← Back to all sparks
S

Super Productivity

PM
Velocity5.0

Open-source to-do list and time tracker for personal task management

A local-first task manager quietly rebuilding itself into a sync engine with a plugin platform on top.

sync-reliabilitye2e-encryptionplugin-platformlocal-firsttask-planningdesign-system
Current state
Super Productivity ships minor releases every week or two where the visible feature work is thin and the real effort sits in sync. Across the last six releases the operation-log sync layer picked up field-level merging of concurrent edits, queued background requests, conflict replay, and encrypted-only enforcement for SuperSync. The plugin system absorbed the Azure DevOps and Trello issue providers and gained OAuth hooks plus local secret storage. Since v18.19.0 in early August the repository has published only working branch tags, so the numbered release stream has been quiet for over a week.
Where it's heading
The arc is a single-user local app growing the two things multi-device users demand — sync they can trust and third-party integrations — without standing up a server the project has to operate. Sync is being pushed toward fail-closed defaults: encryption is enforced rather than offered, plaintext downloads are refused, stale-key uploads are blocked, and the local REST API now demands a bearer token. Integrations are moving the other way, out of core and into plugins that can authenticate on their own. The one visible thread since then is design-system work — dialogs being moved off hardcoded fills onto theme tokens — which suggests a theming pass running between releases.
Prediction
Expect the opt-in split-file delta sync format to become the default once conflict replay settles, and more built-in issue providers to follow Azure DevOps and Trello out of core into plugins. The current styling commits point to a theme-token cleanup landing in the next numbered release, though the branch tags alone do not say how large it is.

Recent moves

  1. 3d ago

    Dialog fills move to theme tokens; callout markup corrected

    A working branch tag rather than a release: three callout sites move from a bare paragraph to the div-plus-paragraph form the primitive documents, and theme-blind rgba fills in two dialogs move onto the state ladder so they stay visible on dark themes. Housekeeping on the design system, and it will reach users folded into whatever numbered release follows.

    View source ↗
  2. 11d ago

    Encrypted-only sync enforced; local REST API now needs a token

    The security half of this release is the sync arc reaching fail-closed: encrypted SuperSync uploads are enforced rather than preferred, plaintext downloads are refused when encryption is expected, and stale-key uploads after a server state replacement are blocked. The local REST API now requires a bearer token on everything except GET /health, which breaks unauthenticated local automation. Settings search, a shortcut cheat sheet, and interval recurrence phrases are the incremental layer on top.

    View source ↗
  3. 25d ago

    Recurring task settings fold into the planner's schedule dialog

    Recurring-task settings move into the planner's schedule dialog, continuing the consolidation of scheduling controls onto one surface instead of several. The remainder is sync repair — legacy LWW data no longer misread as tampering, better WebDAV and Nextcloud ETag compatibility, pull-only Plainspace title and schedule syncing — which is where most of this project's release weight lands.

    View source ↗
  4. 1mo ago

    Concurrent edits to the same task now merge field by field

    Field-level merging of concurrent edits is the substantive change here: two devices touching different fields of the same task no longer produce a silent overwrite. That is a data-model correction rather than a bug fix, and it is the sort of work that has to land before sync can be trusted by default. The single-day Schedule view and Inbox recovery for orphaned tasks are the user-facing additions.

    View source ↗
  5. 1mo ago

    Sync fix: project move replays now converge

    A per-PR release tag carrying a single commit subject about converging project-move replays. It is an artifact of the repository's tagging rather than a user-facing release, and the same fix surfaces properly in the numbered releases around it.

    View source ↗
  6. 1mo ago

    Todoist import, Android widget, opt-in split-file delta sync

    The opt-in split-file sync format is the item that matters: delta-based syncing that skips a full download when the remote revision has not changed, which is what large datasets on file-based backends need. The Todoist import plugin and Android home-screen widget are the visible features, and the redesigned add-task bar continues the input-surface cleanup running through these releases.

    View source ↗