@cerefox/memory 1.18.0 → 1.19.1

package/dist/bin/cerefox.js

@@ -5318,7 +5318,7 @@ var init_cli_core = __esm(() => {
 });
 
 // src/meta.ts
-var PKG_VERSION = "1.18.0";
+var PKG_VERSION = "1.19.1";
 var init_meta = () => {};
 
 // ../../_shared/config/paths.ts
@@ -5436,7 +5436,7 @@ var init_config = __esm(() => {
   init_env();
 });
 
-// ../../node_modules/.bun/@supabase+supabase-js@2.117.2/node_modules/@supabase/supabase-js/dist/tracingRegistry.mjs
+// ../../node_modules/.bun/@supabase+supabase-js@2.117.3/node_modules/@supabase/supabase-js/dist/tracingRegistry.mjs
 function getTraceContextExtractor() {
   return globalThis[EXTRACTOR_KEY];
 }
@@ -6050,7 +6050,7 @@ var require_tslib = __commonJS(function(exports, module) {
   });
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.117.2/node_modules/@supabase/functions-js/dist/main/helper.js
+// ../../node_modules/.bun/@supabase+functions-js@2.117.3/node_modules/@supabase/functions-js/dist/main/helper.js
 var require_helper = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.resolveFetch = undefined;
@@ -6063,7 +6063,7 @@ var require_helper = __commonJS(function(exports) {
   exports.resolveFetch = resolveFetch;
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.117.2/node_modules/@supabase/functions-js/dist/main/types.js
+// ../../node_modules/.bun/@supabase+functions-js@2.117.3/node_modules/@supabase/functions-js/dist/main/types.js
 var require_types = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionRegion = exports.FunctionsHttpError = exports.FunctionsRelayError = exports.FunctionsFetchError = exports.FunctionsError = undefined;
@@ -6124,7 +6124,7 @@ var require_types = __commonJS(function(exports) {
   })(FunctionRegion || (exports.FunctionRegion = FunctionRegion = {}));
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.117.2/node_modules/@supabase/functions-js/dist/main/FunctionsClient.js
+// ../../node_modules/.bun/@supabase+functions-js@2.117.3/node_modules/@supabase/functions-js/dist/main/FunctionsClient.js
 var require_FunctionsClient = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionsClient = undefined;
@@ -6164,7 +6164,7 @@ var require_FunctionsClient = __commonJS(function(exports) {
           const hasContentTypeHeader = !!headers && Object.keys(headers).some((key) => key.toLowerCase() === "content-type");
           if (functionArgs && !hasContentTypeHeader) {
             if (typeof Blob !== "undefined" && functionArgs instanceof Blob || functionArgs instanceof ArrayBuffer) {
-              _headers["Content-Type"] = "application/octet-stream";
+              _headers["Content-Type"] = functionArgs.type || "application/octet-stream";
               body = functionArgs;
             } else if (typeof functionArgs === "string") {
               _headers["Content-Type"] = "text/plain";
@@ -6243,7 +6243,7 @@ var require_FunctionsClient = __commonJS(function(exports) {
   exports.FunctionsClient = FunctionsClient;
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.117.2/node_modules/@supabase/functions-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+functions-js@2.117.3/node_modules/@supabase/functions-js/dist/main/index.js
 var require_main = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionRegion = exports.FunctionsRelayError = exports.FunctionsHttpError = exports.FunctionsFetchError = exports.FunctionsError = exports.FunctionsClient = undefined;
@@ -6269,7 +6269,7 @@ var require_main = __commonJS(function(exports) {
   } });
 });
 
-// ../../node_modules/.bun/@supabase+postgrest-js@2.117.2/node_modules/@supabase/postgrest-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+postgrest-js@2.117.3/node_modules/@supabase/postgrest-js/dist/index.mjs
 function _typeof(o) {
   "@babel/helpers - typeof";
   return _typeof = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(o$1) {
@@ -6364,7 +6364,8 @@ async function fetchWithRetry(fetchImpl, url, request, retryEnabled) {
         signal: request.signal
       });
     } catch (fetchError) {
-      if ((fetchError === null || fetchError === undefined ? undefined : fetchError.name) === "AbortError" || (fetchError === null || fetchError === undefined ? undefined : fetchError.code) === "ABORT_ERR")
+      var _request$signal;
+      if ((fetchError === null || fetchError === undefined ? undefined : fetchError.name) === "AbortError" || (fetchError === null || fetchError === undefined ? undefined : fetchError.code) === "ABORT_ERR" || (fetchError === null || fetchError === undefined ? undefined : fetchError.name) === "TimeoutError" && ((_request$signal = request.signal) === null || _request$signal === undefined ? undefined : _request$signal.aborted))
         throw fetchError;
       if (!RETRYABLE_METHODS.includes(request.method))
         throw fetchError;
@@ -7179,7 +7180,7 @@ var init_dist = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js
 var require_websocket_factory = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocketFactory = undefined;
@@ -7256,14 +7257,14 @@ Suggested solution: ${env.workaround}`;
   exports.default = WebSocketFactory;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/lib/version.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/lib/version.js
 var require_version = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.version = undefined;
-  exports.version = "2.117.2";
+  exports.version = "2.117.3";
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/lib/constants.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/lib/constants.js
 var require_constants = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CONNECTION_STATE = exports.TRANSPORTS = exports.CHANNEL_EVENTS = exports.CHANNEL_STATES = exports.SOCKET_STATES = exports.MAX_PUSH_BUFFER_SIZE = exports.WS_CLOSE_NORMAL = exports.POSTGRES_CHANGES_WAIT_ERROR_GRACE = exports.DEFAULT_POSTGRES_CHANGES_WAIT_TIMEOUT = exports.DEFAULT_TIMEOUT = exports.VERSION = exports.DEFAULT_VSN = exports.VSN_2_0_0 = exports.VSN_1_0_0 = exports.DEFAULT_VERSION = undefined;
@@ -7310,7 +7311,7 @@ var require_constants = __commonJS(function(exports) {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/lib/serializer.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/lib/serializer.js
 var require_serializer = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
 
@@ -7462,7 +7463,7 @@ var require_serializer = __commonJS(function(exports) {
   exports.default = Serializer;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/lib/transformers.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/lib/transformers.js
 var require_transformers = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.httpEndpointURL = exports.toTimestampString = exports.toArray = exports.toJson = exports.toNumber = exports.toBoolean = exports.convertCell = exports.convertColumn = exports.convertChangeData = exports.PostgresTypes = undefined;
@@ -9047,7 +9048,7 @@ var require_phoenix_cjs = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js
 var require_presenceAdapter = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   var phoenix_1 = require_phoenix_cjs();
@@ -9122,7 +9123,7 @@ var require_presenceAdapter = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js
 var require_RealtimePresence = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.REALTIME_PRESENCE_LISTEN_EVENTS = undefined;
@@ -9147,7 +9148,7 @@ var require_RealtimePresence = __commonJS(function(exports) {
   exports.default = RealtimePresence;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js
 var require_normalizeChannelError = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.normalizeChannelError = normalizeChannelError;
@@ -9170,7 +9171,7 @@ var require_normalizeChannelError = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js
 var require_channelAdapter = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   var constants_1 = require_constants();
@@ -9272,7 +9273,7 @@ var require_channelAdapter = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/RealtimePostgresFilterBuilder.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/RealtimePostgresFilterBuilder.js
 var require_RealtimePostgresFilterBuilder = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.postgresChangesFilter = exports.RealtimePostgresFilterBuilder = undefined;
@@ -9362,7 +9363,7 @@ var require_RealtimePostgresFilterBuilder = __commonJS(function(exports) {
   exports.postgresChangesFilter = postgresChangesFilter;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js
 var require_RealtimeChannel = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.REALTIME_CHANNEL_STATES = exports.REALTIME_SUBSCRIBE_STATES = exports.REALTIME_LISTEN_TYPES = exports.REALTIME_POSTGRES_CHANGES_LISTEN_EVENT = exports.postgresChangesFilter = exports.RealtimePostgresFilterBuilder = undefined;
@@ -9767,7 +9768,7 @@ var require_RealtimeChannel = __commonJS(function(exports) {
   exports.default = RealtimeChannel;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js
 var require_socketAdapter = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   var phoenix_1 = require_phoenix_cjs();
@@ -9883,7 +9884,7 @@ var require_socketAdapter = __commonJS(function(exports) {
   exports.default = SocketAdapter;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js
 var require_RealtimeClient = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -10349,7 +10350,7 @@ var require_RealtimeClient = __commonJS(function(exports) {
   exports.default = RealtimeClient;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.117.2/node_modules/@supabase/realtime-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.117.3/node_modules/@supabase/realtime-js/dist/main/index.js
 var require_main2 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocketFactory = exports.REALTIME_CHANNEL_STATES = exports.REALTIME_SUBSCRIBE_STATES = exports.REALTIME_PRESENCE_LISTEN_EVENTS = exports.REALTIME_POSTGRES_CHANGES_LISTEN_EVENT = exports.REALTIME_LISTEN_TYPES = exports.postgresChangesFilter = exports.RealtimePostgresFilterBuilder = exports.RealtimeClient = exports.RealtimeChannel = exports.RealtimePresence = undefined;
@@ -10685,7 +10686,7 @@ var init_dist2 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+storage-js@2.117.2/node_modules/@supabase/storage-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+storage-js@2.117.3/node_modules/@supabase/storage-js/dist/index.mjs
 function _typeof2(o) {
   "@babel/helpers - typeof";
   return _typeof2 = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(o$1) {
@@ -10993,7 +10994,7 @@ var StorageError, StorageApiError, StorageUnknownError, resolveFetch = (customFe
       throw error;
     }
   }
-}, DEFAULT_SEARCH_OPTIONS, DEFAULT_FILE_OPTIONS, StorageFileApi, version = "2.117.2", DEFAULT_HEADERS, StorageBucketApi, StorageAnalyticsClient, VectorIndexApi, VectorDataApi, VectorBucketApi, StorageVectorsClient, VectorBucketScope, VectorIndexScope, StorageClient;
+}, DEFAULT_SEARCH_OPTIONS, DEFAULT_FILE_OPTIONS, StorageFileApi, version = "2.117.3", DEFAULT_HEADERS, StorageBucketApi, StorageAnalyticsClient, VectorIndexApi, VectorDataApi, VectorBucketApi, StorageVectorsClient, VectorBucketScope, VectorIndexScope, StorageClient;
 var init_dist3 = __esm(() => {
   init_dist2();
   StorageError = class extends Error {
@@ -11063,19 +11064,9 @@ var init_dist3 = __esm(() => {
         const options = _objectSpread22(_objectSpread22({}, DEFAULT_FILE_OPTIONS), fileOptions);
         let headers = _objectSpread22(_objectSpread22({}, _this.headers), method === "POST" && { "x-upsert": String(options.upsert) });
         const metadata = options.metadata;
-        if (typeof Blob !== "undefined" && fileBody instanceof Blob) {
-          body = new FormData;
-          body.append("cacheControl", options.cacheControl);
-          if (metadata)
-            body.append("metadata", _this.encodeMetadata(metadata));
-          body.append("", fileBody);
-        } else if (typeof FormData !== "undefined" && fileBody instanceof FormData) {
-          body = fileBody;
-          if (!body.has("cacheControl"))
-            body.append("cacheControl", options.cacheControl);
-          if (metadata && !body.has("metadata"))
-            body.append("metadata", _this.encodeMetadata(metadata));
-        } else {
+        if (typeof Blob !== "undefined" && fileBody instanceof Blob || typeof FormData !== "undefined" && fileBody instanceof FormData)
+          body = _this.prepareUploadFormData(fileBody, options);
+        else {
           body = fileBody;
           headers["cache-control"] = `max-age=${options.cacheControl}`;
           headers["content-type"] = options.contentType;
@@ -11111,19 +11102,9 @@ var init_dist3 = __esm(() => {
         const options = _objectSpread22(_objectSpread22({}, DEFAULT_FILE_OPTIONS), fileOptions);
         let headers = _objectSpread22(_objectSpread22({}, _this3.headers), { "x-upsert": String(options.upsert) });
         const metadata = options.metadata;
-        if (typeof Blob !== "undefined" && fileBody instanceof Blob) {
-          body = new FormData;
-          body.append("cacheControl", options.cacheControl);
-          if (metadata)
-            body.append("metadata", _this3.encodeMetadata(metadata));
-          body.append("", fileBody);
-        } else if (typeof FormData !== "undefined" && fileBody instanceof FormData) {
-          body = fileBody;
-          if (!body.has("cacheControl"))
-            body.append("cacheControl", options.cacheControl);
-          if (metadata && !body.has("metadata"))
-            body.append("metadata", _this3.encodeMetadata(metadata));
-        } else {
+        if (typeof Blob !== "undefined" && fileBody instanceof Blob || typeof FormData !== "undefined" && fileBody instanceof FormData)
+          body = _this3.prepareUploadFormData(fileBody, options);
+        else {
           body = fileBody;
           headers["cache-control"] = `max-age=${options.cacheControl}`;
           headers["content-type"] = options.contentType;
@@ -11320,6 +11301,26 @@ var init_dist3 = __esm(() => {
         return await post(_this15.fetch, `${_this15.url}/object/list-v2/${_this15.bucketId}`, body, { headers: _this15.headers }, parameters);
       });
     }
+    prepareUploadFormData(fileBody, options) {
+      const body = new FormData;
+      const files = [];
+      if (fileBody instanceof FormData)
+        fileBody.forEach((value, name) => {
+          if (typeof value === "string")
+            body.append(name, value);
+          else
+            files.push([name, value]);
+        });
+      else
+        files.push(["", fileBody]);
+      if (!body.has("cacheControl"))
+        body.append("cacheControl", options.cacheControl);
+      if (options.metadata && !body.has("metadata"))
+        body.append("metadata", this.encodeMetadata(options.metadata));
+      for (const [name, file] of files)
+        body.append(name, file);
+      return body;
+    }
     encodeMetadata(metadata) {
       return JSON.stringify(metadata);
     }
@@ -11760,14 +11761,14 @@ var init_dist3 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/version.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/version.js
 var require_version2 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.version = undefined;
-  exports.version = "2.117.2";
+  exports.version = "2.117.3";
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/constants.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/constants.js
 var require_constants2 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.JWKS_TTL = exports.PKCE_MAX_CONCURRENT_FLOWS = exports.PKCE_FLOW_ID_PARAM = exports.BASE64URL_REGEX = exports.API_VERSIONS = exports.API_VERSION_HEADER_NAME = exports.NETWORK_FAILURE = exports.DEFAULT_HEADERS = exports.AUDIENCE = exports.STORAGE_KEY = exports.GOTRUE_URL = exports.REFRESH_FAILURE_COOLDOWN_MS = exports.EXPIRY_MARGIN_MS = exports.AUTO_REFRESH_TICK_THRESHOLD = exports.AUTO_REFRESH_TICK_DURATION_MS = undefined;
@@ -11797,7 +11798,7 @@ var require_constants2 = __commonJS(function(exports) {
   exports.JWKS_TTL = 10 * 60 * 1000;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/errors.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/errors.js
 var require_errors = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.AuthInvalidJwtError = exports.AuthWeakPasswordError = exports.AuthRefreshDiscardedError = exports.AuthRetryableFetchError = exports.AuthPKCECodeVerifierMissingError = exports.AuthPKCEGrantCodeExchangeError = exports.AuthImplicitGrantRedirectError = exports.AuthInvalidCredentialsError = exports.AuthInvalidTokenResponseError = exports.AuthSessionMissingError = exports.CustomAuthError = exports.AuthUnknownError = exports.AuthApiError = exports.AuthError = undefined;
@@ -11966,7 +11967,7 @@ var require_errors = __commonJS(function(exports) {
   exports.AuthInvalidJwtError = AuthInvalidJwtError;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/base64url.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/base64url.js
 var require_base64url = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.byteToBase64URL = byteToBase64URL;
@@ -12154,7 +12155,7 @@ var require_base64url = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/helpers.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/helpers.js
 var require_helpers = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.pkceVerifierSlotKey = exports.Deferred = exports.removeItemAsync = exports.getItemAsync = exports.setItemAsync = exports.looksLikeFetchResponse = exports.resolveFetch = exports.supportsLocalStorage = exports.isBrowser = undefined;
@@ -12563,7 +12564,7 @@ var require_helpers = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/fetch.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/fetch.js
 var require_fetch = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.handleError = handleError;
@@ -12747,14 +12748,14 @@ var require_fetch = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/types.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/types.js
 var require_types2 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.SIGN_OUT_SCOPES = undefined;
   exports.SIGN_OUT_SCOPES = ["global", "local", "others"];
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js
 var require_GoTrueAdminApi = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -13199,7 +13200,7 @@ var require_GoTrueAdminApi = __commonJS(function(exports) {
   exports.default = GoTrueAdminApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/local-storage.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/local-storage.js
 var require_local_storage = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.memoryLocalStorageAdapter = memoryLocalStorageAdapter;
@@ -13218,7 +13219,7 @@ var require_local_storage = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/locks.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/locks.js
 var require_locks = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.ProcessLockAcquireTimeoutError = exports.NavigatorLockAcquireTimeoutError = exports.LockAcquireTimeoutError = exports.internals = undefined;
@@ -13390,7 +13391,7 @@ var require_locks = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/polyfills.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/polyfills.js
 var require_polyfills = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.polyfillGlobalThis = polyfillGlobalThis;
@@ -13414,7 +13415,7 @@ var require_polyfills = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js
 var require_ethereum = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.getAddress = getAddress;
@@ -13491,7 +13492,7 @@ ${suffix}`;
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js
 var require_webauthn_errors = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebAuthnUnknownError = exports.WebAuthnError = undefined;
@@ -13678,7 +13679,7 @@ var require_webauthn_errors = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/lib/webauthn.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/lib/webauthn.js
 var require_webauthn = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebAuthnApi = exports.DEFAULT_REQUEST_OPTIONS = exports.DEFAULT_CREATION_OPTIONS = exports.webAuthnAbortService = exports.WebAuthnAbortService = exports.identifyAuthenticationError = exports.identifyRegistrationError = exports.isWebAuthnError = exports.WebAuthnError = undefined;
@@ -14132,7 +14133,7 @@ var require_webauthn = __commonJS(function(exports) {
   exports.WebAuthnApi = WebAuthnApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/GoTrueClient.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/GoTrueClient.js
 var require_GoTrueClient = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -17015,7 +17016,7 @@ var require_GoTrueClient = __commonJS(function(exports) {
   exports.default = GoTrueClient;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js
 var require_AuthAdminApi = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -17024,7 +17025,7 @@ var require_AuthAdminApi = __commonJS(function(exports) {
   exports.default = AuthAdminApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/AuthClient.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/AuthClient.js
 var require_AuthClient = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -17033,7 +17034,7 @@ var require_AuthClient = __commonJS(function(exports) {
   exports.default = AuthClient;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.117.2/node_modules/@supabase/auth-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+auth-js@2.117.3/node_modules/@supabase/auth-js/dist/main/index.js
 var require_main3 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.processLock = exports.lockInternals = exports.NavigatorLockAcquireTimeoutError = exports.navigatorLock = exports.AuthClient = exports.AuthAdminApi = exports.GoTrueClient = exports.GoTrueAdminApi = undefined;
@@ -17063,7 +17064,7 @@ var require_main3 = __commonJS(function(exports) {
   } });
 });
 
-// ../../node_modules/.bun/@supabase+supabase-js@2.117.2/node_modules/@supabase/supabase-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+supabase-js@2.117.3/node_modules/@supabase/supabase-js/dist/index.mjs
 var exports_dist = {};
 __export(exports_dist, {
   createClient: () => createClient
@@ -17286,7 +17287,7 @@ function shouldShowDeprecationWarning() {
     return false;
   return parseInt(versionMatch[1], 10) <= 20;
 }
-var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.117.2", JS_ENV = "", JS_RUNTIME_VERSION, _Deno$version, _process$version, _runtimeMeta, DEFAULT_HEADERS2, DEFAULT_GLOBAL_OPTIONS, DEFAULT_DB_OPTIONS, DEFAULT_AUTH_OPTIONS, DEFAULT_REALTIME_OPTIONS, DEFAULT_TRACE_PROPAGATION_OPTIONS, resolveFetch2 = (customFetch) => {
+var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.117.3", JS_ENV = "", JS_RUNTIME_VERSION, _Deno$version, _process$version, _runtimeMeta, DEFAULT_HEADERS2, DEFAULT_GLOBAL_OPTIONS, DEFAULT_DB_OPTIONS, DEFAULT_AUTH_OPTIONS, DEFAULT_REALTIME_OPTIONS, DEFAULT_TRACE_PROPAGATION_OPTIONS, resolveFetch2 = (customFetch) => {
   if (customFetch)
     return (...args) => customFetch(...args);
   return (...args) => fetch(...args);
@@ -23684,6 +23685,23 @@ function auditDocLabel(docTitle, documentId, operation) {
     return documentId.slice(0, 8) + "…";
   return isStoreLevelAuditOp(operation) ? "(store)" : "(deleted)";
 }
+function metadataChangeSummary(before, after) {
+  if (before == null && after == null)
+    return null;
+  const b = before ?? {};
+  const a = after ?? {};
+  const show = (v) => typeof v === "string" ? v : JSON.stringify(v);
+  const set = Object.keys(a).filter((k) => JSON.stringify(a[k]) !== JSON.stringify(b[k])).map((k) => `${k}=${show(a[k])}`);
+  const removed = Object.keys(b).filter((k) => !Object.hasOwn(a, k));
+  if (set.length === 0 && removed.length === 0)
+    return null;
+  const parts = [];
+  if (set.length)
+    parts.push(`set ${set.join(", ")}`);
+  if (removed.length)
+    parts.push(`removed ${removed.join(", ")}`);
+  return parts.join("; ");
+}
 var STORE_LEVEL_AUDIT_OPS, AUDIT_OPERATIONS;
 var init_audit_ops = __esm(() => {
   STORE_LEVEL_AUDIT_OPS = [
@@ -23728,6 +23746,25 @@ function getConfiguredSearchAlpha() {
 function getMinTermCoverage() {
   return;
 }
+function metadataTokenParams(expected, lastWriteWins) {
+  return {
+    ...expected != null ? { p_expected_metadata_revision: expected } : {},
+    ...lastWriteWins ? { p_last_write_wins: true } : {}
+  };
+}
+function metadataTokenError(message) {
+  if (message.includes("CEREFOX_METADATA_CONFLICT")) {
+    const id = message.match(/document ([0-9a-f-]{36})/)?.[1] ?? "(unknown)";
+    const expected = message.match(/expected metadata_revision (\d+)/)?.[1] ?? "?";
+    const current = message.match(/current (\d+)/)?.[1] ?? "?";
+    return new Error(`Metadata conflict: the metadata of document ${id} changed since you read it ` + `(your metadata_revision: ${expected}, current: ${current}). Nothing was written. ` + `To resolve: (1) cerefox_get_document("${id}", outline: true) for the current metadata ` + `and metadata_revision, (2) reapply your change to it, (3) retry with ` + `expected_metadata_revision set to the new value. Do not overwrite blindly — ` + `another writer's keys may be in there.`);
+  }
+  if (message.includes("CEREFOX_METADATA_TOKEN_REQUIRED")) {
+    const current = message.match(/Current metadata_revision: (\d+)/)?.[1];
+    return new Error(`Replacing all metadata deletes every key you do not list, so it needs ` + `expected_metadata_revision: the metadata_revision you read (returned by ` + `cerefox_get_document and cerefox_metadata_search).` + (current ? ` The document's current metadata_revision is ${current}; pass it ONLY if you read the current metadata.` : "") + ` To change some keys, drop replace and merge instead (null removes a key). ` + `To overwrite regardless, pass last_write_wins=true.`);
+  }
+  return null;
+}
 function extractConflictHashes(message) {
   return {
     expected: message.match(/expected hash ([0-9a-f]{64})/)?.[1] ?? "unknown",
@@ -23740,6 +23777,16 @@ function isDocumentNotFoundError(error) {
 function isAuditCheckError(message) {
   return /cerefox_audit_log_operation_check/.test(message);
 }
+function duplicateContentDocumentId(message) {
+  if (!message.includes("CEREFOX_DUPLICATE_CONTENT"))
+    return null;
+  return message.match(/document ([0-9a-f-]{36})/i)?.[1] ?? null;
+}
+function legacyContentUniqueError(message) {
+  if (!message.includes("cerefox_documents_hash_unique"))
+    return null;
+  return new Error("Another document (possibly one in the trash) already has exactly this content, " + "and this server predates schema 0.20.0, which still refuses that. " + `Run \`cerefox server deploy\`, then retry. (${message})`);
+}
 function isDuplicateKeyError(message) {
   return /duplicate key|unique constraint|23505/i.test(message);
 }
@@ -23775,9 +23822,25 @@ function resolveByteBudget(requested, ceiling) {
     return ceiling;
   return Math.min(Math.max(n, 1), ceiling);
 }
-var MAX_RESPONSE_BYTES = 200000;
+var MAX_RESPONSE_BYTES = 200000, MetadataConcurrencyError, DuplicateContentError;
 var init__utils = __esm(() => {
   init_audit_ops();
+  MetadataConcurrencyError = class MetadataConcurrencyError extends Error {
+    tokenRequired;
+    constructor(message) {
+      super(message);
+      this.name = "MetadataConcurrencyError";
+      this.tokenRequired = message.includes("CEREFOX_METADATA_TOKEN_REQUIRED");
+    }
+  };
+  DuplicateContentError = class DuplicateContentError extends Error {
+    existingDocumentId;
+    constructor(existingDocumentId, message) {
+      super(message);
+      this.existingDocumentId = existingDocumentId;
+      this.name = "DuplicateContentError";
+    }
+  };
 });
 
 // ../../_shared/server-assets/index.ts
@@ -25967,13 +26030,17 @@ async function updateDocumentFacets(supabase, opts) {
   };
   if (opts.metadata !== undefined) {
     await step(async () => {
-      const { data: doc, error } = await supabase.from("cerefox_documents").select("metadata").eq("id", opts.documentId).is("deleted_at", null).limit(1);
+      const { data: doc, error } = await supabase.from("cerefox_documents").select("*").eq("id", opts.documentId).is("deleted_at", null).limit(1);
       if (error)
         throw new Error(`Metadata read failed: ${error.message}`);
       if (!doc?.length) {
         throw new FacetNotFoundError(`Document not found (or in the trash): ${opts.documentId}`);
       }
       const stored = doc[0].metadata ?? {};
+      const storedRevision = doc[0].metadata_revision;
+      if (opts.expectedMetadataRevision != null && storedRevision != null && storedRevision !== opts.expectedMetadataRevision && !opts.metadataLastWriteWins) {
+        throw new MetadataConcurrencyError(`CEREFOX_METADATA_CONFLICT: the metadata of document ${opts.documentId} changed since it was read ` + `(expected metadata_revision ${opts.expectedMetadataRevision}, current ${storedRevision}).`);
+      }
       const wanted = normalizeMetadata(opts.metadata);
       if (stableStringify(stored) !== stableStringify(wanted)) {
         const { error: rpcErr } = await supabase.rpc("cerefox_set_document_metadata", {
@@ -25981,10 +26048,13 @@ async function updateDocumentFacets(supabase, opts) {
           p_metadata: wanted,
           p_replace: true,
           p_author: opts.author,
-          p_author_type: opts.authorType
+          p_author_type: opts.authorType,
+          ...metadataTokenParams(opts.expectedMetadataRevision, opts.metadataLastWriteWins)
         });
         if (rpcErr) {
           const msg = rpcErr.message ?? String(rpcErr);
+          if (msg.includes("CEREFOX_METADATA_"))
+            throw new MetadataConcurrencyError(msg);
           if (/not found/i.test(msg))
             throw new FacetNotFoundError(msg);
           throw new Error(`Metadata update failed: ${msg}`);
@@ -26362,7 +26432,7 @@ var init_compatibility = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@hono+node-server@2.1.1+2ac783cc5e75a70c/node_modules/@hono/node-server/dist/conninfo.mjs
+// ../../node_modules/.bun/@hono+node-server@2.1.4+c539cad7f494f5c9/node_modules/@hono/node-server/dist/conninfo.mjs
 var getConnInfo = (c) => {
   const bindings = c.env.server ? c.env.server : c.env;
   const address = bindings.incoming.socket.remoteAddress;
@@ -26778,7 +26848,7 @@ var init_update_check = __esm(() => {
 });
 
 // ../../_shared/ef-meta/index.ts
-var EF_VERSION = "1.18.0", CEREFOX_VERSION = "1.18.0", EF_LAST_CHANGED = "1.17.3";
+var EF_VERSION = "1.19.1", CEREFOX_VERSION = "1.19.1", EF_LAST_CHANGED = "1.19.0";
 var init_ef_meta = () => {};
 
 // ../../_shared/embeddings/onnx-embedder.ts
@@ -26933,9 +27003,7 @@ async function ensurePipeline() {
   pipelinePromise = (async () => {
     const transformers = await loadTransformers();
     if (isModelCached()) {
-      const pipe = await transformers.pipeline("feature-extraction", ONNX_MODEL_ID, {
-        dtype: ONNX_MODEL_DTYPE
-      });
+      const pipe = await transformers.pipeline("feature-extraction", ONNX_MODEL_ID, PIPELINE_OPTIONS);
       return pipe;
     }
     const mb = ONNX_MODEL_APPROX_MB;
@@ -27016,9 +27084,7 @@ async function ensurePipeline() {
       }
     };
     await downloadModelFiles(String(transformers.env.remoteHost ?? "https://huggingface.co/"), (file, loaded, total) => progressCallback({ status: "progress", file, loaded, total }), (file, size) => progressCallback({ status: "done", file, total: size }));
-    const pipe = await transformers.pipeline("feature-extraction", ONNX_MODEL_ID, {
-      dtype: ONNX_MODEL_DTYPE
-    });
+    const pipe = await transformers.pipeline("feature-extraction", ONNX_MODEL_ID, PIPELINE_OPTIONS);
     process.stderr.write(`[cerefox-embed] embedder ready.
 `);
     return pipe;
@@ -27061,7 +27127,7 @@ async function onnxEmbed(texts, role) {
   }
   return vectors;
 }
-var ONNX_MODEL_ID = "nomic-ai/nomic-embed-text-v1.5", ONNX_MODEL_NAME = "nomic-embed-text-v1.5", ONNX_MODEL_DTYPE = "q8", ONNX_MODEL_DIM = 768, ONNX_MODEL_APPROX_MB = 130, MODEL_REPO_FILES, MODEL_FILES, EmbedderDownloadError, DOWNLOAD_ATTEMPTS = 6, SEGMENT_BYTES, REQUEST_TIMEOUT_MS = 120000, transformersModule = null, pipelinePromise = null, DEFAULT_ONNX_BATCH = 4;
+var ONNX_MODEL_ID = "nomic-ai/nomic-embed-text-v1.5", ONNX_MODEL_NAME = "nomic-embed-text-v1.5", ONNX_MODEL_DTYPE = "q8", ONNX_MODEL_DIM = 768, ONNX_MODEL_APPROX_MB = 130, MODEL_REPO_FILES, MODEL_FILES, EmbedderDownloadError, DOWNLOAD_ATTEMPTS = 6, SEGMENT_BYTES, REQUEST_TIMEOUT_MS = 120000, transformersModule = null, pipelinePromise = null, PIPELINE_OPTIONS, DEFAULT_ONNX_BATCH = 1;
 var init_onnx_embedder = __esm(() => {
   MODEL_REPO_FILES = [
     "config.json",
@@ -27078,6 +27144,10 @@ var init_onnx_embedder = __esm(() => {
     }
   };
   SEGMENT_BYTES = 4 * 1024 * 1024;
+  PIPELINE_OPTIONS = {
+    dtype: ONNX_MODEL_DTYPE,
+    session_options: { enableCpuMemArena: false }
+  };
 });
 
 // ../../_shared/embeddings/index.ts
@@ -50983,7 +51053,8 @@ async function handler(supabase, args, ctx) {
   const lines = entries.map((e) => {
     const docLabel = auditDocLabel(e.doc_title, e.document_id, e.operation);
     const sizeInfo = e.size_before != null && e.size_after != null ? ` | ${e.size_before} -> ${e.size_after} chars` : e.size_after != null ? ` | ${e.size_after} chars` : "";
-    return `${utcStamp2(e.created_at)} | ${e.operation} | ${e.author} (${e.author_type}) | ${docLabel}${sizeInfo} | ${e.description}`;
+    const change = metadataChangeSummary(e.metadata_before, e.metadata_after);
+    return `${utcStamp2(e.created_at)} | ${e.operation} | ${e.author} (${e.author_type}) | ${docLabel}${sizeInfo} | ${e.description}${change ? ` | ${change}` : ""}`;
   });
   return `Audit log (${entries.length} entries, newest first):
 
@@ -51510,6 +51581,8 @@ async function handler4(supabase, args, ctx) {
     return JSON.stringify({
       title: row.doc_title ?? "Untitled",
       content_hash: archived ? null : row.content_hash ?? null,
+      metadata: row.doc_metadata ?? {},
+      metadata_revision: archived ? null : row.metadata_revision ?? null,
       total_chars: row.total_chars ?? (row.full_content ?? "").length,
       outline: nodes,
       note: archived ? "This is an ARCHIVED version's structure, so no content_hash is returned: these anchors describe the old version and must not be used to edit the current one. Re-read without version_id to edit." : nodes.length === 0 ? "This document has no headings, so it has no anchors: only end_of_document inserts apply." : "Use a path as anchor_heading in cerefox_insert / cerefox_edit; content_hash is your expected_content_hash."
@@ -51536,7 +51609,8 @@ async function handler4(supabase, args, ctx) {
     }, null, 2);
   }
   const label = version_id !== null ? " (archived version)" : " (current)";
-  const hashLine = row.content_hash ? `content_hash: ${row.content_hash}
+  const revision = version_id === null && row.metadata_revision != null ? ` · metadata_revision: ${row.metadata_revision}` : "";
+  const hashLine = row.content_hash ? `content_hash: ${row.content_hash}${revision}
 
 ` : "";
   return `# ${row.doc_title ?? "Untitled"}${label}
@@ -51716,9 +51790,6 @@ async function applyAndWrite(supabase, ctx, args) {
     if (message.includes("CEREFOX_CONFLICT")) {
       throw conflictError2(documentId, expectedHash, extractConflictHashes(message).current);
     }
-    if (message.includes("cerefox_documents_hash_unique")) {
-      throw new Error(`This edit would make "${doc.title}" (id: ${documentId}) byte-identical to another ` + `document in the store, and content must be unique. No write was performed. ` + `Usually this means the two documents have converged and one should be removed or ` + `merged, or that this edit was already applied to the other one — ` + `cerefox_search for the resulting content to find it.`);
-    }
     if (message.includes("CEREFOX_UNRESOLVED_LINKS")) {
       const ids = message.match(/do not exist: ([^.]+)\./)?.[1] ?? "(unparsed)";
       throw new Error(`Edit rejected — this edit introduces link(s) to document id(s) that do not ` + `exist: ${ids}. The UUIDs are almost certainly mangled — re-read the source ` + `you copied each link from, correct the id(s), and retry. Do not retry ` + `unchanged. Deliberate examples belong in code formatting (backticks).`);
@@ -51729,6 +51800,9 @@ async function applyAndWrite(supabase, ctx, args) {
     if (isMissingFunctionError(message, "cerefox_ingest_document")) {
       throw new Error(`This server is behind: partial edits need schema 0.11.0 or newer. ` + `Run \`cerefox server deploy\`, then retry. (${message})`);
     }
+    const legacy = legacyContentUniqueError(message);
+    if (legacy)
+      throw legacy;
     throw new Error(`Edit failed: ${message}`);
   }
   const row = data?.[0] ?? undefined;
@@ -51935,12 +52009,12 @@ var init_partial_edits2 = __esm(() => {
 });
 
 // ../../_shared/mcp-tools/get-help-content.ts
-var HELP_FULL = '# Cerefox Knowledge Base -- Agent Quick Reference\n\nCerefox is a persistent, shared knowledge base. You have **15 core MCP tools** (14 with CLI equivalents — `cerefox_get_help` is MCP-only), plus 4 dormant relation tools that appear only when `relations_enabled` is on. For the full guide, search Cerefox for "How AI Agents Use Cerefox" or call `cerefox_get_help` to retrieve this content over MCP.\n\n## Tools\n\n| Tool | Purpose | Key params |\n|------|---------|------------|\n| `cerefox_search` | Find documents (hybrid FTS + semantic) | `query` (required), `project_name`, `metadata_filter`, `author` |\n| `cerefox_ingest` | Save or update a document | `title`, `content` (required), `document_id` (update by ID), `expected_content_hash` (**required on content updates** — see rule 10), `last_write_wins`, `update_if_exists`, `project_name` (single, non-destructive add on update), `project_names` (list, destructive replace on update), `metadata` (omit on update to keep existing tags; `{}` clears), `author` |\n| `cerefox_insert` | **Add** to a document without resending it. Cannot destroy content. | `document_id`, `text`, `position` (`end_of_document`/`end_of_section`/`after_heading`/`before_heading`), `expected_content_hash` (required), `anchor_heading` (unless `end_of_document`), `section_part`, `author` |\n| `cerefox_edit` | **Change** parts of a document: 1..n operations applied atomically | `document_id`, `operations` (`insert`/`replace_section`/`delete_section`/`rename_section`), `expected_content_hash` (required), `author` |\n| `cerefox_delete_document` | **Soft**-delete a document (to trash; excluded from search; permanent purge is human-only) | `document_id`, `expected_content_hash` (**required** — a delete must follow a read), `reason` (recorded in the audit log — give one), `author` |\n| `cerefox_restore_document` | Restore a soft-deleted document from the trash (audited inverse of delete; no-op if not deleted) | `document_id` (required), `reason` (recorded in the audit log), `author` |\n| `cerefox_get_document` | Get full document by ID (header includes `content_hash` — the update token), or with `outline: true` just its heading paths, sizes and hash, or with `section: "## Heading"` one section\'s text | `document_id` (required), `outline`, `section`, `section_part`, `author` |\n| `cerefox_list_versions` | Version history of a document | `document_id` (required), `author` |\n| `cerefox_set_relation` ⚑ | Link two documents (`source --rel_type--> target`) | `source_id`, `target_id`, `rel_type` (required), `metadata`, `author` |\n| `cerefox_delete_relation` ⚑ | Remove a relation | `source_id`, `target_id`, `rel_type`, `author` |\n| `cerefox_get_relations` ⚑ | All relations touching a document, both directions | `document_id` |\n| `cerefox_get_neighbors` ⚑ | Walk the graph along ONE relation type | `document_id`, `rel_type` (required), `depth`, `from_time`, `to_time`, `limit` |\n| `cerefox_metadata_search` | Find or list docs by metadata, project, or time (no text query) | `metadata_filter`, `project_name` (list a project\'s docs), `updated_since`, `include_content` — **at least one** of metadata_filter/project_name/updated_since/created_since |\n| `cerefox_list_metadata_keys` | Discover available metadata keys | (none required) |\n| `cerefox_list_projects` | List all projects | (none required) |\n| `cerefox_set_document_metadata` | Change tags WITHOUT resending content. **Merges** by default; a `null` value removes a key | `document_id`, `metadata` (required), `replace` (rare: set exactly this object), `author` |\n| `cerefox_set_document_projects` | Set doc\'s project memberships to exactly the given list (destructive replace; metadata-only, no content change) | `document_id`, `project_names` (required), `author` |\n| `cerefox_get_audit_log` | Query write operation history | `document_id`, `by_author` (filter), `operation`, `since`, `author` |\n| `cerefox_get_help` | Retrieve Cerefox conventions (this reference) over MCP. **Call this whenever uncertain.** | `topic` (optional, case-insensitive H2 substring match) |\n\n⚑ **Opt-in — usually absent.** The four relation tools are hidden unless the\noperator enables them (`relations_enabled`). **Trust your own tool list**: if\nthey are not in it, the feature is switched off for this deployment. That is\nnormal, not an error, and not something to work around.\n\n## Editing part of a document (prefer this over re-sending)\n\n**Re-sending a whole document to change part of it is the main way agents lose\ndata.** You have to reproduce the untouched remainder verbatim, and any drift\nsilently rewrites content nobody asked you to touch — which the caller cannot\ndiff. Use the partial-edit tools instead:\n\n1. **Learn the anchors** — `cerefox_get_document(document_id, outline: true)`.\n   Returns heading paths, per-section sizes and the `content_hash`, without the\n   body. The paths it returns are exactly what `anchor_heading` accepts.\n2. **Add** → `cerefox_insert`. `end_of_document` is a plain append;\n   `end_of_section` adds inside a named section. It is structurally incapable of\n   removing anything, so "I meant to append" cannot become "I replaced the file".\n3. **Look before you overwrite** — `cerefox_get_document(document_id,\n   section: "## Heading")` returns exactly the text a `replace_section` on that\n   anchor would destroy. The outline gives you a section\'s *size*, never its\n   *text*, so on a document you did not write yourself this is the difference\n   between a replace and a blind overwrite.\n4. **Change or remove** → `cerefox_edit`. Put changes that belong together in\n   ONE call: they apply atomically, so a table row and the total it feeds cannot\n   end up disagreeing. To change a single line, `replace_section` on its\n   smallest enclosing heading — that is the intended granularity, not a\n   workaround. To fix a stale heading (`## OPEN TODOs (as of ...)`), use\n   `rename_section`: it changes the heading text and leaves the body and\n   position alone.\n5. All of them require `expected_content_hash` and **have no last-write-wins**. A\n   conflict means someone else changed the document; re-read and decide, do not\n   force it.\n\n**A section runs to the next same-or-higher heading, or to the end of the\ndocument.** So `end_of_document` inserts land inside the *last* section, and\nreplacing or deleting that section removes them too. A large shrink in the\nresponse is your warning; `cerefox_list_versions` has the previous content.\n\n**When an anchor is ambiguous the tool refuses and hands you the options** — a\nrepeated heading returns the qualifying paths, and a section with both its own\ncontent and sub-sections returns both `section_part` choices. That is a\nrecoverable answer, not a failure: retry with what it gave you.\n\n## Essential Rules\n\n1. **Search before ingesting** -- check if the document exists first.\n2. **Prefer ID-based updates** -- pass `document_id` from search results for deterministic updates. Falls back to title-matching with `update_if_exists: true`.\n3. **Set `author`** to your name on every call, reads and writes alike (e.g., "Claude Code", "archiver"). Same parameter on every tool. (`requestor` is still accepted everywhere as the pre-1.13.1 alias.) On the CLI it is `--author` on every command too (plus `--author-type` on writes); or rely on `CEREFOX_AUTHOR_NAME`/`CEREFOX_AUTHOR_TYPE` env vars set in the user\'s `.env`.\n4. **Use `document_id` from search results** `[id: uuid]` for get_document and list_versions.\n5. **`max_bytes` has to fit a whole document.** Search returns COMPLETE documents, so a budget smaller than the top hit fits nothing. You get a header-only list saying so (never "No results found." — that means the store really has nothing). Raise `max_bytes`, or read one document with `cerefox_get_document` using `outline: true` or `section`.\n6. **Add metadata** -- at minimum `type` ("decision-log", "research", "design-doc") and `status` ("active", "draft").\n7. **Write for retrieval: the title does real work.** The document title is indexed at the **highest weight** *and* prepended to every chunk before it is embedded, so it steers both halves of hybrid search (keyword and semantic) for every chunk in the document. Name the document with the distinctive terms someone would actually search for -- "Cerefox Response Size Limits", not "Notes" or "Update 3". Renaming re-indexes and re-embeds, so correcting a vague title is cheap and takes effect immediately. Write the characters themselves: `&` and `<>`, never `&amp;` or `&lt;&gt;` (entities are stored literally and the write reply will say so). Inside the content, write structured Markdown with H1/H2/H3 headings: the chunker follows them, and a chunk\'s own heading carries the same weight as the title.\n8. **Deletes are soft (recoverable); permanent purge is web-UI-only.** `cerefox_delete_document` requires the document\'s `content_hash` as you read it (read before you delete) and takes a `reason` — give one; it is what the human reviewing the trash sees. `cerefox_restore_document` undoes a mistaken delete (also audited, also takes a `reason`). Always surface deletes AND restores to the user. Once a human purges from the web UI, the document is gone for good; so is one auto-purged after `trash_retention_days`, if the operator has turned trash auto-purge on.\n9. **Cross-doc links inside content**: **always use `[Text](document-uuid)`.** UUIDs are the only fully reliable link form — stable across title changes, never ambiguous, no encoding gotchas. Every `cerefox_search` result shows `[id: <uuid>]` after the title; grab it and use it. Title-based linking (`[Text](<Title With Spaces>)`) is fragile (breaks on colons, parens, ampersands, brackets — silently navigates to wrong page) — **don\'t write title-based links**; do an extra search to get the UUID instead. Repo-path forms (`[Text](docs/path.md)`) exist for repo-ingested files; don\'t construct manually. **The server validates `](uuid)` links on every write** (v1.7.0): a link to a nonexistent id rejects the write, naming the offender — that means you mangled the UUID; re-read the source and correct it, do not retry unchanged. Example ids go in backticks (code is not validated). `[[Wikilinks]]` may dangle. See `AGENT_GUIDE.md → Writing linkable content` for the full rule.\n10. **Concurrency: content updates require `expected_content_hash`.** Pass the `content_hash` you last saw — every read shows one (`cerefox_get_document` incl. outline mode, `cerefox_search`, `cerefox_metadata_search`) and **every write returns the new one, including create** (v1.3.0, #189), so after writing you already hold the token for your next edit; no re-read needed. If it\'s stale you get a **conflict** — re-read the document, merge your changes into the latest content, retry with the new hash. **Never resolve a conflict by overwriting blindly** — the current content includes another writer\'s work. `last_write_wins: true` skips the check; use it ONLY when an external source of truth makes conflicts meaningless (file re-sync), never to silence a conflict.\n11. **Search: prefer a few distinctive terms; heed `below confidence`.** When nothing clears the relevance threshold, `cerefox_search` returns the closest candidates prefixed with a `below confidence` warning instead of an empty set — that flag means **weak signal, not absent knowledge**: check the candidates\' scores and titles before concluding the KB lacks the content. A truly empty response means nothing even weakly related exists.\n12. **Relations express how documents relate; lifecycle tells you if knowledge is still good.** Use `cerefox_set_relation` when one document supersedes, contradicts, references, or continues another. `supersedes` marks the target **superseded**; `contradicts` marks **both** stale; `related_to`/`duplicates`/`contradicts` are symmetric (both directions written). Any other type string is accepted without special behavior. When a search result or `cerefox_get_relations` shows a neighbour marked `[superseded]` or `[stale]`, say so rather than presenting it as current.\n13. **Project memberships — non-destructive by default**: on `cerefox_ingest` updates, **`project_name` (singular) is a non-destructive add** (ensures membership, preserves others). Use **`project_names` (list)** when you want to set the doc\'s full project set in one call (destructive replace). For metadata-only project changes without writing content, use **`cerefox_set_document_projects(document_id, project_names)`** — that tool is the destructive-replace contract made explicit. Never call `cerefox_set_document_projects` with a single name when you mean "add" — that would REMOVE the doc from all other projects. When in doubt, use `cerefox_ingest` with singular `project_name`.\n\n## Update Workflow (ID-based -- preferred)\n\n```\nsearch("topic") -> find doc [id: abc123] -> get_document(abc123) -> note its content_hash -> modify ->\ningest(title="Same Title", content="...", document_id="abc123",\n       expected_content_hash="<the hash you read>", author="my-agent")\n```\n\nOn a **conflict** error: get_document again (fresh content + fresh hash) -> merge your changes -> retry with the new hash.\n\n## Update Workflow (title-based -- fallback)\n\n```\nsearch("topic") -> find doc (note its hash) -> modify ->\ningest(title="Same Title", content="...", update_if_exists=true,\n       expected_content_hash="<the hash you read>", author="my-agent")\n```\n\n## Catch-Up Workflow\n\n```\nmetadata_search(metadata_filter={"type": "decision-log"}, updated_since="2026-03-28T00:00:00Z")\n```\n\n## CLI fallback (when MCP is unavailable)\n\nIf `cerefox_search` is not in your tool list, your user has likely installed the Cerefox CLI. The canonical invocation is plain **`cerefox <subcommand>`** (the TypeScript CLI, installed via `npm install -g @cerefox/memory`). It uses a resource-verb shape (`cerefox document get`, `cerefox project list`, …).\n\nSame operations, same conventions. Full reference: [`docs/guides/cli.md`](docs/guides/cli.md). CLI flag names match MCP parameter names exactly (e.g. `metadata_filter` ↔ `--metadata-filter`); common flags also have single-letter short forms (`-f`, `-p`, `-c`, `-m`, `-u`, `-a`). Use the canonical long name (what `--help` shows) or its short form — there are no long-form aliases like `--filter` or `--count`.\n\n| MCP tool | CLI |\n|---|---|\n| `cerefox_search` | `cerefox search "<q>" --author "<your-name>"` |\n| `cerefox_ingest` (paste) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --author "<your-name>" --author-type agent` |\n| `cerefox_ingest` (update by ID) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --document-id "<uuid>" --expected-content-hash "<hash>" --author "<your-name>" --author-type agent` |\n| `cerefox_get_document` | `cerefox document get <id> --version-id <vid> --author "<your-name>"` |\n| `cerefox_list_versions` | `cerefox document version list <id> --author "<your-name>"` |\n| `cerefox_list_projects` | `cerefox project list --author "<your-name>"` |\n| `cerefox_list_metadata_keys` | `cerefox metadata keys` |\n| `cerefox_insert` | `cerefox document insert <id> -t "<text>" -p <position> -a "<anchor-heading>" -e "<hash>" --author "<your-name>" --author-type agent` |\n| `cerefox_edit` | `cerefox document edit-parts <id> --operations \'<json>\' -e "<hash>" --author "<your-name>" --author-type agent` |\n| `cerefox_delete_document` | `cerefox document delete <id> --reason "<why>" --author "<your-name>" --author-type agent --yes` (confirms interactively instead of requiring the hash) |\n| `cerefox_restore_document` | `cerefox document restore <id> --reason "<why>" --author "<your-name>" --author-type agent` |\n| `cerefox_metadata_search` | `cerefox metadata search --metadata-filter \'<json>\' --author "<your-name>"` (list a project: `cerefox document list --project <name>`) |\n| `cerefox_set_document_metadata` | `cerefox document set-metadata <id> --set key=value` (also `--remove key`, `--json \'{...}\'`, `--replace`) |\n| `cerefox_set_document_projects` | `cerefox document set-projects <id> <name...> --author "<your-name>" --author-type agent` (or `--clear` to remove all) |\n| `cerefox_get_audit_log` | `cerefox audit list --author "<your-name>"` (add `--json` for scripted access) |\n| `cerefox_get_help` | `cerefox guides show agent-quick-reference` (or `cerefox guides list` for the full bundled-docs index) |\n\n**Set identity on every call**, exactly as you would on MCP:\n- Writes (`document ingest`, `document ingest-dir`): `--author "<your-name>" --author-type agent`\n- Reads: `--author "<your-name>"` (the same flag; `--requestor` still works as a hidden alias)\n\nOr have your user set `CEREFOX_AUTHOR_NAME` / `CEREFOX_AUTHOR_TYPE` / `CEREFOX_REQUESTOR_NAME` in their `.env` to apply defaults once.\n\n## Timestamps are UTC\n\nEvery timestamp Cerefox returns — `created_at` on audit entries, version\nhistory, document metadata — is **UTC**, and now carries its `Z` marker so it\ncannot be mistaken for local time.\n\n**When you write a date into a document\'s CONTENT, use your own clock, not a\nCerefox timestamp.** These are different things: a timestamp records when the\nserver stored something; a date in a log entry or a heading is authored content\nand belongs to your timezone. An agent working a Pacific afternoon read\n`2026-08-11` from version history, wrote "8/11" into its entries, and put a\nday\'s work in the future — the timestamp was correct, and copying it into\ncontent was not.\n\nCerefox deliberately does not convert to local time on the API or MCP paths.\n"Local" has no server-side meaning: the remote MCP server runs in a cloud\nfunction whose local time *is* UTC, while a local MCP server runs in yours, so\nthe same document would report two different times depending on transport. The\nweb UI converts because a browser knows the viewer\'s timezone; nothing\nserver-side does.\n\n## Mistakes that have actually happened\n\nEach of these comes from a real agent session, and each is easy to make.\n\n- **`cerefox_ingest` always replaces the ENTIRE document.** Never a section.\n  Before sending, check that the tool name matches the intent: if the intent is\n  "change one section", the call is `cerefox_edit` with `replace_section`. A\n  section-sized edit sent as a full ingest truncated a 13,000-character index to\n  a single word. It was recovered from version history within the minute, but\n  only because it was noticed immediately.\n\n- **Do not include the anchor\'s own heading in your text.** `replace_section`\n  keeps the heading and `insert` places your text inside the section, so\n  including it produces two. This is now refused rather than silently applied,\n  but the shape is worth knowing: it happened twice in one session, the second\n  time while trying to repair the first. A *deeper* sub-heading inside your text\n  is fine.\n\n- **Content between sections belongs to the section ABOVE it.** A section runs\n  to the next heading of the same or higher level, so a `---` rule, a note, or\n  any trailing text sitting just above the next heading is part of the section\n  before it — even when it visually reads as belonging below. Replacing that\n  section takes it too. An agent hit exactly this: a `---` that separated two\n  major sections disappeared when the section above it was replaced. The write\n  was correct by the addressing rules; the surprise is that "the end of this\n  section" is further down the page than it looks. Note the loss warning will\n  not catch it if your replacement text is longer than what it replaced, since\n  there is then no net loss to report.\n\n- **To change only tags, use `cerefox_set_document_metadata`, never `cerefox_ingest`.**\n  Ingest replaces the whole document, so re-sending it to set one tag carries the\n  full transcription risk for no reason. The metadata tool merges: the keys you\n  pass are set, everything else is left alone, so you do not need to read the\n  document first and cannot drop a tag another agent set. Pass `null` as a value\n  to remove a key.\n\n- **Never partial-edit to fix a partial edit.** If a write leaves unexpected\n  structure, stop. Use `cerefox_list_versions`, retrieve the last good version,\n  and re-ingest cleanly. Repairing edits with more edits compounds the damage.\n\n- **A rejected batch is safe.** Operations in one `cerefox_edit` are\n  all-or-nothing: if any is invalid, nothing is written. A refusal costs you a\n  retry, not data — so prefer one call for changes that belong together, and do\n  not split a batch to "make it more likely to succeed".\n\n- **Read before replacing.** `cerefox_get_document(section: "## Heading")`\n  returns exactly what a `replace_section` on that anchor would overwrite. Use it\n  for any section you did not write in this session. The outline gives a\n  section\'s *size*, never its *text*.\n\n- **Verify after writing** — read the result back before reporting success, and\n  report what the read actually shows.\n\n- **Partial edits cannot change a document\'s stored TITLE.** `rename_section`\n  changes a heading inside the content; the title is a separate field and still\n  needs `cerefox_ingest`.\n\n- **If a capability seems missing from one server, suspect your client first.**\n  Local and remote run the same code. **Every `cerefox_get_help()` response\n  begins with the server\'s version and the operations it registers** — you do\n  not need a special topic, and the *absence* of that block is itself an answer:\n  a server that does not print it predates v1.5.0. If that\n  disagrees with your tool list, the client is holding a list it fetched before\n  an upgrade — clients cache it at connect time. Ask the user to restart the\n  client. Do not record a capability difference between servers as a fact; every\n  such report so far has been a stale client.\n- Long inline bodies can arrive with literal `\\n`/`\\"` (the author over-escaped; Cerefox stores bytes faithfully). For long or quote-dense content, ingest from a file or build incrementally with `cerefox_insert`; read back multi-line writes.\n', HELP_SECTIONS, HELP_SECTION_HEADINGS;
+var HELP_FULL = '# Cerefox Knowledge Base -- Agent Quick Reference\n\nCerefox is a persistent, shared knowledge base. You have **15 core MCP tools** (14 with CLI equivalents — `cerefox_get_help` is MCP-only), plus 4 dormant relation tools that appear only when `relations_enabled` is on. For the full guide, search Cerefox for "How AI Agents Use Cerefox" or call `cerefox_get_help` to retrieve this content over MCP.\n\n## Tools\n\n| Tool | Purpose | Key params |\n|------|---------|------------|\n| `cerefox_search` | Find documents (hybrid FTS + semantic) | `query` (required), `project_name`, `metadata_filter`, `author` |\n| `cerefox_ingest` | Save or update a document | `title`, `content` (required), `document_id` (update by ID), `expected_content_hash` (**required on content updates** — see rule 10), `last_write_wins`, `update_if_exists`, `project_name` (single, non-destructive add on update), `project_names` (list, destructive replace on update), `metadata` (on update it **merges**: `null` removes a key, omitted keys are kept), `expected_metadata_revision` (optional, see rule 10), `author` |\n| `cerefox_insert` | **Add** to a document without resending it. Cannot destroy content. | `document_id`, `text`, `position` (`end_of_document`/`end_of_section`/`after_heading`/`before_heading`), `expected_content_hash` (required), `anchor_heading` (unless `end_of_document`), `section_part`, `author` |\n| `cerefox_edit` | **Change** parts of a document: 1..n operations applied atomically | `document_id`, `operations` (`insert`/`replace_section`/`delete_section`/`rename_section`), `expected_content_hash` (required), `author` |\n| `cerefox_delete_document` | **Soft**-delete a document (to trash; excluded from search; permanent purge is human-only) | `document_id`, `expected_content_hash` (**required** — a delete must follow a read), `reason` (recorded in the audit log — give one), `author` |\n| `cerefox_restore_document` | Restore a soft-deleted document from the trash (audited inverse of delete; no-op if not deleted) | `document_id` (required), `reason` (recorded in the audit log), `author` |\n| `cerefox_get_document` | Get full document by ID (header includes `content_hash` — the update token), or with `outline: true` just its heading paths, sizes and hash, or with `section: "## Heading"` one section\'s text | `document_id` (required), `outline`, `section`, `section_part`, `author` |\n| `cerefox_list_versions` | Version history of a document | `document_id` (required), `author` |\n| `cerefox_set_relation` ⚑ | Link two documents (`source --rel_type--> target`) | `source_id`, `target_id`, `rel_type` (required), `metadata`, `author` |\n| `cerefox_delete_relation` ⚑ | Remove a relation | `source_id`, `target_id`, `rel_type`, `author` |\n| `cerefox_get_relations` ⚑ | All relations touching a document, both directions | `document_id` |\n| `cerefox_get_neighbors` ⚑ | Walk the graph along ONE relation type | `document_id`, `rel_type` (required), `depth`, `from_time`, `to_time`, `limit` |\n| `cerefox_metadata_search` | Find or list docs by metadata, project, or time (no text query) | `metadata_filter`, `project_name` (list a project\'s docs), `updated_since`, `include_content` — **at least one** of metadata_filter/project_name/updated_since/created_since |\n| `cerefox_list_metadata_keys` | Discover available metadata keys | (none required) |\n| `cerefox_list_projects` | List all projects | (none required) |\n| `cerefox_set_document_metadata` | Change tags WITHOUT resending content. **Merges** by default; a `null` value removes a key | `document_id`, `metadata` (required), `replace` (rare: set exactly this object; needs `expected_metadata_revision`), `expected_metadata_revision`, `author` |\n| `cerefox_set_document_projects` | Set doc\'s project memberships to exactly the given list (destructive replace; metadata-only, no content change) | `document_id`, `project_names` (required), `author` |\n| `cerefox_get_audit_log` | Query write operation history | `document_id`, `by_author` (filter), `operation`, `since`, `author` |\n| `cerefox_get_help` | Retrieve Cerefox conventions (this reference) over MCP. **Call this whenever uncertain.** | `topic` (optional, case-insensitive H2 substring match) |\n\n⚑ **Opt-in — usually absent.** The four relation tools are hidden unless the\noperator enables them (`relations_enabled`). **Trust your own tool list**: if\nthey are not in it, the feature is switched off for this deployment. That is\nnormal, not an error, and not something to work around.\n\n## Editing part of a document (prefer this over re-sending)\n\n**Re-sending a whole document to change part of it is the main way agents lose\ndata.** You have to reproduce the untouched remainder verbatim, and any drift\nsilently rewrites content nobody asked you to touch — which the caller cannot\ndiff. Use the partial-edit tools instead:\n\n1. **Learn the anchors** — `cerefox_get_document(document_id, outline: true)`.\n   Returns heading paths, per-section sizes and the `content_hash`, without the\n   body. The paths it returns are exactly what `anchor_heading` accepts.\n2. **Add** → `cerefox_insert`. `end_of_document` is a plain append;\n   `end_of_section` adds inside a named section. It is structurally incapable of\n   removing anything, so "I meant to append" cannot become "I replaced the file".\n3. **Look before you overwrite** — `cerefox_get_document(document_id,\n   section: "## Heading")` returns exactly the text a `replace_section` on that\n   anchor would destroy. The outline gives you a section\'s *size*, never its\n   *text*, so on a document you did not write yourself this is the difference\n   between a replace and a blind overwrite.\n4. **Change or remove** → `cerefox_edit`. Put changes that belong together in\n   ONE call: they apply atomically, so a table row and the total it feeds cannot\n   end up disagreeing. To change a single line, `replace_section` on its\n   smallest enclosing heading — that is the intended granularity, not a\n   workaround. To fix a stale heading (`## OPEN TODOs (as of ...)`), use\n   `rename_section`: it changes the heading text and leaves the body and\n   position alone.\n5. All of them require `expected_content_hash` and **have no last-write-wins**. A\n   conflict means someone else changed the document; re-read and decide, do not\n   force it.\n\n**A section runs to the next same-or-higher heading, or to the end of the\ndocument.** So `end_of_document` inserts land inside the *last* section, and\nreplacing or deleting that section removes them too. A large shrink in the\nresponse is your warning; `cerefox_list_versions` has the previous content.\n\n**When an anchor is ambiguous the tool refuses and hands you the options** — a\nrepeated heading returns the qualifying paths, and a section with both its own\ncontent and sub-sections returns both `section_part` choices. That is a\nrecoverable answer, not a failure: retry with what it gave you.\n\n## Essential Rules\n\n1. **Search before ingesting** -- check if the document exists first.\n2. **Prefer ID-based updates** -- pass `document_id` from search results for deterministic updates. Falls back to title-matching with `update_if_exists: true`.\n3. **Set `author`** to your name on every call, reads and writes alike (e.g., "Claude Code", "archiver"). Same parameter on every tool. (`requestor` is still accepted everywhere as the pre-1.13.1 alias.) On the CLI it is `--author` on every command too (plus `--author-type` on writes); or rely on `CEREFOX_AUTHOR_NAME`/`CEREFOX_AUTHOR_TYPE` env vars set in the user\'s `.env`.\n4. **Use `document_id` from search results** `[id: uuid]` for get_document and list_versions.\n5. **`max_bytes` has to fit a whole document.** Search returns COMPLETE documents, so a budget smaller than the top hit fits nothing. You get a header-only list saying so (never "No results found." — that means the store really has nothing). Raise `max_bytes`, or read one document with `cerefox_get_document` using `outline: true` or `section`.\n6. **Add metadata** -- at minimum `type` ("decision-log", "research", "design-doc") and `status` ("active", "draft").\n7. **Write for retrieval: the title does real work.** The document title is indexed at the **highest weight** *and* prepended to every chunk before it is embedded, so it steers both halves of hybrid search (keyword and semantic) for every chunk in the document. Name the document with the distinctive terms someone would actually search for -- "Cerefox Response Size Limits", not "Notes" or "Update 3". Renaming re-indexes and re-embeds, so correcting a vague title is cheap and takes effect immediately. Write the characters themselves: `&` and `<>`, never `&amp;` or `&lt;&gt;` (entities are stored literally and the write reply will say so). Inside the content, write structured Markdown with H1/H2/H3 headings: the chunker follows them, and a chunk\'s own heading carries the same weight as the title.\n8. **Deletes are soft (recoverable); permanent purge is web-UI-only.** `cerefox_delete_document` requires the document\'s `content_hash` as you read it (read before you delete) and takes a `reason` — give one; it is what the human reviewing the trash sees. `cerefox_restore_document` undoes a mistaken delete (also audited, also takes a `reason`). Always surface deletes AND restores to the user. Once a human purges from the web UI, the document is gone for good; so is one auto-purged after `trash_retention_days`, if the operator has turned trash auto-purge on.\n9. **Cross-doc links inside content**: **always use `[Text](document-uuid)`.** UUIDs are the only fully reliable link form — stable across title changes, never ambiguous, no encoding gotchas. Every `cerefox_search` result shows `[id: <uuid>]` after the title; grab it and use it. Title-based linking (`[Text](<Title With Spaces>)`) is fragile (breaks on colons, parens, ampersands, brackets — silently navigates to wrong page) — **don\'t write title-based links**; do an extra search to get the UUID instead. Repo-path forms (`[Text](docs/path.md)`) exist for repo-ingested files; don\'t construct manually. **The server validates `](uuid)` links on every write** (v1.7.0): a link to a nonexistent id rejects the write, naming the offender — that means you mangled the UUID; re-read the source and correct it, do not retry unchanged. Example ids go in backticks (code is not validated). `[[Wikilinks]]` may dangle. See `AGENT_GUIDE.md → Writing linkable content` for the full rule.\n10. **Concurrency: content updates require `expected_content_hash`.** Pass the `content_hash` you last saw — every read shows one (`cerefox_get_document` incl. outline mode, `cerefox_search`, `cerefox_metadata_search`) and **every write returns the new one, including create** (v1.3.0, #189), so after writing you already hold the token for your next edit; no re-read needed. If it\'s stale you get a **conflict** — re-read the document, merge your changes into the latest content, retry with the new hash. **Never resolve a conflict by overwriting blindly** — the current content includes another writer\'s work. `last_write_wins: true` skips the check; use it ONLY when an external source of truth makes conflicts meaningless (file re-sync), never to silence a conflict. **Metadata has its own token, `metadata_revision`** (shown next to `content_hash` wherever it appears). It is optional on a merge (pass it when your change depends on the current values, e.g. a status transition) and **required with `replace: true`**. A stale one is a *metadata conflict*: re-read, reapply, retry.\n11. **Search: prefer a few distinctive terms; heed `below confidence`.** When nothing clears the relevance threshold, `cerefox_search` returns the closest candidates prefixed with a `below confidence` warning instead of an empty set — that flag means **weak signal, not absent knowledge**: check the candidates\' scores and titles before concluding the KB lacks the content. A truly empty response means nothing even weakly related exists.\n12. **Relations express how documents relate; lifecycle tells you if knowledge is still good.** Use `cerefox_set_relation` when one document supersedes, contradicts, references, or continues another. `supersedes` marks the target **superseded**; `contradicts` marks **both** stale; `related_to`/`duplicates`/`contradicts` are symmetric (both directions written). Any other type string is accepted without special behavior. When a search result or `cerefox_get_relations` shows a neighbour marked `[superseded]` or `[stale]`, say so rather than presenting it as current.\n13. **Project memberships — non-destructive by default**: on `cerefox_ingest` updates, **`project_name` (singular) is a non-destructive add** (ensures membership, preserves others). Use **`project_names` (list)** when you want to set the doc\'s full project set in one call (destructive replace). For metadata-only project changes without writing content, use **`cerefox_set_document_projects(document_id, project_names)`** — that tool is the destructive-replace contract made explicit. Never call `cerefox_set_document_projects` with a single name when you mean "add" — that would REMOVE the doc from all other projects. When in doubt, use `cerefox_ingest` with singular `project_name`.\n\n## Update Workflow (ID-based -- preferred)\n\n```\nsearch("topic") -> find doc [id: abc123] -> get_document(abc123) -> note its content_hash -> modify ->\ningest(title="Same Title", content="...", document_id="abc123",\n       expected_content_hash="<the hash you read>", author="my-agent")\n```\n\nOn a **conflict** error: get_document again (fresh content + fresh hash) -> merge your changes -> retry with the new hash.\n\n## Update Workflow (title-based -- fallback)\n\n```\nsearch("topic") -> find doc (note its hash) -> modify ->\ningest(title="Same Title", content="...", update_if_exists=true,\n       expected_content_hash="<the hash you read>", author="my-agent")\n```\n\n## Catch-Up Workflow\n\n```\nmetadata_search(metadata_filter={"type": "decision-log"}, updated_since="2026-03-28T00:00:00Z")\n```\n\n## CLI fallback (when MCP is unavailable)\n\nIf `cerefox_search` is not in your tool list, your user has likely installed the Cerefox CLI. The canonical invocation is plain **`cerefox <subcommand>`** (the TypeScript CLI, installed via `npm install -g @cerefox/memory`). It uses a resource-verb shape (`cerefox document get`, `cerefox project list`, …).\n\nSame operations, same conventions. Full reference: [`docs/guides/cli.md`](docs/guides/cli.md). CLI flag names match MCP parameter names exactly (e.g. `metadata_filter` ↔ `--metadata-filter`); common flags also have single-letter short forms (`-f`, `-p`, `-c`, `-m`, `-u`, `-a`). Use the canonical long name (what `--help` shows) or its short form — there are no long-form aliases like `--filter` or `--count`.\n\n| MCP tool | CLI |\n|---|---|\n| `cerefox_search` | `cerefox search "<q>" --author "<your-name>"` |\n| `cerefox_ingest` (paste) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --author "<your-name>" --author-type agent` |\n| `cerefox_ingest` (update by ID) | `printf \'...\' \\| cerefox document ingest --paste --title "<t>" --document-id "<uuid>" --expected-content-hash "<hash>" --author "<your-name>" --author-type agent` |\n| `cerefox_get_document` | `cerefox document get <id> --version-id <vid> --author "<your-name>"` |\n| `cerefox_list_versions` | `cerefox document version list <id> --author "<your-name>"` |\n| `cerefox_list_projects` | `cerefox project list --author "<your-name>"` |\n| `cerefox_list_metadata_keys` | `cerefox metadata keys` |\n| `cerefox_insert` | `cerefox document insert <id> -t "<text>" -p <position> -a "<anchor-heading>" -e "<hash>" --author "<your-name>" --author-type agent` |\n| `cerefox_edit` | `cerefox document edit-parts <id> --operations \'<json>\' -e "<hash>" --author "<your-name>" --author-type agent` |\n| `cerefox_delete_document` | `cerefox document delete <id> --reason "<why>" --author "<your-name>" --author-type agent --yes` (confirms interactively instead of requiring the hash) |\n| `cerefox_restore_document` | `cerefox document restore <id> --reason "<why>" --author "<your-name>" --author-type agent` |\n| `cerefox_metadata_search` | `cerefox metadata search --metadata-filter \'<json>\' --author "<your-name>"` (list a project: `cerefox document list --project <name>`) |\n| `cerefox_set_document_metadata` | `cerefox document set-metadata <id> --set key=value` (also `--remove key`, `--json \'{...}\'`, `--replace`) |\n| `cerefox_set_document_projects` | `cerefox document set-projects <id> <name...> --author "<your-name>" --author-type agent` (or `--clear` to remove all) |\n| `cerefox_get_audit_log` | `cerefox audit list --author "<your-name>"` (add `--json` for scripted access) |\n| `cerefox_get_help` | `cerefox guides show agent-quick-reference` (or `cerefox guides list` for the full bundled-docs index) |\n\n**Set identity on every call**, exactly as you would on MCP:\n- Writes (`document ingest`, `document ingest-dir`): `--author "<your-name>" --author-type agent`\n- Reads: `--author "<your-name>"` (the same flag; `--requestor` still works as a hidden alias)\n\nOr have your user set `CEREFOX_AUTHOR_NAME` / `CEREFOX_AUTHOR_TYPE` / `CEREFOX_REQUESTOR_NAME` in their `.env` to apply defaults once.\n\n## Timestamps are UTC\n\nEvery timestamp Cerefox returns — `created_at` on audit entries, version\nhistory, document metadata — is **UTC**, and now carries its `Z` marker so it\ncannot be mistaken for local time.\n\n**When you write a date into a document\'s CONTENT, use your own clock, not a\nCerefox timestamp.** These are different things: a timestamp records when the\nserver stored something; a date in a log entry or a heading is authored content\nand belongs to your timezone. An agent working a Pacific afternoon read\n`2026-08-11` from version history, wrote "8/11" into its entries, and put a\nday\'s work in the future — the timestamp was correct, and copying it into\ncontent was not.\n\nCerefox deliberately does not convert to local time on the API or MCP paths.\n"Local" has no server-side meaning: the remote MCP server runs in a cloud\nfunction whose local time *is* UTC, while a local MCP server runs in yours, so\nthe same document would report two different times depending on transport. The\nweb UI converts because a browser knows the viewer\'s timezone; nothing\nserver-side does.\n\n## Mistakes that have actually happened\n\nEach of these comes from a real agent session, and each is easy to make.\n\n- **`cerefox_ingest` always replaces the ENTIRE document.** Never a section.\n  Before sending, check that the tool name matches the intent: if the intent is\n  "change one section", the call is `cerefox_edit` with `replace_section`. A\n  section-sized edit sent as a full ingest truncated a 13,000-character index to\n  a single word. It was recovered from version history within the minute, but\n  only because it was noticed immediately.\n\n- **Do not include the anchor\'s own heading in your text.** `replace_section`\n  keeps the heading and `insert` places your text inside the section, so\n  including it produces two. This is now refused rather than silently applied,\n  but the shape is worth knowing: it happened twice in one session, the second\n  time while trying to repair the first. A *deeper* sub-heading inside your text\n  is fine.\n\n- **Content between sections belongs to the section ABOVE it.** A section runs\n  to the next heading of the same or higher level, so a `---` rule, a note, or\n  any trailing text sitting just above the next heading is part of the section\n  before it — even when it visually reads as belonging below. Replacing that\n  section takes it too. An agent hit exactly this: a `---` that separated two\n  major sections disappeared when the section above it was replaced. The write\n  was correct by the addressing rules; the surprise is that "the end of this\n  section" is further down the page than it looks. Note the loss warning will\n  not catch it if your replacement text is longer than what it replaced, since\n  there is then no net loss to report.\n\n- **To change only tags, use `cerefox_set_document_metadata`, never `cerefox_ingest`.**\n  Ingest replaces the whole document, so re-sending it to set one tag carries the\n  full transcription risk for no reason. The metadata tool merges: the keys you\n  pass are set, everything else is left alone, so you do not need to read the\n  document first and cannot drop a tag another agent set. Pass `null` as a value\n  to remove a key.\n\n- **Never partial-edit to fix a partial edit.** If a write leaves unexpected\n  structure, stop. Use `cerefox_list_versions`, retrieve the last good version,\n  and re-ingest cleanly. Repairing edits with more edits compounds the damage.\n\n- **A rejected batch is safe.** Operations in one `cerefox_edit` are\n  all-or-nothing: if any is invalid, nothing is written. A refusal costs you a\n  retry, not data — so prefer one call for changes that belong together, and do\n  not split a batch to "make it more likely to succeed".\n\n- **Read before replacing.** `cerefox_get_document(section: "## Heading")`\n  returns exactly what a `replace_section` on that anchor would overwrite. Use it\n  for any section you did not write in this session. The outline gives a\n  section\'s *size*, never its *text*.\n\n- **Verify after writing** — read the result back before reporting success, and\n  report what the read actually shows.\n\n- **Partial edits cannot change a document\'s stored TITLE.** `rename_section`\n  changes a heading inside the content; the title is a separate field and still\n  needs `cerefox_ingest`.\n\n- **If a capability seems missing from one server, suspect your client first.**\n  Local and remote run the same code. **Every `cerefox_get_help()` response\n  begins with the server\'s version and the operations it registers** — you do\n  not need a special topic, and the *absence* of that block is itself an answer:\n  a server that does not print it predates v1.5.0. If that\n  disagrees with your tool list, the client is holding a list it fetched before\n  an upgrade — clients cache it at connect time. Ask the user to restart the\n  client. Do not record a capability difference between servers as a fact; every\n  such report so far has been a stale client.\n- Long inline bodies can arrive with literal `\\n`/`\\"` (the author over-escaped; Cerefox stores bytes faithfully). For long or quote-dense content, ingest from a file or build incrementally with `cerefox_insert`; read back multi-line writes.\n', HELP_SECTIONS, HELP_SECTION_HEADINGS;
 var init_get_help_content = __esm(() => {
   HELP_SECTIONS = {
-    Tools: "## Tools\n\n| Tool | Purpose | Key params |\n|------|---------|------------|\n| `cerefox_search` | Find documents (hybrid FTS + semantic) | `query` (required), `project_name`, `metadata_filter`, `author` |\n| `cerefox_ingest` | Save or update a document | `title`, `content` (required), `document_id` (update by ID), `expected_content_hash` (**required on content updates** — see rule 10), `last_write_wins`, `update_if_exists`, `project_name` (single, non-destructive add on update), `project_names` (list, destructive replace on update), `metadata` (omit on update to keep existing tags; `{}` clears), `author` |\n| `cerefox_insert` | **Add** to a document without resending it. Cannot destroy content. | `document_id`, `text`, `position` (`end_of_document`/`end_of_section`/`after_heading`/`before_heading`), `expected_content_hash` (required), `anchor_heading` (unless `end_of_document`), `section_part`, `author` |\n| `cerefox_edit` | **Change** parts of a document: 1..n operations applied atomically | `document_id`, `operations` (`insert`/`replace_section`/`delete_section`/`rename_section`), `expected_content_hash` (required), `author` |\n| `cerefox_delete_document` | **Soft**-delete a document (to trash; excluded from search; permanent purge is human-only) | `document_id`, `expected_content_hash` (**required** — a delete must follow a read), `reason` (recorded in the audit log — give one), `author` |\n| `cerefox_restore_document` | Restore a soft-deleted document from the trash (audited inverse of delete; no-op if not deleted) | `document_id` (required), `reason` (recorded in the audit log), `author` |\n| `cerefox_get_document` | Get full document by ID (header includes `content_hash` — the update token), or with `outline: true` just its heading paths, sizes and hash, or with `section: \"## Heading\"` one section's text | `document_id` (required), `outline`, `section`, `section_part`, `author` |\n| `cerefox_list_versions` | Version history of a document | `document_id` (required), `author` |\n| `cerefox_set_relation` ⚑ | Link two documents (`source --rel_type--> target`) | `source_id`, `target_id`, `rel_type` (required), `metadata`, `author` |\n| `cerefox_delete_relation` ⚑ | Remove a relation | `source_id`, `target_id`, `rel_type`, `author` |\n| `cerefox_get_relations` ⚑ | All relations touching a document, both directions | `document_id` |\n| `cerefox_get_neighbors` ⚑ | Walk the graph along ONE relation type | `document_id`, `rel_type` (required), `depth`, `from_time`, `to_time`, `limit` |\n| `cerefox_metadata_search` | Find or list docs by metadata, project, or time (no text query) | `metadata_filter`, `project_name` (list a project's docs), `updated_since`, `include_content` — **at least one** of metadata_filter/project_name/updated_since/created_since |\n| `cerefox_list_metadata_keys` | Discover available metadata keys | (none required) |\n| `cerefox_list_projects` | List all projects | (none required) |\n| `cerefox_set_document_metadata` | Change tags WITHOUT resending content. **Merges** by default; a `null` value removes a key | `document_id`, `metadata` (required), `replace` (rare: set exactly this object), `author` |\n| `cerefox_set_document_projects` | Set doc's project memberships to exactly the given list (destructive replace; metadata-only, no content change) | `document_id`, `project_names` (required), `author` |\n| `cerefox_get_audit_log` | Query write operation history | `document_id`, `by_author` (filter), `operation`, `since`, `author` |\n| `cerefox_get_help` | Retrieve Cerefox conventions (this reference) over MCP. **Call this whenever uncertain.** | `topic` (optional, case-insensitive H2 substring match) |\n\n⚑ **Opt-in — usually absent.** The four relation tools are hidden unless the\noperator enables them (`relations_enabled`). **Trust your own tool list**: if\nthey are not in it, the feature is switched off for this deployment. That is\nnormal, not an error, and not something to work around.",
+    Tools: "## Tools\n\n| Tool | Purpose | Key params |\n|------|---------|------------|\n| `cerefox_search` | Find documents (hybrid FTS + semantic) | `query` (required), `project_name`, `metadata_filter`, `author` |\n| `cerefox_ingest` | Save or update a document | `title`, `content` (required), `document_id` (update by ID), `expected_content_hash` (**required on content updates** — see rule 10), `last_write_wins`, `update_if_exists`, `project_name` (single, non-destructive add on update), `project_names` (list, destructive replace on update), `metadata` (on update it **merges**: `null` removes a key, omitted keys are kept), `expected_metadata_revision` (optional, see rule 10), `author` |\n| `cerefox_insert` | **Add** to a document without resending it. Cannot destroy content. | `document_id`, `text`, `position` (`end_of_document`/`end_of_section`/`after_heading`/`before_heading`), `expected_content_hash` (required), `anchor_heading` (unless `end_of_document`), `section_part`, `author` |\n| `cerefox_edit` | **Change** parts of a document: 1..n operations applied atomically | `document_id`, `operations` (`insert`/`replace_section`/`delete_section`/`rename_section`), `expected_content_hash` (required), `author` |\n| `cerefox_delete_document` | **Soft**-delete a document (to trash; excluded from search; permanent purge is human-only) | `document_id`, `expected_content_hash` (**required** — a delete must follow a read), `reason` (recorded in the audit log — give one), `author` |\n| `cerefox_restore_document` | Restore a soft-deleted document from the trash (audited inverse of delete; no-op if not deleted) | `document_id` (required), `reason` (recorded in the audit log), `author` |\n| `cerefox_get_document` | Get full document by ID (header includes `content_hash` — the update token), or with `outline: true` just its heading paths, sizes and hash, or with `section: \"## Heading\"` one section's text | `document_id` (required), `outline`, `section`, `section_part`, `author` |\n| `cerefox_list_versions` | Version history of a document | `document_id` (required), `author` |\n| `cerefox_set_relation` ⚑ | Link two documents (`source --rel_type--> target`) | `source_id`, `target_id`, `rel_type` (required), `metadata`, `author` |\n| `cerefox_delete_relation` ⚑ | Remove a relation | `source_id`, `target_id`, `rel_type`, `author` |\n| `cerefox_get_relations` ⚑ | All relations touching a document, both directions | `document_id` |\n| `cerefox_get_neighbors` ⚑ | Walk the graph along ONE relation type | `document_id`, `rel_type` (required), `depth`, `from_time`, `to_time`, `limit` |\n| `cerefox_metadata_search` | Find or list docs by metadata, project, or time (no text query) | `metadata_filter`, `project_name` (list a project's docs), `updated_since`, `include_content` — **at least one** of metadata_filter/project_name/updated_since/created_since |\n| `cerefox_list_metadata_keys` | Discover available metadata keys | (none required) |\n| `cerefox_list_projects` | List all projects | (none required) |\n| `cerefox_set_document_metadata` | Change tags WITHOUT resending content. **Merges** by default; a `null` value removes a key | `document_id`, `metadata` (required), `replace` (rare: set exactly this object; needs `expected_metadata_revision`), `expected_metadata_revision`, `author` |\n| `cerefox_set_document_projects` | Set doc's project memberships to exactly the given list (destructive replace; metadata-only, no content change) | `document_id`, `project_names` (required), `author` |\n| `cerefox_get_audit_log` | Query write operation history | `document_id`, `by_author` (filter), `operation`, `since`, `author` |\n| `cerefox_get_help` | Retrieve Cerefox conventions (this reference) over MCP. **Call this whenever uncertain.** | `topic` (optional, case-insensitive H2 substring match) |\n\n⚑ **Opt-in — usually absent.** The four relation tools are hidden unless the\noperator enables them (`relations_enabled`). **Trust your own tool list**: if\nthey are not in it, the feature is switched off for this deployment. That is\nnormal, not an error, and not something to work around.",
     "Editing part of a document (prefer this over re-sending)": '## Editing part of a document (prefer this over re-sending)\n\n**Re-sending a whole document to change part of it is the main way agents lose\ndata.** You have to reproduce the untouched remainder verbatim, and any drift\nsilently rewrites content nobody asked you to touch — which the caller cannot\ndiff. Use the partial-edit tools instead:\n\n1. **Learn the anchors** — `cerefox_get_document(document_id, outline: true)`.\n   Returns heading paths, per-section sizes and the `content_hash`, without the\n   body. The paths it returns are exactly what `anchor_heading` accepts.\n2. **Add** → `cerefox_insert`. `end_of_document` is a plain append;\n   `end_of_section` adds inside a named section. It is structurally incapable of\n   removing anything, so "I meant to append" cannot become "I replaced the file".\n3. **Look before you overwrite** — `cerefox_get_document(document_id,\n   section: "## Heading")` returns exactly the text a `replace_section` on that\n   anchor would destroy. The outline gives you a section\'s *size*, never its\n   *text*, so on a document you did not write yourself this is the difference\n   between a replace and a blind overwrite.\n4. **Change or remove** → `cerefox_edit`. Put changes that belong together in\n   ONE call: they apply atomically, so a table row and the total it feeds cannot\n   end up disagreeing. To change a single line, `replace_section` on its\n   smallest enclosing heading — that is the intended granularity, not a\n   workaround. To fix a stale heading (`## OPEN TODOs (as of ...)`), use\n   `rename_section`: it changes the heading text and leaves the body and\n   position alone.\n5. All of them require `expected_content_hash` and **have no last-write-wins**. A\n   conflict means someone else changed the document; re-read and decide, do not\n   force it.\n\n**A section runs to the next same-or-higher heading, or to the end of the\ndocument.** So `end_of_document` inserts land inside the *last* section, and\nreplacing or deleting that section removes them too. A large shrink in the\nresponse is your warning; `cerefox_list_versions` has the previous content.\n\n**When an anchor is ambiguous the tool refuses and hands you the options** — a\nrepeated heading returns the qualifying paths, and a section with both its own\ncontent and sub-sections returns both `section_part` choices. That is a\nrecoverable answer, not a failure: retry with what it gave you.',
-    "Essential Rules": '## Essential Rules\n\n1. **Search before ingesting** -- check if the document exists first.\n2. **Prefer ID-based updates** -- pass `document_id` from search results for deterministic updates. Falls back to title-matching with `update_if_exists: true`.\n3. **Set `author`** to your name on every call, reads and writes alike (e.g., "Claude Code", "archiver"). Same parameter on every tool. (`requestor` is still accepted everywhere as the pre-1.13.1 alias.) On the CLI it is `--author` on every command too (plus `--author-type` on writes); or rely on `CEREFOX_AUTHOR_NAME`/`CEREFOX_AUTHOR_TYPE` env vars set in the user\'s `.env`.\n4. **Use `document_id` from search results** `[id: uuid]` for get_document and list_versions.\n5. **`max_bytes` has to fit a whole document.** Search returns COMPLETE documents, so a budget smaller than the top hit fits nothing. You get a header-only list saying so (never "No results found." — that means the store really has nothing). Raise `max_bytes`, or read one document with `cerefox_get_document` using `outline: true` or `section`.\n6. **Add metadata** -- at minimum `type` ("decision-log", "research", "design-doc") and `status` ("active", "draft").\n7. **Write for retrieval: the title does real work.** The document title is indexed at the **highest weight** *and* prepended to every chunk before it is embedded, so it steers both halves of hybrid search (keyword and semantic) for every chunk in the document. Name the document with the distinctive terms someone would actually search for -- "Cerefox Response Size Limits", not "Notes" or "Update 3". Renaming re-indexes and re-embeds, so correcting a vague title is cheap and takes effect immediately. Write the characters themselves: `&` and `<>`, never `&amp;` or `&lt;&gt;` (entities are stored literally and the write reply will say so). Inside the content, write structured Markdown with H1/H2/H3 headings: the chunker follows them, and a chunk\'s own heading carries the same weight as the title.\n8. **Deletes are soft (recoverable); permanent purge is web-UI-only.** `cerefox_delete_document` requires the document\'s `content_hash` as you read it (read before you delete) and takes a `reason` — give one; it is what the human reviewing the trash sees. `cerefox_restore_document` undoes a mistaken delete (also audited, also takes a `reason`). Always surface deletes AND restores to the user. Once a human purges from the web UI, the document is gone for good; so is one auto-purged after `trash_retention_days`, if the operator has turned trash auto-purge on.\n9. **Cross-doc links inside content**: **always use `[Text](document-uuid)`.** UUIDs are the only fully reliable link form — stable across title changes, never ambiguous, no encoding gotchas. Every `cerefox_search` result shows `[id: <uuid>]` after the title; grab it and use it. Title-based linking (`[Text](<Title With Spaces>)`) is fragile (breaks on colons, parens, ampersands, brackets — silently navigates to wrong page) — **don\'t write title-based links**; do an extra search to get the UUID instead. Repo-path forms (`[Text](docs/path.md)`) exist for repo-ingested files; don\'t construct manually. **The server validates `](uuid)` links on every write** (v1.7.0): a link to a nonexistent id rejects the write, naming the offender — that means you mangled the UUID; re-read the source and correct it, do not retry unchanged. Example ids go in backticks (code is not validated). `[[Wikilinks]]` may dangle. See `AGENT_GUIDE.md → Writing linkable content` for the full rule.\n10. **Concurrency: content updates require `expected_content_hash`.** Pass the `content_hash` you last saw — every read shows one (`cerefox_get_document` incl. outline mode, `cerefox_search`, `cerefox_metadata_search`) and **every write returns the new one, including create** (v1.3.0, #189), so after writing you already hold the token for your next edit; no re-read needed. If it\'s stale you get a **conflict** — re-read the document, merge your changes into the latest content, retry with the new hash. **Never resolve a conflict by overwriting blindly** — the current content includes another writer\'s work. `last_write_wins: true` skips the check; use it ONLY when an external source of truth makes conflicts meaningless (file re-sync), never to silence a conflict.\n11. **Search: prefer a few distinctive terms; heed `below confidence`.** When nothing clears the relevance threshold, `cerefox_search` returns the closest candidates prefixed with a `below confidence` warning instead of an empty set — that flag means **weak signal, not absent knowledge**: check the candidates\' scores and titles before concluding the KB lacks the content. A truly empty response means nothing even weakly related exists.\n12. **Relations express how documents relate; lifecycle tells you if knowledge is still good.** Use `cerefox_set_relation` when one document supersedes, contradicts, references, or continues another. `supersedes` marks the target **superseded**; `contradicts` marks **both** stale; `related_to`/`duplicates`/`contradicts` are symmetric (both directions written). Any other type string is accepted without special behavior. When a search result or `cerefox_get_relations` shows a neighbour marked `[superseded]` or `[stale]`, say so rather than presenting it as current.\n13. **Project memberships — non-destructive by default**: on `cerefox_ingest` updates, **`project_name` (singular) is a non-destructive add** (ensures membership, preserves others). Use **`project_names` (list)** when you want to set the doc\'s full project set in one call (destructive replace). For metadata-only project changes without writing content, use **`cerefox_set_document_projects(document_id, project_names)`** — that tool is the destructive-replace contract made explicit. Never call `cerefox_set_document_projects` with a single name when you mean "add" — that would REMOVE the doc from all other projects. When in doubt, use `cerefox_ingest` with singular `project_name`.',
+    "Essential Rules": '## Essential Rules\n\n1. **Search before ingesting** -- check if the document exists first.\n2. **Prefer ID-based updates** -- pass `document_id` from search results for deterministic updates. Falls back to title-matching with `update_if_exists: true`.\n3. **Set `author`** to your name on every call, reads and writes alike (e.g., "Claude Code", "archiver"). Same parameter on every tool. (`requestor` is still accepted everywhere as the pre-1.13.1 alias.) On the CLI it is `--author` on every command too (plus `--author-type` on writes); or rely on `CEREFOX_AUTHOR_NAME`/`CEREFOX_AUTHOR_TYPE` env vars set in the user\'s `.env`.\n4. **Use `document_id` from search results** `[id: uuid]` for get_document and list_versions.\n5. **`max_bytes` has to fit a whole document.** Search returns COMPLETE documents, so a budget smaller than the top hit fits nothing. You get a header-only list saying so (never "No results found." — that means the store really has nothing). Raise `max_bytes`, or read one document with `cerefox_get_document` using `outline: true` or `section`.\n6. **Add metadata** -- at minimum `type` ("decision-log", "research", "design-doc") and `status` ("active", "draft").\n7. **Write for retrieval: the title does real work.** The document title is indexed at the **highest weight** *and* prepended to every chunk before it is embedded, so it steers both halves of hybrid search (keyword and semantic) for every chunk in the document. Name the document with the distinctive terms someone would actually search for -- "Cerefox Response Size Limits", not "Notes" or "Update 3". Renaming re-indexes and re-embeds, so correcting a vague title is cheap and takes effect immediately. Write the characters themselves: `&` and `<>`, never `&amp;` or `&lt;&gt;` (entities are stored literally and the write reply will say so). Inside the content, write structured Markdown with H1/H2/H3 headings: the chunker follows them, and a chunk\'s own heading carries the same weight as the title.\n8. **Deletes are soft (recoverable); permanent purge is web-UI-only.** `cerefox_delete_document` requires the document\'s `content_hash` as you read it (read before you delete) and takes a `reason` — give one; it is what the human reviewing the trash sees. `cerefox_restore_document` undoes a mistaken delete (also audited, also takes a `reason`). Always surface deletes AND restores to the user. Once a human purges from the web UI, the document is gone for good; so is one auto-purged after `trash_retention_days`, if the operator has turned trash auto-purge on.\n9. **Cross-doc links inside content**: **always use `[Text](document-uuid)`.** UUIDs are the only fully reliable link form — stable across title changes, never ambiguous, no encoding gotchas. Every `cerefox_search` result shows `[id: <uuid>]` after the title; grab it and use it. Title-based linking (`[Text](<Title With Spaces>)`) is fragile (breaks on colons, parens, ampersands, brackets — silently navigates to wrong page) — **don\'t write title-based links**; do an extra search to get the UUID instead. Repo-path forms (`[Text](docs/path.md)`) exist for repo-ingested files; don\'t construct manually. **The server validates `](uuid)` links on every write** (v1.7.0): a link to a nonexistent id rejects the write, naming the offender — that means you mangled the UUID; re-read the source and correct it, do not retry unchanged. Example ids go in backticks (code is not validated). `[[Wikilinks]]` may dangle. See `AGENT_GUIDE.md → Writing linkable content` for the full rule.\n10. **Concurrency: content updates require `expected_content_hash`.** Pass the `content_hash` you last saw — every read shows one (`cerefox_get_document` incl. outline mode, `cerefox_search`, `cerefox_metadata_search`) and **every write returns the new one, including create** (v1.3.0, #189), so after writing you already hold the token for your next edit; no re-read needed. If it\'s stale you get a **conflict** — re-read the document, merge your changes into the latest content, retry with the new hash. **Never resolve a conflict by overwriting blindly** — the current content includes another writer\'s work. `last_write_wins: true` skips the check; use it ONLY when an external source of truth makes conflicts meaningless (file re-sync), never to silence a conflict. **Metadata has its own token, `metadata_revision`** (shown next to `content_hash` wherever it appears). It is optional on a merge (pass it when your change depends on the current values, e.g. a status transition) and **required with `replace: true`**. A stale one is a *metadata conflict*: re-read, reapply, retry.\n11. **Search: prefer a few distinctive terms; heed `below confidence`.** When nothing clears the relevance threshold, `cerefox_search` returns the closest candidates prefixed with a `below confidence` warning instead of an empty set — that flag means **weak signal, not absent knowledge**: check the candidates\' scores and titles before concluding the KB lacks the content. A truly empty response means nothing even weakly related exists.\n12. **Relations express how documents relate; lifecycle tells you if knowledge is still good.** Use `cerefox_set_relation` when one document supersedes, contradicts, references, or continues another. `supersedes` marks the target **superseded**; `contradicts` marks **both** stale; `related_to`/`duplicates`/`contradicts` are symmetric (both directions written). Any other type string is accepted without special behavior. When a search result or `cerefox_get_relations` shows a neighbour marked `[superseded]` or `[stale]`, say so rather than presenting it as current.\n13. **Project memberships — non-destructive by default**: on `cerefox_ingest` updates, **`project_name` (singular) is a non-destructive add** (ensures membership, preserves others). Use **`project_names` (list)** when you want to set the doc\'s full project set in one call (destructive replace). For metadata-only project changes without writing content, use **`cerefox_set_document_projects(document_id, project_names)`** — that tool is the destructive-replace contract made explicit. Never call `cerefox_set_document_projects` with a single name when you mean "add" — that would REMOVE the doc from all other projects. When in doubt, use `cerefox_ingest` with singular `project_name`.',
     "Update Workflow (ID-based -- preferred)": `## Update Workflow (ID-based -- preferred)
 
 \`\`\`
@@ -52152,6 +52226,9 @@ function conflictError3(documentId, expectedHash, currentHash) {
   return new Error(`Conflict: document ${documentId} changed since you read it ` + `(your base hash: ${expectedHash}, current hash: ${currentHash}). ` + `To resolve: (1) cerefox_get_document("${documentId}") to fetch the latest content ` + `and its content_hash, (2) merge your changes into it, (3) retry cerefox_ingest ` + `with expected_content_hash set to the new hash. Do not overwrite blindly — ` + `the current content may include another writer's work.`);
 }
 function mapIngestRpcError(message, documentId) {
+  const metaErr = metadataTokenError(message);
+  if (metaErr)
+    return metaErr;
   if (message.includes("CEREFOX_CONFLICT")) {
     const { expected, current } = extractConflictHashes(message);
     return conflictError3(documentId, expected, current);
@@ -52168,7 +52245,7 @@ function mapIngestRpcError(message, documentId) {
     const current = message.match(/Current hash: ([0-9a-f]{64})/)?.[1];
     return new Error(`Concurrency token required: content updates need expected_content_hash — ` + `the content_hash of the version you based your edit on (returned by ` + `cerefox_get_document, cerefox_search, and cerefox_metadata_search).` + (current ? ` The document's current hash is ${current}; pass it ONLY if your edit was based on the current content.` : "") + ` If you have not read the document, read it first. To deliberately overwrite ` + `regardless of concurrent changes, pass last_write_wins=true.`);
   }
-  return new Error(`Ingest RPC failed: ${message}`);
+  return legacyContentUniqueError(message) ?? new Error(`Ingest RPC failed: ${message}`);
 }
 async function handler6(supabase, args, ctx) {
   const title = args.title?.trim();
@@ -52187,6 +52264,11 @@ async function handler6(supabase, args, ctx) {
   const author_type = "agent";
   const expected_content_hash = args.expected_content_hash?.trim() || null;
   const last_write_wins = args.last_write_wins ?? false;
+  const expectedMetaRaw = args.expected_metadata_revision;
+  if (expectedMetaRaw !== undefined && expectedMetaRaw !== null && !(typeof expectedMetaRaw === "number" && Number.isInteger(expectedMetaRaw))) {
+    throw new McpInvalidParams("expected_metadata_revision must be an integer (the metadata_revision you read)");
+  }
+  const expected_metadata_revision = expectedMetaRaw ?? null;
   if (!title || !content?.trim()) {
     throw new McpInvalidParams("title and content are required");
   }
@@ -52242,7 +52324,8 @@ async function handler6(supabase, args, ctx) {
       p_source_label: source,
       p_expected_content_hash: expected_content_hash,
       p_last_write_wins: last_write_wins,
-      p_content_format: CONTENT_FORMAT_BLIND_STITCH
+      p_content_format: CONTENT_FORMAT_BLIND_STITCH,
+      ...metadataTokenParams(expected_metadata_revision, false)
     });
     if (ingestErr)
       throw mapIngestRpcError(ingestErr.message, existingDoc.id);
@@ -52305,7 +52388,8 @@ async function handler6(supabase, args, ctx) {
         p_source_label: source,
         p_expected_content_hash: expected_content_hash,
         p_last_write_wins: last_write_wins,
-        p_content_format: CONTENT_FORMAT_BLIND_STITCH
+        p_content_format: CONTENT_FORMAT_BLIND_STITCH,
+        ...metadataTokenParams(expected_metadata_revision, false)
       });
       if (ingestErr)
         throw mapIngestRpcError(ingestErr.message, existingDoc.id);
@@ -52324,12 +52408,9 @@ async function handler6(supabase, args, ctx) {
       return `Document updated: "${existingDoc.title}" (id: ${existingDoc.id}), ${chunks.length} chunk(s), ${totalChars} chars. New content_hash: ${contentHash}.${escapedContentNote(content)}${escapedTitleNote(title)}`;
     }
   }
-  const { data: hashMatch } = await supabase.from("cerefox_documents").select("id, title, deleted_at").eq("content_hash", contentHash).limit(1);
+  const { data: hashMatch } = await supabase.from("cerefox_documents").select("id, title").eq("content_hash", contentHash).is("deleted_at", null).order("created_at", { ascending: true }).limit(1);
   if (hashMatch?.length) {
-    if (hashMatch[0].deleted_at) {
-      return `This exact content is already in the TRASH as "${hashMatch[0].title}" ` + `(soft-deleted, id: ${hashMatch[0].id}). Restore it with ` + `cerefox_restore_document instead of re-ingesting — or have your user ` + `purge it from the web UI Trash to start fresh.`;
-    }
-    return `Document already up-to-date: "${hashMatch[0].title}" (id: ${hashMatch[0].id}). Content hash unchanged (${contentHash}) — pass it as expected_content_hash to edit it.`;
+    return alreadyExistsMessage(hashMatch[0].title, hashMatch[0].id, contentHash);
   }
   const chunks = chunkMarkdown(content);
   if (chunks.length === 0)
@@ -52358,7 +52439,15 @@ async function handler6(supabase, args, ctx) {
     p_author_type: author_type,
     p_content_format: CONTENT_FORMAT_BLIND_STITCH
   });
+  const duplicateId = duplicateContentDocumentId(ingestErr?.message ?? "");
+  if (duplicateId) {
+    const { data: existing } = await supabase.from("cerefox_documents").select("title").eq("id", duplicateId).maybeSingle();
+    return alreadyExistsMessage(existing?.title ?? title, duplicateId, contentHash);
+  }
   if (ingestErr || !ingestResult?.length) {
+    const legacy = legacyContentUniqueError(ingestErr?.message ?? "");
+    if (legacy)
+      throw legacy;
     throw new Error(`Ingest RPC failed: ${ingestErr?.message ?? "no data returned"}`);
   }
   const documentId = ingestResult[0].document_id;
@@ -52377,6 +52466,9 @@ async function handler6(supabase, args, ctx) {
   const projectInfo = project_name ? `, project: "${project_name}"` : "";
   return `Document saved: "${title}" (id: ${documentId}), ${chunks.length} chunk(s), ${totalChars} chars${projectInfo}. ` + `content_hash: ${contentHash} — pass it as expected_content_hash on your next edit.` + escapedContentNote(content) + escapedTitleNote(title);
 }
+function alreadyExistsMessage(title, id, contentHash) {
+  return `Document already up-to-date: "${title}" (id: ${id}). Content hash unchanged (${contentHash}) — pass it as expected_content_hash to edit it.`;
+}
 var ingestTool;
 var init_ingest = __esm(() => {
   init_escape_heuristic();
@@ -52427,7 +52519,14 @@ var init_ingest = __esm(() => {
           type: "boolean",
           description: "Explicitly skip the concurrency check and overwrite regardless of concurrent changes (default: false). Use ONLY when an external source of truth makes conflicts meaningless (e.g. re-syncing from files). Recorded in the audit log."
         },
-        metadata: { type: "object", description: "Arbitrary JSON metadata (optional)" },
+        metadata: {
+          type: "object",
+          description: "JSON metadata (optional). On an UPDATE it is MERGED into the existing metadata: keys you pass are set, a null value removes that key, keys you omit are kept. To change only metadata, use cerefox_set_document_metadata instead."
+        },
+        expected_metadata_revision: {
+          type: "integer",
+          description: "Optional, with metadata on an update: the metadata_revision you read (cerefox_get_document / cerefox_metadata_search). The write fails if the metadata changed since."
+        },
         author: AUTHOR_PARAM_WRITE
       }
     },
@@ -52666,8 +52765,9 @@ ${lines.join(`
   const parts = rows.map((row) => {
     const projects = row.project_names?.length ? ` | projects: ${row.project_names.join(", ")}` : "";
     const meta = Object.entries(row.doc_metadata ?? {}).map(([k, v]) => `${k}=${v}`).join(", ");
+    const rev = row.metadata_revision != null ? ` · metadata_revision: ${row.metadata_revision}` : "";
     const hash = row.content_hash ? `
-hash: ${row.content_hash}` : "";
+hash: ${row.content_hash}${rev}` : "";
     const header = `## ${row.title} [id: ${row.document_id}]
 ` + `${meta}${projects} | ${row.total_chars} chars | ${showReview ? `${row.review_status} | ` : ""}updated ${row.updated_at?.slice(0, 10) ?? "?"}${hash}`;
     if (include_content && row.content) {
@@ -52766,12 +52866,18 @@ function shortLabel(row) {
   const id = row.document_id ? ` [id: ${row.document_id}]` : "";
   return `${leaf ? `${doc} › ${leaf}` : doc}${chunk}${id}`;
 }
+function hashLine(row) {
+  if (!row.content_hash)
+    return "";
+  const rev = row.metadata_revision != null ? ` · metadata_revision: ${row.metadata_revision}` : "";
+  return `
+hash: ${row.content_hash}${rev}`;
+}
 function renderRow(row) {
   const raw = row.best_score ?? row.score;
   const score = raw != null ? ` (score: ${raw.toFixed(3)})` : "";
   const partial = row.is_partial ? ` -- partial (${row.chunk_count} of ${(row.total_chars ?? 0).toLocaleString()} chars)` : "";
-  const hash = row.content_hash ? `
-hash: ${row.content_hash}` : "";
+  const hash = hashLine(row);
   return `## ${rowHeading(row)}${score}${partial}${hash}
 
 ${rowContent(row)}`;
@@ -52780,8 +52886,7 @@ function headerLine(row) {
   const raw = row.best_score ?? row.score;
   const score = raw != null ? ` (score: ${raw.toFixed(3)})` : "";
   const size = row.total_chars != null ? ` -- ${row.total_chars.toLocaleString()} chars` : "";
-  const hash = row.content_hash ? `
-hash: ${row.content_hash}` : "";
+  const hash = hashLine(row);
   return `## ${rowHeading(row)}${score}${size}${hash}`;
 }
 function degradedToHeaders(matched, rendered, maxBytes, belowConfidence) {
@@ -53043,6 +53148,11 @@ async function handler12(supabase, args, ctx) {
   const document_id = args.document_id;
   const metadata = args.metadata;
   const replace = args.replace ?? false;
+  const expectedRevision = args.expected_metadata_revision;
+  if (expectedRevision !== undefined && expectedRevision !== null && !(typeof expectedRevision === "number" && Number.isInteger(expectedRevision))) {
+    throw new McpInvalidParams("expected_metadata_revision must be an integer (the metadata_revision you read)");
+  }
+  const lastWriteWins = args.last_write_wins ?? false;
   if (!document_id)
     throw new McpInvalidParams("document_id is required");
   if (metadata === undefined || metadata === null) {
@@ -53061,10 +53171,11 @@ async function handler12(supabase, args, ctx) {
     p_metadata: metadata,
     p_replace: replace,
     p_author: author ?? "unknown",
-    p_author_type: authorType
+    p_author_type: authorType,
+    ...metadataTokenParams(expectedRevision, lastWriteWins)
   });
   if (error)
-    throw new Error(`RPC error: ${error.message}`);
+    throw metadataTokenError(error.message) ?? new Error(`RPC error: ${error.message}`);
   const row = data?.[0];
   if (!row)
     throw new Error("cerefox_set_document_metadata returned no data");
@@ -53080,7 +53191,8 @@ async function handler12(supabase, args, ctx) {
   const summary = set === 0 && removed === 0 ? "No change: every key already held that value." : `${set} key(s) set, ${removed} removed.`;
   return `Metadata ${replace ? "replaced" : "merged"} on ${document_id}. ${summary}
 ` + `Now: ${JSON.stringify(row.metadata ?? {})}
-` + `Content untouched — no new version, no re-embedding.`;
+` + (row.metadata_revision != null ? `metadata_revision: ${row.metadata_revision}
+` : "") + `Content untouched — no new version, no re-embedding.`;
 }
 var setDocumentMetadataTool;
 var init_set_document_metadata = __esm(() => {
@@ -53089,7 +53201,7 @@ var init_set_document_metadata = __esm(() => {
   init_identity();
   setDocumentMetadataTool = {
     name: "cerefox_set_document_metadata",
-    description: `Change a document's metadata WITHOUT resending its content. MERGES by default: the keys you pass are set, every other key is left alone — so you do not need to read the document first, and you cannot accidentally drop tags another agent set. To REMOVE a key, pass it with a null value ({"stale_key": null}). Pass replace: true to set the metadata to exactly the object given, discarding everything else (rare; the same destructive contract as cerefox_set_document_projects). Content, chunks and embeddings are untouched and no new version is created. Use this instead of cerefox_ingest whenever only the tags are changing.`,
+    description: `Change a document's metadata WITHOUT resending its content. MERGES by default: the keys you pass are set, every other key is left alone — so you do not need to read the document first, and you cannot accidentally drop tags another agent set. To REMOVE a key, pass it with a null value ({"stale_key": null}). Pass replace: true to set the metadata to exactly the object given, discarding everything else (rare; it requires expected_metadata_revision or last_write_wins). To make a merge fail if anyone changed the metadata since you read it, pass expected_metadata_revision. Content, chunks and embeddings are untouched and no new version is created. Use this instead of cerefox_ingest whenever only the tags are changing.`,
     annotations: {
       title: "Set document metadata",
       readOnlyHint: false,
@@ -53108,7 +53220,15 @@ var init_set_document_metadata = __esm(() => {
         },
         replace: {
           type: "boolean",
-          description: "Set the metadata to EXACTLY this object, discarding any key not listed. Defaults to false (merge). Use only when you mean to reset a document's tags wholesale."
+          description: "Set the metadata to EXACTLY this object, discarding any key not listed. Defaults to false (merge). Use only when you mean to reset a document's tags wholesale. Requires expected_metadata_revision (or last_write_wins)."
+        },
+        expected_metadata_revision: {
+          type: "integer",
+          description: "The metadata_revision you read (from cerefox_get_document or cerefox_metadata_search). Optional on a merge: when given, the write fails if the metadata changed since. Required with replace: true."
+        },
+        last_write_wins: {
+          type: "boolean",
+          description: "Replace without a metadata_revision, regardless of concurrent changes (default false). Recorded in the audit log. Use only when an external source of truth makes conflicts meaningless."
         },
         author: AUTHOR_PARAM_WRITE
       }
@@ -68631,6 +68751,7 @@ function registerDocumentRestore(parent) {
 // src/cli/commands/document-set-metadata.ts
 init_cli_core();
 init_client();
+init__utils();
 async function action13(documentId, options) {
   const patch = {};
   if (options.json) {
@@ -68669,6 +68790,13 @@ async function action13(documentId, options) {
   if (Object.keys(patch).length === 0 && !options.replace) {
     throw userError("Nothing to change. Pass --set key=value, --remove key, or --json '{...}'. " + "To clear all metadata use --replace --json '{}'.");
   }
+  let expectedRevision = null;
+  if (options.expectedMetadataRevision !== undefined) {
+    expectedRevision = Number(options.expectedMetadataRevision);
+    if (!Number.isInteger(expectedRevision)) {
+      throw userError("--expected-metadata-revision must be an integer (the metadata_revision you read).");
+    }
+  }
   const client = getClient();
   let rows;
   try {
@@ -68677,12 +68805,19 @@ async function action13(documentId, options) {
       p_metadata: patch,
       p_replace: Boolean(options.replace),
       p_author: resolveAuthor(options.author),
-      p_author_type: options.authorType === "agent" ? "agent" : "user"
+      p_author_type: options.authorType === "agent" ? "agent" : "user",
+      ...metadataTokenParams(expectedRevision, options.lastWriteWins)
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     if (/not found/i.test(msg))
       throw notFound(`Document ${documentId} not found (or is deleted).`);
+    if (msg.includes("CEREFOX_METADATA_CONFLICT")) {
+      throw userError(`The metadata of ${documentId} changed since you read it. Re-read it ` + `(cerefox document get ${documentId} --outline), reapply your change, and retry ` + `with the new --expected-metadata-revision.`);
+    }
+    if (msg.includes("CEREFOX_METADATA_TOKEN_REQUIRED")) {
+      throw userError(`--replace discards every key you do not list, so it needs --expected-metadata-revision ` + `(from cerefox document get ${documentId} --outline) or --last-write-wins.`);
+    }
     throw systemError(`Could not set metadata: ${msg}`);
   }
   if (!rows || rows.length === 0) {
@@ -68700,10 +68835,12 @@ async function action13(documentId, options) {
     println(c.green(`✓ ${verb} metadata on ${documentId}: ${row.keys_set} key(s) set, ${row.keys_removed} removed.`));
   }
   println(c.dim(`  Now: ${JSON.stringify(row.metadata ?? {})}`));
+  if (row.metadata_revision != null)
+    println(c.dim(`  metadata_revision: ${row.metadata_revision}`));
   println(c.dim("  Content untouched — no new version, no re-embedding."));
 }
 function registerDocumentSetMetadata(parent) {
-  parent.command("set-metadata").description("Change a document's metadata without resending its content (merges by default).").argument("<document-id>", "UUID of the document.").option("-s, --set <key=value...>", "Set a key. Repeatable. Values are stored as JSON strings; quote to force JSON parsing.").option("-r, --remove <key...>", "Remove a key. Repeatable. (Sends a JSON null.)").option("--json <object>", "A JSON object of keys to set; a null value removes that key.").option("--replace", "Set the metadata to EXACTLY what was given, discarding every key not listed. Default is merge.").option("-a, --author <name>", "Caller identity (audit log).").option("--author-type <type>", "'user' or 'agent' (default: user).", "user").option("--json-out", "Emit the result as JSON.").action(action13);
+  parent.command("set-metadata").description("Change a document's metadata without resending its content (merges by default).").argument("<document-id>", "UUID of the document.").option("-s, --set <key=value...>", "Set a key. Repeatable. Values are stored as JSON strings; quote to force JSON parsing.").option("-r, --remove <key...>", "Remove a key. Repeatable. (Sends a JSON null.)").option("--json <object>", "A JSON object of keys to set; a null value removes that key.").option("--replace", "Set the metadata to EXACTLY what was given, discarding every key not listed. Default is merge. Needs --expected-metadata-revision or --last-write-wins.").option("--expected-metadata-revision <n>", "The metadata_revision you read (document get). Fails if the metadata changed since. Required with --replace.").option("--last-write-wins", "Replace without --expected-metadata-revision (recorded in the audit log).").option("-a, --author <name>", "Caller identity (audit log).").option("--author-type <type>", "'user' or 'agent' (default: user).", "user").option("--json-out", "Emit the result as JSON.").action(action13);
 }
 
 // src/cli/commands/document-set-projects.ts
@@ -73338,7 +73475,8 @@ async function action18(options) {
     operation: row.operation,
     doc: auditDocLabel(row.doc_title, row.document_id, row.operation).slice(0, 40),
     author: (row.author ?? "") + (row.author_type ? `(${row.author_type})` : ""),
-    size_delta: row.size_before !== null && row.size_after !== null ? `${row.size_before} → ${row.size_after}` : ""
+    size_delta: row.size_before !== null && row.size_after !== null ? `${row.size_before} → ${row.size_after}` : "",
+    change: (metadataChangeSummary(row.metadata_before, row.metadata_after) ?? "").slice(0, 60)
   })));
 }
 function registerGetAuditLog(program) {
@@ -73478,6 +73616,9 @@ init_cli_core();
 init_cli_core();
 init_partial_edits();
 init_client();
+function revisionSuffix(doc) {
+  return !doc.version_id && doc.metadata_revision != null ? ` · metadata_revision: ${doc.metadata_revision}` : "";
+}
 async function action19(documentId, options) {
   const section = (options.section ?? "").trim() || null;
   if (section && options.outline) {
@@ -73511,6 +73652,7 @@ async function action19(documentId, options) {
       printJson({
         title: doc.doc_title,
         content_hash: doc.content_hash,
+        metadata_revision: doc.metadata_revision ?? null,
         total_chars: doc.total_chars,
         outline: nodes.map((n) => ({ path: n.path, level: n.level, chars: n.chars }))
       });
@@ -73519,7 +73661,7 @@ async function action19(documentId, options) {
     println(c.bold(`# ${doc.doc_title}`));
     println(c.dim(`[${doc.document_id}] · chars: ${doc.total_chars}`));
     if (doc.content_hash)
-      println(c.dim(`content_hash: ${doc.content_hash}`));
+      println(c.dim(`content_hash: ${doc.content_hash}${revisionSuffix(doc)}`));
     println("");
     if (nodes.length === 0) {
       println(c.dim("No headings: only --position end_of_document applies to this document."));
@@ -73569,7 +73711,7 @@ async function action19(documentId, options) {
   println(c.bold(`# ${doc.doc_title}`));
   println(c.dim(`[${doc.document_id}] · chunks: ${doc.chunk_count} · chars: ${doc.total_chars}` + (doc.is_archived ? " · archived" : "") + (doc.version_id ? ` · version: ${doc.version_id}` : "")));
   if (doc.content_hash) {
-    println(c.dim(`content_hash: ${doc.content_hash}`));
+    println(c.dim(`content_hash: ${doc.content_hash}${revisionSuffix(doc)}`));
   }
   println("");
   println(doc.full_content);
@@ -73637,6 +73779,8 @@ init__projects();
 init__utils();
 
 // src/ingestion/types.ts
+init__utils();
+
 class ConcurrencyConflictError extends Error {
   documentId;
   currentHash;
@@ -73688,7 +73832,7 @@ class IngestionDbBridge {
     return data ?? null;
   }
   async getDocumentByHash(contentHash) {
-    const { data } = await this.supabase.from("cerefox_documents").select("*").eq("content_hash", contentHash).limit(1);
+    const { data } = await this.supabase.from("cerefox_documents").select("*").eq("content_hash", contentHash).is("deleted_at", null).order("created_at", { ascending: true }).limit(1);
     const rows = data ?? [];
     return rows.length > 0 ? rows[0] : null;
   }
@@ -73715,6 +73859,24 @@ class IngestionDbBridge {
     const { data } = await this.supabase.from("cerefox_document_projects").select("project_id").eq("document_id", documentId);
     return (data ?? []).map((r) => r.project_id);
   }
+  async setDocumentMetadataRpc(args) {
+    const { data, error } = await this.supabase.rpc("cerefox_set_document_metadata", {
+      p_document_id: args.documentId,
+      p_metadata: args.metadata,
+      p_replace: args.replace,
+      p_author: args.author,
+      p_author_type: args.authorType,
+      ...metadataTokenParams(args.expectedMetadataRevision, args.lastWriteWins)
+    });
+    if (error) {
+      const msg = error.message ?? JSON.stringify(error);
+      if (msg.includes("CEREFOX_METADATA_"))
+        throw new MetadataConcurrencyError(msg);
+      throw new Error(msg);
+    }
+    const row = Array.isArray(data) ? data[0] : data;
+    return row ?? {};
+  }
   async ingestDocumentRpc(args) {
     const params = {
       p_document_id: args.documentId,
@@ -73738,6 +73900,11 @@ class IngestionDbBridge {
     if (args.documentId !== null) {
       params.p_expected_content_hash = args.expectedContentHash ?? null;
       params.p_last_write_wins = args.lastWriteWins ?? false;
+      if (args.expectedMetadataRevision != null) {
+        params.p_expected_metadata_revision = args.expectedMetadataRevision;
+      }
+      if (args.replaceMetadata)
+        params.p_replace_metadata = true;
     }
     const { data, error } = await this.supabase.rpc("cerefox_ingest_document", params);
     if (error) {
@@ -73749,7 +73916,12 @@ class IngestionDbBridge {
       if (msg.includes("CEREFOX_TOKEN_REQUIRED")) {
         throw new ConcurrencyTokenRequiredError(msg);
       }
-      throw new Error(msg);
+      if (msg.includes("CEREFOX_METADATA_"))
+        throw new MetadataConcurrencyError(msg);
+      const duplicateId = duplicateContentDocumentId(msg);
+      if (duplicateId)
+        throw new DuplicateContentError(duplicateId, msg);
+      throw legacyContentUniqueError(msg) ?? new Error(msg);
     }
     if (Array.isArray(data) && data.length > 0) {
       return data[0];
@@ -73913,6 +74085,7 @@ async function fileToMarkdown(filename, data) {
 }
 
 // src/ingestion/pipeline.ts
+init__utils();
 function updateByIdNote(updateExisting) {
   return updateExisting === false ? "document_id provided; update_if_exists flag was overridden" : undefined;
 }
@@ -73947,7 +74120,9 @@ class IngestionPipeline {
       authorType = "user",
       expectedContentHash,
       lastWriteWins = false,
-      forceRechunk = false
+      forceRechunk = false,
+      expectedMetadataRevision = null,
+      replaceMetadata = false
     } = opts;
     const listFormProvided = projectIds !== undefined && projectIds !== null || projectNames !== undefined && projectNames !== null;
     const getOrCreate = (name) => this.db.getOrCreateProject(name, { author, authorType });
@@ -73972,7 +74147,9 @@ class IngestionPipeline {
         authorType,
         expectedContentHash,
         lastWriteWins,
-        forceRechunk
+        forceRechunk,
+        expectedMetadataRevision,
+        replaceMetadata
       });
       if (!listFormProvided && (projectId || projectName)) {
         const singular = await resolveProjectIds({ projectId, projectName }, getOrCreate);
@@ -74031,7 +74208,9 @@ class IngestionPipeline {
           author,
           authorType,
           expectedContentHash,
-          lastWriteWins
+          lastWriteWins,
+          expectedMetadataRevision,
+          replaceMetadata
         });
         if (!listFormProvided && (projectId || projectName)) {
           const singular = await resolveProjectIds({ projectId, projectName }, getOrCreate);
@@ -74057,7 +74236,7 @@ class IngestionPipeline {
         action: "skipped",
         reindexed: false,
         projectIds: existingProjectIds,
-        note: existingByHash.deleted_at ? `Identical content is in the TRASH as "${existingByHash.title}" ` + `(soft-deleted ${existingByHash.deleted_at.slice(0, 10)}). Restore it ` + `(\`cerefox document restore ${existingByHash.id}\` or the web UI Trash page) ` + `instead of re-ingesting, or purge it first to start fresh.` : "",
+        note: "",
         contentHash: existingByHash.content_hash ?? hash
       };
     }
@@ -74079,18 +74258,37 @@ class IngestionPipeline {
         embedder: this.embedderModel
       }));
     }
-    const rpcResult = await this.db.ingestDocumentRpc({
-      documentId: null,
-      title,
-      source: source ?? sourceOnCreate ?? null,
-      sourcePath,
-      contentHash: hash,
-      metadata: validatedMeta,
-      chunks: chunkRows,
-      contentFormat: CONTENT_FORMAT_BLIND_STITCH,
-      author,
-      authorType
-    });
+    let rpcResult;
+    try {
+      rpcResult = await this.db.ingestDocumentRpc({
+        documentId: null,
+        title,
+        source: source ?? sourceOnCreate ?? null,
+        sourcePath,
+        contentHash: hash,
+        metadata: validatedMeta,
+        chunks: chunkRows,
+        contentFormat: CONTENT_FORMAT_BLIND_STITCH,
+        author,
+        authorType
+      });
+    } catch (err) {
+      if (!(err instanceof DuplicateContentError))
+        throw err;
+      const existingId = err.existingDocumentId;
+      const existingRow = await this.db.getDocumentById(existingId);
+      return {
+        documentId: existingId,
+        title: existingRow?.title ?? title,
+        chunkCount: existingRow?.chunk_count ?? 0,
+        totalChars: existingRow?.total_chars ?? 0,
+        action: "skipped",
+        reindexed: false,
+        projectIds: await this.db.getDocumentProjectIds(existingId),
+        note: "",
+        contentHash: hash
+      };
+    }
     const newDocumentId = rpcResult.document_id;
     if (resolvedIds.length > 0) {
       await this.db.assignDocumentProjects(newDocumentId, resolvedIds);
@@ -74104,7 +74302,8 @@ class IngestionPipeline {
       reindexed: false,
       projectIds: resolvedIds,
       note: "",
-      contentHash: hash
+      contentHash: hash,
+      metadataRevision: rpcResult.metadata_revision
     };
   }
   async updateDocument(opts) {
@@ -74121,7 +74320,9 @@ class IngestionPipeline {
       authorType = "user",
       expectedContentHash,
       lastWriteWins = false,
-      forceRechunk = false
+      forceRechunk = false,
+      expectedMetadataRevision = null,
+      replaceMetadata = false
     } = opts;
     const existing = await this.db.getDocumentById(documentId);
     if (!existing) {
@@ -74137,10 +74338,6 @@ class IngestionPipeline {
       if (!lastWriteWins && expectedHashTrimmed && expectedHashTrimmed !== existing.content_hash) {
         throw new ConcurrencyConflictError(documentId, existing.content_hash, `CEREFOX_CONFLICT: document ${documentId} changed since it was read ` + `(expected hash ${expectedHashTrimmed}, current hash ${existing.content_hash}). ` + `Re-read the document, merge your changes, and retry with the new hash.`);
       }
-      const collision = await this.db.getDocumentByHash(newHash);
-      if (collision && collision.id !== documentId) {
-        throw new Error(`Identical content already exists as document ${JSON.stringify(collision.title)}. ` + "Edit that document or change the content before saving.");
-      }
     }
     let newProjectIds = null;
     if (projectIds !== undefined && projectIds !== null) {
@@ -74153,11 +74350,21 @@ class IngestionPipeline {
     if (contentUnchanged && hasChunks && !forceRechunk) {
       const oldTitle = existing.title ?? "";
       const titleChanged = oldTitle !== title;
-      const updates = { title };
-      if (metadata !== undefined && metadata !== null) {
-        updates.metadata = metadata;
+      const metadataGiven = metadata !== undefined && metadata !== null;
+      let metadataRevision;
+      if (metadataGiven) {
+        const r = await this.db.setDocumentMetadataRpc({
+          documentId,
+          metadata,
+          replace: replaceMetadata,
+          author,
+          authorType,
+          expectedMetadataRevision,
+          lastWriteWins
+        });
+        metadataRevision = r.metadata_revision;
       }
-      await this.db.updateDocumentRow(documentId, updates);
+      await this.db.updateDocumentRow(documentId, { title });
       if (titleChanged) {
         const texts = actualChunks.map((c) => embeddingInputFor(title, c));
         try {
@@ -74183,15 +74390,17 @@ class IngestionPipeline {
       }
       const chunkCount = existing.chunk_count ?? 0;
       const totalChars = existing.total_chars ?? 0;
-      await this.db.createAuditEntry({
-        operation: "update-metadata",
-        author,
-        authorType,
-        documentId,
-        sizeBefore: totalChars,
-        sizeAfter: totalChars,
-        description: `Updated metadata for '${title}' (content unchanged)`
-      });
+      if (!metadataGiven || titleChanged) {
+        await this.db.createAuditEntry({
+          operation: "update-metadata",
+          author,
+          authorType,
+          documentId,
+          sizeBefore: totalChars,
+          sizeAfter: totalChars,
+          description: titleChanged ? `Title changed on '${title}' (was '${oldTitle}'; content unchanged)` : `Updated metadata for '${title}' (content unchanged)`
+        });
+      }
       return {
         documentId,
         title,
@@ -74201,7 +74410,8 @@ class IngestionPipeline {
         reindexed: false,
         projectIds: finalProjectIds,
         note: "",
-        contentHash: existing.content_hash ?? newHash
+        contentHash: existing.content_hash ?? newHash,
+        metadataRevision: metadataRevision ?? existing.metadata_revision ?? undefined
       };
     }
     const chunks = chunkMarkdown(text, this.settings.maxChunkChars, this.settings.minChunkChars);
@@ -74221,8 +74431,8 @@ class IngestionPipeline {
         embedder: this.embedderModel
       }));
     }
-    const metaToWrite = metadata !== undefined && metadata !== null ? metadata : existing.metadata ?? {};
-    await this.db.ingestDocumentRpc({
+    const metaToWrite = metadata ?? null;
+    const rpcResult = await this.db.ingestDocumentRpc({
       documentId,
       title,
       source,
@@ -74235,7 +74445,9 @@ class IngestionPipeline {
       authorType,
       sourceLabel: sourceLabel ?? source ?? "manual",
       expectedContentHash: expectedHashTrimmed ?? (forceRechunk && contentUnchanged ? existing.content_hash : null),
-      lastWriteWins
+      lastWriteWins,
+      expectedMetadataRevision,
+      replaceMetadata
     });
     let finalProjectIds;
     if (newProjectIds !== null) {
@@ -74253,7 +74465,8 @@ class IngestionPipeline {
       reindexed: true,
       projectIds: finalProjectIds,
       note: "",
-      contentHash: newHash
+      contentHash: newHash,
+      metadataRevision: rpcResult.metadata_revision
     };
   }
   async ingestFile(path, opts = {}) {
@@ -74300,6 +74513,15 @@ async function readContent(path, paste) {
   const titleFromPath = basename2(path, extname3(path));
   return { content, titleFromPath };
 }
+function parseRevision(raw) {
+  if (raw === undefined)
+    return null;
+  const n = Number(raw);
+  if (!Number.isInteger(n)) {
+    throw userError("--expected-metadata-revision must be an integer (the metadata_revision you read).");
+  }
+  return n;
+}
 async function action20(path, options) {
   const { content, titleFromPath } = await readContent(path, Boolean(options.paste));
   const updatingById = Boolean(options.documentId);
@@ -74355,6 +74577,7 @@ async function action20(path, options) {
       author,
       authorType,
       expectedContentHash: options.expectedContentHash ?? null,
+      expectedMetadataRevision: parseRevision(options.expectedMetadataRevision),
       lastWriteWins: Boolean(options.lastWriteWins)
     }) : await pipeline.ingestText({
       text: content,
@@ -74369,6 +74592,7 @@ async function action20(path, options) {
       author,
       authorType,
       expectedContentHash: options.expectedContentHash ?? null,
+      expectedMetadataRevision: parseRevision(options.expectedMetadataRevision),
       lastWriteWins: Boolean(options.lastWriteWins)
     });
     let verb;
@@ -74394,7 +74618,7 @@ async function action20(path, options) {
   }
 }
 function registerIngest(program) {
-  program.command("ingest").description("Ingest a file (or stdin paste) into the knowledge base.").argument("[path]", "Path to the file to ingest. Omit when using --paste.").option("--paste", "Read content from stdin instead of a file.").option("-t, --title <title>", "Document title (required with --paste; defaults to filename without extension).").option("-p, --project-name <name>", "Single project membership (non-destructive on update).").option("-P, --project-names <names>", "Comma-separated full project membership set (destructive replace on update).").option("-m, --metadata <json>", "JSON metadata object.").option("--source <label>", 'Origin label. Omit it on an update and the document keeps the source it already has (#193); omit it on a create and it is recorded as "cli".').option("-u, --update-if-exists", "Update an existing doc with the same title.").option("-i, --document-id <uuid>", "Update a specific document by UUID (overrides --update-if-exists).").option("--expected-content-hash <sha256>", "Optimistic-concurrency token: the content_hash of the version this edit is based on (shown by `document get` / `search`). Required on content updates unless --last-write-wins.").option("--last-write-wins", "Skip the concurrency check and overwrite regardless of concurrent changes (recorded in the audit log).").option("-a, --author <name>", "Caller identity (audit log).").option("--author-type <type>", "'user' or 'agent' (default: user).", "user").action(action20);
+  program.command("ingest").description("Ingest a file (or stdin paste) into the knowledge base.").argument("[path]", "Path to the file to ingest. Omit when using --paste.").option("--paste", "Read content from stdin instead of a file.").option("-t, --title <title>", "Document title (required with --paste; defaults to filename without extension).").option("-p, --project-name <name>", "Single project membership (non-destructive on update).").option("-P, --project-names <names>", "Comma-separated full project membership set (destructive replace on update).").option("-m, --metadata <json>", "JSON metadata object.").option("--source <label>", 'Origin label. Omit it on an update and the document keeps the source it already has (#193); omit it on a create and it is recorded as "cli".').option("-u, --update-if-exists", "Update an existing doc with the same title.").option("-i, --document-id <uuid>", "Update a specific document by UUID (overrides --update-if-exists).").option("--expected-metadata-revision <n>", "With --metadata on an update: the metadata_revision you read. Fails if the metadata changed since (metadata merges; a null value removes a key).").option("--expected-content-hash <sha256>", "Optimistic-concurrency token: the content_hash of the version this edit is based on (shown by `document get` / `search`). Required on content updates unless --last-write-wins.").option("--last-write-wins", "Skip the concurrency check and overwrite regardless of concurrent changes (recorded in the audit log).").option("-a, --author <name>", "Caller identity (audit log).").option("--author-type <type>", "'user' or 'agent' (default: user).", "user").action(action20);
 }
 
 // src/cli/commands/document-partial-edit.ts
@@ -75497,7 +75721,6 @@ async function action30(options) {
   });
   let converted = 0;
   let skipped = 0;
-  const duplicates = [];
   const failures = [];
   for (let i = 0;i < targets.length; i++) {
     const id = targets[i];
@@ -75540,8 +75763,6 @@ async function action30(options) {
       const message = err instanceof Error ? err.message : String(err);
       if (/conflict/i.test(message)) {
         skipped++;
-      } else if (/identical content already exists/i.test(message)) {
-        duplicates.push({ document: `${doc.doc_title} (${id})`, reason: message });
       } else {
         failures.push({ document: `${doc.doc_title} (${id})`, reason: message });
       }
@@ -75555,12 +75776,6 @@ async function action30(options) {
   if (targets.length < docIds.length) {
     println(c.dim(`  ${docIds.length - targets.length} document(s) still pending — re-run to continue.`));
   }
-  if (duplicates.length > 0) {
-    println("");
-    println(c.yellow(`⚠ ${duplicates.length} document(s) could not be converted because their content is ` + "byte-identical to another document."));
-    println(c.dim("  Re-ingesting them would collide with the content-hash dedup check. They keep working " + "on the legacy format; de-duplicate them if you want them converted."));
-    printTable(duplicates.map((d) => ({ document: d.document })));
-  }
   if (failures.length > 0) {
     println("");
     printTable(failures);
@@ -75634,8 +75849,20 @@ async function action31(target, options) {
   let skipped = 0;
   let errors = 0;
   const errorDetails = [];
+  const payloadIds = new Set(payload.documents.map((d) => d.id));
   for (const doc of payload.documents) {
-    const { data: existing } = await client.raw.from("cerefox_documents").select("id").or(`id.eq.${doc.id},content_hash.eq.${doc.content_hash}`).limit(1).maybeSingle();
+    const { data: byId } = await client.raw.from("cerefox_documents").select("id").eq("id", doc.id).limit(1);
+    let existing = (byId ?? []).length > 0;
+    if (!existing && !doc.deleted_at && doc.content_hash) {
+      const PAGE = 500;
+      for (let from = 0;!existing; from += PAGE) {
+        const { data: byHash } = await client.raw.from("cerefox_documents").select("id").eq("content_hash", doc.content_hash).is("deleted_at", null).order("id").range(from, from + PAGE - 1);
+        const rows = byHash ?? [];
+        existing = rows.some((m) => !payloadIds.has(m.id));
+        if (rows.length < PAGE)
+          break;
+      }
+    }
     if (existing) {
       skipped++;
       continue;
@@ -75893,7 +76120,7 @@ async function action32(query, options) {
       println(c.bold(`## ${title}${docId}${score}${counts}${kind}`));
       const bestMatch = doc.best_chunk_heading_path?.length ? doc.best_chunk_heading_path.join(" › ") : null;
       const updated = doc.doc_updated_at ? doc.doc_updated_at.slice(0, 10) : null;
-      const hash = doc.content_hash ? `hash: ${doc.content_hash}` : null;
+      const hash = doc.content_hash ? `hash: ${doc.content_hash}` + (doc.metadata_revision != null ? ` · metadata_revision: ${doc.metadata_revision}` : "") : null;
       if (bestMatch || updated || hash) {
         const bits = [
           bestMatch ? `best match: ${bestMatch}` : null,
@@ -76347,41 +76574,38 @@ init_sync_self_docs();
 init_cli_core();
 import { readFileSync as readFileSync21 } from "node:fs";
 
-// ../../node_modules/.bun/@hono+node-server@2.1.1+2ac783cc5e75a70c/node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
+// ../../node_modules/.bun/@hono+node-server@2.1.4+c539cad7f494f5c9/node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
 var X_ALREADY_SENT = "x-hono-already-sent";
 
-// ../../node_modules/.bun/@hono+node-server@2.1.1+2ac783cc5e75a70c/node_modules/@hono/node-server/dist/index.mjs
-import { STATUS_CODES, createServer } from "node:http";
+// ../../node_modules/.bun/@hono+node-server@2.1.4+c539cad7f494f5c9/node_modules/@hono/node-server/dist/index.mjs
+import { STATUS_CODES, ServerResponse, createServer } from "node:http";
 import { Http2ServerRequest, constants } from "node:http2";
 import { Readable } from "node:stream";
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/helper/websocket/index.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/helper/websocket/index.js
 var defineWebSocketHelper = (handler) => {
   return (...args) => {
     if (typeof args[0] === "function") {
       const [createEvents, options] = args;
       return async function upgradeWebSocket(c, next) {
-        const events = await createEvents(c);
-        const result = await handler(c, events, options);
-        if (result) {
+        const result = await handler(c, await createEvents(c), options);
+        if (result)
           return result;
-        }
         await next();
       };
     } else {
       const [c, events, options] = args;
       return (async () => {
         const upgraded = await handler(c, events, options);
-        if (!upgraded) {
+        if (!upgraded)
           throw new Error("Failed to upgrade WebSocket");
-        }
         return upgraded;
       })();
     }
   };
 };
 
-// ../../node_modules/.bun/@hono+node-server@2.1.1+2ac783cc5e75a70c/node_modules/@hono/node-server/dist/index.mjs
+// ../../node_modules/.bun/@hono+node-server@2.1.4+c539cad7f494f5c9/node_modules/@hono/node-server/dist/index.mjs
 var RequestError = class extends Error {
   constructor(message, options) {
     super(message, options);
@@ -77337,8 +77561,11 @@ var handleResponseError = (e, outgoing) => {
     console.info("The user aborted a request.");
   else {
     console.error(e);
-    if (!outgoing.headersSent)
+    if (!outgoing.headersSent) {
+      if (outgoing instanceof ServerResponse)
+        outgoing._contentLength = null;
       outgoing.writeHead(500, { "Content-Type": "text/plain" });
+    }
     outgoing.end(`Error: ${err.message}`);
     outgoing.destroy(err);
   }
@@ -77347,6 +77574,23 @@ var flushHeaders = (outgoing) => {
   if ("flushHeaders" in outgoing && outgoing.writable)
     outgoing.flushHeaders();
 };
+var trySetContentLength = (outgoing, status, length) => {
+  const http1 = outgoing;
+  if (http1._contentLength === null && http1._hasBody && http1.useChunkedEncodingByDefault && !http1._removedContLen && status >= 200 && status !== 204 && status !== 304 && !outgoing.hasHeader("content-length") && !outgoing.hasHeader("transfer-encoding") && !outgoing.hasHeader("trailer")) {
+    http1._contentLength = length;
+    return true;
+  }
+  return false;
+};
+var writeDefaultHeaders = (outgoing, status, length) => {
+  if (trySetContentLength(outgoing, status, length))
+    outgoing.writeHead(status, { "Content-Type": defaultContentType });
+  else
+    outgoing.writeHead(status, {
+      "Content-Type": defaultContentType,
+      "Content-Length": length
+    });
+};
 var responseViaCache = async (res, outgoing) => {
   let [status, body, header] = res[cacheKey];
   if (!header) {
@@ -77354,22 +77598,13 @@ var responseViaCache = async (res, outgoing) => {
       outgoing.writeHead(status);
       outgoing.end();
     } else if (typeof body === "string") {
-      outgoing.writeHead(status, {
-        "Content-Type": defaultContentType,
-        "Content-Length": Buffer.byteLength(body)
-      });
+      writeDefaultHeaders(outgoing, status, Buffer.byteLength(body));
       outgoing.end(body);
     } else if (body instanceof Uint8Array) {
-      outgoing.writeHead(status, {
-        "Content-Type": defaultContentType,
-        "Content-Length": body.byteLength
-      });
+      writeDefaultHeaders(outgoing, status, body.byteLength);
       outgoing.end(body);
     } else if (body instanceof Blob) {
-      outgoing.writeHead(status, {
-        "Content-Type": defaultContentType,
-        "Content-Length": body.size
-      });
+      writeDefaultHeaders(outgoing, status, body.size);
       outgoing.end(new Uint8Array(await body.arrayBuffer()));
     } else {
       outgoing.writeHead(status, { "Content-Type": defaultContentType });
@@ -77380,6 +77615,8 @@ var responseViaCache = async (res, outgoing) => {
     return;
   }
   let hasContentLength = false;
+  let plainHeaders = false;
+  let canAutoLength = true;
   if (header instanceof Headers) {
     hasContentLength = header.has("content-length");
     header = buildOutgoingHttpHeaders(header, body === null ? undefined : defaultContentType);
@@ -77387,19 +77624,30 @@ var responseViaCache = async (res, outgoing) => {
     const headerObj = new Headers(header);
     hasContentLength = headerObj.has("content-length");
     header = buildOutgoingHttpHeaders(headerObj, body === null ? undefined : defaultContentType);
-  } else
-    for (const key in header)
+  } else {
+    plainHeaders = true;
+    for (const key in header) {
       if (key.length === 14 && key.toLowerCase() === "content-length") {
         hasContentLength = true;
         break;
       }
+      if (key.length === 17 && key.toLowerCase() === "transfer-encoding" || key.length === 7 && key.toLowerCase() === "trailer")
+        canAutoLength = false;
+    }
+  }
   if (!hasContentLength) {
+    let length;
     if (typeof body === "string")
-      header["Content-Length"] = Buffer.byteLength(body);
+      length = Buffer.byteLength(body);
     else if (body instanceof Uint8Array)
-      header["Content-Length"] = body.byteLength;
+      length = body.byteLength;
     else if (body instanceof Blob)
-      header["Content-Length"] = body.size;
+      length = body.size;
+    if (length !== undefined && (!plainHeaders || !canAutoLength || !trySetContentLength(outgoing, status, length))) {
+      if (plainHeaders)
+        header = { ...header };
+      header["Content-Length"] = length;
+    }
   }
   outgoing.writeHead(status, header);
   if (body == null)
@@ -77810,7 +78058,7 @@ var serve = (options, listeningListener) => {
   return server;
 };
 
-// ../../node_modules/.bun/@hono+node-server@2.1.1+2ac783cc5e75a70c/node_modules/@hono/node-server/dist/utils/stream.mjs
+// ../../node_modules/.bun/@hono+node-server@2.1.4+c539cad7f494f5c9/node_modules/@hono/node-server/dist/utils/stream.mjs
 import { Readable as Readable2 } from "node:stream";
 import { versions as versions2 } from "node:process";
 var pr54206Applied = () => {
@@ -77876,16 +78124,14 @@ var createStreamBody = (stream, useNativeReadableToWeb = useReadableToWeb) => {
   });
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/utils/mime.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/utils/mime.js
 var getMimeType = (filename, mimes = baseMimes) => {
-  const regexp = /\.([a-zA-Z0-9]+?)$/;
-  const match = filename.match(regexp);
-  if (!match) {
+  const match = filename.match(/\.([a-zA-Z0-9]+?)$/);
+  if (!match)
     return;
-  }
   return mimes[match[1].toLowerCase()];
 };
-var _baseMimes = {
+var baseMimes = {
   aac: "audio/aac",
   avi: "video/x-msvideo",
   avif: "image/avif",
@@ -77943,9 +78189,8 @@ var _baseMimes = {
   gltf: "model/gltf+json",
   glb: "model/gltf-binary"
 };
-var baseMimes = _baseMimes;
 
-// ../../node_modules/.bun/@hono+node-server@2.1.1+2ac783cc5e75a70c/node_modules/@hono/node-server/dist/serve-static.mjs
+// ../../node_modules/.bun/@hono+node-server@2.1.4+c539cad7f494f5c9/node_modules/@hono/node-server/dist/serve-static.mjs
 import { createReadStream, existsSync as existsSync16, statSync as statSync6 } from "node:fs";
 import { join as join15 } from "node:path";
 var COMPRESSIBLE_CONTENT_TYPE_REGEX = /^\s*(?:text\/[^;\s]+|application\/(?:javascript|json|xml|xml-dtd|ecmascript|dart|postscript|rtf|tar|toml|vnd\.dart|vnd\.ms-fontobject|vnd\.ms-opentype|wasm|x-httpd-php|x-javascript|x-ns-proxy-autoconfig|x-sh|x-tar|x-virtualbox-hdd|x-virtualbox-ova|x-virtualbox-ovf|x-virtualbox-vbox|x-virtualbox-vdi|x-virtualbox-vhd|x-virtualbox-vmdk|x-www-form-urlencoded)|font\/(?:otf|ttf)|image\/(?:bmp|vnd\.adobe\.photoshop|vnd\.microsoft\.icon|vnd\.ms-dds|x-icon|x-ms-bmp)|message\/rfc822|model\/gltf-binary|x-shader\/x-fragment|x-shader\/x-vertex|[^;\s]+?\+(?:json|text|xml|yaml))(?:[;\s]|$)/i;
@@ -78030,6 +78275,8 @@ var serveStatic = (options = { root: "" }) => {
       filename = optionPath;
     else
       try {
+        if (!options.allowPercentInPath && c.req.path.includes("%"))
+          throw new Error;
         filename = tryDecodeURI(c.req.path);
         if (/(?:^|[\/\\])\.{1,2}(?:$|[\/\\])|[\/\\]{2,}|\\/.test(filename))
           throw new Error;
@@ -78108,150 +78355,86 @@ import { existsSync as existsSync20 } from "node:fs";
 import { readFileSync as readFileSync20, statSync as statSync9 } from "node:fs";
 import { join as join19 } from "node:path";
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/compose.js
-var compose = (middleware, onError, onNotFound) => {
-  return (context, next) => {
-    let index = -1;
-    return dispatch(0);
-    async function dispatch(i) {
-      if (i <= index) {
-        throw new Error("next() called multiple times");
-      }
-      index = i;
-      let res;
-      let isError = false;
-      let handler;
-      if (middleware[i]) {
-        handler = middleware[i][0][0];
-        context.req.routeIndex = i;
-      } else {
-        handler = i === middleware.length && next || undefined;
-      }
-      if (handler) {
-        try {
-          res = await handler(context, () => dispatch(i + 1));
-        } catch (err) {
-          if (err instanceof Error && onError) {
-            context.error = err;
-            res = await onError(err, context);
-            isError = true;
-          } else {
-            throw err;
-          }
-        }
-      } else {
-        if (context.finalized === false && onNotFound) {
-          res = await onNotFound(context);
-        }
-      }
-      if (res && (context.finalized === false || isError)) {
-        context.res = res;
-      }
-      return context;
-    }
-  };
-};
-
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/request/constants.js
-var GET_MATCH_RESULT = /* @__PURE__ */ Symbol();
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/request/constants.js
+var GET_MATCH_RESULT = Symbol();
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/utils/buffer.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/utils/buffer.js
 var bufferToFormData = (arrayBuffer, contentType) => {
-  const response = new Response(arrayBuffer, {
-    headers: {
-      "Content-Type": contentType.replace(/^[^;]+/, (mediaType) => mediaType.toLowerCase())
-    }
-  });
-  return response.formData();
+  return new Response(arrayBuffer, { headers: { "Content-Type": contentType.replace(/^[^;]+/, (mediaType) => mediaType.toLowerCase()) } }).formData();
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/utils/body.js
-var MAX_NESTING_DEPTH = 32;
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/utils/body.js
 var MAX_NESTED_OBJECTS = 1e4;
 var isRawRequest = (request) => ("headers" in request);
-var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) => {
+var parseBody = async (request, options = Object.create(null)) => {
   const { all = false, dot = false } = options;
-  const headers = isRawRequest(request) ? request.headers : request.raw.headers;
-  const contentType = headers.get("Content-Type");
-  const mediaType = contentType?.split(";")[0].trim().toLowerCase();
-  if (mediaType === "multipart/form-data" || mediaType === "application/x-www-form-urlencoded") {
-    return parseFormData(request, { all, dot });
-  }
+  const mediaType = (isRawRequest(request) ? request.headers : request.raw.headers).get("Content-Type")?.split(";")[0].trim().toLowerCase();
+  if (mediaType === "multipart/form-data" || mediaType === "application/x-www-form-urlencoded")
+    return parseFormData(request, {
+      all,
+      dot
+    });
   return {};
 };
 async function parseFormData(request, options) {
-  if (!isRawRequest(request) && request.bodyCache.formData) {
+  if (!isRawRequest(request) && request.bodyCache.formData)
     return convertFormDataToBodyData(await request.bodyCache.formData, options);
-  }
   const headers = isRawRequest(request) ? request.headers : request.raw.headers;
   const arrayBuffer = await request.arrayBuffer();
   const formDataPromise = bufferToFormData(arrayBuffer, headers.get("Content-Type") || "");
-  if (!isRawRequest(request)) {
+  if (!isRawRequest(request))
     request.bodyCache.formData = formDataPromise;
-  }
   const formData = await formDataPromise;
-  if (formData) {
+  if (formData)
     return convertFormDataToBodyData(formData, options);
-  }
   return {};
 }
 function convertFormDataToBodyData(formData, options) {
-  const form = /* @__PURE__ */ Object.create(null);
+  const form = Object.create(null);
   const nestingState = { count: 0 };
   formData.forEach((value, key) => {
-    const shouldParseAllValues = options.all || key.endsWith("[]");
-    if (!shouldParseAllValues) {
+    if (!(options.all || key.endsWith("[]")))
       form[key] = value;
-    } else {
+    else
       handleParsingAllValues(form, key, value);
-    }
   });
-  if (options.dot) {
+  if (options.dot)
     Object.entries(form).forEach(([key, value]) => {
-      const shouldParseDotValues = key.includes(".");
-      if (shouldParseDotValues) {
+      if (key.includes(".")) {
         handleParsingNestedValues(form, key, value, nestingState);
         delete form[key];
       }
     });
-  }
   return form;
 }
 var handleParsingAllValues = (form, key, value) => {
   if (form[key] !== undefined) {
-    if (Array.isArray(form[key])) {
+    if (Array.isArray(form[key]))
       form[key].push(value);
-    } else {
+    else
       form[key] = [form[key], value];
-    }
-  } else {
-    if (!key.endsWith("[]")) {
-      form[key] = value;
-    } else {
-      form[key] = [value];
-    }
-  }
+  } else if (!key.endsWith("[]"))
+    form[key] = value;
+  else
+    form[key] = [value];
 };
 var handleParsingNestedValues = (form, key, value, state) => {
-  if (/(?:^|\.)__proto__\./.test(key)) {
+  if (/(?:^|\.)__proto__\./.test(key))
     return;
-  }
   let nestedForm = form;
-  const keys = key.split(".", MAX_NESTING_DEPTH + 2);
-  if (keys.length > MAX_NESTING_DEPTH + 1) {
+  const keys = key.split(".", 34);
+  if (keys.length > 33)
     throwNestingLimitExceeded();
-  }
-  keys.forEach((key2, index) => {
-    if (index === keys.length - 1) {
-      nestedForm[key2] = value;
-    } else {
-      if (!nestedForm[key2] || typeof nestedForm[key2] !== "object" || Array.isArray(nestedForm[key2]) || nestedForm[key2] instanceof File) {
-        if (state.count++ >= MAX_NESTED_OBJECTS) {
+  keys.forEach((key, index) => {
+    if (index === keys.length - 1)
+      nestedForm[key] = value;
+    else {
+      if (!nestedForm[key] || typeof nestedForm[key] !== "object" || Array.isArray(nestedForm[key]) || nestedForm[key] instanceof File) {
+        if (state.count++ >= MAX_NESTED_OBJECTS)
           throwNestingLimitExceeded();
-        }
-        nestedForm[key2] = /* @__PURE__ */ Object.create(null);
+        nestedForm[key] = Object.create(null);
       }
-      nestedForm = nestedForm[key2];
+      nestedForm = nestedForm[key];
     }
   });
 };
@@ -78259,12 +78442,11 @@ var throwNestingLimitExceeded = () => {
   throw new Error("Nesting limit exceeded");
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/utils/url.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/utils/url.js
 var splitPath = (path) => {
   const paths = path.split("/");
-  if (paths[0] === "") {
+  if (paths[0] === "")
     paths.shift();
-  }
   return paths;
 };
 var splitRoutingPath = (routePath) => {
@@ -78279,34 +78461,46 @@ var extractGroupsFromPath = (path) => {
     groups.push([mark, match]);
     return mark;
   });
-  return { groups, path };
+  return {
+    groups,
+    path
+  };
 };
 var replaceGroupMarks = (paths, groups) => {
   for (let i = groups.length - 1;i >= 0; i--) {
     const [mark] = groups[i];
-    for (let j = paths.length - 1;j >= 0; j--) {
+    for (let j = paths.length - 1;j >= 0; j--)
       if (paths[j].includes(mark)) {
         paths[j] = paths[j].replace(mark, groups[i][1]);
         break;
       }
-    }
   }
   return paths;
 };
 var patternCache = {};
 var getPattern = (label, next) => {
-  if (label === "*") {
+  if (label === "*")
     return "*";
-  }
   const match = label.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
   if (match) {
     const cacheKey = `${label}#${next}`;
     if (!patternCache[cacheKey]) {
-      if (match[2]) {
-        patternCache[cacheKey] = next && next[0] !== ":" && next[0] !== "*" ? [cacheKey, match[1], new RegExp(`^${match[2]}(?=/${next})`)] : [label, match[1], new RegExp(`^${match[2]}$`)];
-      } else {
-        patternCache[cacheKey] = [label, match[1], true];
-      }
+      if (match[2])
+        patternCache[cacheKey] = next && next[0] !== ":" && next[0] !== "*" ? [
+          cacheKey,
+          match[1],
+          new RegExp(`^${match[2]}(?=/${next})`)
+        ] : [
+          label,
+          match[1],
+          new RegExp(`^${match[2]}$`)
+        ];
+      else
+        patternCache[cacheKey] = [
+          label,
+          match[1],
+          true
+        ];
     }
     return patternCache[cacheKey];
   }
@@ -78338,9 +78532,8 @@ var getPath = (request) => {
       const end = queryIndex === -1 ? hashIndex === -1 ? undefined : hashIndex : hashIndex === -1 ? queryIndex : Math.min(queryIndex, hashIndex);
       const path = url.slice(start, end);
       return tryDecodeURI2(path.includes("%25") ? path.replace(/%25/g, "%2525") : path);
-    } else if (charCode === 63 || charCode === 35) {
+    } else if (charCode === 63 || charCode === 35)
       break;
-    }
   }
   return url.slice(start, i);
 };
@@ -78349,109 +78542,93 @@ var getPathNoStrict = (request) => {
   return result.length > 1 && result.at(-1) === "/" ? result.slice(0, -1) : result;
 };
 var mergePath = (base, sub, ...rest) => {
-  if (rest.length) {
+  if (rest.length)
     sub = mergePath(sub, ...rest);
-  }
   return `${base?.[0] === "/" ? "" : "/"}${base}${sub === "/" ? "" : `${base?.at(-1) === "/" ? "" : "/"}${sub?.[0] === "/" ? sub.slice(1) : sub}`}`;
 };
 var checkOptionalParameter = (path) => {
-  if (path.charCodeAt(path.length - 1) !== 63 || !path.includes(":")) {
+  if (path.charCodeAt(path.length - 1) !== 63 || !path.includes(":"))
     return null;
-  }
   const segments = path.split("/");
   const results = [];
   let basePath = "";
   segments.forEach((segment) => {
-    if (segment !== "" && !/\:/.test(segment)) {
+    if (segment !== "" && !/\:/.test(segment))
       basePath += "/" + segment;
-    } else if (/\:/.test(segment)) {
+    else if (/\:/.test(segment)) {
       if (segment.charCodeAt(segment.length - 1) === 63) {
-        if (results.length === 0 && basePath === "") {
+        if (results.length === 0 && basePath === "")
           results.push("/");
-        } else {
+        else
           results.push(basePath);
-        }
         const optionalSegment = segment.slice(0, -1);
         basePath += "/" + optionalSegment;
         results.push(basePath);
-      } else {
+      } else
         basePath += "/" + segment;
-      }
     }
   });
   return results.filter((v, i, a) => a.indexOf(v) === i);
 };
 var tryDecodeURIComponent = (str) => str.indexOf("%") !== -1 ? tryDecode2(str, decodeURIComponent_) : str;
 var _decodeURI = (value) => {
-  if (value.indexOf("+") !== -1) {
+  if (value.indexOf("+") !== -1)
     value = value.replace(/\+/g, " ");
-  }
   return tryDecodeURIComponent(value);
 };
 var _getQueryParam = (url, key, multiple) => {
   const hashIndex = url.indexOf("#", 8);
-  if (hashIndex !== -1) {
+  if (hashIndex !== -1)
     url = url.slice(0, hashIndex);
-  }
   let encoded;
   if (!multiple && key && key.indexOf("%") === -1 && key.indexOf("+") === -1) {
-    let keyIndex2 = url.indexOf("?", 8);
-    if (keyIndex2 === -1) {
+    let keyIndex = url.indexOf("?", 8);
+    if (keyIndex === -1)
       return;
-    }
-    if (!url.startsWith(key, keyIndex2 + 1)) {
-      keyIndex2 = url.indexOf(`&${key}`, keyIndex2 + 1);
-    }
-    while (keyIndex2 !== -1) {
-      const trailingKeyCode = url.charCodeAt(keyIndex2 + key.length + 1);
+    if (!url.startsWith(key, keyIndex + 1))
+      keyIndex = url.indexOf(`&${key}`, keyIndex + 1);
+    while (keyIndex !== -1) {
+      const trailingKeyCode = url.charCodeAt(keyIndex + key.length + 1);
       if (trailingKeyCode === 61) {
-        const valueIndex = keyIndex2 + key.length + 2;
+        const valueIndex = keyIndex + key.length + 2;
         const endIndex = url.indexOf("&", valueIndex);
         return _decodeURI(url.slice(valueIndex, endIndex === -1 ? undefined : endIndex));
-      } else if (trailingKeyCode == 38 || isNaN(trailingKeyCode)) {
+      } else if (trailingKeyCode == 38 || isNaN(trailingKeyCode))
         return "";
-      }
-      keyIndex2 = url.indexOf(`&${key}`, keyIndex2 + 1);
+      keyIndex = url.indexOf(`&${key}`, keyIndex + 1);
     }
     encoded = /[%+]/.test(url);
-    if (!encoded) {
+    if (!encoded)
       return;
-    }
   }
-  const results = /* @__PURE__ */ Object.create(null);
+  const results = Object.create(null);
   encoded ??= /[%+]/.test(url);
   let keyIndex = url.indexOf("?", 8);
   while (keyIndex !== -1) {
     const nextKeyIndex = url.indexOf("&", keyIndex + 1);
     let valueIndex = url.indexOf("=", keyIndex);
-    if (valueIndex > nextKeyIndex && nextKeyIndex !== -1) {
+    if (valueIndex > nextKeyIndex && nextKeyIndex !== -1)
       valueIndex = -1;
-    }
     let name = url.slice(keyIndex + 1, valueIndex === -1 ? nextKeyIndex === -1 ? undefined : nextKeyIndex : valueIndex);
-    if (encoded) {
+    if (encoded)
       name = _decodeURI(name);
-    }
     keyIndex = nextKeyIndex;
-    if (name === "") {
+    if (name === "")
       continue;
-    }
     let value;
-    if (valueIndex === -1) {
+    if (valueIndex === -1)
       value = "";
-    } else {
+    else {
       value = url.slice(valueIndex + 1, nextKeyIndex === -1 ? undefined : nextKeyIndex);
-      if (encoded) {
+      if (encoded)
         value = _decodeURI(value);
-      }
     }
     if (multiple) {
-      if (!(results[name] && Array.isArray(results[name]))) {
+      if (!(results[name] && Array.isArray(results[name])))
         results[name] = [];
-      }
       results[name].push(value);
-    } else {
+    } else
       results[name] ??= value;
-    }
   }
   return key ? results[key] : results;
 };
@@ -78461,7 +78638,7 @@ var getQueryParams = (url, key) => {
 };
 var decodeURIComponent_ = decodeURIComponent;
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/request.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/request.js
 var HonoRequest = class {
   raw;
   #validatedData;
@@ -78487,9 +78664,8 @@ var HonoRequest = class {
     const keys = Object.keys(this.#matchResult[0][this.routeIndex]?.[1] ?? {});
     for (const key of keys) {
       const value = this.#getParamValue(this.#matchResult[0][this.routeIndex][1][key]);
-      if (value !== undefined) {
+      if (value !== undefined)
         decoded[key] = tryDecodeURIComponent(value);
-      }
     }
     return decoded;
   }
@@ -78503,10 +78679,9 @@ var HonoRequest = class {
     return getQueryParams(this.url, key);
   }
   header(name) {
-    if (name) {
+    if (name)
       return this.raw.headers.get(name) ?? undefined;
-    }
-    const headerData = /* @__PURE__ */ Object.create(null);
+    const headerData = Object.create(null);
     this.raw.headers.forEach((value, key) => {
       headerData[key] = value;
     });
@@ -78518,17 +78693,15 @@ var HonoRequest = class {
   #cachedBody = (key) => {
     const { bodyCache, raw } = this;
     const cachedBody = bodyCache[key];
-    if (cachedBody) {
+    if (cachedBody)
       return cachedBody;
-    }
-    for (const anyCachedKey in bodyCache) {
+    for (const anyCachedKey in bodyCache)
       return bodyCache[anyCachedKey].then((body) => {
-        if (anyCachedKey === "json") {
+        if (anyCachedKey === "json")
           body = JSON.stringify(body);
-        }
-        return new Response(body)[key]();
+        const contentType = anyCachedKey === "formData" ? undefined : raw.headers.get("content-type");
+        return new Response(body, { headers: contentType ? { "Content-Type": contentType } : undefined })[key]();
       });
-    }
     return bodyCache[key] = raw[key]();
   };
   json() {
@@ -78572,7 +78745,7 @@ var HonoRequest = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/utils/html.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/utils/html.js
 var HtmlEscapedCallbackPhase = {
   Stringify: 1,
   BeforeStream: 2,
@@ -78586,31 +78759,30 @@ var raw = (value, callbacks) => {
 };
 var resolveCallback = async (str, phase, preserveCallbacks, context, buffer) => {
   if (typeof str === "object" && !(str instanceof String)) {
-    if (!(str instanceof Promise)) {
+    if (!(str instanceof Promise))
       str = str.toString();
-    }
-    if (str instanceof Promise) {
+    if (str instanceof Promise)
       str = await str;
-    }
   }
   const callbacks = str.callbacks;
-  if (!callbacks?.length) {
+  if (!callbacks?.length)
     return Promise.resolve(str);
-  }
-  if (buffer) {
+  if (buffer)
     buffer[0] += str;
-  } else {
+  else
     buffer = [str];
-  }
-  const resStr = Promise.all(callbacks.map((c) => c({ phase, buffer, context }))).then((res) => Promise.all(res.filter(Boolean).map((str2) => resolveCallback(str2, phase, false, context, buffer))).then(() => buffer[0]));
-  if (preserveCallbacks) {
+  const resStr = Promise.all(callbacks.map((c) => c({
+    phase,
+    buffer,
+    context
+  }))).then((res) => Promise.all(res.filter(Boolean).map((str) => resolveCallback(str, phase, false, context, buffer))).then(() => buffer[0]));
+  if (preserveCallbacks)
     return raw(await resStr, callbacks);
-  } else {
+  else
     return resStr;
-  }
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/context.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/context.js
 var TEXT_PLAIN = "text/plain; charset=UTF-8";
 var setDefaultContentType = (contentType, headers) => {
   return {
@@ -78650,40 +78822,33 @@ var Context = class {
     return this.#req;
   }
   get event() {
-    if (this.#executionCtx && "respondWith" in this.#executionCtx) {
+    if (this.#executionCtx && "respondWith" in this.#executionCtx)
       return this.#executionCtx;
-    } else {
+    else
       throw Error("This context has no FetchEvent");
-    }
   }
   get executionCtx() {
-    if (this.#executionCtx) {
+    if (this.#executionCtx)
       return this.#executionCtx;
-    } else {
+    else
       throw Error("This context has no ExecutionContext");
-    }
   }
   get res() {
-    return this.#res ||= createResponseInstance(null, {
-      headers: this.#preparedHeaders ??= new Headers
-    });
+    return this.#res ||= createResponseInstance(null, { headers: this.#preparedHeaders ??= new Headers });
   }
   set res(_res) {
     if (this.#res && _res) {
       _res = createResponseInstance(_res.body, _res);
       for (const [k, v] of this.#res.headers.entries()) {
-        if (k === "content-type") {
+        if (k === "content-type")
           continue;
-        }
         if (k === "set-cookie") {
           const cookies = this.#res.headers.getSetCookie();
           _res.headers.delete("set-cookie");
-          for (const cookie of cookies) {
+          for (const cookie of cookies)
             _res.headers.append("set-cookie", cookie);
-          }
-        } else {
+        } else
           _res.headers.set(k, v);
-        }
       }
     }
     this.#res = _res;
@@ -78699,17 +78864,15 @@ var Context = class {
     this.#renderer = renderer;
   };
   header = (name, value, options) => {
-    if (this.finalized) {
+    if (this.finalized)
       this.#res = createResponseInstance(this.#res.body, this.#res);
-    }
     const headers = this.#res ? this.#res.headers : this.#preparedHeaders ??= new Headers;
-    if (value === undefined) {
+    if (value === undefined)
       headers.delete(name);
-    } else if (options?.append) {
+    else if (options?.append)
       headers.append(name, value);
-    } else {
+    else
       headers.set(name, value);
-    }
   };
   status = (status) => {
     this.#status = status;
@@ -78722,46 +78885,40 @@ var Context = class {
     return this.#var ? this.#var.get(key) : undefined;
   };
   get var() {
-    if (!this.#var) {
+    if (!this.#var)
       return {};
-    }
     return Object.fromEntries(this.#var);
   }
   #newResponse(data, arg, headers) {
     let responseHeaders = this.#res ? new Headers(this.#res.headers) : this.#preparedHeaders;
     if (typeof arg === "object" && arg.headers) {
       responseHeaders ??= new Headers;
-      for (const [key, value] of new Headers(arg.headers)) {
-        if (key === "set-cookie") {
+      for (const [key, value] of new Headers(arg.headers))
+        if (key === "set-cookie")
           responseHeaders.append(key, value);
-        } else {
+        else
           responseHeaders.set(key, value);
-        }
-      }
     }
     if (headers) {
       if (!responseHeaders) {
         let count = 0;
-        for (const k in headers) {
+        for (const k in headers)
           if (++count > 1 || typeof headers[k] !== "string") {
             responseHeaders = new Headers;
             break;
           }
-        }
       }
-      if (responseHeaders) {
+      if (responseHeaders)
         for (const k in headers) {
           const v = headers[k];
-          if (typeof v === "string") {
+          if (typeof v === "string")
             responseHeaders.set(k, v);
-          } else {
+          else {
             responseHeaders.delete(k);
-            for (const v2 of v) {
+            for (const v2 of v)
               responseHeaders.append(k, v2);
-            }
           }
         }
-      }
     }
     const status = typeof arg === "number" ? arg : arg?.status ?? this.#status;
     return createResponseInstance(data, {
@@ -78792,18 +78949,61 @@ var Context = class {
   };
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/router.js
-var METHOD_NAME_ALL = "ALL";
-var METHOD_NAME_ALL_LOWERCASE = "all";
-var METHODS = ["get", "post", "put", "delete", "options", "patch", "query"];
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/compose.js
+var compose = (middleware, onError, onNotFound) => {
+  return (context, next) => {
+    let index = -1;
+    return dispatch(0);
+    async function dispatch(i) {
+      if (i <= index)
+        throw new Error("next() called multiple times");
+      index = i;
+      let res;
+      let isError = false;
+      let handler;
+      if (middleware[i]) {
+        handler = middleware[i][0][0];
+        context.req.routeIndex = i;
+      } else
+        handler = i === middleware.length && next || undefined;
+      if (handler)
+        try {
+          res = await handler(context, () => dispatch(i + 1));
+        } catch (err) {
+          if (err instanceof Error && onError) {
+            context.error = err;
+            res = await onError(err, context);
+            isError = true;
+          } else
+            throw err;
+        }
+      else if (context.finalized === false && onNotFound)
+        res = await onNotFound(context);
+      if (res && (context.finalized === false || isError))
+        context.res = res;
+      return context;
+    }
+  };
+};
+
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/router.js
+var METHODS = [
+  "get",
+  "post",
+  "put",
+  "delete",
+  "options",
+  "patch",
+  "query"
+];
 var MESSAGE_MATCHER_IS_ALREADY_BUILT = "Can not add a route since the matcher is already built.";
 var UnsupportedPathError = class extends Error {
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/utils/constants.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/utils/constants.js
 var COMPOSED_HANDLER = "__COMPOSED_HANDLER";
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/hono-base.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/hono-base.js
 var notFoundHandler = (c) => {
   return c.text("404 Not Found", 404);
 };
@@ -78815,7 +79015,7 @@ var errorHandler = (err, c) => {
   console.error(err);
   return c.text("Internal Server Error", 500);
 };
-var Hono = class _Hono {
+var Hono = class Hono {
   get;
   post;
   put;
@@ -78832,15 +79032,13 @@ var Hono = class _Hono {
   #path = "/";
   routes = [];
   constructor(options = {}) {
-    const allMethods = [...METHODS, METHOD_NAME_ALL_LOWERCASE];
-    allMethods.forEach((method) => {
+    [...METHODS, "all"].forEach((method) => {
       this[method] = (args1, ...args) => {
         const methodName = method.toUpperCase();
-        if (typeof args1 === "string") {
+        if (typeof args1 === "string")
           this.#path = args1;
-        } else {
+        else
           this.#addRoute(methodName, this.#path, args1);
-        }
         args.forEach((handler) => {
           this.#addRoute(methodName, this.#path, handler);
         });
@@ -78852,22 +79050,21 @@ var Hono = class _Hono {
         this.#path = p;
         for (const m of [method].flat()) {
           const methodName = m.toUpperCase();
-          for (const handler of handlers) {
+          for (const handler of handlers)
             this.#addRoute(methodName, this.#path, handler);
-          }
         }
       }
       return this;
     };
     this.use = (arg1, ...handlers) => {
-      if (typeof arg1 === "string") {
+      if (typeof arg1 === "string")
         this.#path = arg1;
-      } else {
+      else {
         this.#path = "*";
         handlers.unshift(arg1);
       }
       handlers.forEach((handler) => {
-        this.#addRoute(METHOD_NAME_ALL, this.#path, handler);
+        this.#addRoute("ALL", this.#path, handler);
       });
       return this;
     };
@@ -78876,7 +79073,7 @@ var Hono = class _Hono {
     this.getPath = strict ?? true ? options.getPath ?? getPath : getPathNoStrict;
   }
   #clone() {
-    const clone = new _Hono({
+    const clone = new Hono({
       router: this.router,
       getPath: this.getPath
     });
@@ -78891,9 +79088,9 @@ var Hono = class _Hono {
     const subApp = this.basePath(path);
     app.routes.map((r) => {
       let handler;
-      if (app.errorHandler === errorHandler) {
+      if (app.errorHandler === errorHandler)
         handler = r.handler;
-      } else {
+      else {
         handler = async (c, next) => (await compose([], app.errorHandler)(c, () => r.handler(c, next))).res;
         handler[COMPOSED_HANDLER] = r.handler;
       }
@@ -78918,20 +79115,19 @@ var Hono = class _Hono {
     let replaceRequest;
     let optionHandler;
     if (options) {
-      if (typeof options === "function") {
+      if (typeof options === "function")
         optionHandler = options;
-      } else {
+      else {
         optionHandler = options.optionHandler;
-        if (options.replaceRequest === false) {
+        if (options.replaceRequest === false)
           replaceRequest = (request) => request;
-        } else {
+        else
           replaceRequest = options.replaceRequest;
-        }
       }
     }
     const getOptions = optionHandler ? (c) => {
-      const options2 = optionHandler(c);
-      return Array.isArray(options2) ? options2 : [options2];
+      const options = optionHandler(c);
+      return Array.isArray(options) ? options : [options];
     } : (c) => {
       let executionContext = undefined;
       try {
@@ -78950,12 +79146,11 @@ var Hono = class _Hono {
     })();
     const handler = async (c, next) => {
       const res = await applicationHandler(replaceRequest(c.req.raw), ...getOptions(c));
-      if (res) {
+      if (res)
         return res;
-      }
       await next();
     };
-    this.#addRoute(METHOD_NAME_ALL, mergePath(path, "*"), handler);
+    this.#addRoute("ALL", mergePath(path, "*"), handler);
     return this;
   }
   #addRoute(method, path, handler, baseRoutePath) {
@@ -78970,15 +79165,13 @@ var Hono = class _Hono {
     this.routes.push(r);
   }
   #handleError(err, c) {
-    if (err instanceof Error) {
+    if (err instanceof Error)
       return this.errorHandler(err, c);
-    }
     throw err;
   }
   #dispatch(request, executionCtx, env, method) {
-    if (method === "HEAD") {
+    if (method === "HEAD")
       return (async () => new Response(null, await this.#dispatch(request, executionCtx, env, "GET")))();
-    }
     const path = this.getPath(request, { env });
     const matchResult = this.router.match(method, path);
     const c = new Context(request, {
@@ -79003,9 +79196,8 @@ var Hono = class _Hono {
     return (async () => {
       try {
         const context = await composed(c);
-        if (!context.finalized) {
+        if (!context.finalized)
           throw new Error("Context is not finalized. Did you forget to return a Response object or `await next()`?");
-        }
         return context.res;
       } catch (err) {
         return this.#handleError(err, c);
@@ -79016,9 +79208,8 @@ var Hono = class _Hono {
     return this.#dispatch(request, rest[1], rest[0], request.method);
   };
   request = (input, requestInit, Env, executionCtx) => {
-    if (input instanceof Request) {
+    if (input instanceof Request)
       return this.fetch(requestInit ? new Request(input, requestInit) : input, Env, executionCtx);
-    }
     input = input.toString();
     return this.fetch(new Request(/^https?:\/\//.test(input) ? input : `http://localhost${mergePath("/", input)}`, requestInit), Env, executionCtx);
   };
@@ -79029,56 +79220,49 @@ var Hono = class _Hono {
   };
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/router/utils.js
-var createNullObject = () => /* @__PURE__ */ Object.create(null);
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/router/utils.js
+var createNullObject = () => Object.create(null);
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/matcher.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/router/reg-exp-router/matcher.js
 var emptyParam = [];
 function match(method, path) {
   const matchers = this.buildAllMatchers();
-  const match2 = (method2, path2) => {
-    const matcher = matchers[method2] || matchers[METHOD_NAME_ALL];
-    const staticMatch = matcher[2][path2];
-    if (staticMatch) {
+  const match = (method, path) => {
+    const matcher = matchers[method] || matchers["ALL"];
+    const staticMatch = matcher[2][path];
+    if (staticMatch)
       return staticMatch;
-    }
-    const match3 = path2.match(matcher[0]);
-    if (!match3) {
+    const match = path.match(matcher[0]);
+    if (!match)
       return [[], emptyParam];
-    }
-    const index = match3.indexOf("", 1);
-    return [matcher[1][index], match3];
+    const index = match.indexOf("", 1);
+    return [matcher[1][index], match];
   };
-  this.match = match2;
-  return match2(method, path);
+  this.match = match;
+  return match(method, path);
 }
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/node.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/router/reg-exp-router/node.js
 var LABEL_REG_EXP_STR = "[^/]+";
-var ONLY_WILDCARD_REG_EXP_STR = ".*";
 var TAIL_WILDCARD_REG_EXP_STR = "(?:|/.*)";
-var PATH_ERROR = /* @__PURE__ */ Symbol();
-var regExpMetaChars = new Set(".\\+*[^]$()");
+var PATH_ERROR = Symbol();
+var regExpMetaChars = /* @__PURE__ */ new Set(".\\+*[^]$()");
 function compareKey(a, b) {
-  if (a.length === 1) {
+  if (a.length === 1)
     return b.length === 1 ? a < b ? -1 : 1 : -1;
-  }
-  if (b.length === 1) {
+  if (b.length === 1)
     return 1;
-  }
-  if (a === ONLY_WILDCARD_REG_EXP_STR || a === TAIL_WILDCARD_REG_EXP_STR) {
-    return b === TAIL_WILDCARD_REG_EXP_STR ? -1 : 1;
-  } else if (b === ONLY_WILDCARD_REG_EXP_STR || b === TAIL_WILDCARD_REG_EXP_STR) {
+  if (a === ".*" || a === "(?:|/.*)")
+    return b === "(?:|/.*)" ? -1 : 1;
+  else if (b === ".*" || b === "(?:|/.*)")
     return -1;
-  }
-  if (a === LABEL_REG_EXP_STR) {
+  if (a === "[^/]+")
     return 1;
-  } else if (b === LABEL_REG_EXP_STR) {
+  else if (b === "[^/]+")
     return -1;
-  }
   return a.length === b.length ? a < b ? -1 : 1 : b.length - a.length;
 }
-var Node = class _Node {
+var Node = class Node {
   #index;
   #varIndex;
   #children = createNullObject();
@@ -79086,33 +79270,40 @@ var Node = class _Node {
     let node = this;
     for (let i = 0, len = tokens.length;i < len; i++) {
       const token = tokens[i];
-      const pattern = token.length === 1 ? token === "*" ? i === len - 1 ? ["", "", ONLY_WILDCARD_REG_EXP_STR] : ["", "", LABEL_REG_EXP_STR] : null : token === "/*" ? ["", "", TAIL_WILDCARD_REG_EXP_STR] : token.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
+      const pattern = token.length === 1 ? token === "*" ? i === len - 1 ? [
+        "",
+        "",
+        ".*"
+      ] : [
+        "",
+        "",
+        LABEL_REG_EXP_STR
+      ] : null : token === "/*" ? [
+        "",
+        "",
+        TAIL_WILDCARD_REG_EXP_STR
+      ] : token.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
       let nextNode;
       if (pattern) {
         const name = pattern[1];
-        let regexpStr = pattern[2] || LABEL_REG_EXP_STR;
+        let regexpStr = pattern[2] || "[^/]+";
         if (name && pattern[2]) {
-          if (regexpStr === ".*") {
+          if (regexpStr === ".*")
             throw PATH_ERROR;
-          }
           regexpStr = regexpStr.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:");
-          if (/\((?!\?:)/.test(regexpStr)) {
+          if (/\((?!\?:)/.test(regexpStr))
             throw PATH_ERROR;
-          }
-          if (regexpStr.length === 1 && regExpMetaChars.has(regexpStr)) {
+          if (regexpStr.length === 1 && regExpMetaChars.has(regexpStr))
             throw PATH_ERROR;
-          }
         }
         nextNode = node.#children[regexpStr];
         if (!nextNode) {
-          if (regexpStr !== ONLY_WILDCARD_REG_EXP_STR && regexpStr !== TAIL_WILDCARD_REG_EXP_STR) {
-            for (const k in node.#children) {
-              if ((regexpStr.length > 1 || k.length > 1) && k !== ONLY_WILDCARD_REG_EXP_STR && k !== TAIL_WILDCARD_REG_EXP_STR) {
+          if (regexpStr !== ".*" && regexpStr !== "(?:|/.*)") {
+            for (const k in node.#children)
+              if ((regexpStr.length > 1 || k.length > 1) && k !== ".*" && k !== "(?:|/.*)")
                 throw PATH_ERROR;
-              }
-            }
           }
-          nextNode = node.#children[regexpStr] = new _Node;
+          nextNode = node.#children[regexpStr] = new Node;
         }
         if (name !== "") {
           nextNode.#varIndex ??= context.varIndex++;
@@ -79121,42 +79312,35 @@ var Node = class _Node {
       } else {
         nextNode = node.#children[token];
         if (!nextNode) {
-          for (const k in node.#children) {
-            if (k.length > 1 && k !== ONLY_WILDCARD_REG_EXP_STR && k !== TAIL_WILDCARD_REG_EXP_STR) {
+          for (const k in node.#children)
+            if (k.length > 1 && k !== ".*" && k !== "(?:|/.*)")
               throw PATH_ERROR;
-            }
-          }
-          nextNode = node.#children[token] = new _Node;
+          nextNode = node.#children[token] = new Node;
         }
       }
       node = nextNode;
     }
-    if (node.#index !== undefined) {
+    if (node.#index !== undefined)
       throw PATH_ERROR;
-    }
     node.#index = isStatic ? -1 : index;
   }
   buildRegExpStr() {
-    const childKeys = Object.keys(this.#children).sort(compareKey);
-    const strList = childKeys.map((k) => {
+    const strList = Object.keys(this.#children).sort(compareKey).map((k) => {
       const c = this.#children[k];
       const childStr = c.buildRegExpStr();
       return childStr === "" ? "" : (typeof c.#varIndex === "number" ? `(${k})@${c.#varIndex}` : regExpMetaChars.has(k) ? `\\${k}` : k) + childStr;
     }).filter(Boolean);
-    if (typeof this.#index === "number" && this.#index !== -1) {
+    if (typeof this.#index === "number" && this.#index !== -1)
       strList.unshift(`#${this.#index}`);
-    }
-    if (strList.length === 0) {
+    if (strList.length === 0)
       return "";
-    }
-    if (strList.length === 1) {
+    if (strList.length === 1)
       return strList[0];
-    }
     return "(?:" + strList.join("|") + ")";
   }
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/trie.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/router/reg-exp-router/trie.js
 var Trie = class {
   #context = { varIndex: 0 };
   #root = new Node;
@@ -79179,28 +79363,29 @@ var Trie = class {
         replaced = true;
         return mark;
       });
-      if (!replaced) {
+      if (!replaced)
         break;
-      }
     }
     const tokens = markedPath.match(/(?::[^\/]+)|(?:\/\*$)|./g) || [];
     for (let i = groups.length - 1;i >= 0; i--) {
       const [mark] = groups[i];
-      for (let j = tokens.length - 1;j >= 0; j--) {
+      for (let j = tokens.length - 1;j >= 0; j--)
         if (tokens[j].indexOf(mark) !== -1) {
           tokens[j] = tokens[j].replace(mark, groups[i][1]);
           break;
         }
-      }
     }
     this.#root.insert(tokens, this.#index, paramAssoc, this.#context, false);
     this.paths[path] = [this.#index++, paramAssoc];
   }
   buildRegExp() {
     let regexp = this.#root.buildRegExpStr();
-    if (regexp === "") {
-      return [/^$/, [], []];
-    }
+    if (regexp === "")
+      return [
+        /^$/,
+        [],
+        []
+      ];
     let captureIndex = 0;
     const indexReplacementMap = [];
     const paramReplacementMap = [];
@@ -79215,22 +79400,23 @@ var Trie = class {
       }
       return "";
     });
-    return [new RegExp(`^${regexp}`), indexReplacementMap, paramReplacementMap];
+    return [
+      new RegExp(`^${regexp}`),
+      indexReplacementMap,
+      paramReplacementMap
+    ];
   }
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/router.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/router/reg-exp-router/router.js
 var wildcardRegExpCache = createNullObject();
 function buildWildcardRegExp(path) {
-  return wildcardRegExpCache[path] ??= new RegExp(`^${path.replace(/\/:[^/{}]+(?:\{\[\^\/]\+})?(?=[/{]|$)|\/?\*$|([.\\+*[^\]$()?{}|])/g, (match2, metaChar) => metaChar ? `\\${metaChar}` : match2 === "/*" ? TAIL_WILDCARD_REG_EXP_STR : match2 === "*" ? ONLY_WILDCARD_REG_EXP_STR : `/:${LABEL_REG_EXP_STR}`)}$`);
+  return wildcardRegExpCache[path] ??= new RegExp(`^${path.replace(/\/:[^/{}]+(?:\{\[\^\/]\+})?(?=[/{]|$)|\/?\*$|([.\\+*[^\]$()?{}|])/g, (match, metaChar) => metaChar ? `\\${metaChar}` : match === "/*" ? TAIL_WILDCARD_REG_EXP_STR : match === "*" ? ".*" : `/:${LABEL_REG_EXP_STR}`)}$`);
 }
 function findMiddleware(middleware, path) {
-  for (const k of Object.keys(middleware).sort((a, b) => b.length - a.length)) {
-    if (buildWildcardRegExp(k).test(path)) {
+  for (const k of Object.keys(middleware).sort((a, b) => b.length - a.length))
+    if (buildWildcardRegExp(k).test(path))
       return [...middleware[k]];
-    }
-  }
-  return;
 }
 var RegExpRouter = class {
   name = "RegExpRouter";
@@ -79238,9 +79424,9 @@ var RegExpRouter = class {
   #routes;
   #tries;
   constructor() {
-    this.#middleware = { [METHOD_NAME_ALL]: createNullObject() };
-    this.#routes = { [METHOD_NAME_ALL]: createNullObject() };
-    this.#tries = { [METHOD_NAME_ALL]: new Trie };
+    this.#middleware = { ["ALL"]: createNullObject() };
+    this.#routes = { ["ALL"]: createNullObject() };
+    this.#tries = { ["ALL"]: new Trie };
   }
   #insertPath(method, path) {
     try {
@@ -79252,57 +79438,49 @@ var RegExpRouter = class {
   add(method, path, handler) {
     const middleware = this.#middleware;
     const routes = this.#routes;
-    if (!middleware) {
+    if (!middleware)
       throw new Error(MESSAGE_MATCHER_IS_ALREADY_BUILT);
-    }
     if (!middleware[method]) {
       this.#tries[method] = new Trie;
       for (const handlerMap of [middleware, routes]) {
         handlerMap[method] = createNullObject();
-        for (const p in handlerMap[METHOD_NAME_ALL]) {
-          handlerMap[method][p] = [...handlerMap[METHOD_NAME_ALL][p]];
+        for (const p in handlerMap["ALL"]) {
+          handlerMap[method][p] = [...handlerMap["ALL"][p]];
           this.#insertPath(method, p);
         }
       }
     }
-    if (path === "/*") {
+    if (path === "/*")
       path = "*";
-    }
-    const methods = method === METHOD_NAME_ALL ? Object.keys(middleware) : [method];
+    const methods = method === "ALL" ? Object.keys(middleware) : [method];
     if (/\*$/.test(path)) {
       const re = buildWildcardRegExp(path);
-      for (const m of methods) {
+      for (const m of methods)
         if (!middleware[m][path]) {
           this.#insertPath(m, path);
-          middleware[m][path] = findMiddleware(middleware[m], path) || findMiddleware(middleware[METHOD_NAME_ALL], path) || [];
+          middleware[m][path] = findMiddleware(middleware[m], path) || findMiddleware(middleware["ALL"], path) || [];
         }
-      }
-      for (const handlerMap of [middleware, routes]) {
-        for (const m of methods) {
-          for (const p in handlerMap[m]) {
+      for (const handlerMap of [middleware, routes])
+        for (const m of methods)
+          for (const p in handlerMap[m])
             re.test(p) && handlerMap[m][p].push([handler, path]);
-          }
-        }
-      }
       return;
     }
     const paths = checkOptionalParameter(path) || [path];
-    for (const path2 of paths) {
+    for (const path of paths)
       for (const m of methods) {
-        if (!routes[m][path2]) {
-          this.#insertPath(m, path2);
-          routes[m][path2] = findMiddleware(middleware[m], path2) || findMiddleware(middleware[METHOD_NAME_ALL], path2) || [];
+        if (!routes[m][path]) {
+          this.#insertPath(m, path);
+          routes[m][path] = findMiddleware(middleware[m], path) || findMiddleware(middleware["ALL"], path) || [];
         }
-        routes[m][path2].push([handler, path2]);
+        routes[m][path].push([handler, path]);
       }
-    }
   }
   match = match;
   buildAllMatchers() {
     const matchers = createNullObject();
-    for (const method of Object.keys(this.#routes)) {
+    for (const method of Object.keys(this.#routes))
       matchers[method] = this.#buildMatcher(method);
-    }
     this.#middleware = this.#routes = this.#tries = undefined;
     wildcardRegExpCache = createNullObject();
     return matchers;
@@ -79314,7 +79492,7 @@ var RegExpRouter = class {
     const staticMap = createNullObject();
     const handlerData = [];
     const [regexp, indexReplacementMap, paramReplacementMap] = trie.buildRegExp();
-    for (const r of [middleware, routes]) {
+    for (const r of [middleware, routes])
       for (const path in r) {
         const handlers = r[path];
         const pathData = trie.paths[path];
@@ -79322,20 +79500,20 @@ var RegExpRouter = class {
           staticMap[path] = [handlers.map(([h]) => [h, createNullObject()]), emptyParam];
           continue;
         }
-        handlerData[pathData[0]] = handlers.map(([h, handlerPath]) => [
-          h,
-          trie.paths[handlerPath][1].reduceRight((map, [key], i) => {
-            map[key] = paramReplacementMap[pathData[1][i][1]];
-            return map;
-          }, createNullObject())
-        ]);
+        handlerData[pathData[0]] = handlers.map(([h, handlerPath]) => [h, trie.paths[handlerPath][1].reduceRight((map, [key], i) => {
+          map[key] = paramReplacementMap[pathData[1][i][1]];
+          return map;
+        }, createNullObject())]);
       }
-    }
-    return [regexp, indexReplacementMap.map((i) => handlerData[i]), staticMap];
+    return [
+      regexp,
+      indexReplacementMap.map((i) => handlerData[i]),
+      staticMap
+    ];
   }
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/router/smart-router/router.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/router/smart-router/router.js
 var SmartRouter = class {
   name = "SmartRouter";
   #routers = [];
@@ -79344,15 +79522,17 @@ var SmartRouter = class {
     this.#routers = init.routers;
   }
   add(method, path, handler) {
-    if (!this.#routes) {
+    if (!this.#routes)
       throw new Error(MESSAGE_MATCHER_IS_ALREADY_BUILT);
-    }
-    this.#routes.push([method, path, handler]);
+    this.#routes.push([
+      method,
+      path,
+      handler
+    ]);
   }
   match(method, path) {
-    if (!this.#routes) {
+    if (!this.#routes)
       throw new Error("Fatal error");
-    }
     const routers = this.#routers;
     const routes = this.#routes;
     const len = routers.length;
@@ -79361,14 +79541,12 @@ var SmartRouter = class {
     for (;i < len; i++) {
       const router = routers[i];
       try {
-        for (let i2 = 0, len2 = routes.length;i2 < len2; i2++) {
-          router.add(...routes[i2]);
-        }
+        for (let i = 0, len = routes.length;i < len; i++)
+          router.add(...routes[i]);
         res = router.match(method, path);
       } catch (e) {
-        if (e instanceof UnsupportedPathError) {
+        if (e instanceof UnsupportedPathError)
           continue;
-        }
         throw e;
       }
       this.match = router.match.bind(router);
@@ -79376,24 +79554,22 @@ var SmartRouter = class {
       this.#routes = undefined;
       break;
     }
-    if (i === len) {
+    if (i === len)
       throw new Error("Fatal error");
-    }
     this.name = `SmartRouter + ${this.activeRouter.name}`;
     return res;
   }
   get activeRouter() {
-    if (this.#routes || this.#routers.length !== 1) {
+    if (this.#routes || this.#routers.length !== 1)
       throw new Error("No active router has been determined yet.");
-    }
     return this.#routers[0];
   }
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/router/trie-router/node.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/router/trie-router/node.js
 var emptyParams = createNullObject();
 var order = 0;
-var Node2 = class _Node {
+var Node2 = class Node {
   #methods = [];
   #children = createNullObject();
   #patterns = [];
@@ -79409,34 +79585,31 @@ var Node2 = class _Node {
       const pattern = getPattern(p, nextP) || (nextP === undefined && p && p.indexOf("*") === p.length - 1 ? p : null);
       const isParam = Array.isArray(pattern);
       const key = isParam ? pattern[0] : pattern || p;
-      const child = curNode.#children[key] ||= new _Node;
+      const child = curNode.#children[key] ||= new Node;
       if (pattern && !child.#pattern) {
         child.#pattern = pattern;
         curNode.#patterns.push(child);
       }
       curNode = child;
-      if (isParam) {
+      if (isParam)
         possibleKeys.add(pattern[1]);
-      }
     }
-    curNode.#methods.push({
-      [method]: {
-        handler,
-        possibleKeys: [...possibleKeys],
-        score: ++order
-      }
-    });
+    curNode.#methods.push({ [method]: {
+      handler,
+      possibleKeys: [...possibleKeys],
+      score: ++order
+    } });
   }
   #pushHandlerSets(handlerSets, node, method, nodeParams, params) {
     for (let i = 0, len = node.#methods.length;i < len; i++) {
       const m = node.#methods[i];
-      const handlerSet = m[method] || m[METHOD_NAME_ALL];
+      const handlerSet = m[method] || m["ALL"];
       if (handlerSet) {
         handlerSet.params = createNullObject();
         handlerSets.push(handlerSet);
-        for (let i2 = 0, len2 = handlerSet.possibleKeys.length;i2 < len2; i2++) {
-          const key = handlerSet.possibleKeys[i2];
-          handlerSet.params[key] = params?.[key] && !i2 ? params[key] : nodeParams[key] ?? params?.[key];
+        for (let i = 0, len = handlerSet.possibleKeys.length;i < len; i++) {
+          const key = handlerSet.possibleKeys[i];
+          handlerSet.params[key] = params?.[key] && !i ? params[key] : nodeParams[key] ?? params?.[key];
         }
       }
     }
@@ -79444,8 +79617,7 @@ var Node2 = class _Node {
   search(method, path) {
     const handlerSets = [];
     this.#params = emptyParams;
-    const curNode = this;
-    let curNodes = [curNode];
+    let curNodes = [this];
     const parts = splitPath(path);
     const curNodesQueue = [];
     const len = parts.length;
@@ -79460,13 +79632,11 @@ var Node2 = class _Node {
         if (nextNode) {
           nextNode.#params = node.#params;
           if (isLast) {
-            if (nextNode.#children["*"]) {
+            if (nextNode.#children["*"])
               this.#pushHandlerSets(handlerSets, nextNode.#children["*"], method, node.#params);
-            }
             this.#pushHandlerSets(handlerSets, nextNode, method, node.#params);
-          } else {
+          } else
             tempNodes.push(nextNode);
-          }
         }
         for (const child of node.#patterns) {
           const pattern = child.#pattern;
@@ -79482,9 +79652,8 @@ var Node2 = class _Node {
             continue;
           }
           const [, name, matcher] = pattern;
-          if (!part && matcher === true) {
+          if (!part && matcher === true)
             continue;
-          }
           if (matcher !== true) {
             if (!partOffsets) {
               partOffsets = [];
@@ -79499,14 +79668,12 @@ var Node2 = class _Node {
             if (m) {
               params[name] = m[0];
               this.#pushHandlerSets(handlerSets, child, method, node.#params, params);
-              if (m[0].length === restPathString.length && child.#children["*"]) {
+              if (m[0].length === restPathString.length && child.#children["*"])
                 this.#pushHandlerSets(handlerSets, child.#children["*"], method, node.#params, params);
-              }
               for (const _ in child.#children) {
                 child.#params = params;
                 const componentCount = m[0].match(/\//g)?.length ?? 0;
-                const targetCurNodes = curNodesQueue[componentCount] ||= [];
-                targetCurNodes.push(child);
+                (curNodesQueue[componentCount] ||= []).push(child);
                 break;
               }
               continue;
@@ -79516,9 +79683,8 @@ var Node2 = class _Node {
             params[name] = part;
             if (isLast) {
               this.#pushHandlerSets(handlerSets, child, method, params, node.#params);
-              if (child.#children["*"]) {
+              if (child.#children["*"])
                 this.#pushHandlerSets(handlerSets, child.#children["*"], method, params, node.#params);
-              }
             } else {
               child.#params = params;
               tempNodes.push(child);
@@ -79529,71 +79695,63 @@ var Node2 = class _Node {
       const shifted = curNodesQueue.shift();
       curNodes = shifted ? tempNodes.concat(shifted) : tempNodes;
     }
-    if (handlerSets[1]) {
+    if (handlerSets[1])
       handlerSets.sort((a, b) => {
         return a.score - b.score;
       });
-    }
     return [handlerSets.map(({ handler, params }) => [handler, params])];
   }
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/router/trie-router/router.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/router/trie-router/router.js
 var TrieRouter = class {
   name = "TrieRouter";
   #node = new Node2;
   add(method, path, handler) {
-    for (const result of checkOptionalParameter(path) || [path]) {
+    for (const result of checkOptionalParameter(path) || [path])
       this.#node.insert(method, result, handler);
-    }
   }
   match(method, path) {
     return this.#node.search(method, path);
   }
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/hono.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/hono.js
 var Hono2 = class extends Hono {
   constructor(options = {}) {
     super(options);
-    this.router = options.router ?? new SmartRouter({
-      routers: [new RegExpRouter, new TrieRouter]
-    });
+    this.router = options.router ?? new SmartRouter({ routers: [new RegExpRouter, new TrieRouter] });
   }
 };
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/utils/color.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/utils/color.js
 function getColorEnabled() {
   const { process: process2, Deno: Deno2 } = globalThis;
-  const isNoColor = typeof Deno2?.noColor === "boolean" ? Deno2.noColor : process2 !== undefined ? "NO_COLOR" in process2?.env : false;
-  return !isNoColor;
+  return !(typeof Deno2?.noColor === "boolean" ? Deno2.noColor : process2 !== undefined ? "NO_COLOR" in process2?.env : false);
 }
 async function getColorEnabledAsync() {
   const { navigator: navigator2 } = globalThis;
   const cfWorkers = "cloudflare:workers";
-  const isNoColor = navigator2 !== undefined && navigator2.userAgent === "Cloudflare-Workers" ? await (async () => {
+  return !(navigator2 !== undefined && navigator2.userAgent === "Cloudflare-Workers" ? await (async () => {
     try {
       return "NO_COLOR" in ((await import(cfWorkers)).env ?? {});
     } catch {
       return false;
     }
-  })() : !getColorEnabled();
-  return !isNoColor;
+  })() : !getColorEnabled());
 }
 
-// ../../node_modules/.bun/hono@4.13.7/node_modules/hono/dist/middleware/logger/index.js
+// ../../node_modules/.bun/hono@4.13.13/node_modules/hono/dist/middleware/logger/index.js
 var humanize = (times) => {
   const [delimiter, separator] = [",", "."];
-  const orderTimes = times.map((v) => v.replace(/(\d)(?=(\d\d\d)+(?!\d))/g, "$1" + delimiter));
-  return orderTimes.join(separator);
+  return times.map((v) => v.replace(/(\d)(?=(\d\d\d)+(?!\d))/g, "$1" + delimiter)).join(separator);
 };
 var time2 = (start) => {
   const delta = Date.now() - start;
   return humanize([delta < 1000 ? delta + "ms" : Math.round(delta / 1000) + "s"]);
 };
 var colorStatus = async (status) => {
-  const colorEnabled = await getColorEnabledAsync();
-  if (colorEnabled) {
+  if (await getColorEnabledAsync())
     switch (status / 100 | 0) {
       case 5:
         return `\x1B[31m${status}\x1B[0m`;
@@ -79604,15 +79762,13 @@ var colorStatus = async (status) => {
       case 2:
         return `\x1B[32m${status}\x1B[0m`;
     }
-  }
   return `${status}`;
 };
 async function log(fn, prefix, method, path, status = 0, elapsed) {
-  const out = prefix === "<--" ? `${prefix} ${method} ${path}` : `${prefix} ${method} ${path} ${await colorStatus(status)} ${elapsed}`;
-  fn(out);
+  fn(prefix === "<--" ? `${prefix} ${method} ${path}` : `${prefix} ${method} ${path} ${await colorStatus(status)} ${elapsed}`);
 }
 var logger = (fn = console.log) => {
-  return async function logger2(c, next) {
+  return async function logger(c, next) {
     const { method, url } = c.req;
     const path = url.slice(url.indexOf("/", 8));
     await log(fn, "<--", method, path);
@@ -79700,7 +79856,9 @@ function registerAuditUsageRoutes(app, ctx) {
       size_before: e.size_before ?? null,
       size_after: e.size_after ?? null,
       description: e.description ?? "",
-      created_at: e.created_at ?? ""
+      created_at: e.created_at ?? "",
+      metadata_before: e.metadata_before ?? null,
+      metadata_after: e.metadata_after ?? null
     })));
   });
   app.get("/api/v1/usage-log", async (c) => {
@@ -80677,6 +80835,7 @@ function registerDocumentReadRoutes(app, ctx) {
       updated_at: meta ? meta.updated_at ?? null : null,
       deleted_at: meta ? meta.deleted_at ?? null : null,
       content_hash: meta ? meta.content_hash ?? null : null,
+      metadata_revision: meta ? meta.metadata_revision ?? null : null,
       versions: versions.map((v) => ({
         version_id: v.version_id,
         version_number: v.version_number,
@@ -80797,11 +80956,13 @@ var EDIT_FIELDS = new Set([
   "project_ids",
   "metadata",
   "expected_content_hash",
+  "expected_metadata_revision",
   "last_write_wins",
   "author",
   "requestor",
   "author_type"
 ]);
+var METADATA_TOKEN_DEPRECATION = "deprecated: metadata was replaced without expected_metadata_revision, as last-write-wins, " + "so a concurrent metadata change may have been overwritten. Send the metadata_revision " + "you read (GET /api/v1/documents/{id}); a future release will require it.";
 var TRASHED_MESSAGE = "This document was moved to the trash while you were editing. " + "Restore it from the Trash page first, then save again.";
 function conflictBody(currentHash) {
   const message = "This document changed while you were editing it (another writer saved a newer version). " + "Open it again in a new tab, merge your changes, and save from there.";
@@ -80813,6 +80974,10 @@ function conflictBody(currentHash) {
     ...currentHash ? { current_hash: currentHash } : {}
   };
 }
+function metadataConflictBody() {
+  const message = "This document's metadata changed while you were editing it (another writer changed its tags). " + "Open it again in a new tab, reapply your changes, and save from there.";
+  return { success: false, error: "metadata_conflict", message, detail: message };
+}
 function registerDocumentWriteRoutes(app, ctx) {
   app.post("/api/v1/documents/:document_id/edit", async (c) => {
     const documentId = c.req.param("document_id");
@@ -80863,6 +81028,11 @@ function registerDocumentWriteRoutes(app, ctx) {
     if (expectedHash !== null && !lastWriteWins && currentHash !== null && expectedHash !== currentHash) {
       return c.json(conflictBody(currentHash), 409);
     }
+    const metadataCarried = body.metadata != null;
+    const sentRevision = typeof body.expected_metadata_revision === "number" && Number.isInteger(body.expected_metadata_revision) ? body.expected_metadata_revision : null;
+    const metadataTokenMissing = metadataCarried && sentRevision === null && !lastWriteWins;
+    const warnings = metadataTokenMissing ? [METADATA_TOKEN_DEPRECATION] : undefined;
+    const expectedMetadataRevision = sentRevision ?? (doc.metadata_revision ?? null);
     const proposedHash = content.trim() ? contentHash(content) : null;
     const contentChanged = proposedHash !== null && currentHash !== null && proposedHash !== currentHash;
     if (contentChanged) {
@@ -80884,17 +81054,22 @@ function registerDocumentWriteRoutes(app, ctx) {
           title: title || doc.title,
           source: "manual",
           projectIds: Array.isArray(body.project_ids) ? body.project_ids : undefined,
-          metadata: body.metadata != null ? metadata : undefined,
+          metadata: metadataCarried ? metadata : undefined,
+          replaceMetadata: metadataCarried && doc.metadata_revision != null,
+          expectedMetadataRevision: metadataCarried ? expectedMetadataRevision : null,
           author: who.identity.author,
           authorType: who.identity.authorType,
           expectedContentHash: expectedHash,
           lastWriteWins
         });
-        return c.json({ success: true, reindexed: result.reindexed });
+        return c.json({ success: true, reindexed: result.reindexed, ...warnings ? { warnings } : {} });
       } catch (err) {
         if (err instanceof ConcurrencyConflictError) {
           return c.json(conflictBody(err.currentHash), 409);
         }
+        if (err instanceof MetadataConcurrencyError) {
+          return err.tokenRequired ? c.json({ success: false, error: "expected_metadata_revision required", message: err.message, detail: err.message }, 400) : c.json(metadataConflictBody(), 409);
+        }
         if (err instanceof ConcurrencyTokenRequiredError) {
           return c.json({
             success: false,
@@ -80924,13 +81099,15 @@ function registerDocumentWriteRoutes(app, ctx) {
       const facets = await updateDocumentFacets(ctx.supabase, {
         documentId,
         title: body.title !== undefined && title !== doc.title ? title : undefined,
-        metadata: body.metadata != null ? metadata : undefined,
+        metadata: metadataCarried ? metadata : undefined,
+        expectedMetadataRevision: metadataTokenMissing ? null : expectedMetadataRevision,
+        metadataLastWriteWins: lastWriteWins || metadataTokenMissing,
         projectIds: Array.isArray(body.project_ids) ? projectIds : undefined,
         author: who.identity.author,
         authorType: who.identity.authorType,
         accessPath: who.identity.accessPath
       });
-      return c.json({ success: true, reindexed: false, ...facets });
+      return c.json({ success: true, reindexed: false, ...facets, ...warnings ? { warnings } : {} });
     } catch (err) {
       const cause = err instanceof FacetUpdateError ? err.cause : err;
       const msg = err instanceof Error ? err.message : String(err);
@@ -80940,6 +81117,9 @@ function registerDocumentWriteRoutes(app, ctx) {
       if (cause instanceof FacetValidationError) {
         return c.json({ success: false, error: msg, detail: msg }, 400);
       }
+      if (cause instanceof MetadataConcurrencyError) {
+        return cause.tokenRequired ? c.json({ success: false, error: "expected_metadata_revision required", message: msg, detail: msg }, 400) : c.json(metadataConflictBody(), 409);
+      }
       return c.json({ success: false, error: msg, detail: msg }, 500);
     }
   });
@@ -81112,6 +81292,9 @@ function ingestFailure(err) {
   if (err instanceof ConcurrencyTokenRequiredError) {
     return [notReady(err.message), 400];
   }
+  if (err instanceof MetadataConcurrencyError) {
+    return [notReady(err.message), err.tokenRequired ? 400 : 409];
+  }
   const msg = err instanceof Error ? err.message : String(err);
   if (/^Document (.* )?not found/.test(msg))
     return [notReady(msg), 404];
@@ -81126,6 +81309,7 @@ var INGEST_FIELDS = new Set([
   "content",
   "document_id",
   "expected_content_hash",
+  "expected_metadata_revision",
   "last_write_wins",
   "update_existing",
   "update_if_exists",
@@ -81156,6 +81340,9 @@ function ingestShapeError(body) {
     if (body[k] != null && typeof body[k] !== "boolean")
       return `${k} must be a boolean.`;
   }
+  if (body.expected_metadata_revision != null && !Number.isInteger(body.expected_metadata_revision)) {
+    return "expected_metadata_revision must be an integer.";
+  }
   return null;
 }
 function registerIngestRoutes(app, ctx) {
@@ -81203,7 +81390,8 @@ function registerIngestRoutes(app, ctx) {
         author: who.identity.author,
         authorType: who.identity.authorType,
         expectedContentHash: typeof body.expected_content_hash === "string" && body.expected_content_hash.trim() !== "" ? body.expected_content_hash.trim() : null,
-        lastWriteWins: body.last_write_wins === true
+        lastWriteWins: body.last_write_wins === true,
+        expectedMetadataRevision: body.expected_metadata_revision ?? null
       });
       const skipped = result.action === "skipped";
       const resp = {