@cerefox/memory 0.10.3 → 0.11.0

package/dist/bin/cerefox.js

@@ -7184,7 +7184,7 @@ var exports_meta = {};
 __export(exports_meta, {
   PKG_VERSION: () => PKG_VERSION
 });
-var PKG_VERSION = "0.10.3";
+var PKG_VERSION = "0.11.0";
 var init_meta = () => {};
 
 // ../../node_modules/.bun/tslib@2.8.1/node_modules/tslib/tslib.js
@@ -7792,7 +7792,7 @@ var require_tslib = __commonJS((exports, module) => {
   });
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.107.0/node_modules/@supabase/functions-js/dist/main/helper.js
+// ../../node_modules/.bun/@supabase+functions-js@2.108.1/node_modules/@supabase/functions-js/dist/main/helper.js
 var require_helper = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.resolveFetch = undefined;
@@ -7805,7 +7805,7 @@ var require_helper = __commonJS((exports) => {
   exports.resolveFetch = resolveFetch;
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.107.0/node_modules/@supabase/functions-js/dist/main/types.js
+// ../../node_modules/.bun/@supabase+functions-js@2.108.1/node_modules/@supabase/functions-js/dist/main/types.js
 var require_types = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionRegion = exports.FunctionsHttpError = exports.FunctionsRelayError = exports.FunctionsFetchError = exports.FunctionsError = undefined;
@@ -7866,7 +7866,7 @@ var require_types = __commonJS((exports) => {
   })(FunctionRegion || (exports.FunctionRegion = FunctionRegion = {}));
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.107.0/node_modules/@supabase/functions-js/dist/main/FunctionsClient.js
+// ../../node_modules/.bun/@supabase+functions-js@2.108.1/node_modules/@supabase/functions-js/dist/main/FunctionsClient.js
 var require_FunctionsClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionsClient = undefined;
@@ -7979,7 +7979,7 @@ var require_FunctionsClient = __commonJS((exports) => {
   exports.FunctionsClient = FunctionsClient;
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.107.0/node_modules/@supabase/functions-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+functions-js@2.108.1/node_modules/@supabase/functions-js/dist/main/index.js
 var require_main = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionRegion = exports.FunctionsRelayError = exports.FunctionsHttpError = exports.FunctionsFetchError = exports.FunctionsError = exports.FunctionsClient = undefined;
@@ -8005,7 +8005,7 @@ var require_main = __commonJS((exports) => {
   } });
 });
 
-// ../../node_modules/.bun/@supabase+postgrest-js@2.107.0/node_modules/@supabase/postgrest-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+postgrest-js@2.108.1/node_modules/@supabase/postgrest-js/dist/index.mjs
 function sleep(ms, signal) {
   return new Promise((resolve) => {
     if (signal === null || signal === undefined ? undefined : signal.aborted) {
@@ -8144,14 +8144,17 @@ var DEFAULT_MAX_RETRIES = 3, getRetryDelay = (attemptIndex) => Math.min(1000 * 2
     const executeWithRetry = async () => {
       let attemptCount = 0;
       while (true) {
-        const requestHeaders = new Headers(_this.headers);
+        const headers = {};
+        _this.headers.forEach((value, key) => {
+          headers[key] = value;
+        });
         if (attemptCount > 0)
-          requestHeaders.set("X-Retry-Count", String(attemptCount));
+          headers["X-Retry-Count"] = String(attemptCount);
         let res$1;
         try {
           res$1 = await _fetch(_this.url.toString(), {
             method: _this.method,
-            headers: requestHeaders,
+            headers,
             body: JSON.stringify(_this.body, (_, value) => typeof value === "bigint" ? value.toString() : value),
             signal: _this.signal
           });
@@ -8562,6 +8565,9 @@ var init_dist = __esm(() => {
     }
   };
   PostgrestTransformBuilder = class extends PostgrestBuilder {
+    throwOnError() {
+      return super.throwOnError();
+    }
     select(columns) {
       let quoted = false;
       const cleanedColumns = (columns !== null && columns !== undefined ? columns : "*").split("").map((c2) => {
@@ -8581,9 +8587,9 @@ var init_dist = __esm(() => {
       this.url.searchParams.set(key, `${existingOrder ? `${existingOrder},` : ""}${column}.${ascending ? "asc" : "desc"}${nullsFirst === undefined ? "" : nullsFirst ? ".nullsfirst" : ".nullslast"}`);
       return this;
     }
-    limit(count, { foreignTable, referencedTable = foreignTable } = {}) {
+    limit(rows, { foreignTable, referencedTable = foreignTable } = {}) {
       const key = typeof referencedTable === "undefined" ? "limit" : `${referencedTable}.limit`;
-      this.url.searchParams.set(key, `${count}`);
+      this.url.searchParams.set(key, `${rows}`);
       return this;
     }
     range(from, to, { foreignTable, referencedTable = foreignTable } = {}) {
@@ -8636,14 +8642,17 @@ var init_dist = __esm(() => {
     returns() {
       return this;
     }
-    maxAffected(value) {
+    maxAffected(rows) {
       this.headers.append("Prefer", "handling=strict");
-      this.headers.append("Prefer", `max-affected=${value}`);
+      this.headers.append("Prefer", `max-affected=${rows}`);
       return this;
     }
   };
   PostgrestReservedCharsRegexp = /* @__PURE__ */ new RegExp("[,()]");
   PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
+    throwOnError() {
+      return super.throwOnError();
+    }
     eq(column, value) {
       this.url.searchParams.append(column, `eq.${value}`);
       return this;
@@ -8807,7 +8816,7 @@ var init_dist = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js
 var require_websocket_factory = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocketFactory = undefined;
@@ -8898,14 +8907,14 @@ Suggested solution: ${env.workaround}`;
   exports.default = WebSocketFactory;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/lib/version.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/lib/version.js
 var require_version = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.version = undefined;
-  exports.version = "2.107.0";
+  exports.version = "2.108.1";
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/lib/constants.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/lib/constants.js
 var require_constants = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CONNECTION_STATE = exports.TRANSPORTS = exports.CHANNEL_EVENTS = exports.CHANNEL_STATES = exports.SOCKET_STATES = exports.MAX_PUSH_BUFFER_SIZE = exports.WS_CLOSE_NORMAL = exports.DEFAULT_TIMEOUT = exports.VERSION = exports.DEFAULT_VSN = exports.VSN_2_0_0 = exports.VSN_1_0_0 = exports.DEFAULT_VERSION = undefined;
@@ -8950,7 +8959,7 @@ var require_constants = __commonJS((exports) => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/lib/serializer.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/lib/serializer.js
 var require_serializer = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
 
@@ -9095,7 +9104,7 @@ var require_serializer = __commonJS((exports) => {
   exports.default = Serializer;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/lib/transformers.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/lib/transformers.js
 var require_transformers = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.httpEndpointURL = exports.toTimestampString = exports.toArray = exports.toJson = exports.toNumber = exports.toBoolean = exports.convertCell = exports.convertColumn = exports.convertChangeData = exports.PostgresTypes = undefined;
@@ -10642,7 +10651,7 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js
 var require_presenceAdapter = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var phoenix_1 = require_phoenix_cjs();
@@ -10715,7 +10724,7 @@ var require_presenceAdapter = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js
 var require_RealtimePresence = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.REALTIME_PRESENCE_LISTEN_EVENTS = undefined;
@@ -10740,7 +10749,7 @@ var require_RealtimePresence = __commonJS((exports) => {
   exports.default = RealtimePresence;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js
 var require_normalizeChannelError = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.normalizeChannelError = normalizeChannelError;
@@ -10763,7 +10772,7 @@ var require_normalizeChannelError = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js
 var require_channelAdapter = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var constants_1 = require_constants();
@@ -10865,7 +10874,7 @@ var require_channelAdapter = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js
 var require_RealtimeChannel = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.REALTIME_CHANNEL_STATES = exports.REALTIME_SUBSCRIBE_STATES = exports.REALTIME_LISTEN_TYPES = exports.REALTIME_POSTGRES_CHANGES_LISTEN_EVENT = undefined;
@@ -11240,7 +11249,7 @@ var require_RealtimeChannel = __commonJS((exports) => {
   exports.default = RealtimeChannel;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js
 var require_socketAdapter = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var phoenix_1 = require_phoenix_cjs();
@@ -11353,7 +11362,7 @@ var require_socketAdapter = __commonJS((exports) => {
   exports.default = SocketAdapter;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js
 var require_RealtimeClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -11820,7 +11829,7 @@ var require_RealtimeClient = __commonJS((exports) => {
   exports.default = RealtimeClient;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.107.0/node_modules/@supabase/realtime-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.108.1/node_modules/@supabase/realtime-js/dist/main/index.js
 var require_main2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocketFactory = exports.REALTIME_CHANNEL_STATES = exports.REALTIME_SUBSCRIBE_STATES = exports.REALTIME_PRESENCE_LISTEN_EVENTS = exports.REALTIME_POSTGRES_CHANGES_LISTEN_EVENT = exports.REALTIME_LISTEN_TYPES = exports.RealtimeClient = exports.RealtimeChannel = exports.RealtimePresence = undefined;
@@ -12150,7 +12159,7 @@ var init_dist2 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+storage-js@2.107.0/node_modules/@supabase/storage-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+storage-js@2.108.1/node_modules/@supabase/storage-js/dist/index.mjs
 function _typeof2(o) {
   "@babel/helpers - typeof";
   return _typeof2 = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(o$1) {
@@ -12458,7 +12467,7 @@ var StorageError, StorageApiError, StorageUnknownError, resolveFetch = (customFe
       throw error;
     }
   }
-}, DEFAULT_SEARCH_OPTIONS, DEFAULT_FILE_OPTIONS, StorageFileApi, version = "2.107.0", DEFAULT_HEADERS, StorageBucketApi, StorageAnalyticsClient, VectorIndexApi, VectorDataApi, VectorBucketApi, StorageVectorsClient, VectorBucketScope, VectorIndexScope, StorageClient;
+}, DEFAULT_SEARCH_OPTIONS, DEFAULT_FILE_OPTIONS, StorageFileApi, version = "2.108.1", DEFAULT_HEADERS, StorageBucketApi, StorageAnalyticsClient, VectorIndexApi, VectorDataApi, VectorBucketApi, StorageVectorsClient, VectorBucketScope, VectorIndexScope, StorageClient;
 var init_dist3 = __esm(() => {
   init_dist2();
   StorageError = class extends Error {
@@ -13166,14 +13175,14 @@ var init_dist3 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/version.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/version.js
 var require_version2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.version = undefined;
-  exports.version = "2.107.0";
+  exports.version = "2.108.1";
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/constants.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/constants.js
 var require_constants2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.JWKS_TTL = exports.BASE64URL_REGEX = exports.API_VERSIONS = exports.API_VERSION_HEADER_NAME = exports.NETWORK_FAILURE = exports.DEFAULT_HEADERS = exports.AUDIENCE = exports.STORAGE_KEY = exports.GOTRUE_URL = exports.EXPIRY_MARGIN_MS = exports.AUTO_REFRESH_TICK_THRESHOLD = exports.AUTO_REFRESH_TICK_DURATION_MS = undefined;
@@ -13200,7 +13209,7 @@ var require_constants2 = __commonJS((exports) => {
   exports.JWKS_TTL = 10 * 60 * 1000;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/errors.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/errors.js
 var require_errors = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.AuthInvalidJwtError = exports.AuthWeakPasswordError = exports.AuthRefreshDiscardedError = exports.AuthRetryableFetchError = exports.AuthPKCECodeVerifierMissingError = exports.AuthPKCEGrantCodeExchangeError = exports.AuthImplicitGrantRedirectError = exports.AuthInvalidCredentialsError = exports.AuthInvalidTokenResponseError = exports.AuthSessionMissingError = exports.CustomAuthError = exports.AuthUnknownError = exports.AuthApiError = exports.AuthError = undefined;
@@ -13369,7 +13378,7 @@ var require_errors = __commonJS((exports) => {
   exports.AuthInvalidJwtError = AuthInvalidJwtError;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/base64url.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/base64url.js
 var require_base64url = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.byteToBase64URL = byteToBase64URL;
@@ -13557,7 +13566,7 @@ var require_base64url = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/helpers.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/helpers.js
 var require_helpers = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.Deferred = exports.removeItemAsync = exports.getItemAsync = exports.setItemAsync = exports.looksLikeFetchResponse = exports.resolveFetch = exports.supportsLocalStorage = exports.isBrowser = undefined;
@@ -13872,7 +13881,7 @@ var require_helpers = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/fetch.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/fetch.js
 var require_fetch = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.handleError = handleError2;
@@ -14037,14 +14046,14 @@ var require_fetch = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/types.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/types.js
 var require_types2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.SIGN_OUT_SCOPES = undefined;
   exports.SIGN_OUT_SCOPES = ["global", "local", "others"];
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js
 var require_GoTrueAdminApi = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -14491,7 +14500,7 @@ var require_GoTrueAdminApi = __commonJS((exports) => {
   exports.default = GoTrueAdminApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/local-storage.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/local-storage.js
 var require_local_storage = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.memoryLocalStorageAdapter = memoryLocalStorageAdapter;
@@ -14510,7 +14519,7 @@ var require_local_storage = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/locks.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/locks.js
 var require_locks = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.ProcessLockAcquireTimeoutError = exports.NavigatorLockAcquireTimeoutError = exports.LockAcquireTimeoutError = exports.internals = undefined;
@@ -14684,7 +14693,7 @@ var require_locks = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/polyfills.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/polyfills.js
 var require_polyfills = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.polyfillGlobalThis = polyfillGlobalThis;
@@ -14708,7 +14717,7 @@ var require_polyfills = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js
 var require_ethereum = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.getAddress = getAddress;
@@ -14785,7 +14794,7 @@ ${suffix}`;
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js
 var require_webauthn_errors = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebAuthnUnknownError = exports.WebAuthnError = undefined;
@@ -14972,7 +14981,7 @@ var require_webauthn_errors = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/lib/webauthn.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/lib/webauthn.js
 var require_webauthn = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebAuthnApi = exports.DEFAULT_REQUEST_OPTIONS = exports.DEFAULT_CREATION_OPTIONS = exports.webAuthnAbortService = exports.WebAuthnAbortService = exports.identifyAuthenticationError = exports.identifyRegistrationError = exports.isWebAuthnError = exports.WebAuthnError = undefined;
@@ -15426,7 +15435,7 @@ var require_webauthn = __commonJS((exports) => {
   exports.WebAuthnApi = WebAuthnApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/GoTrueClient.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/GoTrueClient.js
 var require_GoTrueClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -16261,15 +16270,25 @@ var require_GoTrueClient = __commonJS((exports) => {
         const endpoint = `${this.url}/resend`;
         if ("email" in credentials) {
           const { email, type, options } = credentials;
+          let codeChallenge = null;
+          let codeChallengeMethod = null;
+          if (this.flowType === "pkce") {
+            [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+          }
           const { error } = await (0, fetch_1._request)(this.fetch, "POST", endpoint, {
             headers: this.headers,
             body: {
               email,
               type,
-              gotrue_meta_security: { captcha_token: options === null || options === undefined ? undefined : options.captchaToken }
+              gotrue_meta_security: { captcha_token: options === null || options === undefined ? undefined : options.captchaToken },
+              code_challenge: codeChallenge,
+              code_challenge_method: codeChallengeMethod
             },
             redirectTo: options === null || options === undefined ? undefined : options.emailRedirectTo
           });
+          if (error) {
+            await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+          }
           return this._returnResult({ data: { user: null, session: null }, error });
         } else if ("phone" in credentials) {
           const { phone, type, options } = credentials;
@@ -16288,6 +16307,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
         throw new errors_1.AuthInvalidCredentialsError("You must provide either an email or phone number and a type");
       } catch (error) {
+        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: { user: null, session: null }, error });
         }
@@ -17002,7 +17022,7 @@ var require_GoTrueClient = __commonJS((exports) => {
               if ((0, errors_1.isAuthRefreshDiscardedError)(error)) {
                 this._debug(debugName, "refresh discarded by commit guard", error);
               } else {
-                console.error(error);
+                this._debug(debugName, "refresh failed", error);
                 if (!(0, errors_1.isAuthRetryableFetchError)(error)) {
                   this._debug(debugName, "refresh failed with a non-retryable error, removing the session", error);
                   await this._removeSession();
@@ -18068,7 +18088,7 @@ var require_GoTrueClient = __commonJS((exports) => {
   exports.default = GoTrueClient;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js
 var require_AuthAdminApi = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -18077,7 +18097,7 @@ var require_AuthAdminApi = __commonJS((exports) => {
   exports.default = AuthAdminApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/AuthClient.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/AuthClient.js
 var require_AuthClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -18086,7 +18106,7 @@ var require_AuthClient = __commonJS((exports) => {
   exports.default = AuthClient;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.107.0/node_modules/@supabase/auth-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+auth-js@2.108.1/node_modules/@supabase/auth-js/dist/main/index.js
 var require_main3 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.processLock = exports.lockInternals = exports.NavigatorLockAcquireTimeoutError = exports.navigatorLock = exports.AuthClient = exports.AuthAdminApi = exports.GoTrueClient = exports.GoTrueAdminApi = undefined;
@@ -18116,7 +18136,7 @@ var require_main3 = __commonJS((exports) => {
   } });
 });
 
-// ../../node_modules/.bun/@supabase+supabase-js@2.107.0/node_modules/@supabase/supabase-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+supabase-js@2.108.1/node_modules/@supabase/supabase-js/dist/index.mjs
 var exports_dist = {};
 __export(exports_dist, {
   createClient: () => createClient,
@@ -18377,7 +18397,7 @@ function shouldShowDeprecationWarning() {
     return false;
   return parseInt(versionMatch[1], 10) <= 18;
 }
-var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.107.0", JS_ENV = "", JS_RUNTIME_VERSION, _Deno$version, _process$version, _runtimeMeta, DEFAULT_HEADERS2, DEFAULT_GLOBAL_OPTIONS, DEFAULT_DB_OPTIONS, DEFAULT_AUTH_OPTIONS, DEFAULT_REALTIME_OPTIONS, DEFAULT_TRACE_PROPAGATION_OPTIONS, otelModulePromise = null, OTEL_PKG = "@opentelemetry/api", resolveFetch2 = (customFetch) => {
+var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.108.1", JS_ENV = "", JS_RUNTIME_VERSION, _Deno$version, _process$version, _runtimeMeta, DEFAULT_HEADERS2, DEFAULT_GLOBAL_OPTIONS, DEFAULT_DB_OPTIONS, DEFAULT_AUTH_OPTIONS, DEFAULT_REALTIME_OPTIONS, DEFAULT_TRACE_PROPAGATION_OPTIONS, otelModulePromise = null, OTEL_PKG = "@opentelemetry/api", resolveFetch2 = (customFetch) => {
   if (customFetch)
     return (...args) => customFetch(...args);
   return (...args) => fetch(...args);
@@ -24758,6 +24778,157 @@ var init_src = __esm(() => {
   src_default = Postgres;
 });
 
+// ../../_shared/mcp-tools/_utils.ts
+function getMaxResponseBytes() {
+  const raw = globalThis.process?.env?.CEREFOX_MAX_RESPONSE_BYTES;
+  if (raw === undefined || raw === "")
+    return MAX_RESPONSE_BYTES;
+  const n = Number.parseInt(raw, 10);
+  return Number.isNaN(n) || n <= 0 ? MAX_RESPONSE_BYTES : n;
+}
+function getMinSearchScore() {
+  const raw = globalThis.process?.env?.CEREFOX_MIN_SEARCH_SCORE;
+  if (raw === undefined || raw === "")
+    return DEFAULT_MIN_SEARCH_SCORE;
+  const n = Number.parseFloat(raw);
+  return Number.isNaN(n) || n < 0 || n > 1 ? DEFAULT_MIN_SEARCH_SCORE : n;
+}
+function applyByteBudget(rows, maxBytes) {
+  const accepted = [];
+  let usedBytes = 0;
+  let truncated = false;
+  for (const row of rows) {
+    const rowBytes = new TextEncoder().encode(JSON.stringify(row)).length;
+    if (usedBytes + rowBytes > maxBytes) {
+      truncated = true;
+      break;
+    }
+    accepted.push(row);
+    usedBytes += rowBytes;
+  }
+  return { accepted, truncated, usedBytes };
+}
+function logUsage(supabase, params) {
+  Promise.resolve(supabase.rpc("cerefox_log_usage", {
+    p_operation: params.operation,
+    p_access_path: params.accessPath,
+    p_requestor: params.requestor ?? "mcp-agent",
+    p_document_id: params.document_id ?? null,
+    p_project_id: params.project_id ?? null,
+    p_query_text: params.query_text ?? null,
+    p_result_count: params.result_count ?? null,
+    p_extra: params.extra ?? {}
+  })).catch(() => {});
+}
+var MAX_RESPONSE_BYTES = 200000, DEFAULT_MIN_SEARCH_SCORE = 0.5;
+
+// ../../_shared/mcp-tools/_projects.ts
+async function ensureDocumentInProject(supabase, documentId, projectName) {
+  let projectId = null;
+  const { data: proj } = await supabase.from("cerefox_projects").select("id").ilike("name", projectName).limit(1);
+  if (proj?.length) {
+    projectId = proj[0].id;
+  } else {
+    const { data: newProj } = await supabase.from("cerefox_projects").insert({ name: projectName }).select("id");
+    projectId = newProj?.[0]?.id ?? null;
+  }
+  if (!projectId)
+    return null;
+  const { data: existing } = await supabase.from("cerefox_document_projects").select("document_id").eq("document_id", documentId).eq("project_id", projectId).limit(1);
+  if (existing?.length)
+    return projectId;
+  const { error: insertErr } = await supabase.from("cerefox_document_projects").insert({ document_id: documentId, project_id: projectId });
+  if (insertErr && !String(insertErr.message ?? "").includes("duplicate key")) {
+    console.warn("ensureDocumentInProject: insert failed", insertErr);
+  }
+  return projectId;
+}
+async function setDocumentProjectsByName(supabase, documentId, projectNames) {
+  const projectIds = [];
+  for (const name of projectNames) {
+    if (!name)
+      continue;
+    const { data: proj } = await supabase.from("cerefox_projects").select("id").ilike("name", name).limit(1);
+    if (proj?.length) {
+      projectIds.push(proj[0].id);
+    } else {
+      const { data: newProj } = await supabase.from("cerefox_projects").insert({ name }).select("id");
+      if (newProj?.[0]?.id)
+        projectIds.push(newProj[0].id);
+    }
+  }
+  await supabase.from("cerefox_document_projects").delete().eq("document_id", documentId);
+  if (projectIds.length > 0) {
+    const rows = projectIds.map((pid) => ({ document_id: documentId, project_id: pid }));
+    await supabase.from("cerefox_document_projects").insert(rows);
+  }
+  return projectIds;
+}
+async function replaceDocumentProjects(supabase, opts) {
+  const { documentId, projectNames, author, authorType, accessPath } = opts;
+  const seenLower = new Set;
+  const cleanNames = [];
+  for (const n of projectNames) {
+    const stripped = (n ?? "").trim();
+    if (!stripped)
+      continue;
+    const key = stripped.toLowerCase();
+    if (seenLower.has(key))
+      continue;
+    seenLower.add(key);
+    cleanNames.push(stripped);
+  }
+  const { data: doc } = await supabase.from("cerefox_documents").select("id, title").eq("id", documentId).is("deleted_at", null).limit(1);
+  if (!doc?.length) {
+    throw new Error(`Document not found (or soft-deleted): ${documentId}`);
+  }
+  const projectIds = [];
+  for (const name of cleanNames) {
+    const { data: proj } = await supabase.from("cerefox_projects").select("id").ilike("name", name).limit(1);
+    if (proj?.length) {
+      projectIds.push(proj[0].id);
+    } else {
+      const { data: newProj } = await supabase.from("cerefox_projects").insert({ name }).select("id");
+      if (newProj?.[0]?.id)
+        projectIds.push(newProj[0].id);
+    }
+  }
+  await supabase.from("cerefox_document_projects").delete().eq("document_id", documentId);
+  if (projectIds.length > 0) {
+    const rows = projectIds.map((pid) => ({ document_id: documentId, project_id: pid }));
+    await supabase.from("cerefox_document_projects").insert(rows);
+  }
+  try {
+    await supabase.rpc("cerefox_create_audit_entry", {
+      p_document_id: documentId,
+      p_version_id: null,
+      p_operation: "update-metadata",
+      p_author: author,
+      p_author_type: authorType,
+      p_size_before: null,
+      p_size_after: null,
+      p_description: cleanNames.length > 0 ? `Set document projects to [${cleanNames.join(", ")}]` : "Cleared all project memberships"
+    });
+  } catch (err) {
+    console.warn("replaceDocumentProjects: audit entry failed", err);
+  }
+  logUsage(supabase, {
+    operation: "set-document-projects",
+    accessPath,
+    requestor: author,
+    document_id: documentId,
+    result_count: projectIds.length
+  });
+  return { documentTitle: doc[0].title, cleanNames, projectIds };
+}
+async function lookupProjectId(supabase, projectName) {
+  const { data, error } = await supabase.from("cerefox_projects").select("id").ilike("name", projectName).limit(1);
+  if (error || !data?.length)
+    return null;
+  return data[0].id;
+}
+var init__projects = () => {};
+
 // src/cli/util/bundled-docs.ts
 import { existsSync as existsSync8, readdirSync as readdirSync3, readFileSync as readFileSync6, statSync } from "node:fs";
 import { dirname as dirname3, join as join7, resolve as resolve2 } from "node:path";
@@ -39828,10 +39999,10 @@ var require_flate = __commonJS((exports) => {
   var GenericWorker = require_GenericWorker();
   var ARRAY_TYPE = USE_TYPEDARRAY ? "uint8array" : "array";
   exports.magic = "\b\x00";
-  function FlateWorker(action17, options) {
-    GenericWorker.call(this, "FlateWorker/" + action17);
+  function FlateWorker(action18, options) {
+    GenericWorker.call(this, "FlateWorker/" + action18);
     this._pako = null;
-    this._pakoAction = action17;
+    this._pakoAction = action18;
     this._pakoOptions = options;
     this.meta = {};
   }
@@ -53732,50 +53903,6 @@ var require_cli_progress = __commonJS((exports, module) => {
   };
 });
 
-// ../../_shared/mcp-tools/_utils.ts
-function getMaxResponseBytes() {
-  const raw = globalThis.process?.env?.CEREFOX_MAX_RESPONSE_BYTES;
-  if (raw === undefined || raw === "")
-    return MAX_RESPONSE_BYTES;
-  const n = Number.parseInt(raw, 10);
-  return Number.isNaN(n) || n <= 0 ? MAX_RESPONSE_BYTES : n;
-}
-function getMinSearchScore() {
-  const raw = globalThis.process?.env?.CEREFOX_MIN_SEARCH_SCORE;
-  if (raw === undefined || raw === "")
-    return DEFAULT_MIN_SEARCH_SCORE;
-  const n = Number.parseFloat(raw);
-  return Number.isNaN(n) || n < 0 || n > 1 ? DEFAULT_MIN_SEARCH_SCORE : n;
-}
-function applyByteBudget(rows, maxBytes) {
-  const accepted = [];
-  let usedBytes = 0;
-  let truncated = false;
-  for (const row of rows) {
-    const rowBytes = new TextEncoder().encode(JSON.stringify(row)).length;
-    if (usedBytes + rowBytes > maxBytes) {
-      truncated = true;
-      break;
-    }
-    accepted.push(row);
-    usedBytes += rowBytes;
-  }
-  return { accepted, truncated, usedBytes };
-}
-function logUsage(supabase, params) {
-  Promise.resolve(supabase.rpc("cerefox_log_usage", {
-    p_operation: params.operation,
-    p_access_path: params.accessPath,
-    p_requestor: params.requestor ?? "mcp-agent",
-    p_document_id: params.document_id ?? null,
-    p_project_id: params.project_id ?? null,
-    p_query_text: params.query_text ?? null,
-    p_result_count: params.result_count ?? null,
-    p_extra: params.extra ?? {}
-  })).catch(() => {});
-}
-var MAX_RESPONSE_BYTES = 200000, DEFAULT_MIN_SEARCH_SCORE = 0.5;
-
 // ../../_shared/mcp-tools/audit-log.ts
 async function handler(supabase, args, ctx) {
   const params = {};
@@ -53880,16 +54007,18 @@ async function handler2(supabase, args, ctx) {
     result_count: 1
   });
   const label = version_id !== null ? " (archived version)" : " (current)";
-  return `# ${row.doc_title ?? "Untitled"}${label}
+  const hashLine = row.content_hash ? `content_hash: ${row.content_hash}
 
-${row.full_content ?? ""}`;
+` : "";
+  return `# ${row.doc_title ?? "Untitled"}${label}
+${hashLine}${row.full_content ?? ""}`;
 }
 var getDocumentTool;
 var init_get_document = __esm(() => {
   init_types3();
   getDocumentTool = {
     name: "cerefox_get_document",
-    description: "Retrieve the full reconstructed content of a document. Pass version_id to retrieve an archived version; omit it (or pass null) for the current version. Version UUIDs are returned by cerefox_list_versions.",
+    description: "Retrieve the full reconstructed content of a document. Pass version_id to retrieve an archived version; omit it (or pass null) for the current version. Version UUIDs are returned by cerefox_list_versions. The response header includes the document's current content_hash — pass it back as expected_content_hash when updating via cerefox_ingest (optimistic concurrency).",
     inputSchema: {
       type: "object",
       required: ["document_id"],
@@ -53910,15 +54039,23 @@ var init_get_document = __esm(() => {
 });
 
 // ../../_shared/mcp-tools/get-help-content.ts
-var HELP_FULL = '# Cerefox Knowledge Base -- Agent Quick Reference\n\nCerefox is a persistent, shared knowledge base. You have **10 MCP tools** (9 of them have CLI equivalents — `cerefox_get_help` is MCP-only). For the full guide, search Cerefox for "How AI Agents Use Cerefox" or call `cerefox_get_help` to retrieve this content over MCP.\n\n## Tools\n\n| Tool | Purpose | Key params |\n|------|---------|------------|\n| `cerefox_search` | Find documents (hybrid FTS + semantic) | `query` (required), `project_name`, `metadata_filter`, `requestor` |\n| `cerefox_ingest` | Save or update a document | `title`, `content` (required), `document_id` (update by ID), `update_if_exists`, `project_name` (single, non-destructive add on update), `project_names` (list, destructive replace on update), `metadata`, `author` |\n| `cerefox_get_document` | Get full document by ID | `document_id` (required) |\n| `cerefox_list_versions` | Version history of a document | `document_id` (required) |\n| `cerefox_metadata_search` | Find docs by metadata (no text query) | `metadata_filter` (required), `include_content`, `updated_since` |\n| `cerefox_list_metadata_keys` | Discover available metadata keys | (none required) |\n| `cerefox_list_projects` | List all projects | (none required) |\n| `cerefox_set_document_projects` | Set doc\'s project memberships to exactly the given list (destructive replace; metadata-only, no content change) | `document_id`, `project_names` (required) |\n| `cerefox_get_audit_log` | Query write operation history | `document_id`, `author`, `operation`, `since` |\n| `cerefox_get_help` | Retrieve Cerefox conventions (this reference) over MCP. **Call this whenever uncertain.** | `topic` (optional, case-insensitive H2 substring match) |\n\n## Essential Rules\n\n1. **Search before ingesting** -- check if the document exists first.\n2. **Prefer ID-based updates** -- pass `document_id` from search results for deterministic updates. Falls back to title-matching with `update_if_exists: true`.\n3. **Set `author`/`requestor`** to your name on every call (e.g., "Claude Code", "archiver"). On MCP, pass as parameters. On CLI, pass `--author`/`--author-type`/`--requestor` flags, or rely on `CEREFOX_AUTHOR_NAME`/`CEREFOX_AUTHOR_TYPE`/`CEREFOX_REQUESTOR_NAME` env vars set in the user\'s `.env`.\n4. **Use `document_id` from search results** `[id: uuid]` for get_document and list_versions.\n5. **Add metadata** -- at minimum `type` ("decision-log", "research", "design-doc") and `status` ("active", "draft").\n6. **Write structured Markdown** with H1/H2/H3 headings for good chunking and search.\n7. **Deletes are soft (recoverable); purge is web-UI-only.** If you decide to delete, surface it to the user (`I soft-deleted X — recoverable from the Cerefox web UI trash`). You cannot un-do your own delete from agent code by design.\n8. **Cross-doc links inside content**: **always use `[Text](document-uuid)`.** UUIDs are the only fully reliable link form — stable across title changes, never ambiguous, no encoding gotchas. Every `cerefox_search` result shows `[id: <uuid>]` after the title; grab it and use it. Title-based linking (`[Text](<Title With Spaces>)`) is fragile (breaks on colons, parens, ampersands, brackets — silently navigates to wrong page) — **don\'t write title-based links**; do an extra search to get the UUID instead. Repo-path forms (`[Text](docs/path.md)`) exist for repo-ingested files; don\'t construct manually. See `AGENT_GUIDE.md → Writing linkable content` for the full rule.\n9. **Project memberships — non-destructive by default**: on `cerefox_ingest` updates, **`project_name` (singular) is a non-destructive add** (ensures membership, preserves others). Use **`project_names` (list)** when you want to set the doc\'s full project set in one call (destructive replace). For metadata-only project changes without writing content, use **`cerefox_set_document_projects(document_id, project_names)`** — that tool is the destructive-replace contract made explicit. Never call `cerefox_set_document_projects` with a single name when you mean "add" — that would REMOVE the doc from all other projects. When in doubt, use `cerefox_ingest` with singular `project_name`.\n\n## Update Workflow (ID-based -- preferred)\n\n```\nsearch("topic") -> find doc [id: abc123] -> get_document(abc123) -> modify ->\ningest(title="Same Title", content="...", document_id="abc123", author="my-agent")\n```\n\n## Update Workflow (title-based -- fallback)\n\n```\nsearch("topic") -> find doc -> modify ->\ningest(title="Same Title", content="...", update_if_exists=true, author="my-agent")\n```\n\n## Catch-Up Workflow\n\n```\nmetadata_search(metadata_filter={"type": "decision-log"}, updated_since="2026-03-28T00:00:00Z")\n```\n\n## CLI fallback (when MCP is unavailable)\n\nIf `cerefox_search` is not in your tool list, your user has likely installed the Cerefox CLI. The canonical invocation is plain **`cerefox <subcommand>`** (the TypeScript CLI, installed via `npm install -g @cerefox/memory`). It uses a resource-verb shape (`cerefox document get`, `cerefox project list`, …). The legacy Python `uv run cerefox` is now a frozen husk as of v0.9 — only `uv run cerefox mcp` still works.\n\nSame operations, same conventions. Full reference: [`docs/guides/cli.md`](docs/guides/cli.md). CLI flag names match MCP parameter names exactly (e.g. `metadata_filter` ↔ `--metadata-filter`); common flags also have single-letter short forms (`-f`, `-p`, `-c`, `-m`, `-u`, `-a`, `-r`). Use the canonical long name (what `--help` shows) or its short form — there are no long-form aliases like `--filter` or `--count`.\n\n| MCP tool | CLI |\n|---|---|\n| `cerefox_search` | `cerefox search "<q>" --requestor "<your-name>"` |\n| `cerefox_ingest` (paste) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --author "<your-name>" --author-type agent` |\n| `cerefox_ingest` (update by ID) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --document-id "<uuid>" --author "<your-name>" --author-type agent` |\n| `cerefox_get_document` | `cerefox document get <id> --version-id <vid> --requestor "<your-name>"` |\n| `cerefox_list_versions` | `cerefox document version list <id> --requestor "<your-name>"` |\n| `cerefox_list_projects` | `cerefox project list --requestor "<your-name>"` |\n| `cerefox_list_metadata_keys` | `cerefox metadata keys` |\n| `cerefox_metadata_search` | `cerefox metadata search --metadata-filter \'<json>\' --requestor "<your-name>"` |\n| `cerefox_set_document_projects` | _MCP-only; a CLI command will be added in a future release. Until then, run via MCP if available._ |\n| `cerefox_get_audit_log` | `cerefox audit list --requestor "<your-name>"` (add `--json` for scripted access) |\n| `cerefox_get_help` | `cerefox guides show agent-quick-reference` (or `cerefox guides list` for the full bundled-docs index) |\n\n**Set identity on every call**, exactly as you would on MCP:\n- Writes (`document ingest`, `document ingest-dir`): `--author "<your-name>" --author-type agent`\n- Reads: `--requestor "<your-name>"`\n\nOr have your user set `CEREFOX_AUTHOR_NAME` / `CEREFOX_AUTHOR_TYPE` / `CEREFOX_REQUESTOR_NAME` in their `.env` to apply defaults once.\n', HELP_SECTIONS, HELP_SECTION_HEADINGS;
+var HELP_FULL = '# Cerefox Knowledge Base -- Agent Quick Reference\n\nCerefox is a persistent, shared knowledge base. You have **10 MCP tools** (9 of them have CLI equivalents — `cerefox_get_help` is MCP-only). For the full guide, search Cerefox for "How AI Agents Use Cerefox" or call `cerefox_get_help` to retrieve this content over MCP.\n\n## Tools\n\n| Tool | Purpose | Key params |\n|------|---------|------------|\n| `cerefox_search` | Find documents (hybrid FTS + semantic) | `query` (required), `project_name`, `metadata_filter`, `requestor` |\n| `cerefox_ingest` | Save or update a document | `title`, `content` (required), `document_id` (update by ID), `expected_content_hash` (**required on content updates** — see rule 9), `last_write_wins`, `update_if_exists`, `project_name` (single, non-destructive add on update), `project_names` (list, destructive replace on update), `metadata`, `author` |\n| `cerefox_get_document` | Get full document by ID (header includes `content_hash` — the update token) | `document_id` (required) |\n| `cerefox_list_versions` | Version history of a document | `document_id` (required) |\n| `cerefox_metadata_search` | Find or list docs by metadata, project, or time (no text query) | `metadata_filter`, `project_name` (list a project\'s docs), `updated_since`, `include_content` — **at least one** of metadata_filter/project_name/updated_since/created_since |\n| `cerefox_list_metadata_keys` | Discover available metadata keys | (none required) |\n| `cerefox_list_projects` | List all projects | (none required) |\n| `cerefox_set_document_projects` | Set doc\'s project memberships to exactly the given list (destructive replace; metadata-only, no content change) | `document_id`, `project_names` (required) |\n| `cerefox_get_audit_log` | Query write operation history | `document_id`, `author`, `operation`, `since` |\n| `cerefox_get_help` | Retrieve Cerefox conventions (this reference) over MCP. **Call this whenever uncertain.** | `topic` (optional, case-insensitive H2 substring match) |\n\n## Essential Rules\n\n1. **Search before ingesting** -- check if the document exists first.\n2. **Prefer ID-based updates** -- pass `document_id` from search results for deterministic updates. Falls back to title-matching with `update_if_exists: true`.\n3. **Set `author`/`requestor`** to your name on every call (e.g., "Claude Code", "archiver"). On MCP, pass as parameters. On CLI, pass `--author`/`--author-type`/`--requestor` flags, or rely on `CEREFOX_AUTHOR_NAME`/`CEREFOX_AUTHOR_TYPE`/`CEREFOX_REQUESTOR_NAME` env vars set in the user\'s `.env`.\n4. **Use `document_id` from search results** `[id: uuid]` for get_document and list_versions.\n5. **Add metadata** -- at minimum `type` ("decision-log", "research", "design-doc") and `status` ("active", "draft").\n6. **Write structured Markdown** with H1/H2/H3 headings for good chunking and search.\n7. **Deletes are soft (recoverable); purge is web-UI-only.** If you decide to delete, surface it to the user (`I soft-deleted X — recoverable from the Cerefox web UI trash`). You cannot un-do your own delete from agent code by design.\n8. **Cross-doc links inside content**: **always use `[Text](document-uuid)`.** UUIDs are the only fully reliable link form — stable across title changes, never ambiguous, no encoding gotchas. Every `cerefox_search` result shows `[id: <uuid>]` after the title; grab it and use it. Title-based linking (`[Text](<Title With Spaces>)`) is fragile (breaks on colons, parens, ampersands, brackets — silently navigates to wrong page) — **don\'t write title-based links**; do an extra search to get the UUID instead. Repo-path forms (`[Text](docs/path.md)`) exist for repo-ingested files; don\'t construct manually. See `AGENT_GUIDE.md → Writing linkable content` for the full rule.\n9. **Concurrency: content updates require `expected_content_hash`.** Pass the `content_hash` you read (shown by `cerefox_get_document`, `cerefox_search`, and `cerefox_metadata_search`) when updating a document. If it\'s stale you get a **conflict** — re-read the document, merge your changes into the latest content, retry with the new hash. **Never resolve a conflict by overwriting blindly** — the current content includes another writer\'s work. `last_write_wins: true` skips the check; use it ONLY when an external source of truth makes conflicts meaningless (file re-sync), never to silence a conflict.\n10. **Project memberships — non-destructive by default**: on `cerefox_ingest` updates, **`project_name` (singular) is a non-destructive add** (ensures membership, preserves others). Use **`project_names` (list)** when you want to set the doc\'s full project set in one call (destructive replace). For metadata-only project changes without writing content, use **`cerefox_set_document_projects(document_id, project_names)`** — that tool is the destructive-replace contract made explicit. Never call `cerefox_set_document_projects` with a single name when you mean "add" — that would REMOVE the doc from all other projects. When in doubt, use `cerefox_ingest` with singular `project_name`.\n\n## Update Workflow (ID-based -- preferred)\n\n```\nsearch("topic") -> find doc [id: abc123] -> get_document(abc123) -> note its content_hash -> modify ->\ningest(title="Same Title", content="...", document_id="abc123",\n       expected_content_hash="<the hash you read>", author="my-agent")\n```\n\nOn a **conflict** error: get_document again (fresh content + fresh hash) -> merge your changes -> retry with the new hash.\n\n## Update Workflow (title-based -- fallback)\n\n```\nsearch("topic") -> find doc (note its hash) -> modify ->\ningest(title="Same Title", content="...", update_if_exists=true,\n       expected_content_hash="<the hash you read>", author="my-agent")\n```\n\n## Catch-Up Workflow\n\n```\nmetadata_search(metadata_filter={"type": "decision-log"}, updated_since="2026-03-28T00:00:00Z")\n```\n\n## CLI fallback (when MCP is unavailable)\n\nIf `cerefox_search` is not in your tool list, your user has likely installed the Cerefox CLI. The canonical invocation is plain **`cerefox <subcommand>`** (the TypeScript CLI, installed via `npm install -g @cerefox/memory`). It uses a resource-verb shape (`cerefox document get`, `cerefox project list`, …). The legacy Python `uv run cerefox` is now a frozen husk as of v0.9 — only `uv run cerefox mcp` still works.\n\nSame operations, same conventions. Full reference: [`docs/guides/cli.md`](docs/guides/cli.md). CLI flag names match MCP parameter names exactly (e.g. `metadata_filter` ↔ `--metadata-filter`); common flags also have single-letter short forms (`-f`, `-p`, `-c`, `-m`, `-u`, `-a`, `-r`). Use the canonical long name (what `--help` shows) or its short form — there are no long-form aliases like `--filter` or `--count`.\n\n| MCP tool | CLI |\n|---|---|\n| `cerefox_search` | `cerefox search "<q>" --requestor "<your-name>"` |\n| `cerefox_ingest` (paste) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --author "<your-name>" --author-type agent` |\n| `cerefox_ingest` (update by ID) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --document-id "<uuid>" --expected-content-hash "<hash>" --author "<your-name>" --author-type agent` |\n| `cerefox_get_document` | `cerefox document get <id> --version-id <vid> --requestor "<your-name>"` |\n| `cerefox_list_versions` | `cerefox document version list <id> --requestor "<your-name>"` |\n| `cerefox_list_projects` | `cerefox project list --requestor "<your-name>"` |\n| `cerefox_list_metadata_keys` | `cerefox metadata keys` |\n| `cerefox_metadata_search` | `cerefox metadata search --metadata-filter \'<json>\' --requestor "<your-name>"` (list a project: `cerefox document list --project <name>`) |\n| `cerefox_set_document_projects` | `cerefox document set-projects <id> <name...> --author "<your-name>" --author-type agent` (or `--clear` to remove all) |\n| `cerefox_get_audit_log` | `cerefox audit list --requestor "<your-name>"` (add `--json` for scripted access) |\n| `cerefox_get_help` | `cerefox guides show agent-quick-reference` (or `cerefox guides list` for the full bundled-docs index) |\n\n**Set identity on every call**, exactly as you would on MCP:\n- Writes (`document ingest`, `document ingest-dir`): `--author "<your-name>" --author-type agent`\n- Reads: `--requestor "<your-name>"`\n\nOr have your user set `CEREFOX_AUTHOR_NAME` / `CEREFOX_AUTHOR_TYPE` / `CEREFOX_REQUESTOR_NAME` in their `.env` to apply defaults once.\n', HELP_SECTIONS, HELP_SECTION_HEADINGS;
 var init_get_help_content = __esm(() => {
   HELP_SECTIONS = {
-    Tools: "## Tools\n\n| Tool | Purpose | Key params |\n|------|---------|------------|\n| `cerefox_search` | Find documents (hybrid FTS + semantic) | `query` (required), `project_name`, `metadata_filter`, `requestor` |\n| `cerefox_ingest` | Save or update a document | `title`, `content` (required), `document_id` (update by ID), `update_if_exists`, `project_name` (single, non-destructive add on update), `project_names` (list, destructive replace on update), `metadata`, `author` |\n| `cerefox_get_document` | Get full document by ID | `document_id` (required) |\n| `cerefox_list_versions` | Version history of a document | `document_id` (required) |\n| `cerefox_metadata_search` | Find docs by metadata (no text query) | `metadata_filter` (required), `include_content`, `updated_since` |\n| `cerefox_list_metadata_keys` | Discover available metadata keys | (none required) |\n| `cerefox_list_projects` | List all projects | (none required) |\n| `cerefox_set_document_projects` | Set doc's project memberships to exactly the given list (destructive replace; metadata-only, no content change) | `document_id`, `project_names` (required) |\n| `cerefox_get_audit_log` | Query write operation history | `document_id`, `author`, `operation`, `since` |\n| `cerefox_get_help` | Retrieve Cerefox conventions (this reference) over MCP. **Call this whenever uncertain.** | `topic` (optional, case-insensitive H2 substring match) |",
-    "Essential Rules": '## Essential Rules\n\n1. **Search before ingesting** -- check if the document exists first.\n2. **Prefer ID-based updates** -- pass `document_id` from search results for deterministic updates. Falls back to title-matching with `update_if_exists: true`.\n3. **Set `author`/`requestor`** to your name on every call (e.g., "Claude Code", "archiver"). On MCP, pass as parameters. On CLI, pass `--author`/`--author-type`/`--requestor` flags, or rely on `CEREFOX_AUTHOR_NAME`/`CEREFOX_AUTHOR_TYPE`/`CEREFOX_REQUESTOR_NAME` env vars set in the user\'s `.env`.\n4. **Use `document_id` from search results** `[id: uuid]` for get_document and list_versions.\n5. **Add metadata** -- at minimum `type` ("decision-log", "research", "design-doc") and `status` ("active", "draft").\n6. **Write structured Markdown** with H1/H2/H3 headings for good chunking and search.\n7. **Deletes are soft (recoverable); purge is web-UI-only.** If you decide to delete, surface it to the user (`I soft-deleted X — recoverable from the Cerefox web UI trash`). You cannot un-do your own delete from agent code by design.\n8. **Cross-doc links inside content**: **always use `[Text](document-uuid)`.** UUIDs are the only fully reliable link form — stable across title changes, never ambiguous, no encoding gotchas. Every `cerefox_search` result shows `[id: <uuid>]` after the title; grab it and use it. Title-based linking (`[Text](<Title With Spaces>)`) is fragile (breaks on colons, parens, ampersands, brackets — silently navigates to wrong page) — **don\'t write title-based links**; do an extra search to get the UUID instead. Repo-path forms (`[Text](docs/path.md)`) exist for repo-ingested files; don\'t construct manually. See `AGENT_GUIDE.md → Writing linkable content` for the full rule.\n9. **Project memberships — non-destructive by default**: on `cerefox_ingest` updates, **`project_name` (singular) is a non-destructive add** (ensures membership, preserves others). Use **`project_names` (list)** when you want to set the doc\'s full project set in one call (destructive replace). For metadata-only project changes without writing content, use **`cerefox_set_document_projects(document_id, project_names)`** — that tool is the destructive-replace contract made explicit. Never call `cerefox_set_document_projects` with a single name when you mean "add" — that would REMOVE the doc from all other projects. When in doubt, use `cerefox_ingest` with singular `project_name`.',
-    "Update Workflow (ID-based -- preferred)": '## Update Workflow (ID-based -- preferred)\n\n```\nsearch("topic") -> find doc [id: abc123] -> get_document(abc123) -> modify ->\ningest(title="Same Title", content="...", document_id="abc123", author="my-agent")\n```',
-    "Update Workflow (title-based -- fallback)": '## Update Workflow (title-based -- fallback)\n\n```\nsearch("topic") -> find doc -> modify ->\ningest(title="Same Title", content="...", update_if_exists=true, author="my-agent")\n```',
+    Tools: "## Tools\n\n| Tool | Purpose | Key params |\n|------|---------|------------|\n| `cerefox_search` | Find documents (hybrid FTS + semantic) | `query` (required), `project_name`, `metadata_filter`, `requestor` |\n| `cerefox_ingest` | Save or update a document | `title`, `content` (required), `document_id` (update by ID), `expected_content_hash` (**required on content updates** — see rule 9), `last_write_wins`, `update_if_exists`, `project_name` (single, non-destructive add on update), `project_names` (list, destructive replace on update), `metadata`, `author` |\n| `cerefox_get_document` | Get full document by ID (header includes `content_hash` — the update token) | `document_id` (required) |\n| `cerefox_list_versions` | Version history of a document | `document_id` (required) |\n| `cerefox_metadata_search` | Find or list docs by metadata, project, or time (no text query) | `metadata_filter`, `project_name` (list a project's docs), `updated_since`, `include_content` — **at least one** of metadata_filter/project_name/updated_since/created_since |\n| `cerefox_list_metadata_keys` | Discover available metadata keys | (none required) |\n| `cerefox_list_projects` | List all projects | (none required) |\n| `cerefox_set_document_projects` | Set doc's project memberships to exactly the given list (destructive replace; metadata-only, no content change) | `document_id`, `project_names` (required) |\n| `cerefox_get_audit_log` | Query write operation history | `document_id`, `author`, `operation`, `since` |\n| `cerefox_get_help` | Retrieve Cerefox conventions (this reference) over MCP. **Call this whenever uncertain.** | `topic` (optional, case-insensitive H2 substring match) |",
+    "Essential Rules": '## Essential Rules\n\n1. **Search before ingesting** -- check if the document exists first.\n2. **Prefer ID-based updates** -- pass `document_id` from search results for deterministic updates. Falls back to title-matching with `update_if_exists: true`.\n3. **Set `author`/`requestor`** to your name on every call (e.g., "Claude Code", "archiver"). On MCP, pass as parameters. On CLI, pass `--author`/`--author-type`/`--requestor` flags, or rely on `CEREFOX_AUTHOR_NAME`/`CEREFOX_AUTHOR_TYPE`/`CEREFOX_REQUESTOR_NAME` env vars set in the user\'s `.env`.\n4. **Use `document_id` from search results** `[id: uuid]` for get_document and list_versions.\n5. **Add metadata** -- at minimum `type` ("decision-log", "research", "design-doc") and `status` ("active", "draft").\n6. **Write structured Markdown** with H1/H2/H3 headings for good chunking and search.\n7. **Deletes are soft (recoverable); purge is web-UI-only.** If you decide to delete, surface it to the user (`I soft-deleted X — recoverable from the Cerefox web UI trash`). You cannot un-do your own delete from agent code by design.\n8. **Cross-doc links inside content**: **always use `[Text](document-uuid)`.** UUIDs are the only fully reliable link form — stable across title changes, never ambiguous, no encoding gotchas. Every `cerefox_search` result shows `[id: <uuid>]` after the title; grab it and use it. Title-based linking (`[Text](<Title With Spaces>)`) is fragile (breaks on colons, parens, ampersands, brackets — silently navigates to wrong page) — **don\'t write title-based links**; do an extra search to get the UUID instead. Repo-path forms (`[Text](docs/path.md)`) exist for repo-ingested files; don\'t construct manually. See `AGENT_GUIDE.md → Writing linkable content` for the full rule.\n9. **Concurrency: content updates require `expected_content_hash`.** Pass the `content_hash` you read (shown by `cerefox_get_document`, `cerefox_search`, and `cerefox_metadata_search`) when updating a document. If it\'s stale you get a **conflict** — re-read the document, merge your changes into the latest content, retry with the new hash. **Never resolve a conflict by overwriting blindly** — the current content includes another writer\'s work. `last_write_wins: true` skips the check; use it ONLY when an external source of truth makes conflicts meaningless (file re-sync), never to silence a conflict.\n10. **Project memberships — non-destructive by default**: on `cerefox_ingest` updates, **`project_name` (singular) is a non-destructive add** (ensures membership, preserves others). Use **`project_names` (list)** when you want to set the doc\'s full project set in one call (destructive replace). For metadata-only project changes without writing content, use **`cerefox_set_document_projects(document_id, project_names)`** — that tool is the destructive-replace contract made explicit. Never call `cerefox_set_document_projects` with a single name when you mean "add" — that would REMOVE the doc from all other projects. When in doubt, use `cerefox_ingest` with singular `project_name`.',
+    "Update Workflow (ID-based -- preferred)": `## Update Workflow (ID-based -- preferred)
+
+\`\`\`
+search("topic") -> find doc [id: abc123] -> get_document(abc123) -> note its content_hash -> modify ->
+ingest(title="Same Title", content="...", document_id="abc123",
+       expected_content_hash="<the hash you read>", author="my-agent")
+\`\`\`
+
+On a **conflict** error: get_document again (fresh content + fresh hash) -> merge your changes -> retry with the new hash.`,
+    "Update Workflow (title-based -- fallback)": '## Update Workflow (title-based -- fallback)\n\n```\nsearch("topic") -> find doc (note its hash) -> modify ->\ningest(title="Same Title", content="...", update_if_exists=true,\n       expected_content_hash="<the hash you read>", author="my-agent")\n```',
     "Catch-Up Workflow": '## Catch-Up Workflow\n\n```\nmetadata_search(metadata_filter={"type": "decision-log"}, updated_since="2026-03-28T00:00:00Z")\n```',
-    "CLI fallback (when MCP is unavailable)": '## CLI fallback (when MCP is unavailable)\n\nIf `cerefox_search` is not in your tool list, your user has likely installed the Cerefox CLI. The canonical invocation is plain **`cerefox <subcommand>`** (the TypeScript CLI, installed via `npm install -g @cerefox/memory`). It uses a resource-verb shape (`cerefox document get`, `cerefox project list`, …). The legacy Python `uv run cerefox` is now a frozen husk as of v0.9 — only `uv run cerefox mcp` still works.\n\nSame operations, same conventions. Full reference: [`docs/guides/cli.md`](docs/guides/cli.md). CLI flag names match MCP parameter names exactly (e.g. `metadata_filter` ↔ `--metadata-filter`); common flags also have single-letter short forms (`-f`, `-p`, `-c`, `-m`, `-u`, `-a`, `-r`). Use the canonical long name (what `--help` shows) or its short form — there are no long-form aliases like `--filter` or `--count`.\n\n| MCP tool | CLI |\n|---|---|\n| `cerefox_search` | `cerefox search "<q>" --requestor "<your-name>"` |\n| `cerefox_ingest` (paste) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --author "<your-name>" --author-type agent` |\n| `cerefox_ingest` (update by ID) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --document-id "<uuid>" --author "<your-name>" --author-type agent` |\n| `cerefox_get_document` | `cerefox document get <id> --version-id <vid> --requestor "<your-name>"` |\n| `cerefox_list_versions` | `cerefox document version list <id> --requestor "<your-name>"` |\n| `cerefox_list_projects` | `cerefox project list --requestor "<your-name>"` |\n| `cerefox_list_metadata_keys` | `cerefox metadata keys` |\n| `cerefox_metadata_search` | `cerefox metadata search --metadata-filter \'<json>\' --requestor "<your-name>"` |\n| `cerefox_set_document_projects` | _MCP-only; a CLI command will be added in a future release. Until then, run via MCP if available._ |\n| `cerefox_get_audit_log` | `cerefox audit list --requestor "<your-name>"` (add `--json` for scripted access) |\n| `cerefox_get_help` | `cerefox guides show agent-quick-reference` (or `cerefox guides list` for the full bundled-docs index) |\n\n**Set identity on every call**, exactly as you would on MCP:\n- Writes (`document ingest`, `document ingest-dir`): `--author "<your-name>" --author-type agent`\n- Reads: `--requestor "<your-name>"`\n\nOr have your user set `CEREFOX_AUTHOR_NAME` / `CEREFOX_AUTHOR_TYPE` / `CEREFOX_REQUESTOR_NAME` in their `.env` to apply defaults once.'
+    "CLI fallback (when MCP is unavailable)": '## CLI fallback (when MCP is unavailable)\n\nIf `cerefox_search` is not in your tool list, your user has likely installed the Cerefox CLI. The canonical invocation is plain **`cerefox <subcommand>`** (the TypeScript CLI, installed via `npm install -g @cerefox/memory`). It uses a resource-verb shape (`cerefox document get`, `cerefox project list`, …). The legacy Python `uv run cerefox` is now a frozen husk as of v0.9 — only `uv run cerefox mcp` still works.\n\nSame operations, same conventions. Full reference: [`docs/guides/cli.md`](docs/guides/cli.md). CLI flag names match MCP parameter names exactly (e.g. `metadata_filter` ↔ `--metadata-filter`); common flags also have single-letter short forms (`-f`, `-p`, `-c`, `-m`, `-u`, `-a`, `-r`). Use the canonical long name (what `--help` shows) or its short form — there are no long-form aliases like `--filter` or `--count`.\n\n| MCP tool | CLI |\n|---|---|\n| `cerefox_search` | `cerefox search "<q>" --requestor "<your-name>"` |\n| `cerefox_ingest` (paste) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --author "<your-name>" --author-type agent` |\n| `cerefox_ingest` (update by ID) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --document-id "<uuid>" --expected-content-hash "<hash>" --author "<your-name>" --author-type agent` |\n| `cerefox_get_document` | `cerefox document get <id> --version-id <vid> --requestor "<your-name>"` |\n| `cerefox_list_versions` | `cerefox document version list <id> --requestor "<your-name>"` |\n| `cerefox_list_projects` | `cerefox project list --requestor "<your-name>"` |\n| `cerefox_list_metadata_keys` | `cerefox metadata keys` |\n| `cerefox_metadata_search` | `cerefox metadata search --metadata-filter \'<json>\' --requestor "<your-name>"` (list a project: `cerefox document list --project <name>`) |\n| `cerefox_set_document_projects` | `cerefox document set-projects <id> <name...> --author "<your-name>" --author-type agent` (or `--clear` to remove all) |\n| `cerefox_get_audit_log` | `cerefox audit list --requestor "<your-name>"` (add `--json` for scripted access) |\n| `cerefox_get_help` | `cerefox guides show agent-quick-reference` (or `cerefox guides list` for the full bundled-docs index) |\n\n**Set identity on every call**, exactly as you would on MCP:\n- Writes (`document ingest`, `document ingest-dir`): `--author "<your-name>" --author-type agent`\n- Reads: `--requestor "<your-name>"`\n\nOr have your user set `CEREFOX_AUTHOR_NAME` / `CEREFOX_AUTHOR_TYPE` / `CEREFOX_REQUESTOR_NAME` in their `.env` to apply defaults once.'
   };
   HELP_SECTION_HEADINGS = ["Tools", "Essential Rules", "Update Workflow (ID-based -- preferred)", "Update Workflow (title-based -- fallback)", "Catch-Up Workflow", "CLI fallback (when MCP is unavailable)"];
 });
@@ -54137,56 +54274,22 @@ async function sha256hex(text) {
 }
 var MAX_CHUNK_CHARS = 4000;
 
-// ../../_shared/mcp-tools/_projects.ts
-async function ensureDocumentInProject(supabase, documentId, projectName) {
-  let projectId = null;
-  const { data: proj } = await supabase.from("cerefox_projects").select("id").ilike("name", projectName).limit(1);
-  if (proj?.length) {
-    projectId = proj[0].id;
-  } else {
-    const { data: newProj } = await supabase.from("cerefox_projects").insert({ name: projectName }).select("id");
-    projectId = newProj?.[0]?.id ?? null;
-  }
-  if (!projectId)
-    return null;
-  const { data: existing } = await supabase.from("cerefox_document_projects").select("document_id").eq("document_id", documentId).eq("project_id", projectId).limit(1);
-  if (existing?.length)
-    return projectId;
-  const { error: insertErr } = await supabase.from("cerefox_document_projects").insert({ document_id: documentId, project_id: projectId });
-  if (insertErr && !String(insertErr.message ?? "").includes("duplicate key")) {
-    console.warn("ensureDocumentInProject: insert failed", insertErr);
-  }
-  return projectId;
+// ../../_shared/mcp-tools/ingest.ts
+function conflictError(documentId, expectedHash, currentHash) {
+  return new Error(`Conflict: document ${documentId} changed since you read it ` + `(your base hash: ${expectedHash}, current hash: ${currentHash}). ` + `To resolve: (1) cerefox_get_document("${documentId}") to fetch the latest content ` + `and its content_hash, (2) merge your changes into it, (3) retry cerefox_ingest ` + `with expected_content_hash set to the new hash. Do not overwrite blindly — ` + `the current content may include another writer's work.`);
 }
-async function setDocumentProjectsByName(supabase, documentId, projectNames) {
-  const projectIds = [];
-  for (const name of projectNames) {
-    if (!name)
-      continue;
-    const { data: proj } = await supabase.from("cerefox_projects").select("id").ilike("name", name).limit(1);
-    if (proj?.length) {
-      projectIds.push(proj[0].id);
-    } else {
-      const { data: newProj } = await supabase.from("cerefox_projects").insert({ name }).select("id");
-      if (newProj?.[0]?.id)
-        projectIds.push(newProj[0].id);
-    }
+function mapIngestRpcError(message, documentId) {
+  if (message.includes("CEREFOX_CONFLICT")) {
+    const current = message.match(/current hash ([0-9a-f]{64})/)?.[1] ?? "unknown";
+    const expected = message.match(/expected hash ([0-9a-f]{64})/)?.[1] ?? "unknown";
+    return conflictError(documentId, expected, current);
   }
-  await supabase.from("cerefox_document_projects").delete().eq("document_id", documentId);
-  if (projectIds.length > 0) {
-    const rows = projectIds.map((pid) => ({ document_id: documentId, project_id: pid }));
-    await supabase.from("cerefox_document_projects").insert(rows);
+  if (message.includes("CEREFOX_TOKEN_REQUIRED")) {
+    const current = message.match(/Current hash: ([0-9a-f]{64})/)?.[1];
+    return new Error(`Concurrency token required: content updates need expected_content_hash — ` + `the content_hash of the version you based your edit on (returned by ` + `cerefox_get_document, cerefox_search, and cerefox_metadata_search).` + (current ? ` The document's current hash is ${current}; pass it ONLY if your edit was based on the current content.` : "") + ` If you have not read the document, read it first. To deliberately overwrite ` + `regardless of concurrent changes, pass last_write_wins=true.`);
   }
-  return projectIds;
-}
-async function lookupProjectId(supabase, projectName) {
-  const { data, error: error2 } = await supabase.from("cerefox_projects").select("id").ilike("name", projectName).limit(1);
-  if (error2 || !data?.length)
-    return null;
-  return data[0].id;
+  return new Error(`Ingest RPC failed: ${message}`);
 }
-
-// ../../_shared/mcp-tools/ingest.ts
 async function handler4(supabase, args, ctx) {
   const title = args.title?.trim();
   const content = args.content;
@@ -54198,6 +54301,8 @@ async function handler4(supabase, args, ctx) {
   const update_if_exists = args.update_if_exists ?? false;
   const author = args.author ?? "mcp-agent";
   const author_type = "agent";
+  const expected_content_hash = args.expected_content_hash?.trim() || null;
+  const last_write_wins = args.last_write_wins ?? false;
   if (!title || !content?.trim()) {
     throw new McpInvalidParams("title and content are required");
   }
@@ -54218,7 +54323,10 @@ async function handler4(supabase, args, ctx) {
     const existingDoc = existing[0];
     if (existingDoc.content_hash === contentHash2) {
       const note2 = update_if_exists ? "" : " Note: update_if_exists flag was overridden by document_id.";
-      return `Document already up-to-date: "${existingDoc.title}" (id: ${existingDoc.id}). Content hash unchanged.${note2}`;
+      return `Document already up-to-date: "${existingDoc.title}" (id: ${existingDoc.id}). Content hash unchanged (${contentHash2}).${note2}`;
+    }
+    if (!last_write_wins && expected_content_hash && expected_content_hash !== existingDoc.content_hash) {
+      throw conflictError(existingDoc.id, expected_content_hash, existingDoc.content_hash);
     }
     const chunks2 = chunkMarkdown2(content);
     if (chunks2.length === 0)
@@ -54247,10 +54355,12 @@ ${c2.content}`);
       p_chunks: chunkData2,
       p_author: author,
       p_author_type: author_type,
-      p_source_label: source
+      p_source_label: source,
+      p_expected_content_hash: expected_content_hash,
+      p_last_write_wins: last_write_wins
     });
     if (ingestErr2)
-      throw new Error(`Ingest RPC failed: ${ingestErr2.message}`);
+      throw mapIngestRpcError(ingestErr2.message, existingDoc.id);
     logUsage(supabase, {
       operation: "ingest",
       accessPath: ctx.accessPath,
@@ -54264,14 +54374,17 @@ ${c2.content}`);
       await ensureDocumentInProject(supabase, existingDoc.id, project_name);
     }
     const note = update_if_exists ? "" : " Note: update_if_exists flag was overridden by document_id.";
-    return `Document updated: "${title}" (id: ${existingDoc.id}), ${chunks2.length} chunk(s), ${totalChars2} chars.${note}`;
+    return `Document updated: "${title}" (id: ${existingDoc.id}), ${chunks2.length} chunk(s), ${totalChars2} chars. New content_hash: ${contentHash2}.${note}`;
   }
   if (update_if_exists) {
     const { data: existing } = await supabase.from("cerefox_documents").select("id, title, content_hash").eq("title", title).order("updated_at", { ascending: false }).limit(1);
     if (existing?.length) {
       const existingDoc = existing[0];
       if (existingDoc.content_hash === contentHash2) {
-        return `Document already up-to-date: "${existingDoc.title}" (id: ${existingDoc.id}). Content hash unchanged.`;
+        return `Document already up-to-date: "${existingDoc.title}" (id: ${existingDoc.id}). Content hash unchanged (${contentHash2}).`;
+      }
+      if (!last_write_wins && expected_content_hash && expected_content_hash !== existingDoc.content_hash) {
+        throw conflictError(existingDoc.id, expected_content_hash, existingDoc.content_hash);
       }
       const chunks2 = chunkMarkdown2(content);
       if (chunks2.length === 0)
@@ -54300,10 +54413,12 @@ ${c2.content}`);
         p_chunks: chunkData2,
         p_author: author,
         p_author_type: author_type,
-        p_source_label: source
+        p_source_label: source,
+        p_expected_content_hash: expected_content_hash,
+        p_last_write_wins: last_write_wins
       });
       if (ingestErr2)
-        throw new Error(`Ingest RPC failed: ${ingestErr2.message}`);
+        throw mapIngestRpcError(ingestErr2.message, existingDoc.id);
       logUsage(supabase, {
         operation: "ingest",
         accessPath: ctx.accessPath,
@@ -54316,7 +54431,7 @@ ${c2.content}`);
       } else if (project_name) {
         await ensureDocumentInProject(supabase, existingDoc.id, project_name);
       }
-      return `Document updated: "${existingDoc.title}" (id: ${existingDoc.id}), ${chunks2.length} chunk(s), ${totalChars2} chars.`;
+      return `Document updated: "${existingDoc.title}" (id: ${existingDoc.id}), ${chunks2.length} chunk(s), ${totalChars2} chars. New content_hash: ${contentHash2}.`;
     }
   }
   const { data: hashMatch } = await supabase.from("cerefox_documents").select("id, title").eq("content_hash", contentHash2).limit(1);
@@ -54372,6 +54487,7 @@ ${c2.content}`);
 }
 var ingestTool;
 var init_ingest = __esm(() => {
+  init__projects();
   init_types3();
   ingestTool = {
     name: "cerefox_ingest",
@@ -54400,6 +54516,14 @@ var init_ingest = __esm(() => {
           type: "boolean",
           description: "When true, update an existing document with the same title instead of creating a new one (default: false). Ignored when document_id is provided."
         },
+        expected_content_hash: {
+          type: "string",
+          description: "REQUIRED on content updates (optimistic concurrency): the content_hash of the document version you based your edit on, as returned by cerefox_get_document / cerefox_search / cerefox_metadata_search. If the document changed since you read it, the update fails with a conflict — re-read, merge, retry with the new hash. Not needed when creating a new document."
+        },
+        last_write_wins: {
+          type: "boolean",
+          description: "Explicitly skip the concurrency check and overwrite regardless of concurrent changes (default: false). Use ONLY when an external source of truth makes conflicts meaningless (e.g. re-syncing from files). Recorded in the audit log."
+        },
         metadata: { type: "object", description: "Arbitrary JSON metadata (optional)" },
         author: {
           type: "string",
@@ -54545,11 +54669,12 @@ async function handler8(supabase, args, ctx) {
   const limit = args.limit ?? 10;
   const include_content = args.include_content ?? false;
   const requested_max_bytes = args.max_bytes;
-  if (!metadata_filter || typeof metadata_filter !== "object" || Array.isArray(metadata_filter)) {
-    throw new McpInvalidParams("metadata_filter is required and must be a JSON object");
+  if (metadata_filter !== undefined && (typeof metadata_filter !== "object" || Array.isArray(metadata_filter))) {
+    throw new McpInvalidParams("metadata_filter must be a JSON object when provided");
   }
-  if (Object.keys(metadata_filter).length === 0) {
-    throw new McpInvalidParams("metadata_filter must contain at least one key-value pair");
+  const has_metadata = !!metadata_filter && Object.keys(metadata_filter).length > 0;
+  if (!has_metadata && !project_name && !updated_since && !created_since) {
+    throw new McpInvalidParams("Provide at least one of: metadata_filter, project_name, updated_since, or created_since.");
   }
   let projectId = null;
   if (project_name) {
@@ -54560,7 +54685,7 @@ async function handler8(supabase, args, ctx) {
   const ceiling = getMaxResponseBytes();
   const max_bytes = include_content ? Math.min(requested_max_bytes ?? ceiling, ceiling) : null;
   const params = {
-    p_metadata_filter: metadata_filter,
+    p_metadata_filter: metadata_filter ?? {},
     p_project_id: projectId,
     p_updated_since: updated_since ?? null,
     p_created_since: created_since ?? null,
@@ -54577,17 +54702,19 @@ async function handler8(supabase, args, ctx) {
     operation: "metadata_search",
     accessPath: ctx.accessPath,
     requestor: args.requestor,
-    query_text: JSON.stringify(metadata_filter),
+    query_text: JSON.stringify(metadata_filter ?? {}),
     project_id: projectId,
     result_count: rows.length
   });
   if (rows.length === 0)
-    return "No documents match the metadata filter.";
+    return "No documents match the given criteria.";
   const parts = rows.map((row) => {
     const projects = row.project_names?.length ? ` | projects: ${row.project_names.join(", ")}` : "";
     const meta = Object.entries(row.doc_metadata ?? {}).map(([k, v]) => `${k}=${v}`).join(", ");
+    const hash = row.content_hash ? `
+hash: ${row.content_hash}` : "";
     const header = `## ${row.title} [id: ${row.document_id}]
-` + `${meta}${projects} | ${row.total_chars} chars | ${row.review_status} | updated ${row.updated_at?.slice(0, 10) ?? "?"}`;
+` + `${meta}${projects} | ${row.total_chars} chars | ${row.review_status} | updated ${row.updated_at?.slice(0, 10) ?? "?"}${hash}`;
     if (include_content && row.content) {
       return `${header}
 
@@ -54603,20 +54730,20 @@ ${row.content}`;
 }
 var metadataSearchTool;
 var init_metadata_search = __esm(() => {
+  init__projects();
   init_types3();
   metadataSearchTool = {
     name: "cerefox_metadata_search",
-    description: "Find documents by metadata key-value criteria without a text search term. Use to discover documents tagged with specific attributes, browse by taxonomy, or retrieve messages/tasks by type and status.",
+    description: "Find or list documents by metadata key-value criteria without a text search term. Use to discover documents tagged with specific attributes, browse by taxonomy, retrieve messages/tasks by type and status, or list all documents in a project (pass project_name alone). At least one of metadata_filter, project_name, updated_since, or created_since must be supplied; results are ordered newest-updated first.",
     inputSchema: {
       type: "object",
-      required: ["metadata_filter"],
       properties: {
         metadata_filter: {
           type: "object",
-          description: 'Key-value pairs; ALL must match (AND semantics). Example: {"type": "decision", "status": "active"}. Call cerefox_list_metadata_keys first to discover available keys.',
+          description: 'Key-value pairs; ALL must match (AND semantics). Example: {"type": "decision", "status": "active"}. Call cerefox_list_metadata_keys first to discover available keys. Optional — omit (or pass {}) to list by project_name / time range alone.',
           additionalProperties: { type: "string" }
         },
-        project_name: { type: "string", description: "Restrict to a project by name (optional)" },
+        project_name: { type: "string", description: "Restrict to a project by name. Sufficient on its own to list that project's documents (optional)." },
         updated_since: {
           type: "string",
           description: "ISO-8601 timestamp; only docs updated on/after (optional)"
@@ -54729,7 +54856,9 @@ async function handler9(supabase, args, ctx) {
     const docId = row.document_id ? ` [id: ${row.document_id}]` : "";
     const score = row.best_score != null ? ` (score: ${row.best_score.toFixed(3)})` : "";
     const partial = row.is_partial ? ` -- partial (${row.chunk_count} of ${(row.total_chars ?? 0).toLocaleString()} chars)` : "";
-    return `## ${title}${docId}${score}${partial}
+    const hash = row.content_hash ? `
+hash: ${row.content_hash}` : "";
+    return `## ${title}${docId}${score}${partial}${hash}
 
 ${row.full_content ?? ""}`;
   });
@@ -54747,6 +54876,7 @@ ${row.full_content ?? ""}`;
 }
 var searchTool;
 var init_search = __esm(() => {
+  init__projects();
   init_types3();
   searchTool = {
     name: "cerefox_search",
@@ -54797,58 +54927,12 @@ async function handler10(supabase, args, ctx) {
   if (!project_names_raw.every((n) => typeof n === "string")) {
     throw new McpInvalidParams("project_names must contain only strings.");
   }
-  const seenLower = new Set;
-  const cleanNames = [];
-  for (const n of project_names_raw) {
-    const stripped = n.trim();
-    if (!stripped)
-      continue;
-    const key = stripped.toLowerCase();
-    if (seenLower.has(key))
-      continue;
-    seenLower.add(key);
-    cleanNames.push(stripped);
-  }
-  const { data: doc } = await supabase.from("cerefox_documents").select("id, title").eq("id", document_id).is("deleted_at", null).limit(1);
-  if (!doc?.length) {
-    throw new Error(`Document not found (or soft-deleted): ${document_id}`);
-  }
-  const projectIds = [];
-  for (const name of cleanNames) {
-    const { data: proj } = await supabase.from("cerefox_projects").select("id").ilike("name", name).limit(1);
-    if (proj?.length) {
-      projectIds.push(proj[0].id);
-    } else {
-      const { data: newProj } = await supabase.from("cerefox_projects").insert({ name }).select("id");
-      if (newProj?.[0]?.id)
-        projectIds.push(newProj[0].id);
-    }
-  }
-  await supabase.from("cerefox_document_projects").delete().eq("document_id", document_id);
-  if (projectIds.length > 0) {
-    const rows = projectIds.map((pid) => ({ document_id, project_id: pid }));
-    await supabase.from("cerefox_document_projects").insert(rows);
-  }
-  try {
-    await supabase.rpc("cerefox_create_audit_entry", {
-      p_document_id: document_id,
-      p_version_id: null,
-      p_operation: "update-metadata",
-      p_author: author,
-      p_author_type: "agent",
-      p_size_before: null,
-      p_size_after: null,
-      p_description: cleanNames.length > 0 ? `Set document projects to [${cleanNames.join(", ")}]` : "Cleared all project memberships"
-    });
-  } catch (err) {
-    console.warn("set-document-projects: audit entry failed", err);
-  }
-  logUsage(supabase, {
-    operation: "set-document-projects",
-    accessPath: ctx.accessPath,
-    requestor: author,
-    document_id,
-    result_count: projectIds.length
+  const { cleanNames, projectIds } = await replaceDocumentProjects(supabase, {
+    documentId: document_id,
+    projectNames: project_names_raw,
+    author,
+    authorType: "agent",
+    accessPath: ctx.accessPath
   });
   if (cleanNames.length === 0) {
     return `Cleared all project memberships for document ${document_id}. ` + "The document no longer belongs to any project.";
@@ -54860,6 +54944,7 @@ async function handler10(supabase, args, ctx) {
 }
 var setDocumentProjectsTool;
 var init_set_document_projects = __esm(() => {
+  init__projects();
   init_types3();
   setDocumentProjectsTool = {
     name: "cerefox_set_document_projects",
@@ -54965,6 +55050,7 @@ async function runSyncSelfDocs(options = {}) {
           topic: doc.topic
         },
         update_if_exists: true,
+        last_write_wins: true,
         project_name: project,
         author,
         author_type: authorType
@@ -54983,11 +55069,11 @@ async function runSyncSelfDocs(options = {}) {
     printTable(outcomes.filter((o) => o.status === "error").map((o) => ({ topic: o.topic, error: o.detail.slice(0, 100) })));
   }
 }
-async function action19(options) {
+async function action20(options) {
   await runSyncSelfDocs(options);
 }
 function registerSyncSelfDocs(program2) {
-  program2.command("sync-self-docs").description("Ingest bundled Cerefox docs under the _cerefox-self-docs project.").option("--dry-run", "List what would be ingested without writing.").option("--project <name>", "Override the target project name.", "_cerefox-self-docs").action(action19);
+  program2.command("sync-self-docs").description("Ingest bundled Cerefox docs under the _cerefox-self-docs project.").option("--dry-run", "List what would be ingested without writing.").option("--project <name>", "Override the target project name.", "_cerefox-self-docs").action(action20);
 }
 var init_sync_self_docs = __esm(() => {
   init_cli_core();
@@ -70458,6 +70544,43 @@ function registerDocumentRestore(parent) {
   parent.command("restore").description("Restore a soft-deleted document from the trash (inverse of `document delete`).").argument("<document-id>", "UUID of the soft-deleted document.").option("-a, --author <name>", "Caller identity (audit log).").option("--author-type <type>", "'user' or 'agent' (default: user).", "user").action(action11);
 }
 
+// src/cli/commands/document-set-projects.ts
+init_cli_core();
+init__projects();
+init_client();
+async function action12(documentId, projectNames, options) {
+  const names = projectNames ?? [];
+  if (options.clear && names.length > 0) {
+    throw userError("Pass either project names or --clear, not both.", "Use --clear on its own to remove the document from all projects.");
+  }
+  if (!options.clear && names.length === 0) {
+    throw userError("No project names given.", "Pass one or more project names, or --clear to remove all memberships.");
+  }
+  const author = resolveAuthor(options.author);
+  const authorType = resolveAuthorType(options.authorType);
+  if (author === "unknown") {
+    warn("No --author / CEREFOX_AUTHOR_NAME set — audit log will record this as 'unknown'.");
+  }
+  const client = getClient();
+  const { documentTitle, cleanNames } = await replaceDocumentProjects(client.raw, {
+    documentId,
+    projectNames: names,
+    author,
+    authorType,
+    accessPath: "cli"
+  });
+  if (cleanNames.length === 0) {
+    println(c.green(`✓ Cleared all project memberships for "${documentTitle}" (id: ${documentId}).`));
+    return;
+  }
+  println(c.green(`✓ Set ${cleanNames.length} project membership(s) for "${documentTitle}" (id: ${documentId}).`));
+  println(c.dim(`  Projects: ${cleanNames.join(", ")}`));
+  println(c.dim("  This REPLACED the previous set — any project not listed is no longer associated."));
+}
+function registerDocumentSetProjects(parent) {
+  parent.command("set-projects").description("Replace a document's project memberships with exactly the given set (or --clear to remove all).").argument("<document-id>", "UUID of the document.").argument("[project-names...]", "Project names to set (created if missing). Omit and pass --clear to remove all.").option("--clear", "Remove the document from all projects.").option("-a, --author <name>", "Caller identity (audit log).").option("--author-type <type>", "'user' or 'agent' (default: user).", "user").action(action12);
+}
+
 // src/cli/commands/guides.ts
 init_cli_core();
 init_bundled_docs();
@@ -70505,7 +70628,7 @@ function registerGuides(parent) {
 // src/cli/commands/project-create.ts
 init_cli_core();
 init_client();
-async function action12(name, options) {
+async function action13(name, options) {
   const trimmed = name.trim();
   if (!trimmed)
     throw userError("Project name is required.");
@@ -70517,14 +70640,14 @@ async function action12(name, options) {
   println(c.green(`✓ Created project "${data.name}" (id: ${data.id}).`));
 }
 function registerProjectCreate(parent) {
-  parent.command("create").description("Create a new (empty) project.").argument("<name>", "Project name (must be unique).").option("--description <text>", "Optional project description.").action(action12);
+  parent.command("create").description("Create a new (empty) project.").argument("<name>", "Project name (must be unique).").option("--description <text>", "Optional project description.").action(action13);
 }
 
 // src/cli/commands/project-edit.ts
 init_cli_core();
 init_client();
 var UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-async function action13(target, options) {
+async function action14(target, options) {
   const update = {};
   if (options.name !== undefined) {
     const n = options.name.trim();
@@ -70551,7 +70674,7 @@ async function action13(target, options) {
   println(c.green(`✓ Updated project "${data.name}" (id: ${data.id}).`));
 }
 function registerProjectEdit(parent) {
-  parent.command("edit").description("Rename a project and/or change its description.").argument("<name-or-id>", "Project name (exact match) or UUID.").option("--name <new-name>", "New project name.").option("--description <text>", "New project description.").action(action13);
+  parent.command("edit").description("Rename a project and/or change its description.").argument("<name-or-id>", "Project name (exact match) or UUID.").option("--name <new-name>", "New project name.").option("--description <text>", "New project description.").action(action14);
 }
 
 // src/cli/commands/version-archive.ts
@@ -73974,7 +74097,7 @@ import { homedir as homedir5 } from "node:os";
 import { join as join8 } from "node:path";
 
 // ../../_shared/ef-meta/index.ts
-var EF_VERSION = "0.10.1";
+var EF_VERSION = "0.11.0";
 
 // src/cli/util/checks.ts
 init_config();
@@ -74539,7 +74662,7 @@ function symbol(status) {
       return cErr.dim("ℹ");
   }
 }
-async function action14(options) {
+async function action15(options) {
   const useSpinner = !options.json && process.stderr.isTTY;
   const spinner = useSpinner ? ora({ text: "Starting checks…", spinner: "dots", stream: process.stderr }).start() : null;
   const results = await runAllChecks({
@@ -74596,13 +74719,13 @@ async function action14(options) {
   }
 }
 function registerDoctor(program2) {
-  program2.command("doctor").description("Run diagnostic checks against the installed Cerefox.").option("--json", "Emit machine-readable JSON (no colours, structured output).").action(action14);
+  program2.command("doctor").description("Run diagnostic checks against the installed Cerefox.").option("--json", "Emit machine-readable JSON (no colours, structured output).").action(action15);
 }
 
 // src/cli/commands/get-audit-log.ts
 init_cli_core();
 init_client();
-async function action15(options) {
+async function action16(options) {
   const limit = parsePositiveInt(options.limit, "--limit", 50);
   const client = getClient();
   const data = await client.rpc("cerefox_list_audit_entries", {
@@ -74640,14 +74763,14 @@ async function action15(options) {
   })));
 }
 function registerGetAuditLog(program2) {
-  program2.command("get-audit-log").description("Query the audit log with optional filters.").option("-d, --document-id <uuid>", "Filter by document.").option("-a, --author <name>", "Filter by author.").option("-o, --operation <type>", "Filter by operation: create, update-content, update-metadata, delete, restore.").option("--since <iso>", "Lower-bound ISO timestamp.").option("--until <iso>", "Upper-bound ISO timestamp.").option("-l, --limit <n>", "Maximum entries (max 200).", "50").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action15);
+  program2.command("get-audit-log").description("Query the audit log with optional filters.").option("-d, --document-id <uuid>", "Filter by document.").option("-a, --author <name>", "Filter by author.").option("-o, --operation <type>", "Filter by operation: create, update-content, update-metadata, delete, restore.").option("--since <iso>", "Lower-bound ISO timestamp.").option("--until <iso>", "Upper-bound ISO timestamp.").option("-l, --limit <n>", "Maximum entries (max 200).", "50").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action16);
 }
 
 // src/cli/commands/get-doc.ts
 init_cli_core();
 init_cli_core();
 init_client();
-async function action16(documentId, options) {
+async function action17(documentId, options) {
   const client = getClient();
   const rows = await client.rpc("cerefox_get_document", {
     p_document_id: documentId,
@@ -74673,11 +74796,14 @@ async function action16(documentId, options) {
   }
   println(c.bold(`# ${doc.doc_title}`));
   println(c.dim(`[${doc.document_id}] · chunks: ${doc.chunk_count} · chars: ${doc.total_chars}` + (doc.is_archived ? " · archived" : "") + (doc.version_id ? ` · version: ${doc.version_id}` : "")));
+  if (doc.content_hash) {
+    println(c.dim(`content_hash: ${doc.content_hash}`));
+  }
   println("");
   println(doc.full_content);
 }
 function registerGetDoc(program2) {
-  program2.command("get-doc").description("Retrieve the full content of a document by ID.").argument("<document-id>", "UUID of the document.").option("--version-id <uuid>", "Specific archived version (default: current).").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action16);
+  program2.command("get-doc").description("Retrieve the full content of a document by ID.").argument("<document-id>", "UUID of the document.").option("--version-id <uuid>", "Specific archived version (default: current).").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action17);
 }
 
 // src/cli/commands/ingest.ts
@@ -74932,6 +75058,47 @@ async function resolveProjectIds(input, getOrCreateProject) {
   }
   return [];
 }
+// src/ingestion/types.ts
+class ConcurrencyConflictError extends Error {
+  documentId;
+  currentHash;
+  constructor(documentId, currentHash, message) {
+    super(message);
+    this.name = "ConcurrencyConflictError";
+    this.documentId = documentId;
+    this.currentHash = currentHash;
+  }
+}
+
+class ConcurrencyTokenRequiredError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ConcurrencyTokenRequiredError";
+  }
+}
+var DEFAULT_PIPELINE_SETTINGS = {
+  maxChunkChars: 4000,
+  minChunkChars: 100,
+  versionRetentionHours: 48,
+  versionCleanupEnabled: true
+};
+function loadPipelineSettings() {
+  const env4 = globalThis.process?.env ?? {};
+  const intMin = (raw, def, min) => {
+    if (raw === undefined || raw === "")
+      return def;
+    const n = Number.parseInt(raw, 10);
+    return Number.isNaN(n) || n < min ? def : n;
+  };
+  const bool = (raw, def) => raw === undefined || raw === "" ? def : !/^(false|0|no|off)$/i.test(raw.trim());
+  return {
+    maxChunkChars: intMin(env4.CEREFOX_MAX_CHUNK_CHARS, DEFAULT_PIPELINE_SETTINGS.maxChunkChars, 1),
+    minChunkChars: intMin(env4.CEREFOX_MIN_CHUNK_CHARS, DEFAULT_PIPELINE_SETTINGS.minChunkChars, 0),
+    versionRetentionHours: intMin(env4.CEREFOX_VERSION_RETENTION_HOURS, DEFAULT_PIPELINE_SETTINGS.versionRetentionHours, 0),
+    versionCleanupEnabled: bool(env4.CEREFOX_VERSION_CLEANUP_ENABLED, DEFAULT_PIPELINE_SETTINGS.versionCleanupEnabled)
+  };
+}
+
 // src/ingestion/client-bridge.ts
 class IngestionDbBridge {
   supabase;
@@ -74984,9 +75151,22 @@ class IngestionDbBridge {
       params.p_retention_hours = args.retentionHours;
     if (args.cleanupEnabled !== undefined)
       params.p_cleanup_enabled = args.cleanupEnabled;
+    if (args.documentId !== null) {
+      params.p_expected_content_hash = args.expectedContentHash ?? null;
+      params.p_last_write_wins = args.lastWriteWins ?? false;
+    }
     const { data, error: error2 } = await this.supabase.rpc("cerefox_ingest_document", params);
-    if (error2)
-      throw new Error(error2.message ?? JSON.stringify(error2));
+    if (error2) {
+      const msg = error2.message ?? JSON.stringify(error2);
+      if (msg.includes("CEREFOX_CONFLICT")) {
+        const current = msg.match(/current hash ([0-9a-f]{64})/)?.[1] ?? null;
+        throw new ConcurrencyConflictError(args.documentId ?? "", current, msg);
+      }
+      if (msg.includes("CEREFOX_TOKEN_REQUIRED")) {
+        throw new ConcurrencyTokenRequiredError(msg);
+      }
+      throw new Error(msg);
+    }
     if (Array.isArray(data) && data.length > 0) {
       return data[0];
     }
@@ -75091,30 +75271,6 @@ async function fileToMarkdown(filename, data) {
   return data.toString("utf8");
 }
 
-// src/ingestion/types.ts
-var DEFAULT_PIPELINE_SETTINGS = {
-  maxChunkChars: 4000,
-  minChunkChars: 100,
-  versionRetentionHours: 48,
-  versionCleanupEnabled: true
-};
-function loadPipelineSettings() {
-  const env4 = globalThis.process?.env ?? {};
-  const intMin = (raw, def, min) => {
-    if (raw === undefined || raw === "")
-      return def;
-    const n = Number.parseInt(raw, 10);
-    return Number.isNaN(n) || n < min ? def : n;
-  };
-  const bool = (raw, def) => raw === undefined || raw === "" ? def : !/^(false|0|no|off)$/i.test(raw.trim());
-  return {
-    maxChunkChars: intMin(env4.CEREFOX_MAX_CHUNK_CHARS, DEFAULT_PIPELINE_SETTINGS.maxChunkChars, 1),
-    minChunkChars: intMin(env4.CEREFOX_MIN_CHUNK_CHARS, DEFAULT_PIPELINE_SETTINGS.minChunkChars, 0),
-    versionRetentionHours: intMin(env4.CEREFOX_VERSION_RETENTION_HOURS, DEFAULT_PIPELINE_SETTINGS.versionRetentionHours, 0),
-    versionCleanupEnabled: bool(env4.CEREFOX_VERSION_CLEANUP_ENABLED, DEFAULT_PIPELINE_SETTINGS.versionCleanupEnabled)
-  };
-}
-
 // src/ingestion/pipeline.ts
 class IngestionPipeline {
   db;
@@ -75141,7 +75297,9 @@ class IngestionPipeline {
       updateExisting = false,
       documentId,
       author = "unknown",
-      authorType = "user"
+      authorType = "user",
+      expectedContentHash,
+      lastWriteWins = false
     } = opts;
     const listFormProvided = projectIds !== undefined && projectIds !== null || projectNames !== undefined && projectNames !== null;
     const getOrCreate = (name) => this.db.getOrCreateProject(name);
@@ -75162,7 +75320,9 @@ class IngestionPipeline {
         projectIds: fullSetResolved,
         metadata,
         author,
-        authorType
+        authorType,
+        expectedContentHash,
+        lastWriteWins
       });
       if (!listFormProvided && (projectId || projectName)) {
         const singular = await resolveProjectIds({ projectId, projectName }, getOrCreate);
@@ -75197,7 +75357,9 @@ class IngestionPipeline {
           projectIds: fullSetResolved,
           metadata,
           author,
-          authorType
+          authorType,
+          expectedContentHash,
+          lastWriteWins
         });
         if (!listFormProvided && (projectId || projectName)) {
           const singular = await resolveProjectIds({ projectId, projectName }, getOrCreate);
@@ -75283,7 +75445,9 @@ ${c2.content}`);
       projectIds,
       metadata,
       author = "unknown",
-      authorType = "user"
+      authorType = "user",
+      expectedContentHash,
+      lastWriteWins = false
     } = opts;
     const existing = await this.db.getDocumentById(documentId);
     if (!existing) {
@@ -75292,6 +75456,9 @@ ${c2.content}`);
     const newHash = contentHash(text);
     const contentUnchanged = newHash === existing.content_hash;
     if (!contentUnchanged) {
+      if (!lastWriteWins && expectedContentHash && expectedContentHash !== existing.content_hash) {
+        throw new ConcurrencyConflictError(documentId, existing.content_hash, `CEREFOX_CONFLICT: document ${documentId} changed since it was read ` + `(expected hash ${expectedContentHash}, current hash ${existing.content_hash}). ` + `Re-read the document, merge your changes, and retry with the new hash.`);
+      }
       const collision = await this.db.getDocumentByHash(newHash);
       if (collision && collision.id !== documentId) {
         throw new Error(`Identical content already exists as document ${JSON.stringify(collision.title)}. ` + "Edit that document or change the content before saving.");
@@ -75392,7 +75559,9 @@ ${c2.content}`);
       authorType,
       sourceLabel: source,
       retentionHours: this.settings.versionRetentionHours,
-      cleanupEnabled: this.settings.versionCleanupEnabled
+      cleanupEnabled: this.settings.versionCleanupEnabled,
+      expectedContentHash: expectedContentHash ?? null,
+      lastWriteWins
     });
     let finalProjectIds;
     if (newProjectIds !== null) {
@@ -75455,7 +75624,7 @@ async function readContent(path, paste) {
   const titleFromPath = basename2(path, extname3(path));
   return { content, titleFromPath };
 }
-async function action17(path, options) {
+async function action18(path, options) {
   const { content, titleFromPath } = await readContent(path, Boolean(options.paste));
   const title = options.title ?? titleFromPath;
   if (!title || title.trim() === "") {
@@ -75497,7 +75666,9 @@ async function action17(path, options) {
       updateExisting: Boolean(options.updateIfExists),
       documentId: options.documentId ?? null,
       author,
-      authorType
+      authorType,
+      expectedContentHash: options.expectedContentHash ?? null,
+      lastWriteWins: Boolean(options.lastWriteWins)
     }) : await pipeline.ingestText({
       text: content,
       title,
@@ -75508,7 +75679,9 @@ async function action17(path, options) {
       updateExisting: Boolean(options.updateIfExists),
       documentId: options.documentId ?? null,
       author,
-      authorType
+      authorType,
+      expectedContentHash: options.expectedContentHash ?? null,
+      lastWriteWins: Boolean(options.lastWriteWins)
     });
     let verb;
     if (result.action === "created") {
@@ -75527,7 +75700,7 @@ async function action17(path, options) {
   }
 }
 function registerIngest(program2) {
-  program2.command("ingest").description("Ingest a file (or stdin paste) into the knowledge base.").argument("[path]", "Path to the file to ingest. Omit when using --paste.").option("--paste", "Read content from stdin instead of a file.").option("-t, --title <title>", "Document title (required with --paste; defaults to filename without extension).").option("-p, --project-name <name>", "Single project membership (non-destructive on update).").option("-P, --project-names <names>", "Comma-separated full project membership set (destructive replace on update).").option("-m, --metadata <json>", "JSON metadata object.").option("--source <label>", "Origin label (default: cli).", "cli").option("-u, --update-if-exists", "Update an existing doc with the same title.").option("-i, --document-id <uuid>", "Update a specific document by UUID (overrides --update-if-exists).").option("-a, --author <name>", "Caller identity (audit log).").option("--author-type <type>", "'user' or 'agent' (default: user).", "user").action(action17);
+  program2.command("ingest").description("Ingest a file (or stdin paste) into the knowledge base.").argument("[path]", "Path to the file to ingest. Omit when using --paste.").option("--paste", "Read content from stdin instead of a file.").option("-t, --title <title>", "Document title (required with --paste; defaults to filename without extension).").option("-p, --project-name <name>", "Single project membership (non-destructive on update).").option("-P, --project-names <names>", "Comma-separated full project membership set (destructive replace on update).").option("-m, --metadata <json>", "JSON metadata object.").option("--source <label>", "Origin label (default: cli).", "cli").option("-u, --update-if-exists", "Update an existing doc with the same title.").option("-i, --document-id <uuid>", "Update a specific document by UUID (overrides --update-if-exists).").option("--expected-content-hash <sha256>", "Optimistic-concurrency token: the content_hash of the version this edit is based on (shown by `document get` / `search`). Required on content updates unless --last-write-wins.").option("--last-write-wins", "Skip the concurrency check and overwrite regardless of concurrent changes (recorded in the audit log).").option("-a, --author <name>", "Caller identity (audit log).").option("--author-type <type>", "'user' or 'agent' (default: user).", "user").action(action18);
 }
 
 // src/cli/commands/ingest-dir.ts
@@ -75563,7 +75736,7 @@ function walk(dir, extensions) {
   }
   return files;
 }
-async function action18(dir, options) {
+async function action19(dir, options) {
   const extensions = new Set((options.extensions ?? ".md,.txt").split(",").map((e) => e.trim().toLowerCase()).map((e) => e.startsWith(".") ? e : "." + e).filter((e) => e.length > 0));
   const files = walk(dir, extensions);
   if (files.length === 0) {
@@ -75609,7 +75782,8 @@ async function action18(dir, options) {
         metadata,
         updateExisting: Boolean(options.updateIfExists),
         author,
-        authorType
+        authorType,
+        lastWriteWins: true
       });
       outcomes.push({
         file,
@@ -75636,7 +75810,7 @@ async function action18(dir, options) {
   }
 }
 function registerIngestDir(program2) {
-  program2.command("ingest-dir").description("Recursively ingest a directory of markdown / text files.").argument("<dir>", "Root directory to walk.").option("-p, --project-name <name>", "Project membership for all ingested docs.").option("-m, --metadata <json>", "JSON metadata applied to every doc.").option("--source <label>", "Origin label (default: cli).", "cli").option("-u, --update-if-exists", "Update an existing doc with the same title.").option("-a, --author <name>", "Caller identity (audit log).").option("--author-type <type>", "'user' or 'agent' (default: user).", "user").option("-e, --extensions <list>", "Comma-separated file extensions to ingest.", ".md,.txt").action(action18);
+  program2.command("ingest-dir").description("Recursively ingest a directory of markdown / text files.").argument("<dir>", "Root directory to walk.").option("-p, --project-name <name>", "Project membership for all ingested docs.").option("-m, --metadata <json>", "JSON metadata applied to every doc.").option("--source <label>", "Origin label (default: cli).", "cli").option("-u, --update-if-exists", "Update an existing doc with the same title.").option("-a, --author <name>", "Caller identity (audit log).").option("--author-type <type>", "'user' or 'agent' (default: user).", "user").option("-e, --extensions <list>", "Comma-separated file extensions to ingest.", ".md,.txt").action(action19);
 }
 
 // src/cli/commands/init.ts
@@ -75966,7 +76140,7 @@ function writeAnswersTo(target, answers) {
     }
   }
 }
-async function action20(options) {
+async function action21(options) {
   const homeEnv = join10(homedir6(), USER_STATE_DIR_NAME, ".env");
   const cwdEnv = join10(process.cwd(), ".env");
   const explicitDir = (process.env.CEREFOX_CONFIG_DIR ?? "").trim();
@@ -76075,13 +76249,13 @@ async function action20(options) {
   await postWriteLifecycle(target, options);
 }
 function registerInit(program2) {
-  program2.command("init").description("Interactive first-run setup (config, schema deploy stub, optional MCP wiring).").option("-c, --config <file>", "Non-interactive mode: read answers from a JSON file.").option("--force", "Overwrite existing configuration without prompting.").option("--skip-schema", "Skip the schema deploy step.").option("--skip-self-docs", "Skip the bundled self-doc ingest.").option("--skip-agent-config", "Skip the optional MCP agent wiring.").action(action20);
+  program2.command("init").description("Interactive first-run setup (config, schema deploy stub, optional MCP wiring).").option("-c, --config <file>", "Non-interactive mode: read answers from a JSON file.").option("--force", "Overwrite existing configuration without prompting.").option("--skip-schema", "Skip the schema deploy step.").option("--skip-self-docs", "Skip the bundled self-doc ingest.").option("--skip-agent-config", "Skip the optional MCP agent wiring.").action(action21);
 }
 
 // src/cli/commands/list-docs.ts
 init_cli_core();
 init_client();
-async function action21(options) {
+async function action22(options) {
   const deleted = !!options.deleted;
   const limit = parsePositiveInt(options.limit, "--limit", 100);
   const client = getClient();
@@ -76141,13 +76315,13 @@ async function action21(options) {
   }));
 }
 function registerListDocs(program2) {
-  program2.command("list-docs").description("List documents in the knowledge base.").option("-p, --project <name>", "Filter to a specific project.").option("-l, --limit <n>", "Maximum docs to return.", "100").option("--deleted", "List soft-deleted (trashed) documents instead of active ones.").option("--json", "Emit machine-readable JSON.").action(action21);
+  program2.command("list-docs").description("List documents in the knowledge base.").option("-p, --project <name>", "Filter to a specific project.").option("-l, --limit <n>", "Maximum docs to return.", "100").option("--deleted", "List soft-deleted (trashed) documents instead of active ones.").option("--json", "Emit machine-readable JSON.").action(action22);
 }
 
 // src/cli/commands/list-metadata-keys.ts
 init_cli_core();
 init_client();
-async function action22(options) {
+async function action23(options) {
   const client = getClient();
   const data = await client.rpc("cerefox_list_metadata_keys");
   if (data === null) {
@@ -76175,13 +76349,13 @@ async function action22(options) {
   })));
 }
 function registerListMetadataKeys(program2) {
-  program2.command("list-metadata-keys").description("List all metadata keys with document counts and example values.").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action22);
+  program2.command("list-metadata-keys").description("List all metadata keys with document counts and example values.").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action23);
 }
 
 // src/cli/commands/list-projects.ts
 init_cli_core();
 init_client();
-async function action23(options) {
+async function action24(options) {
   const client = getClient();
   const { data, error: error2 } = await client.raw.from("cerefox_projects").select("id, name, description, created_at").order("name", { ascending: true });
   if (error2) {
@@ -76210,13 +76384,13 @@ async function action23(options) {
   })), "(no projects)");
 }
 function registerListProjects(program2) {
-  program2.command("list-projects").description("List all projects in the knowledge base.").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action23);
+  program2.command("list-projects").description("List all projects in the knowledge base.").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action24);
 }
 
 // src/cli/commands/list-versions.ts
 init_cli_core();
 init_client();
-async function action24(documentId, options) {
+async function action25(documentId, options) {
   const client = getClient();
   const data = await client.rpc("cerefox_list_document_versions", {
     p_document_id: documentId
@@ -76257,7 +76431,7 @@ async function action24(documentId, options) {
   })));
 }
 function registerListVersions(program2) {
-  program2.command("list-versions").description("List archived versions of a document.").argument("<document-id>", "UUID of the document.").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action24);
+  program2.command("list-versions").description("List archived versions of a document.").argument("<document-id>", "UUID of the document.").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action25);
 }
 
 // src/cli/commands/mcp.ts
@@ -76272,7 +76446,7 @@ function registerMcp(program2) {
 // src/cli/commands/metadata-search.ts
 init_cli_core();
 init_client();
-async function action25(options) {
+async function action26(options) {
   const metadataFilter = parseJsonObjectArg(options.metadataFilter, "--metadata-filter");
   if (!metadataFilter || Object.keys(metadataFilter).length === 0) {
     throw userError("--metadata-filter is required and must be a non-empty JSON object.", `Example: --metadata-filter '{"type":"decision-log"}'.`);
@@ -76335,7 +76509,7 @@ async function action25(options) {
   }
 }
 function registerMetadataSearch(program2) {
-  program2.command("metadata-search").description("Find documents by metadata criteria (no text query).").requiredOption("-f, --metadata-filter <json>", "JSON object; only docs whose metadata contains ALL pairs are returned.").option("-p, --project-name <name>", "Filter to a specific project.").option("--updated-since <iso>", "Only docs updated on/after this ISO timestamp.").option("--created-since <iso>", "Only docs created on/after this ISO timestamp.").option("--include-content", "Include full document text in results.").option("-l, --limit <n>", "Maximum docs to return.", "10").option("--max-bytes <n>", "Response size budget in bytes (with --include-content).", "200000").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action25);
+  program2.command("metadata-search").description("Find documents by metadata criteria (no text query).").requiredOption("-f, --metadata-filter <json>", "JSON object; only docs whose metadata contains ALL pairs are returned.").option("-p, --project-name <name>", "Filter to a specific project.").option("--updated-since <iso>", "Only docs updated on/after this ISO timestamp.").option("--created-since <iso>", "Only docs created on/after this ISO timestamp.").option("--include-content", "Include full document text in results.").option("-l, --limit <n>", "Maximum docs to return.", "10").option("--max-bytes <n>", "Response size budget in bytes (with --include-content).", "200000").option("-r, --requestor <name>", "Agent / user name (usage log).").option("--json", "Emit machine-readable JSON.").action(action26);
 }
 
 // src/cli/commands/reindex.ts
@@ -76343,7 +76517,7 @@ init_dist4();
 init_cli_core();
 init_config();
 var DEFAULT_MODEL = "text-embedding-3-small";
-async function action26(options) {
+async function action27(options) {
   const settings = loadSettings();
   if (!settings.supabaseUrl || !settings.supabaseKey) {
     throw userError("Supabase credentials not configured — run `cerefox init` first.");
@@ -76422,7 +76596,7 @@ ${c2.content}`;
   }
 }
 function registerReindex(program2) {
-  program2.command("reindex").description("Re-embed existing document chunks (v0.7+).").option("--all", "Reindex every chunk regardless of embedder.").option("--batch <n>", "Chunks per OpenAI batch call. Capped at 96 internally.", "32").option("--dry-run", "Show counts without re-embedding.").option("-i, --document-id <uuid>", "Limit reindex to a single document.").action(action26);
+  program2.command("reindex").description("Re-embed existing document chunks (v0.7+).").option("--all", "Reindex every chunk regardless of embedder.").option("--batch <n>", "Chunks per OpenAI batch call. Capped at 96 internally.", "32").option("--dry-run", "Show counts without re-embedding.").option("-i, --document-id <uuid>", "Limit reindex to a single document.").action(action27);
 }
 
 // src/cli/commands/restore.ts
@@ -76452,7 +76626,7 @@ function resolveBackupFile(target) {
   }
   return join11(path, candidates[0].name);
 }
-async function action27(target, options) {
+async function action28(target, options) {
   const file = resolveBackupFile(target);
   let payload;
   try {
@@ -76508,7 +76682,7 @@ async function action27(target, options) {
   }
 }
 function registerRestore(program2) {
-  program2.command("restore").description("Restore a JSON-snapshot backup into the knowledge base.").argument("<snapshot>", "Backup file (or directory; most recent is picked) produced by `cerefox backup`.").option("--dry-run", "Print what would be restored without writing.").option("-p, --project-name <name>", "Reserved for future use; currently ignored (project memberships ride along with each doc's metadata).").action(action27);
+  program2.command("restore").description("Restore a JSON-snapshot backup into the knowledge base.").argument("<snapshot>", "Backup file (or directory; most recent is picked) produced by `cerefox backup`.").option("--dry-run", "Print what would be restored without writing.").option("-p, --project-name <name>", "Reserved for future use; currently ignored (project memberships ride along with each doc's metadata).").action(action28);
 }
 
 // src/cli/commands/search.ts
@@ -76533,7 +76707,7 @@ async function embedQuery(query) {
 }
 
 // src/cli/commands/search.ts
-async function action28(query, options) {
+async function action29(query, options) {
   if (!query || query.trim() === "") {
     throw userError("Empty query.");
   }
@@ -76655,10 +76829,12 @@ async function action28(query, options) {
       println(c.bold(`## ${title}${docId}${score}${counts}${kind}`));
       const bestMatch = doc2.best_chunk_heading_path?.length ? doc2.best_chunk_heading_path.join(" › ") : null;
       const updated = doc2.doc_updated_at ? doc2.doc_updated_at.slice(0, 10) : null;
-      if (bestMatch || updated) {
+      const hash = doc2.content_hash ? `hash: ${doc2.content_hash}` : null;
+      if (bestMatch || updated || hash) {
         const bits = [
           bestMatch ? `best match: ${bestMatch}` : null,
-          updated ? `updated ${updated}` : null
+          updated ? `updated ${updated}` : null,
+          hash
         ].filter(Boolean);
         println(c.dim(`   ${bits.join(" · ")}`));
       }
@@ -76685,7 +76861,7 @@ async function action28(query, options) {
   }
 }
 function registerSearch(program2) {
-  program2.command("search").description("Search the knowledge base (hybrid FTS + semantic).").argument("<query>", "Natural-language search query.").option("-c, --match-count <n>", "Maximum number of documents to return.", "5").option("-p, --project-name <name>", "Filter results to a specific project.").option("-f, --metadata-filter <json>", "JSON containment filter; only docs whose metadata contains ALL pairs are returned.").option("--mode <mode>", "Search mode: docs (default), hybrid, fts.", "docs").option("--alpha <float>", "Semantic weight 0..1 (default: 0.7).", "0.7").option("--min-score <float>", "Minimum cosine similarity threshold (default: CEREFOX_MIN_SEARCH_SCORE or 0.5).").option("--max-bytes <n>", "Response size budget in bytes (default: CEREFOX_MAX_RESPONSE_BYTES or 200000).").option("-r, --requestor <name>", "Agent / user name (recorded in usage log).").option("--json", "Emit machine-readable JSON instead of the default text.").option("--only-metadata", "List matching docs (id, score, chunks, chars, partial/full) WITHOUT their content — like the web UI's collapsed result list. Grab a [id:…] then `cerefox document get <id>`.").action(action28);
+  program2.command("search").description("Search the knowledge base (hybrid FTS + semantic).").argument("<query>", "Natural-language search query.").option("-c, --match-count <n>", "Maximum number of documents to return.", "5").option("-p, --project-name <name>", "Filter results to a specific project.").option("-f, --metadata-filter <json>", "JSON containment filter; only docs whose metadata contains ALL pairs are returned.").option("--mode <mode>", "Search mode: docs (default), hybrid, fts.", "docs").option("--alpha <float>", "Semantic weight 0..1 (default: 0.7).", "0.7").option("--min-score <float>", "Minimum cosine similarity threshold (default: CEREFOX_MIN_SEARCH_SCORE or 0.5).").option("--max-bytes <n>", "Response size budget in bytes (default: CEREFOX_MAX_RESPONSE_BYTES or 200000).").option("-r, --requestor <name>", "Agent / user name (recorded in usage log).").option("--json", "Emit machine-readable JSON instead of the default text.").option("--only-metadata", "List matching docs (id, score, chunks, chars, partial/full) WITHOUT their content — like the web UI's collapsed result list. Grab a [id:…] then `cerefox document get <id>`.").action(action29);
 }
 
 // src/cli/commands/self-update.ts
@@ -76732,7 +76908,7 @@ async function fetchLatestVersion() {
   }
   return body.version;
 }
-async function action29(options) {
+async function action30(options) {
   let target;
   try {
     target = options.version ?? await fetchLatestVersion();
@@ -76784,7 +76960,7 @@ async function action29(options) {
 }
 function registerSelfUpdate(program2) {
   const desc = "Upgrade Cerefox in place. Alias: `cerefox upgrade`.";
-  const declaration = (cmd) => cmd.description(desc).option("--check", "Print current vs latest; do nothing.").option("--yes", "Non-interactive (skip confirmation).").option("--version <version>", "Pin a specific version (e.g. 0.5.1 or 0.6.0-rc.1).").action(action29);
+  const declaration = (cmd) => cmd.description(desc).option("--check", "Print current vs latest; do nothing.").option("--yes", "Non-interactive (skip confirmation).").option("--version <version>", "Pin a specific version (e.g. 0.5.1 or 0.6.0-rc.1).").action(action30);
   declaration(program2.command("self-update"));
   declaration(program2.command("upgrade"));
 }
@@ -76803,7 +76979,7 @@ function symbol2(status) {
       return cErr.dim("ℹ");
   }
 }
-async function action30(options) {
+async function action31(options) {
   const useSpinner = !options.json && process.stderr.isTTY;
   const spinner = useSpinner ? ora({ text: "Starting checks…", spinner: "dots", stream: process.stderr }).start() : null;
   const results = await runFastChecks({
@@ -76824,7 +77000,7 @@ async function action30(options) {
   }
 }
 function registerStatus(program2) {
-  program2.command("status").description("Quick sanity check (fast subset of `cerefox doctor`).").option("--json", "Emit machine-readable JSON.").action(action30);
+  program2.command("status").description("Quick sanity check (fast subset of `cerefox doctor`).").option("--json", "Emit machine-readable JSON.").action(action31);
 }
 
 // src/cli/program.ts
@@ -76833,15 +77009,15 @@ init_sync_self_docs();
 // src/cli/commands/web.ts
 init_cli_core();
 
-// ../../node_modules/.bun/@hono+node-server@2.0.4+1bbe96acb4c5ebf1/node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.4+8bc17dcb8a4189a6/node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
 var X_ALREADY_SENT = "x-hono-already-sent";
 
-// ../../node_modules/.bun/@hono+node-server@2.0.4+1bbe96acb4c5ebf1/node_modules/@hono/node-server/dist/index.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.4+8bc17dcb8a4189a6/node_modules/@hono/node-server/dist/index.mjs
 import { STATUS_CODES, createServer } from "node:http";
 import { Http2ServerRequest, constants } from "node:http2";
 import { Readable } from "node:stream";
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/helper/websocket/index.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/helper/websocket/index.js
 var WSContext = class {
   #init;
   constructor(init) {
@@ -76889,7 +77065,7 @@ var defineWebSocketHelper = (handler11) => {
   };
 };
 
-// ../../node_modules/.bun/@hono+node-server@2.0.4+1bbe96acb4c5ebf1/node_modules/@hono/node-server/dist/index.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.4+8bc17dcb8a4189a6/node_modules/@hono/node-server/dist/index.mjs
 var RequestError = class extends Error {
   constructor(message, options) {
     super(message, options);
@@ -78023,7 +78199,7 @@ var serve = (options, listeningListener) => {
   return server;
 };
 
-// ../../node_modules/.bun/@hono+node-server@2.0.4+1bbe96acb4c5ebf1/node_modules/@hono/node-server/dist/utils/stream.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.4+8bc17dcb8a4189a6/node_modules/@hono/node-server/dist/utils/stream.mjs
 import { Readable as Readable2 } from "node:stream";
 import { versions as versions2 } from "node:process";
 var pr54206Applied = () => {
@@ -78089,7 +78265,7 @@ var createStreamBody = (stream, useNativeReadableToWeb = useReadableToWeb) => {
   });
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/utils/mime.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/utils/mime.js
 var getMimeType = (filename, mimes = baseMimes) => {
   const regexp = /\.([a-zA-Z0-9]+?)$/;
   const match = filename.match(regexp);
@@ -78158,7 +78334,7 @@ var _baseMimes = {
 };
 var baseMimes = _baseMimes;
 
-// ../../node_modules/.bun/@hono+node-server@2.0.4+1bbe96acb4c5ebf1/node_modules/@hono/node-server/dist/serve-static.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.4+8bc17dcb8a4189a6/node_modules/@hono/node-server/dist/serve-static.mjs
 import { createReadStream, existsSync as existsSync12, statSync as statSync5 } from "node:fs";
 import { join as join12 } from "node:path";
 var COMPRESSIBLE_CONTENT_TYPE_REGEX = /^\s*(?:text\/[^;\s]+|application\/(?:javascript|json|xml|xml-dtd|ecmascript|dart|postscript|rtf|tar|toml|vnd\.dart|vnd\.ms-fontobject|vnd\.ms-opentype|wasm|x-httpd-php|x-javascript|x-ns-proxy-autoconfig|x-sh|x-tar|x-virtualbox-hdd|x-virtualbox-ova|x-virtualbox-ovf|x-virtualbox-vbox|x-virtualbox-vdi|x-virtualbox-vhd|x-virtualbox-vmdk|x-www-form-urlencoded)|font\/(?:otf|ttf)|image\/(?:bmp|vnd\.adobe\.photoshop|vnd\.microsoft\.icon|vnd\.ms-dds|x-icon|x-ms-bmp)|message\/rfc822|model\/gltf-binary|x-shader\/x-fragment|x-shader\/x-vertex|[^;\s]+?\+(?:json|text|xml|yaml))(?:[;\s]|$)/i;
@@ -78274,7 +78450,7 @@ import { existsSync as existsSync16 } from "node:fs";
 import { readFileSync as readFileSync15 } from "node:fs";
 import { join as join16 } from "node:path";
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/compose.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/compose.js
 var compose = (middleware, onError, onNotFound) => {
   return (context, next) => {
     let index = -1;
@@ -78318,10 +78494,10 @@ var compose = (middleware, onError, onNotFound) => {
   };
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/request/constants.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = /* @__PURE__ */ Symbol();
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/utils/body.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/utils/body.js
 var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) => {
   const { all = false, dot = false } = options;
   const headers = request instanceof HonoRequest ? request.raw.headers : request.headers;
@@ -78392,7 +78568,7 @@ var handleParsingNestedValues = (form, key, value) => {
   });
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/utils/url.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/utils/url.js
 var splitPath = (path) => {
   const paths = path.split("/");
   if (paths[0] === "") {
@@ -78592,7 +78768,7 @@ var getQueryParams = (url, key) => {
 };
 var decodeURIComponent_ = decodeURIComponent;
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/request.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/request.js
 var tryDecodeURIComponent = (str) => tryDecode2(str, decodeURIComponent_);
 var HonoRequest = class {
   raw;
@@ -78706,7 +78882,7 @@ var HonoRequest = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/utils/html.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/utils/html.js
 var HtmlEscapedCallbackPhase = {
   Stringify: 1,
   BeforeStream: 2,
@@ -78744,7 +78920,7 @@ var resolveCallback = async (str, phase, preserveCallbacks, context, buffer2) =>
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/context.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/context.js
 var TEXT_PLAIN = "text/plain; charset=UTF-8";
 var setDefaultContentType = (contentType2, headers) => {
   return {
@@ -78911,7 +79087,7 @@ var Context = class {
   };
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/router.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router.js
 var METHOD_NAME_ALL = "ALL";
 var METHOD_NAME_ALL_LOWERCASE = "all";
 var METHODS = ["get", "post", "put", "delete", "options", "patch"];
@@ -78919,10 +79095,10 @@ var MESSAGE_MATCHER_IS_ALREADY_BUILT = "Can not add a route since the matcher is
 var UnsupportedPathError = class extends Error {
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/utils/constants.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/utils/constants.js
 var COMPOSED_HANDLER = "__COMPOSED_HANDLER";
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/hono-base.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/hono-base.js
 var notFoundHandler = (c2) => {
   return c2.text("404 Not Found", 404);
 };
@@ -79146,7 +79322,7 @@ var Hono = class _Hono {
   };
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/router/reg-exp-router/matcher.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/matcher.js
 var emptyParam = [];
 function match(method, path) {
   const matchers = this.buildAllMatchers();
@@ -79167,7 +79343,7 @@ function match(method, path) {
   return match2(method, path);
 }
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/router/reg-exp-router/node.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/node.js
 var LABEL_REG_EXP_STR = "[^/]+";
 var ONLY_WILDCARD_REG_EXP_STR = ".*";
 var TAIL_WILDCARD_REG_EXP_STR = "(?:|/.*)";
@@ -79271,7 +79447,7 @@ var Node = class _Node {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/router/reg-exp-router/trie.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/trie.js
 var Trie = class {
   #context = { varIndex: 0 };
   #root = new Node;
@@ -79327,7 +79503,7 @@ var Trie = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/router/reg-exp-router/router.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/router.js
 var nullMatcher = [/^$/, [], /* @__PURE__ */ Object.create(null)];
 var wildcardRegExpCache = /* @__PURE__ */ Object.create(null);
 function buildWildcardRegExp(path) {
@@ -79492,7 +79668,7 @@ var RegExpRouter = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/router/reg-exp-router/prepared-router.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/prepared-router.js
 var PreparedRegExpRouter = class {
   name = "PreparedRegExpRouter";
   #matchers;
@@ -79564,7 +79740,7 @@ var PreparedRegExpRouter = class {
   match = match;
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/router/smart-router/router.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/smart-router/router.js
 var SmartRouter = class {
   name = "SmartRouter";
   #routers = [];
@@ -79619,7 +79795,7 @@ var SmartRouter = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/router/trie-router/node.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/trie-router/node.js
 var emptyParams = /* @__PURE__ */ Object.create(null);
 var hasChildren = (children) => {
   for (const _ in children) {
@@ -79788,7 +79964,7 @@ var Node2 = class _Node2 {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/router/trie-router/router.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/trie-router/router.js
 var TrieRouter = class {
   name = "TrieRouter";
   #node;
@@ -79810,7 +79986,7 @@ var TrieRouter = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/hono.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/hono.js
 var Hono2 = class extends Hono {
   constructor(options = {}) {
     super(options);
@@ -79820,7 +79996,7 @@ var Hono2 = class extends Hono {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/utils/color.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/utils/color.js
 function getColorEnabled() {
   const { process: process10, Deno: Deno2 } = globalThis;
   const isNoColor = typeof Deno2?.noColor === "boolean" ? Deno2.noColor : process10 !== undefined ? "NO_COLOR" in process10?.env : false;
@@ -79839,7 +80015,7 @@ async function getColorEnabledAsync() {
   return !isNoColor;
 }
 
-// ../../node_modules/.bun/hono@4.12.23/node_modules/hono/dist/middleware/logger/index.js
+// ../../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/middleware/logger/index.js
 var humanize = (times) => {
   const [delimiter, separator] = [",", "."];
   const orderTimes = times.map((v) => v.replace(/(\d)(?=(\d\d\d)+(?!\d))/g, "$1" + delimiter));
@@ -80728,6 +80904,7 @@ function registerDocumentReadRoutes(app, ctx) {
       created_at: meta ? meta.created_at ?? null : null,
       updated_at: meta ? meta.updated_at ?? null : null,
       deleted_at: meta ? meta.deleted_at ?? null : null,
+      content_hash: meta ? meta.content_hash ?? null : null,
       versions: versions3.map((v) => ({
         version_id: v.version_id,
         version_number: v.version_number,
@@ -80890,10 +81067,26 @@ function registerDocumentWriteRoutes(app, ctx) {
           projectIds: Array.isArray(body.project_ids) ? body.project_ids : undefined,
           metadata: Object.keys(metadata).length > 0 ? metadata : undefined,
           author: "web-ui",
-          authorType: "user"
+          authorType: "user",
+          expectedContentHash: typeof body.expected_content_hash === "string" ? body.expected_content_hash : null
         });
         return c2.json({ success: true, reindexed: result.reindexed });
       } catch (err) {
+        if (err instanceof ConcurrencyConflictError) {
+          return c2.json({
+            success: false,
+            error: "conflict",
+            message: "This document changed while you were editing it (another writer saved a newer version). Open it again in a new tab, merge your changes, and save from there.",
+            current_hash: err.currentHash
+          }, 409);
+        }
+        if (err instanceof ConcurrencyTokenRequiredError) {
+          return c2.json({
+            success: false,
+            error: "expected_content_hash required",
+            message: err.message
+          }, 400);
+        }
         return c2.json({
           success: false,
           error: err instanceof Error ? err.message : String(err)
@@ -82048,6 +82241,7 @@ Learn more:
   moveInto(document2, registerDeleteDoc, "delete");
   registerDocumentRestore(document2);
   registerDocumentEdit(document2);
+  registerDocumentSetProjects(document2);
   moveInto(document2, registerIngest, "ingest");
   moveInto(document2, registerIngestDir, "ingest-dir");
   const documentVersion = document2.command("version").description("Document versions: list, archive, unarchive.");