feat: TaskForge Kanban 与 Apple 提醒事项实时状态同步

.github/workflows/ci.yml

@@ -16,7 +16,7 @@ jobs:
       - name: Run core tests
         run: swift run TaskForgeReminderCoreTests
       - name: Build release
-        run: swift build --configuration release
+        run: swift build --configuration release --product TaskForgeReminderSync
       - name: Validate property lists
         run: |
           plutil -lint Resources/Info.plist

.gitignore

@@ -13,3 +13,10 @@ __pycache__/
 .env
 .env.*
 Backups/
+PruneCandidates.json
+PruneBackups/
+PruneHashSalt
+PruneHashSalt.lock
+*.prune-test.json
+.worktrees/
+.superpowers/

CHANGELOG.md

@@ -2,6 +2,28 @@
 
 All notable changes to this project are documented here.
 
+## Unreleased
+
+- Added automatic cleanup for unfinished, unimportant reminders that are
+  confirmed absent from both the TaskForge snapshot and durable Vault source.
+- Added protection for completed reminders, EventKit priority and six leading
+  important-title markers.
+- Added an unchanged two-scan confirmation window of at least 60 seconds,
+  private candidate persistence and fail-closed source resolution.
+- Added checksummed `0600` pre-deletion backups and
+  `--restore-last-prune` with a minimum 24-hour restoration grace period.
+- Restore selection skips unresolved, zero-deletion and already restored
+  backups, choosing the newest remaining real deletion batch.
+- Added strict read-only `--prune-dry-run` and one-pass `--prune-once`
+  commands; `--sync` and `--watch` now advance the same pruning state machine
+  after reverse and forward synchronization.
+- Scoped pruning fetches to exactly one configured reminders list, rejecting
+  same-name ambiguity and leaving all other lists untouched.
+- Added a 30-second EventKit fetch timeout with request cancellation and
+  anonymous, salted pruning logs.
+- Preserved the existing TaskForge boundary: reverse completion only marks
+  source tasks `done`; pruning never deletes TaskForge task lines or files.
+
 ## 1.1.0 - 2026-07-29
 
 - Added TaskForge-to-Reminders updates for linked title, date, time and status

PRIVACY.md

@@ -5,51 +5,55 @@ TaskForge Reminder Sync is designed to run entirely on the local Mac.
 ## Data it reads
 
 - TaskForge's local `tasks.v6.bin` cache;
-- titles, schedules, status and source metadata for TaskForge tasks;
-- reminders in the configured Apple Reminders list;
-- Markdown or TaskNotes source files only when a linked reminder is completed.
+- the preferences plist entry `flutter.ctl_<fixed-list-id>`;
+- titles, status, priority, original schedule and source metadata needed for selected custom-list members;
+- reminders only when they carry this tool's marker or match the private index;
+- the exact Markdown or TaskNotes source file when an approved reverse write is requested;
+- the Vault source referenced by the private index when pruning confirms historical presence.
 
 ## Data it writes
 
-- linked reminders in the configured Apple Reminders list;
-- completion markers in the matching Vault source task;
-- timestamped source-file backups under
-  `~/Library/Application Support/TaskForgeReminderSync/Backups/`;
-- operational logs under `~/Library/Logs/`.
+- only the tool-managed Apple status lists and their managed reminders;
+- the status of a matching Vault source task during reverse sync;
+- verified source-file backups and verified reminder deletion backups;
+- private configuration, learned symbols, source references, state history and hashes;
+- aggregate operational logs.
 
-## Data it does not send
-
-The application contains no HTTP client, analytics SDK, telemetry, advertising,
-crash-reporting service or hosted backend. It does not upload task titles,
-Vault paths, reminder contents or source files to this repository or to a
-third-party service.
+The default private root is:
 
-Apple Reminders may sync through iCloud according to the user's Apple account
-and system settings. That synchronization is performed by macOS, not by this
-project.
+```text
+~/Library/Application Support/TaskForgeReminderSync/
+```
 
-## Metadata stored in reminders
+The root and directories are `0700`; configuration, index, ledger, source backups, reminder
+backups and salts are `0600`. The list ID, full source references and reminder mappings are
+never committed to Git and are not printed in logs. If permissions, ownership, symlinks,
+extended ACLs, schema or hashes are unsafe, the operation fails closed.
 
-Linked reminders contain:
+## Data it does not send
 
-- a stable, Base64-encoded TaskForge marker;
-- a Base64-encoded source reference used for historical reverse completion;
-- a human-readable source type, file path and line number.
+The project has no HTTP client, hosted backend, analytics SDK, telemetry, advertising or
+crash-reporting service. It does not upload task titles, notes, Vault paths, source files,
+personal profiles or list IDs. Apple may sync reminders through iCloud according to the user's
+Apple account and macOS settings; that is performed by Apple, not this project.
 
-Anyone who can read the reminder can therefore see its title and source path.
-Use a dedicated reminder list and an Apple account you trust.
+The tool does not use Computer Use and does not request Calendar, Contacts, Photos, microphone,
+camera or location access.
 
-## Permissions
+## Reminder notes
 
-- **Reminders full access** is required to create, update and observe reminders.
-- **Full Disk Access** may be required by macOS to read TaskForge's sandbox
-  container or a protected Vault location.
+Managed reminder notes contain only a stable TaskForge tool marker and a short source marker.
+The marker is intended for management, not secrecy. Full source references, previous status,
+source hashes and EventKit mappings remain in the private `0600` index rather than being copied
+into reminder notes.
 
-The tool does not request Calendar, Contacts, Photos, microphone, camera or
-location access.
+## Logs and recovery
 
-## Public repository hygiene
+Logs contain status counts, timing and anonymous error categories. They do not contain raw task
+IDs, EventKit IDs, titles, notes, list IDs, Vault paths or source paths. Backups are intentionally
+sensitive local data because they can contain the fields required to restore a source or
+reminder; stop the watcher before manual recovery and preserve their permissions.
 
-Generated build directories, TaskForge cache files, logs, backups, `.env`
-files and local plist overrides are excluded by `.gitignore`. Contributors
-should still inspect staged files before every push.
+Reverse completion changes a source task to `done` and never deletes a TaskForge task. Cleanup
+deletes only a managed, low-priority, unfinished reminder after the two-scan gate and verified
+backup; ordinary Apple reminders and all TaskForge source tasks are protected.

Package.swift

@@ -21,14 +21,37 @@ let package = Package(
         .target(
             name: "TaskForgeReminderCore"
         ),
+        .target(
+            name: "TaskForgeReminderEventKit",
+            dependencies: ["TaskForgeReminderCore"]
+        ),
         .executableTarget(
             name: "TaskForgeReminderSync",
-            dependencies: ["TaskForgeReminderCore"]
+            dependencies: [
+                "TaskForgeReminderCore",
+                "TaskForgeReminderEventKit"
+            ]
         ),
         .executableTarget(
             name: "TaskForgeReminderCoreTests",
-            dependencies: ["TaskForgeReminderCore"],
+            dependencies: [
+                "TaskForgeReminderCore",
+                "TaskForgeReminderEventKit"
+            ],
             path: "Tests/TaskForgeReminderCoreTests"
+        ),
+        .executableTarget(
+            name: "TaskForgeReminderCLITests",
+            dependencies: ["TaskForgeReminderSync"],
+            path: "Tests/TaskForgeReminderCLITests"
+        ),
+        .executableTarget(
+            name: "TaskForgeReminderEventKitTests",
+            dependencies: [
+                "TaskForgeReminderCore",
+                "TaskForgeReminderEventKit"
+            ],
+            path: "Tests/TaskForgeReminderEventKitTests"
         )
     ]
 )