, statSync as statSync11 } from "fs";
-import { basename as basename6, join as join26, resolve as resolve19 } from "path";
+import { existsSync as existsSync29, readdirSync as readdirSync6, readFileSync as readFileSync26, statSync as statSync11 } from "fs";
+import { basename as basename6, join as join28, resolve as resolve20 } from "path";
 init_redaction();
 init_runner_sandbox();
 function isObject2(value) {
@@ -65729,11 +65836,11 @@ function verifyExtensionSignature(input) {
   return verifier.verify(input.public_key, decodeSignature(input.signature));
 }
 function inspectExtensionSource(source9) {
-  const resolved = resolve19(source9);
-  if (!existsSync28(resolved))
+  const resolved = resolve20(source9);
+  if (!existsSync29(resolved))
     throw new Error(`extension source not found: ${source9}`);
   const stat = statSync11(resolved);
-  const manifestPath = stat.isDirectory() ? [join26(resolved, "todos.extension.json"), join26(resolved, "extension.json")].find(existsSync28) : resolved;
+  const manifestPath = stat.isDirectory() ? [join28(resolved, "todos.extension.json"), join28(resolved, "extension.json")].find(existsSync29) : resolved;
   if (!manifestPath)
     throw new Error(`extension directory ${source9} is missing todos.extension.json`);
   const raw = readFileSync26(manifestPath);
@@ -65827,26 +65934,26 @@ function testExtensionCompatibility(sourceOrManifest) {
 function projectExtensionSources(projectPath) {
   if (!projectPath)
     return [];
-  const root = resolve19(projectPath);
+  const root = resolve20(projectPath);
   const candidates = [
-    join26(root, "todos.extension.json"),
-    join26(root, ".todos", "todos.extension.json")
+    join28(root, "todos.extension.json"),
+    join28(root, ".todos", "todos.extension.json")
   ];
-  const extensionDir = join26(root, ".todos", "extensions");
-  if (existsSync28(extensionDir)) {
+  const extensionDir = join28(root, ".todos", "extensions");
+  if (existsSync29(extensionDir)) {
     for (const entry2 of readdirSync6(extensionDir)) {
       if (entry2.startsWith("."))
         continue;
-      const full = join26(extensionDir, entry2);
+      const full = join28(extensionDir, entry2);
       if (statSync11(full).isDirectory() || entry2.endsWith(".json"))
         candidates.push(full);
     }
   }
-  return candidates.filter(existsSync28);
+  return candidates.filter(existsSync29);
 }
 function discoverLocalExtensions(options = {}) {
   const config = loadConfig();
-  const projectPath = options.project_path ? resolve19(options.project_path) : null;
+  const projectPath = options.project_path ? resolve20(options.project_path) : null;
   const configuredSources = [
     ...config.extension_sources || [],
     ...projectPath ? config.project_overrides?.[projectPath]?.extension_sources || [] : []
@@ -65854,7 +65961,7 @@ function discoverLocalExtensions(options = {}) {
   const sources = Array.from(new Set([
     ...configuredSources,
     ...projectExtensionSources(projectPath || undefined)
-  ])).map((source9) => projectPath && !source9.startsWith("/") ? resolve19(projectPath, source9) : resolve19(source9));
+  ])).map((source9) => projectPath && !source9.startsWith("/") ? resolve20(projectPath, source9) : resolve20(source9));
   const warnings = [];
   const discovered = [];
   for (const source9 of sources) {
@@ -66722,7 +66829,7 @@ init_redaction();
 // src/lib/retention-cleanup.ts
 init_artifact_store();
 init_database();
-import { existsSync as existsSync29, unlinkSync as unlinkSync2 } from "fs";
+import { existsSync as existsSync30, unlinkSync as unlinkSync2 } from "fs";
 var RETENTION_CLEANUP_CONFIRMATION = "delete-local-retention-data";
 var ALL_SCOPES = ["comments", "runs", "verifications", "expired_artifacts"];
 var EMPTY_COUNTS = {
@@ -66933,7 +67040,7 @@ function applyRetentionCleanup(input, db) {
   for (const artifact of report.candidates.artifact_files) {
     try {
       const path = artifactStorePath(artifact.relative_path);
-      if (!existsSync29(path)) {
+      if (!existsSync30(path)) {
         report.warnings.push(`stored artifact already missing: ${artifact.relative_path}`);
         continue;
       }
@@ -67174,8 +67281,8 @@ init_artifact_store();
 
 // src/lib/doctor.ts
 init_database();
-import { chmodSync, copyFileSync as copyFileSync2, existsSync as existsSync30, mkdirSync as mkdirSync22, statSync as statSync12 } from "fs";
-import { basename as basename7, dirname as dirname18, join as join27 } from "path";
+import { chmodSync, copyFileSync as copyFileSync2, existsSync as existsSync31, mkdirSync as mkdirSync22, statSync as statSync12 } from "fs";
+import { basename as basename7, dirname as dirname18, join as join29 } from "path";
 init_migrations();
 init_schema();
 init_recurrence();
@@ -67285,7 +67392,7 @@ function findMissingProjectRoots(db) {
       continue;
     if (!row.path.startsWith("/"))
       continue;
-    if (!existsSync30(row.path))
+    if (!existsSync31(row.path))
       missing++;
   }
   return missing;
@@ -67345,16 +67452,16 @@ function databasePermissionsAreUnsafe(dbPath) {
 function createBackup(dbPath) {
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
     return;
-  if (!existsSync30(dbPath))
+  if (!existsSync31(dbPath))
     return;
   const stamp = now().replace(/[:.]/g, "-");
-  const backupDir = join27(dirname18(dbPath), `${basename7(dbPath)}.backup-${stamp}`);
+  const backupDir = join29(dirname18(dbPath), `${basename7(dbPath)}.backup-${stamp}`);
   const files = [];
   mkdirSync22(backupDir, { recursive: true });
   for (const source9 of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {
-    if (!existsSync30(source9))
+    if (!existsSync31(source9))
       continue;
-    const target = join27(backupDir, basename7(source9));
+    const target = join29(backupDir, basename7(source9));
     copyFileSync2(source9, target);
     files.push(target);
   }