@hasna/todos 0.15.50 → 0.15.52

package/dist/mcp/index.js

@@ -4089,18 +4089,112 @@ var init_identity_mapping = __esm(() => {
   });
 });
 
-// src/lib/sync-utils.ts
-import { existsSync as existsSync2, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
+// node_modules/.bun/@hasna+paths@0.1.0/node_modules/@hasna/paths/dist/index.js
 import { homedir } from "os";
 import { join } from "path";
+function assertApp(app) {
+  if (typeof app !== "string" || app.length === 0) {
+    throw new TypeError("paths: app must be a non-empty string");
+  }
+  if (!APP_SLUG_RE.test(app)) {
+    throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
+  }
+}
+function envOf(options) {
+  return options.env ?? process.env;
+}
+function envValue(options, kind) {
+  const value = envOf(options)[KIND_ENV[kind]];
+  return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function isMacOS(platform) {
+  return platform === "darwin";
+}
+function baseDir(kind, options) {
+  const override = envValue(options, kind);
+  if (override)
+    return override;
+  const home = options.home ?? homedir();
+  const platform = options.platform ?? process.platform;
+  if (isMacOS(platform)) {
+    switch (kind) {
+      case "config":
+      case "data":
+        return join(home, "Library", "Application Support", "Hasna");
+      case "cache":
+        return join(home, "Library", "Caches", "Hasna");
+      case "state":
+        return join(home, "Library", "Logs", "Hasna");
+    }
+  }
+  switch (kind) {
+    case "config":
+      return join(home, ".config", "hasna");
+    case "data":
+      return join(home, ".local", "share", "hasna");
+    case "state":
+      return join(home, ".local", "state", "hasna");
+    case "cache":
+      return join(home, ".cache", "hasna");
+  }
+}
+function resolvePath(kind, options) {
+  assertApp(options.app);
+  const appSegment = options.internal === true ? join("internal", options.app) : options.app;
+  return join(baseDir(kind, options), appSegment);
+}
+function dataDir(options) {
+  return resolvePath("data", options);
+}
+var KIND_ENV, APP_SLUG_RE;
+var init_dist = __esm(() => {
+  KIND_ENV = {
+    config: "HASNA_CONFIG_HOME",
+    data: "HASNA_DATA_HOME",
+    state: "HASNA_STATE_HOME",
+    cache: "HASNA_CACHE_HOME"
+  };
+  APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+});
+
+// src/lib/paths.ts
+import { existsSync as existsSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2, resolve as resolve2 } from "path";
+function effectiveHome(env = process.env) {
+  return env.HOME || env.USERPROFILE || homedir2();
+}
+function legacyHomeDir(env = process.env) {
+  return join2(effectiveHome(env), ".hasna", "todos");
+}
+function resolverHome(env = process.env) {
+  return dataDir({ app: "todos", home: effectiveHome(env), env });
+}
+function adoptResolverHome(resolved, env = process.env) {
+  const dataOverride = env.HASNA_DATA_HOME;
+  if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
+    return true;
+  return existsSync2(join2(resolved, "todos.db")) || existsSync2(join2(resolved, "config.json"));
+}
+function getTodosDir(env = process.env) {
+  const resolved = resolverHome(env);
+  return resolve2(adoptResolverHome(resolved, env) ? resolved : legacyHomeDir(env));
+}
+var init_paths = __esm(() => {
+  init_dist();
+});
+
+// src/lib/sync-utils.ts
+import { existsSync as existsSync3, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
+import { homedir as homedir3 } from "os";
 function getHomeDir() {
-  return process.env["HOME"] || process.env["USERPROFILE"] || homedir();
+  return process.env["HOME"] || process.env["USERPROFILE"] || homedir3();
 }
 function getTodosGlobalDir() {
-  return join(getHomeDir(), ".hasna", "todos");
+  return getTodosDir();
 }
 function ensureDir(dir) {
-  if (!existsSync2(dir))
+  if (!existsSync3(dir))
     mkdirSync(dir, { recursive: true });
 }
 function readJsonFile(path) {
@@ -4121,6 +4215,7 @@ function appendSyncConflict(metadata, conflict, limit = 5) {
 }
 var HOME;
 var init_sync_utils = __esm(() => {
+  init_paths();
   HOME = getHomeDir();
 });
 
@@ -4431,18 +4526,18 @@ __export(exports_database, {
   LOCK_EXPIRY_MINUTES: () => LOCK_EXPIRY_MINUTES
 });
 import { Database } from "bun:sqlite";
-import { existsSync as existsSync3, mkdirSync as mkdirSync2 } from "fs";
-import { dirname, join as join2, resolve as resolve2 } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2 } from "fs";
+import { dirname, join as join3, resolve as resolve3 } from "path";
 function isInMemoryDb(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function findNearestProjectDb(startDir) {
   const gitRoot = findGitRoot(startDir);
-  const stopAt = gitRoot ? resolve2(gitRoot) : resolve2(startDir);
-  let dir = resolve2(startDir);
+  const stopAt = gitRoot ? resolve3(gitRoot) : resolve3(startDir);
+  let dir = resolve3(startDir);
   while (true) {
-    const candidate = join2(dir, ".hasna", "todos", "todos.db");
-    if (existsSync3(candidate))
+    const candidate = join3(dir, ".hasna", "todos", "todos.db");
+    if (existsSync4(candidate))
       return candidate;
     if (dir === stopAt)
       break;
@@ -4454,9 +4549,9 @@ function findNearestProjectDb(startDir) {
   return null;
 }
 function findGitRoot(startDir) {
-  let dir = resolve2(startDir);
+  let dir = resolve3(startDir);
   while (true) {
-    if (existsSync3(join2(dir, ".git")))
+    if (existsSync4(join3(dir, ".git")))
       return dir;
     const parent = dirname(dir);
     if (parent === dir)
@@ -4466,7 +4561,7 @@ function findGitRoot(startDir) {
   return null;
 }
 function getGlobalDbPath() {
-  return join2(getHomeDir(), ".hasna", "todos", "todos.db");
+  return join3(getTodosGlobalDir(), "todos.db");
 }
 function hasExplicitProjectArg(args = process.argv.slice(2)) {
   return args.some((arg) => arg === "--project" || arg.startsWith("--project="));
@@ -4504,7 +4599,7 @@ function getDbPath() {
   if (process.env["TODOS_DB_SCOPE"] === "project") {
     const gitRoot = findGitRoot(cwd);
     if (gitRoot && canCreateScopedProjectDb()) {
-      return join2(gitRoot, ".hasna", "todos", "todos.db");
+      return join3(gitRoot, ".hasna", "todos", "todos.db");
     }
   }
   return getGlobalDbPath();
@@ -4515,8 +4610,8 @@ function getDatabasePath() {
 function ensureDir2(filePath) {
   if (isInMemoryDb(filePath))
     return;
-  const dir = dirname(resolve2(filePath));
-  if (!existsSync3(dir)) {
+  const dir = dirname(resolve3(filePath));
+  if (!existsSync4(dir)) {
     mkdirSync2(dir, { recursive: true });
   }
 }
@@ -9433,15 +9528,15 @@ var init_zod = __esm(() => {
 });
 
 // src/lib/config.ts
-import { existsSync as existsSync4, readFileSync as readFileSync2 } from "fs";
-import { dirname as dirname2, join as join3 } from "path";
+import { existsSync as existsSync5, readFileSync as readFileSync2 } from "fs";
+import { dirname as dirname2, join as join4 } from "path";
 function getConfigPath() {
-  return join3(getTodosGlobalDir(), "config.json");
+  return join4(getTodosGlobalDir(), "config.json");
 }
 function loadConfig() {
   if (cached)
     return cached;
-  if (!existsSync4(getConfigPath())) {
+  if (!existsSync5(getConfigPath())) {
     cached = {};
     return cached;
   }
@@ -10404,14 +10499,14 @@ var init_completion_guard = __esm(() => {
 
 // src/lib/event-emission-safety.ts
 import { tmpdir } from "os";
-import { resolve as resolve3, sep } from "path";
+import { resolve as resolve4, sep } from "path";
 function envFlag(name) {
   const value = process.env[name]?.trim().toLowerCase();
   return value === "1" || value === "true" || value === "yes" || value === "on";
 }
 function isUnder(parent, child) {
-  const normalizedParent = resolve3(parent);
-  const normalizedChild = resolve3(child);
+  const normalizedParent = resolve4(parent);
+  const normalizedChild = resolve4(child);
   return normalizedChild === normalizedParent || normalizedChild.startsWith(`${normalizedParent}${sep}`);
 }
 function databasePathFromDatabase(db) {
@@ -10454,9 +10549,9 @@ var init_event_emission_safety = __esm(() => {
 });
 
 // src/lib/workspace-trust.ts
-import { relative, resolve as resolve4 } from "path";
+import { relative, resolve as resolve5 } from "path";
 function normalizePath(path) {
-  return resolve4(path);
+  return resolve5(path);
 }
 function unique2(values) {
   return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
@@ -10638,9 +10733,9 @@ var init_workspace_trust = __esm(() => {
 });
 
 // src/lib/runner-sandbox.ts
-import { relative as relative2, resolve as resolve5 } from "path";
+import { relative as relative2, resolve as resolve6 } from "path";
 function normalizePath2(path) {
-  return resolve5(path);
+  return resolve6(path);
 }
 function unique3(values) {
   return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
@@ -10830,7 +10925,7 @@ var init_runner_sandbox = __esm(() => {
 // src/lib/event-hooks.ts
 import { createHash, randomUUID } from "crypto";
 import { appendFileSync, mkdirSync as mkdirSync3 } from "fs";
-import { dirname as dirname3, resolve as resolve6 } from "path";
+import { dirname as dirname3, resolve as resolve7 } from "path";
 import { createConnection } from "net";
 function safeName(name) {
   const trimmed = name.trim();
@@ -10968,7 +11063,7 @@ async function deliverHook(hook, envelope) {
       if (hook.target === "stdout") {
         output = line.trim();
       } else if (hook.target === "file") {
-        const filePath = resolve6(hook.file_path);
+        const filePath = resolve7(hook.file_path);
         mkdirSync3(dirname3(filePath), { recursive: true });
         appendFileSync(filePath, line);
       } else if (hook.target === "socket") {
@@ -11089,9 +11184,9 @@ var init_event_hooks = __esm(() => {
 // node_modules/.bun/@hasna+events@0.1.16/node_modules/@hasna/events/dist/index.js
 import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
 import { Buffer as Buffer2 } from "buffer";
-import { existsSync as existsSync5 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join4 } from "path";
+import { existsSync as existsSync6 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join5 } from "path";
 import { createHmac, timingSafeEqual } from "crypto";
 import { randomUUID as randomUUID2 } from "crypto";
 import { spawn } from "child_process";
@@ -11192,7 +11287,7 @@ function channelMatchesEvent(channel, event) {
   return channel.filters.some((filter) => eventMatchesFilter(event, filter));
 }
 function getEventsDataDir(override) {
-  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join4(homedir2(), ".hasna", "events");
+  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join5(homedir4(), ".hasna", "events");
 }
 
 class JsonEventsStore {
@@ -11201,12 +11296,12 @@ class JsonEventsStore {
   channelsPath;
   eventsPath;
   deliveriesPath;
-  constructor(dataDir = getEventsDataDir()) {
-    this.dataDir = dataDir;
-    this.runtime = localJsonRuntime(dataDir);
-    this.channelsPath = join4(dataDir, "channels.json");
-    this.eventsPath = join4(dataDir, "events.json");
-    this.deliveriesPath = join4(dataDir, "deliveries.json");
+  constructor(dataDir2 = getEventsDataDir()) {
+    this.dataDir = dataDir2;
+    this.runtime = localJsonRuntime(dataDir2);
+    this.channelsPath = join5(dataDir2, "channels.json");
+    this.eventsPath = join5(dataDir2, "events.json");
+    this.deliveriesPath = join5(dataDir2, "deliveries.json");
   }
   async init() {
     await mkdir(this.dataDir, { recursive: true, mode: 448 });
@@ -11323,7 +11418,7 @@ class JsonEventsStore {
     };
   }
   async ensureArrayFile(path) {
-    if (!existsSync5(path)) {
+    if (!existsSync6(path)) {
       await writeFile(path, `[]
 `, { encoding: "utf-8", mode: 384 });
     }
@@ -11353,7 +11448,7 @@ class JsonEventsStore {
     });
   }
 }
-function localJsonRuntime(dataDir = getEventsDataDir()) {
+function localJsonRuntime(dataDir2 = getEventsDataDir()) {
   return {
     mode: "local-files",
     name: "json-events-store",
@@ -11366,7 +11461,7 @@ function localJsonRuntime(dataDir = getEventsDataDir()) {
     durable: true,
     idempotency: "best-effort-local",
     replayCursors: true,
-    description: `Local JSON files in ${dataDir}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
+    description: `Local JSON files in ${dataDir2}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
   };
 }
 function encodeLocalJsonEventCursor(offset, options = {}) {
@@ -11545,7 +11640,7 @@ async function dispatchCommand(event, channel) {
     HASNA_EVENT_SCHEMA_VERSION: event.schemaVersion,
     HASNA_EVENT_JSON: eventJson
   };
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     const child = spawn(channel.command.command, channel.command.args ?? [], {
       cwd: channel.command.cwd,
       env,
@@ -11563,7 +11658,7 @@ async function dispatchCommand(event, channel) {
     });
     child.on("error", (error) => {
       clearTimeout(timeout);
-      resolve7({
+      resolve8({
         attempt: 1,
         status: "failed",
         startedAt,
@@ -11576,7 +11671,7 @@ async function dispatchCommand(event, channel) {
     child.on("close", (code, signal) => {
       clearTimeout(timeout);
       const success = code === 0;
-      resolve7({
+      resolve8({
         attempt: 1,
         status: success ? "success" : "failed",
         startedAt,
@@ -11918,7 +12013,7 @@ function normalizeRetryPolicy(policy) {
   };
 }
 var HASNA_EVENTS_DIR_ENV = "HASNA_EVENTS_DIR", HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME", LOCAL_JSON_EVENT_CURSOR_PREFIX = "local-json-v1:", DEFAULT_EVENT_PAGE_LIMIT = 100, MAX_EVENT_PAGE_LIMIT = 1000, DEFAULT_SIGNATURE_TOLERANCE_MS, EventValidationError, defaultEventTypeCatalog, APP_EVENT_V1_MAX_DATA_BYTES;
-var init_dist = __esm(() => {
+var init_dist2 = __esm(() => {
   DEFAULT_SIGNATURE_TOLERANCE_MS = 5 * 60 * 1000;
   EventValidationError = class EventValidationError extends Error {
     eventType;
@@ -12338,7 +12433,7 @@ function emitSharedTaskEventQuiet(input) {
 }
 var SOURCE = "todos";
 var init_shared_events = __esm(() => {
-  init_dist();
+  init_dist2();
   init_database();
   init_projects();
   init_task_lists();
@@ -12882,14 +12977,14 @@ var init_task_parent_integrity = __esm(() => {
 });
 
 // src/lib/creator-identity.ts
-import { existsSync as existsSync6, rmSync } from "fs";
-import { join as join5 } from "path";
+import { existsSync as existsSync7, rmSync } from "fs";
+import { join as join6 } from "path";
 function identityFilePath() {
-  return join5(getTodosGlobalDir(), "identity.json");
+  return join6(getTodosGlobalDir(), "identity.json");
 }
 function readPersistedIdentity() {
   const path = identityFilePath();
-  if (!existsSync6(path))
+  if (!existsSync7(path))
     return null;
   const parsed = readJsonFile(path);
   if (!parsed || typeof parsed.agent_id !== "string" || !parsed.agent_id.trim())
@@ -14420,17 +14515,17 @@ function sanitizeCreateTaskInput(input) {
   return {
     ...input,
     title: sanitizePreWriteText(input.title, "task.title"),
-    description: input.description !== undefined ? sanitizePreWriteText(input.description, "task.description") : undefined,
+    description: input.description == null ? input.description : sanitizePreWriteText(input.description, "task.description"),
     tags: input.tags !== undefined ? sanitizePreWriteValue(input.tags, "task.tags") : undefined,
     metadata: input.metadata !== undefined ? sanitizePreWriteValue(input.metadata, "task.metadata") : undefined,
-    reason: input.reason !== undefined ? sanitizePreWriteText(input.reason, "task.reason") : undefined
+    reason: input.reason == null ? input.reason : sanitizePreWriteText(input.reason, "task.reason")
   };
 }
 function sanitizeUpdateTaskInput(input) {
   return {
     ...input,
     title: input.title !== undefined ? sanitizePreWriteText(input.title, "task.title") : undefined,
-    description: input.description !== undefined ? sanitizePreWriteText(input.description, "task.description") : undefined,
+    description: input.description == null ? input.description : sanitizePreWriteText(input.description, "task.description"),
     tags: input.tags !== undefined ? sanitizePreWriteValue(input.tags, "task.tags") : undefined,
     metadata: input.metadata !== undefined ? sanitizePreWriteValue(input.metadata, "task.metadata") : undefined
   };
@@ -16427,28 +16522,28 @@ var init_boards = __esm(() => {
 
 // src/lib/artifact-store.ts
 import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync7, mkdirSync as mkdirSync4, readFileSync as readFileSync3, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "fs";
-import { basename, dirname as dirname4, join as join6, resolve as resolve7 } from "path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync4, readFileSync as readFileSync3, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "fs";
+import { basename, dirname as dirname4, join as join7, resolve as resolve8 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 function isInMemoryDb2(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function artifactStoreRoot() {
   if (process.env["HASNA_TODOS_ARTIFACTS_DIR"])
-    return resolve7(process.env["HASNA_TODOS_ARTIFACTS_DIR"]);
+    return resolve8(process.env["HASNA_TODOS_ARTIFACTS_DIR"]);
   if (process.env["TODOS_ARTIFACTS_DIR"])
-    return resolve7(process.env["TODOS_ARTIFACTS_DIR"]);
+    return resolve8(process.env["TODOS_ARTIFACTS_DIR"]);
   const dbPath = getDatabasePath();
   if (isInMemoryDb2(dbPath))
-    return join6(tmpdir2(), "hasna-todos-artifacts");
-  return join6(dirname4(resolve7(dbPath)), "artifacts");
+    return join7(tmpdir2(), "hasna-todos-artifacts");
+  return join7(dirname4(resolve8(dbPath)), "artifacts");
 }
 function artifactStorePath(relativePath) {
   const normalized = relativePath.replace(/\\/g, "/");
   if (normalized.includes("..") || normalized.startsWith("/") || normalized.length === 0) {
     throw new Error("Invalid artifact store path");
   }
-  return join6(artifactStoreRoot(), normalized);
+  return join7(artifactStoreRoot(), normalized);
 }
 function sha256(buffer) {
   return createHash2("sha256").update(buffer).digest("hex");
@@ -16488,8 +16583,8 @@ function mediaTypeFor(path, textLike) {
   return "application/octet-stream";
 }
 function storeArtifactContent(input) {
-  const sourcePath = resolve7(input.path);
-  if (!existsSync7(sourcePath))
+  const sourcePath = resolve8(input.path);
+  if (!existsSync8(sourcePath))
     return null;
   const sourceStat = statSync2(sourcePath);
   if (!sourceStat.isFile())
@@ -16506,9 +16601,9 @@ function storeArtifactContent(input) {
       redactionStatus = "redacted";
   }
   const storedSha = sha256(storedBuffer);
-  const relativePath = join6("sha256", storedSha.slice(0, 2), storedSha).replace(/\\/g, "/");
+  const relativePath = join7("sha256", storedSha.slice(0, 2), storedSha).replace(/\\/g, "/");
   const destination = artifactStorePath(relativePath);
-  if (!existsSync7(destination)) {
+  if (!existsSync8(destination)) {
     mkdirSync4(dirname4(destination), { recursive: true });
     writeFileSync2(destination, storedBuffer);
   }
@@ -16568,7 +16663,7 @@ function verifyStoredArtifact(input) {
     };
   }
   const storedPath = artifactStorePath(store.relative_path);
-  if (!existsSync7(storedPath)) {
+  if (!existsSync8(storedPath)) {
     return {
       id: input.id,
       path: input.path,
@@ -19046,10 +19141,10 @@ var init_token_utils = __esm(() => {
 
 // src/lib/assignee-validation.ts
 import { readFileSync as readFileSync4 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join7 } from "path";
+import { homedir as homedir5 } from "os";
+import { join as join8 } from "path";
 function defaultSeatRosterPath() {
-  return process.env["TODOS_SEAT_ROSTER_PATH"] || join7(homedir3(), ".hasna", "identities", "hasna-seats.roster.json");
+  return process.env["TODOS_SEAT_ROSTER_PATH"] || join8(homedir5(), ".hasna", "identities", "hasna-seats.roster.json");
 }
 function loadSeatSlugs(path = defaultSeatRosterPath()) {
   try {
@@ -21518,7 +21613,7 @@ var init_page_validation = __esm(() => {
 // src/cli/cloud-router.ts
 import { resolveStorageClient } from "@hasna/contracts/client/storage";
 import { randomUUID as randomUUID3 } from "crypto";
-import { resolve as resolvePath } from "path";
+import { resolve as resolvePath2 } from "path";
 function emitTodosLocalFallbackNotice(env) {
   if (todosLocalFallbackNoticeEmitted)
     return;
@@ -21578,15 +21673,23 @@ function normalizeRemoteAuthorityUrl(value) {
   if (url.search || url.hash) {
     throw new Error("REMOTE_API_URL_INVALID: HASNA_TODOS_API_URL must not contain a query or fragment; local SQLite fallback is disabled");
   }
-  if (url.pathname !== "/" && url.pathname !== "/v1" && url.pathname !== "/v1/") {
-    throw new Error("REMOTE_API_URL_INVALID: HASNA_TODOS_API_URL must be an authority root or end in /v1, not /api/v1 or another path; " + "local SQLite fallback is disabled");
+  const path = url.pathname.replace(/\/+$/, "");
+  const segments = path.split("/").filter(Boolean);
+  const reservedGatewaySegments = new Set(["api", "v1"]);
+  const isRoot = path === "";
+  const isV1Root = segments.length === 1 && segments[0] === "v1";
+  const isAppRoot = segments.length === 1 && !reservedGatewaySegments.has(segments[0].toLowerCase());
+  const isAppV1Root = segments.length === 2 && segments[1] === "v1" && !reservedGatewaySegments.has(segments[0].toLowerCase());
+  if (!isRoot && !isV1Root && !isAppRoot && !isAppV1Root) {
+    throw new Error("REMOTE_API_URL_INVALID: HASNA_TODOS_API_URL must be an authority root, /v1, or <app>[/v1], not /api/v1 or another path; " + "local SQLite fallback is disabled");
   }
   const hostname2 = url.hostname.toLowerCase();
   const loopback = hostname2 === "localhost" || hostname2 === "::1" || hostname2 === "[::1]" || /^127(?:\.\d{1,3}){3}$/.test(hostname2);
   if (url.protocol === "http:" && !loopback) {
     throw new Error("REMOTE_API_URL_INVALID: plaintext HTTP is allowed only for loopback Todos authorities; local SQLite fallback is disabled");
   }
-  return url.origin;
+  const rootPath = isV1Root || isAppV1Root ? path.slice(0, -"/v1".length) : path;
+  return rootPath ? `${url.origin}${rootPath}` : url.origin;
 }
 function getTodosRemoteAuthorityConfigStatus(env = process.env) {
   let resolution;
@@ -22084,11 +22187,11 @@ function resolveCloudProjectRef(projects, ref) {
   const input = ref.trim();
   const normalizedRef = input.toLowerCase();
   const pathLike = input.startsWith(".") || input.includes("/") || input.includes("\\");
-  const normalizedPath = pathLike ? resolvePath(input) : undefined;
+  const normalizedPath = pathLike ? resolvePath2(input) : undefined;
   const slug = cloudProjectSlug(pathLike ? cloudProjectPathBasename(input) : input);
   const matchGroups = [
     uniqueProjectMatches(projects, (project) => project.id.toLowerCase() === normalizedRef),
-    uniqueProjectMatches(projects, (project) => project.path === input || normalizedPath !== undefined && resolvePath(project.path) === normalizedPath),
+    uniqueProjectMatches(projects, (project) => project.path === input || normalizedPath !== undefined && resolvePath2(project.path) === normalizedPath),
     uniqueProjectMatches(projects, (project) => project.name.toLowerCase() === normalizedRef),
     uniqueProjectMatches(projects, (project) => project.task_list_id === input || cloudProjectSlug(project.name) === slug || cloudProjectSlug(cloudProjectPathBasename(project.path)) === slug),
     uniqueProjectMatches(projects, (project) => project.id.toLowerCase().startsWith(normalizedRef))
@@ -22671,8 +22774,8 @@ var init_task_crud2 = __esm(() => {
 });
 
 // src/lib/project-bootstrap.ts
-import { existsSync as existsSync8, readFileSync as readFileSync5, statSync as statSync3 } from "fs";
-import { basename as basename2, dirname as dirname5, resolve as resolve8 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync5, statSync as statSync3 } from "fs";
+import { basename as basename2, dirname as dirname5, resolve as resolve9 } from "path";
 function safeStat(path) {
   try {
     return statSync3(path);
@@ -22681,7 +22784,7 @@ function safeStat(path) {
   }
 }
 function canonicalPath(input) {
-  const resolved = resolve8(input);
+  const resolved = resolve9(input);
   const stats = safeStat(resolved);
   if (stats?.isFile())
     return dirname5(resolved);
@@ -22690,7 +22793,7 @@ function canonicalPath(input) {
 function findUp(start, marker) {
   let current = canonicalPath(start);
   while (true) {
-    if (existsSync8(resolve8(current, marker)))
+    if (existsSync9(resolve9(current, marker)))
       return current;
     const parent = dirname5(current);
     if (parent === current)
@@ -22701,8 +22804,8 @@ function findUp(start, marker) {
 function readPackageJson(path) {
   if (!path)
     return null;
-  const file = resolve8(path, "package.json");
-  if (!existsSync8(file))
+  const file = resolve9(path, "package.json");
+  if (!existsSync9(file))
     return null;
   try {
     const parsed = JSON.parse(readFileSync5(file, "utf-8"));
@@ -22724,7 +22827,7 @@ function workspaceMarker(root, rootPackage) {
   if (rootPackage?.workspaces)
     markers.push("package.json#workspaces");
   for (const marker of ["pnpm-workspace.yaml", "turbo.json", "nx.json", "lerna.json", "rush.json", "bun.lock", "bun.lockb"]) {
-    if (existsSync8(resolve8(root, marker)))
+    if (existsSync9(resolve9(root, marker)))
       markers.push(marker);
   }
   const kind = markers.find((marker) => marker !== "bun.lock" && marker !== "bun.lockb") ?? null;
@@ -23037,7 +23140,7 @@ var init_tags = __esm(() => {
 });
 
 // src/lib/retention-cleanup.ts
-import { existsSync as existsSync9, unlinkSync } from "fs";
+import { existsSync as existsSync10, unlinkSync } from "fs";
 function normalizeScopes(scopes) {
   if (!scopes || scopes.length === 0)
     return [...ALL_SCOPES];
@@ -23240,7 +23343,7 @@ function applyRetentionCleanup(input, db) {
   for (const artifact of report.candidates.artifact_files) {
     try {
       const path = artifactStorePath(artifact.relative_path);
-      if (!existsSync9(path)) {
+      if (!existsSync10(path)) {
         report.warnings.push(`stored artifact already missing: ${artifact.relative_path}`);
         continue;
       }
@@ -23267,8 +23370,8 @@ var init_retention_cleanup = __esm(() => {
 });
 
 // src/lib/mention-resolver.ts
-import { existsSync as existsSync10, readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
-import { basename as basename3, isAbsolute, join as join8, relative as relative3, resolve as resolve9, sep as sep2 } from "path";
+import { existsSync as existsSync11, readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
+import { basename as basename3, isAbsolute, join as join9, relative as relative3, resolve as resolve10, sep as sep2 } from "path";
 function blankResolution(parsed) {
   return {
     input: parsed.input,
@@ -23291,7 +23394,7 @@ function backlink(kind, key, label, target = key) {
   return { kind, key, label, target };
 }
 function normalizeWorkspace(workspace) {
-  return resolve9(workspace || process.cwd());
+  return resolve10(workspace || process.cwd());
 }
 function isInside(root, absolutePath) {
   const rel = relative3(root, absolutePath);
@@ -23359,14 +23462,14 @@ function resolveFile(parsed, workspace) {
     resolution.warnings.push("path is empty or escapes the workspace");
     return resolution;
   }
-  const absolutePath = resolve9(workspace, relPath);
+  const absolutePath = resolve10(workspace, relPath);
   if (!isInside(workspace, absolutePath)) {
     resolution.path = relPath;
     resolution.warnings.push("path escapes the workspace");
     return resolution;
   }
   resolution.path = relPath;
-  if (!existsSync10(absolutePath)) {
+  if (!existsSync11(absolutePath)) {
     resolution.warnings.push("file does not exist in the local workspace");
     return resolution;
   }
@@ -23399,7 +23502,7 @@ function walkSourceFiles(root, current = root, files = []) {
       if (SKIP_DIRS.has(entry.name))
         continue;
     }
-    const absolutePath = join8(current, entry.name);
+    const absolutePath = join9(current, entry.name);
     if (entry.isDirectory()) {
       if (!SKIP_DIRS.has(entry.name))
         walkSourceFiles(root, absolutePath, files);
@@ -23704,9 +23807,9 @@ var init_mention_resolver = __esm(() => {
 });
 
 // src/lib/policy-packs.ts
-import { relative as relative4, resolve as resolve10 } from "path";
+import { relative as relative4, resolve as resolve11 } from "path";
 function normalizePath3(path) {
-  return resolve10(path);
+  return resolve11(path);
 }
 function unique4(values) {
   return Array.from(new Set((values || []).map((value) => value.trim()).filter(Boolean)));
@@ -23761,7 +23864,7 @@ function commandMatches(commands, pattern) {
 }
 function pathMatches(paths, pattern, root) {
   return paths.filter((path) => {
-    const candidate = path.startsWith("/") ? path : resolve10(root, path);
+    const candidate = path.startsWith("/") ? path : resolve11(root, path);
     if (!isPathInside3(root, candidate))
       return matchesPattern3(path, pattern);
     return matchesPattern3(path, pattern) || matchesPattern3(relative4(root, candidate), pattern);
@@ -27140,7 +27243,7 @@ var init_audit_ledger = __esm(() => {
 
 // src/lib/release-compatibility.ts
 import { readFileSync as readFileSync7 } from "fs";
-import { join as join9, resolve as resolve11 } from "path";
+import { join as join10, resolve as resolve12 } from "path";
 import { Database as Database2 } from "bun:sqlite";
 function pass(id, message, details) {
   return { id, status: "passed", message, details };
@@ -27152,7 +27255,7 @@ function warn(id, message, details) {
   return { id, status: "warning", message, details };
 }
 function readPackageJson2(root) {
-  return JSON.parse(readFileSync7(join9(root, "package.json"), "utf8"));
+  return JSON.parse(readFileSync7(join10(root, "package.json"), "utf8"));
 }
 function sortedKeys(value) {
   return Object.keys(value ?? {}).sort((left, right) => left.localeCompare(right));
@@ -27248,7 +27351,7 @@ function checkChangelog() {
   ];
 }
 function createReleaseCompatibilityReport(options = {}) {
-  const root = resolve11(options.root ?? process.cwd());
+  const root = resolve12(options.root ?? process.cwd());
   const packageJson = readPackageJson2(root);
   const simulatedLevels = options.simulated_levels ?? defaultSimulationLevels();
   const checks = [
@@ -31170,8 +31273,8 @@ var exports_doctor = {};
 __export(exports_doctor, {
   runTodosDoctor: () => runTodosDoctor
 });
-import { chmodSync, copyFileSync, existsSync as existsSync11, mkdirSync as mkdirSync5, statSync as statSync5 } from "fs";
-import { basename as basename4, dirname as dirname6, join as join10 } from "path";
+import { chmodSync, copyFileSync, existsSync as existsSync12, mkdirSync as mkdirSync5, statSync as statSync5 } from "fs";
+import { basename as basename4, dirname as dirname6, join as join11 } from "path";
 function tableExists2(db, table) {
   return Boolean(db.query("SELECT name FROM sqlite_master WHERE type='table' AND name=?").get(table));
 }
@@ -31265,7 +31368,7 @@ function findMissingProjectRoots(db) {
       continue;
     if (!row.path.startsWith("/"))
       continue;
-    if (!existsSync11(row.path))
+    if (!existsSync12(row.path))
       missing++;
   }
   return missing;
@@ -31325,16 +31428,16 @@ function databasePermissionsAreUnsafe(dbPath) {
 function createBackup(dbPath) {
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
     return;
-  if (!existsSync11(dbPath))
+  if (!existsSync12(dbPath))
     return;
   const stamp = now().replace(/[:.]/g, "-");
-  const backupDir = join10(dirname6(dbPath), `${basename4(dbPath)}.backup-${stamp}`);
+  const backupDir = join11(dirname6(dbPath), `${basename4(dbPath)}.backup-${stamp}`);
   const files = [];
   mkdirSync5(backupDir, { recursive: true });
   for (const source of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {
-    if (!existsSync11(source))
+    if (!existsSync12(source))
       continue;
-    const target = join10(backupDir, basename4(source));
+    const target = join11(backupDir, basename4(source));
     copyFileSync(source, target);
     files.push(target);
   }
@@ -34095,7 +34198,7 @@ var init_agent_run_dispatcher = __esm(() => {
 });
 
 // src/lib/verification-providers.ts
-import { existsSync as existsSync12, readFileSync as readFileSync8 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync8 } from "fs";
 function normalizeName5(name) {
   const normalized = name.trim().toLowerCase();
   if (!/^[a-z0-9][a-z0-9_-]{0,63}$/.test(normalized)) {
@@ -34192,7 +34295,7 @@ function classifyLog(text) {
 async function sleep2(ms) {
   if (ms <= 0)
     return;
-  await new Promise((resolve12) => setTimeout(resolve12, ms));
+  await new Promise((resolve13) => setTimeout(resolve13, ms));
 }
 async function runCommandProvider(provider, input) {
   const commandTemplate = input.command || provider.command;
@@ -34247,7 +34350,7 @@ Timed out after ${provider.timeout_ms}ms`);
   };
 }
 function runCiLogProvider(input) {
-  const text = input.log_text ?? (input.log_path && existsSync12(input.log_path) ? readFileSync8(input.log_path, "utf-8") : "");
+  const text = input.log_text ?? (input.log_path && existsSync13(input.log_path) ? readFileSync8(input.log_path, "utf-8") : "");
   return {
     status: classifyLog(text),
     attempts: 1,
@@ -34259,7 +34362,7 @@ function runBrowserProvider(input) {
   if (!input.artifact_path) {
     return { status: "unknown", attempts: 1, exit_code: null, output_summary: "browser provider needs a screenshot or artifact path" };
   }
-  if (!existsSync12(input.artifact_path)) {
+  if (!existsSync13(input.artifact_path)) {
     return { status: "failed", attempts: 1, exit_code: null, output_summary: `artifact not found: ${input.artifact_path}` };
   }
   return {
@@ -36417,7 +36520,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/todos",
-    version: "0.15.50",
+    version: "0.15.52",
     description: "Universal task management for AI coding agents - CLI + MCP server + interactive TUI",
     type: "module",
     main: "dist/index.js",
@@ -36476,6 +36579,7 @@ var init_package = __esm(() => {
     files: [
       "dist",
       "dashboard/dist",
+      "postinstall.js",
       "LICENSE",
       "README.md"
     ],
@@ -36502,7 +36606,7 @@ var init_package = __esm(() => {
       "test:attested-container-compatibility-vector": "bun test scripts/attested-container-compatibility-vector.test.ts",
       "issue:release-review": "bun run scripts/issue-npm-release-agent-review.ts",
       prepublishOnly: "bun run scripts/verify-public-release.ts --mode=publish",
-      postinstall: "mkdir -p $HOME/.hasna/todos $HOME/.hasna/todos/training 2>/dev/null || true"
+      postinstall: "node postinstall.js"
     },
     keywords: [
       "todos",
@@ -36536,13 +36640,15 @@ var init_package = __esm(() => {
     author: "Andrei Hasna <andrei@hasna.com>",
     license: "Apache-2.0",
     dependencies: {
-      "@hasna/contracts": "0.14.0",
+      "@hasna/contracts": "0.14.2",
       "@hasna/events": "^0.1.11",
+      "@hasna/paths": "0.1.0",
       "@modelcontextprotocol/sdk": "^1.12.1",
       chalk: "^5.4.1",
       commander: "^13.1.0",
       ink: "^5.2.0",
       react: "^18.3.1",
+      "signal-exit": "3.0.7",
       zod: "3.25.76"
     },
     overrides: {
@@ -36551,7 +36657,7 @@ var init_package = __esm(() => {
       zod: "3.25.76"
     },
     devDependencies: {
-      "@types/bun": "^1.2.4",
+      "@types/bun": "1.3.14",
       "@types/react": "^18.3.18",
       "bun-types": "1.3.9",
       "hasna-deployment-contracts": "npm:@hasna/contracts@0.10.4",
@@ -37149,7 +37255,7 @@ var init_local_bridge = __esm(() => {
 // src/lib/local-backups.ts
 import { createHash as createHash7 } from "crypto";
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync3 } from "fs";
-import { dirname as dirname7, resolve as resolve12 } from "path";
+import { dirname as dirname7, resolve as resolve13 } from "path";
 import { mkdirSync as mkdirSync6 } from "fs";
 function stableJson2(value) {
   if (value === null || typeof value !== "object")
@@ -37251,14 +37357,14 @@ function createLocalBackup(options = {}, db) {
   return backup;
 }
 function writeLocalBackupFile(backup, outputPath) {
-  const path = resolve12(outputPath);
+  const path = resolve13(outputPath);
   mkdirSync6(dirname7(path), { recursive: true });
   writeFileSync3(path, `${JSON.stringify(backup, null, 2)}
 `);
   return path;
 }
 function readLocalBackupFile(path) {
-  return JSON.parse(readFileSync9(resolve12(path), "utf-8"));
+  return JSON.parse(readFileSync9(resolve13(path), "utf-8"));
 }
 function verifyLocalBackup(value, options = {}, db) {
   const verifiedAt = options.verified_at ?? now();
@@ -38710,8 +38816,8 @@ __export(exports_local_extensions, {
   discoverLocalExtensions: () => discoverLocalExtensions
 });
 import { createHash as createHash10, createVerify } from "crypto";
-import { existsSync as existsSync13, readdirSync as readdirSync3, readFileSync as readFileSync10, statSync as statSync6 } from "fs";
-import { basename as basename5, join as join11, resolve as resolve13 } from "path";
+import { existsSync as existsSync14, readdirSync as readdirSync3, readFileSync as readFileSync10, statSync as statSync6 } from "fs";
+import { basename as basename5, join as join12, resolve as resolve14 } from "path";
 function isObject2(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
@@ -38969,11 +39075,11 @@ function verifyExtensionSignature(input) {
   return verifier.verify(input.public_key, decodeSignature(input.signature));
 }
 function inspectExtensionSource(source3) {
-  const resolved = resolve13(source3);
-  if (!existsSync13(resolved))
+  const resolved = resolve14(source3);
+  if (!existsSync14(resolved))
     throw new Error(`extension source not found: ${source3}`);
   const stat = statSync6(resolved);
-  const manifestPath = stat.isDirectory() ? [join11(resolved, "todos.extension.json"), join11(resolved, "extension.json")].find(existsSync13) : resolved;
+  const manifestPath = stat.isDirectory() ? [join12(resolved, "todos.extension.json"), join12(resolved, "extension.json")].find(existsSync14) : resolved;
   if (!manifestPath)
     throw new Error(`extension directory ${source3} is missing todos.extension.json`);
   const raw = readFileSync10(manifestPath);
@@ -39067,26 +39173,26 @@ function testExtensionCompatibility(sourceOrManifest) {
 function projectExtensionSources(projectPath) {
   if (!projectPath)
     return [];
-  const root = resolve13(projectPath);
+  const root = resolve14(projectPath);
   const candidates = [
-    join11(root, "todos.extension.json"),
-    join11(root, ".todos", "todos.extension.json")
+    join12(root, "todos.extension.json"),
+    join12(root, ".todos", "todos.extension.json")
   ];
-  const extensionDir = join11(root, ".todos", "extensions");
-  if (existsSync13(extensionDir)) {
+  const extensionDir = join12(root, ".todos", "extensions");
+  if (existsSync14(extensionDir)) {
     for (const entry of readdirSync3(extensionDir)) {
       if (entry.startsWith("."))
         continue;
-      const full = join11(extensionDir, entry);
+      const full = join12(extensionDir, entry);
       if (statSync6(full).isDirectory() || entry.endsWith(".json"))
         candidates.push(full);
     }
   }
-  return candidates.filter(existsSync13);
+  return candidates.filter(existsSync14);
 }
 function discoverLocalExtensions(options = {}) {
   const config = loadConfig();
-  const projectPath = options.project_path ? resolve13(options.project_path) : null;
+  const projectPath = options.project_path ? resolve14(options.project_path) : null;
   const configuredSources = [
     ...config.extension_sources || [],
     ...projectPath ? config.project_overrides?.[projectPath]?.extension_sources || [] : []
@@ -39094,7 +39200,7 @@ function discoverLocalExtensions(options = {}) {
   const sources = Array.from(new Set([
     ...configuredSources,
     ...projectExtensionSources(projectPath || undefined)
-  ])).map((source3) => projectPath && !source3.startsWith("/") ? resolve13(projectPath, source3) : resolve13(source3));
+  ])).map((source3) => projectPath && !source3.startsWith("/") ? resolve14(projectPath, source3) : resolve14(source3));
   const warnings = [];
   const discovered = [];
   for (const source3 of sources) {
@@ -43489,9 +43595,9 @@ __export(exports_extract, {
   buildCodebaseIndex: () => buildCodebaseIndex,
   EXTRACT_TAGS: () => EXTRACT_TAGS
 });
-import { existsSync as existsSync14, readFileSync as readFileSync11, statSync as statSync7 } from "fs";
+import { existsSync as existsSync15, readFileSync as readFileSync11, statSync as statSync7 } from "fs";
 import { createHash as createHash12 } from "crypto";
-import { relative as relative5, resolve as resolve14, join as join12 } from "path";
+import { relative as relative5, resolve as resolve15, join as join13 } from "path";
 function stableHash(value) {
   return createHash12("sha256").update(value).digest("hex");
 }
@@ -43499,9 +43605,9 @@ function normalizePathForMatch(value) {
   return value.replace(/\\/g, "/").replace(/^\.\//, "");
 }
 function readGitignorePatterns(basePath) {
-  const root = statSync7(basePath).isFile() ? resolve14(basePath, "..") : basePath;
-  const gitignorePath = join12(root, ".gitignore");
-  if (!existsSync14(gitignorePath))
+  const root = statSync7(basePath).isFile() ? resolve15(basePath, "..") : basePath;
+  const gitignorePath = join13(root, ".gitignore");
+  if (!existsSync15(gitignorePath))
     return [];
   try {
     return readFileSync11(gitignorePath, "utf-8").split(`
@@ -43635,7 +43741,7 @@ function collectFiles(basePath, extensions, excludes, respectGitignore) {
   return files.sort();
 }
 function buildCodebaseIndex(options) {
-  const basePath = resolve14(options.path);
+  const basePath = resolve15(options.path);
   const tags = options.patterns || [...EXTRACT_TAGS];
   const extensions = options.extensions ? new Set(options.extensions.map((e) => e.startsWith(".") ? e : `.${e}`)) : DEFAULT_EXTENSIONS;
   const excludes = options.exclude || [];
@@ -43643,10 +43749,10 @@ function buildCodebaseIndex(options) {
   const files = collectFiles(basePath, extensions, excludes, respectGitignore);
   const indexed = [];
   for (const file of files) {
-    const fullPath = statSync7(basePath).isFile() ? basePath : join12(basePath, file);
+    const fullPath = statSync7(basePath).isFile() ? basePath : join13(basePath, file);
     try {
       const source3 = readFileSync11(fullPath, "utf-8");
-      const relPath = statSync7(basePath).isFile() ? relative5(resolve14(basePath, ".."), fullPath) : file;
+      const relPath = statSync7(basePath).isFile() ? relative5(resolve15(basePath, ".."), fullPath) : file;
       indexed.push({
         file: relPath,
         checksum: stableHash(source3).slice(0, 24),
@@ -43666,7 +43772,7 @@ function buildCodebaseIndex(options) {
   };
 }
 function extractTodos(options, db) {
-  const basePath = resolve14(options.path);
+  const basePath = resolve15(options.path);
   const tags = options.patterns || [...EXTRACT_TAGS];
   const extensions = options.extensions ? new Set(options.extensions.map((e) => e.startsWith(".") ? e : `.${e}`)) : DEFAULT_EXTENSIONS;
   const excludes = options.exclude || [];
@@ -43674,10 +43780,10 @@ function extractTodos(options, db) {
   const files = collectFiles(basePath, extensions, excludes, respectGitignore);
   const allComments = [];
   for (const file of files) {
-    const fullPath = statSync7(basePath).isFile() ? basePath : join12(basePath, file);
+    const fullPath = statSync7(basePath).isFile() ? basePath : join13(basePath, file);
     try {
       const source3 = readFileSync11(fullPath, "utf-8");
-      const relPath = statSync7(basePath).isFile() ? relative5(resolve14(basePath, ".."), fullPath) : file;
+      const relPath = statSync7(basePath).isFile() ? relative5(resolve15(basePath, ".."), fullPath) : file;
       const comments = extractFromSource(source3, relPath, tags);
       allComments.push(...comments);
     } catch {}
@@ -43771,7 +43877,7 @@ async function watchSourceTodos(options, onRun) {
   const interval = Math.max(100, options.interval_ms || 2000);
   const once = options.once !== false && (!options.max_runs || options.max_runs <= 1);
   const maxRuns = options.max_runs ?? (once ? 1 : Number.POSITIVE_INFINITY);
-  const root = resolve14(options.path);
+  const root = resolve15(options.path);
   const runs = [];
   let previous = new Map;
   for (let runNumber = 1;runNumber <= maxRuns; runNumber++) {
@@ -44330,7 +44436,7 @@ Last seen: ${agent.last_seen_at}`
             `Suggested names: ${suggestions.slice(0, 8).join(", ")}`,
             allActive.length > 0 ? `Active agents (avoid these names): ${allActive.map((a) => `${a.name} (seen ${Math.round((Date.now() - new Date(a.last_seen_at).getTime()) / 60000)}m ago)`).join(", ")}` : "No active agents.",
             `
-To restrict names, configure agent_pool or project_pools in ~/.hasna/todos/config.json`
+To restrict names, configure agent_pool or project_pools in the todos data home config file (default <data home>/config.json)`
           ];
           return { content: [{ type: "text", text: lines2.join(`
 `) }] };
@@ -44633,7 +44739,7 @@ __export(exports_builtin_templates, {
   BUILTIN_TEMPLATES: () => BUILTIN_TEMPLATES
 });
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync4 } from "fs";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 function templateMetadata(template) {
   return {
     source: BUILTIN_TEMPLATE_LIBRARY_SOURCE,
@@ -44692,7 +44798,7 @@ function writeBuiltinTemplateFiles(directory) {
   mkdirSync7(directory, { recursive: true });
   const files = [];
   for (const entry of exportBuiltinTemplateFiles()) {
-    const path = join13(directory, entry.filename);
+    const path = join14(directory, entry.filename);
     writeFileSync4(path, `${JSON.stringify(entry.template, null, 2)}
 `, "utf-8");
     files.push(path);
@@ -45218,16 +45324,16 @@ __export(exports_environment_snapshots, {
   captureEnvironmentSnapshot: () => captureEnvironmentSnapshot
 });
 import { createHash as createHash13 } from "crypto";
-import { existsSync as existsSync15, readFileSync as readFileSync12, statSync as statSync8 } from "fs";
+import { existsSync as existsSync16, readFileSync as readFileSync12, statSync as statSync8 } from "fs";
 import { hostname as hostname2, platform, arch } from "os";
-import { dirname as dirname8, join as join14, resolve as resolve15 } from "path";
+import { dirname as dirname8, join as join15, resolve as resolve16 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 function sha2567(value) {
   return createHash13("sha256").update(value).digest("hex");
 }
 function fileRecord(root, relativePath) {
-  const path = join14(root, relativePath);
-  if (!existsSync15(path))
+  const path = join15(root, relativePath);
+  if (!existsSync16(path))
     return null;
   const stat = statSync8(path);
   if (!stat.isFile())
@@ -45239,7 +45345,7 @@ function manifestRecord(root, relativePath) {
   const base = fileRecord(root, relativePath);
   if (!base)
     return null;
-  const parsed = readJsonFile(join14(root, relativePath));
+  const parsed = readJsonFile(join15(root, relativePath));
   if (!parsed)
     return { ...base, redacted: {} };
   const redacted = redactValue({
@@ -45334,15 +45440,15 @@ function commandEnv(env, includeValues) {
 function defaultSnapshotDir() {
   const dbPath = getDatabasePath();
   if (dbPath === ":memory:" || dbPath.startsWith("file::memory:"))
-    return join14(tmpdir3(), "hasna-todos", "environment-snapshots");
-  return join14(dirname8(resolve15(dbPath)), "environment-snapshots");
+    return join15(tmpdir3(), "hasna-todos", "environment-snapshots");
+  return join15(dirname8(resolve16(dbPath)), "environment-snapshots");
 }
 function snapshotWithId(snapshot) {
   const digest = sha2567(JSON.stringify(snapshot)).slice(0, 24);
   return { id: `env_${digest}`, ...snapshot };
 }
 function captureEnvironmentSnapshot(input = {}) {
-  const root = resolve15(input.root || process.cwd());
+  const root = resolve16(input.root || process.cwd());
   const env = input.env || process.env;
   const warnings = [];
   const manifests = MANIFEST_FILES.map((file) => manifestRecord(root, file)).filter((file) => Boolean(file));
@@ -45382,13 +45488,13 @@ function captureEnvironmentSnapshot(input = {}) {
   });
 }
 function writeEnvironmentSnapshot(snapshot, outputPath) {
-  const path = outputPath ? resolve15(outputPath) : join14(defaultSnapshotDir(), `${snapshot.id}.json`);
+  const path = outputPath ? resolve16(outputPath) : join15(defaultSnapshotDir(), `${snapshot.id}.json`);
   ensureDir(dirname8(path));
   writeJsonFile(path, snapshot);
   return path;
 }
 function readEnvironmentSnapshot(path) {
-  const snapshot = readJsonFile(resolve15(path));
+  const snapshot = readJsonFile(resolve16(path));
   if (!snapshot || snapshot.schema_version !== 1 || typeof snapshot.id !== "string") {
     throw new Error(`Invalid environment snapshot: ${path}`);
   }
@@ -47360,7 +47466,7 @@ class TodosShadowOutbox {
         const remaining = deadline - Date.now();
         if (remaining <= 0)
           break;
-        await new Promise((resolve16) => setTimeout(resolve16, Math.min(200, remaining)));
+        await new Promise((resolve17) => setTimeout(resolve17, Math.min(200, remaining)));
       }
     }
     return this.getStats();
@@ -50213,7 +50319,7 @@ async function retryOnTransientPostgresError(fn, attempts = 2, delayMs = 150) {
       lastError = error;
       if (!isTransientPostgresError(error) || attempt === attempts)
         throw error;
-      await new Promise((resolve16) => setTimeout(resolve16, delayMs * attempt));
+      await new Promise((resolve17) => setTimeout(resolve17, delayMs * attempt));
     }
   }
   throw lastError;
@@ -56648,7 +56754,7 @@ var init_headless_boundaries = __esm(() => {
 });
 
 // src/server/routes.ts
-import { join as join15, resolve as resolve16, sep as sep3 } from "path";
+import { join as join16, resolve as resolve17, sep as sep3 } from "path";
 function parseFieldsParam(url) {
   const fieldsParam = url.searchParams.get("fields");
   return fieldsParam ? fieldsParam.split(",").map((f) => f.trim()).filter(Boolean) : undefined;
@@ -57485,9 +57591,9 @@ function handleStaticFiles(path, method, ctx, json5, serveStaticFile2) {
   if (!ctx.dashboardExists || method !== "GET" && method !== "HEAD")
     return null;
   if (path !== "/") {
-    const filePath = join15(ctx.dashboardDir, path);
-    const resolvedFile = resolve16(filePath);
-    const resolvedBase = resolve16(ctx.dashboardDir);
+    const filePath = join16(ctx.dashboardDir, path);
+    const resolvedFile = resolve17(filePath);
+    const resolvedBase = resolve17(ctx.dashboardDir);
     if (!resolvedFile.startsWith(resolvedBase + sep3) && resolvedFile !== resolvedBase) {
       return json5({ error: "Forbidden" }, 403);
     }
@@ -57495,7 +57601,7 @@ function handleStaticFiles(path, method, ctx, json5, serveStaticFile2) {
     if (res2)
       return res2;
   }
-  const indexPath = join15(ctx.dashboardDir, "index.html");
+  const indexPath = join16(ctx.dashboardDir, "index.html");
   const res = serveStaticFile2(indexPath);
   if (res)
     return res;
@@ -63476,8 +63582,8 @@ class SqlitePrGroupLedgerPersistence {
   async transaction(fn) {
     const previous = sqliteTransactionTails2.get(this.db) ?? Promise.resolve();
     let release;
-    const current = new Promise((resolve17) => {
-      release = resolve17;
+    const current = new Promise((resolve18) => {
+      release = resolve18;
     });
     sqliteTransactionTails2.set(this.db, current);
     await previous;
@@ -63575,27 +63681,27 @@ __export(exports_serve, {
   SECURITY_HEADERS: () => SECURITY_HEADERS,
   MIME_TYPES: () => MIME_TYPES
 });
-import { existsSync as existsSync16 } from "fs";
-import { join as join16, dirname as dirname9, extname } from "path";
+import { existsSync as existsSync17 } from "fs";
+import { join as join17, dirname as dirname9, extname } from "path";
 import { fileURLToPath } from "url";
 function resolveDashboardDir() {
   const candidates = [];
   try {
     const scriptDir = dirname9(fileURLToPath(import.meta.url));
-    candidates.push(join16(scriptDir, "..", "dashboard", "dist"));
-    candidates.push(join16(scriptDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join17(scriptDir, "..", "dashboard", "dist"));
+    candidates.push(join17(scriptDir, "..", "..", "dashboard", "dist"));
   } catch {}
   if (process.argv[1]) {
     const mainDir = dirname9(process.argv[1]);
-    candidates.push(join16(mainDir, "..", "dashboard", "dist"));
-    candidates.push(join16(mainDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join17(mainDir, "..", "dashboard", "dist"));
+    candidates.push(join17(mainDir, "..", "..", "dashboard", "dist"));
   }
-  candidates.push(join16(process.cwd(), "dashboard", "dist"));
+  candidates.push(join17(process.cwd(), "dashboard", "dist"));
   for (const candidate of candidates) {
-    if (existsSync16(candidate))
+    if (existsSync17(candidate))
       return candidate;
   }
-  return join16(process.cwd(), "dashboard", "dist");
+  return join17(process.cwd(), "dashboard", "dist");
 }
 function getProvidedApiKey(req) {
   const headerKey = req.headers.get("x-api-key");
@@ -63667,7 +63773,7 @@ function json4(data, status3 = 200, headers) {
   });
 }
 function serveStaticFile(filePath) {
-  if (!existsSync16(filePath))
+  if (!existsSync17(filePath))
     return null;
   const ext = extname(filePath);
   const contentType = MIME_TYPES[ext] || "application/octet-stream";
@@ -63768,7 +63874,7 @@ data: ${data}
       filteredSseClients.delete(client);
   }
   const dashboardDir = resolveDashboardDir();
-  const dashboardExists = existsSync16(dashboardDir);
+  const dashboardExists = existsSync17(dashboardDir);
   if (!dashboardExists) {
     console.error(`
 Dashboard not found at: ${dashboardDir}`);