@mnemonik/cli 7.100.0 → 7.101.3

package/dist/router.js

@@ -562,7 +562,7 @@ var init_hookRuntime = __esm({
 });
 
 // packages/cli/src/router.ts
-import { enableScanner } from "./scanner/enable.js";
+import { enableScanner, updateScannerRoots } from "./scanner/enable.js";
 import { controlScanner, scannerReceipt } from "./scanner/control.js";
 import { updateScanner } from "./scanner/update.js";
 import { deleteScannerIndex } from "./scanner/data.js";
@@ -4774,8 +4774,6 @@ var stateFor = {
   scanner_not_verified: "LIMITED",
   hook_not_verified: "LIMITED",
   hooks_missing: "ACTION_REQUIRED",
-  host_grant_unbound: "LIMITED",
-  host_not_connected: "LIMITED",
   scanner_omitted: "LIMITED",
   project_uncovered: "LIMITED",
   host_skipped: "LIMITED",
@@ -4791,8 +4789,6 @@ var rank = {
   FAILED: 3
 };
 function defaultAction(condition) {
-  if (condition.kind === "host_skipped" && condition.component)
-    return `Connect it later: mnemonik connect ${condition.component}`;
   if (condition.kind === "windows_task_creation_failed")
     return "Run mnemonik scanner enable to try again.";
   return condition.action;
@@ -4821,7 +4817,7 @@ function remainingReadinessCount(summary2) {
 }
 function describeReadiness(summary2) {
   if (summary2.state === "READY")
-    return "Done. Your editors will use Mnemonik on their next session.";
+    return "Done.";
   const count = remainingReadinessCount(summary2);
   const opening = summary2.state === "FAILED" ? "Setup failed." : count === 0 ? "Done." : summary2.state === "ACTION_REQUIRED" ? `Setup needs ${count === 1 ? "one action" : `${count} actions`}.` : `Done, with ${count === 1 ? "one thing" : `${count} things`} left.`;
   return [opening, ...summary2.reasons.map(sentence), ...summary2.actions].join(" ");
@@ -4960,18 +4956,23 @@ import {
 import { hostOrder } from "./install/adapters.js";
 import { readInstallVersions } from "./install/ownership.js";
 import { ensureLauncher, removeLauncher, LauncherError } from "./launcher.js";
-import { readFile } from "node:fs/promises";
+import { readFile, realpath } from "node:fs/promises";
+import { createInterface } from "node:readline";
 import { RuntimeStore, updateRuntime } from "./runtime/store.js";
-import { updateCli, cliUpdateLine, cliUpdateHint } from "./runtime/selfUpdate.js";
+import { updateCli, cliUpdateHint } from "./runtime/selfUpdate.js";
 import { homedir as homedir2 } from "node:os";
 import { join as join3 } from "node:path";
 import { Output } from "./output.js";
 import { renderPreflight, runPreflight } from "./preflight.js";
 import { postCurrentReadiness } from "./installSession.js";
 import {
+  createRealProjectRuntime,
+  ensureProjectRoot,
   ensureProjectForAgent,
+  projectLimitMessage,
   runProjectCommand
 } from "./project.js";
+import { evaluateRoot } from "./project/eligibility.js";
 import { grantTransport, grantHost } from "./auth/status.js";
 import { createCliAuth } from "./auth/index.js";
 import { currentInstallSession, ensureInstallSession } from "./auth/installSession.js";
@@ -4994,6 +4995,16 @@ import {
   sendDiagnostics
 } from "./diagnostics.js";
 var supportedHosts = ["claude-code", "codex", "cursor", "grok"];
+var editorNames = {
+  "claude-code": "Claude Code",
+  codex: "Codex",
+  cursor: "Cursor",
+  grok: "Grok"
+};
+var connectFolderPrompt = (name2) => `Connect ${name2} to Mnemonik? [Y/n]`;
+var removeFolderPrompt = (name2) => `Stop indexing ${name2}? Its memories stay in your account. [y/N]`;
+var connectedFolderLine = (name2) => `  \u2713 Connected ${name2}.`;
+var removedFolderLine = (name2) => `  \u2713 ${name2} is no longer connected.`;
 function maintenanceExitCode(results) {
   if (results.some((result) => result.status === "FAILED")) return 1;
   return results.every((result) => result.status === "READY") ? 0 : 3;
@@ -5003,9 +5014,9 @@ var booleans = /* @__PURE__ */ new Set([
   "non-interactive",
   "agent",
   "accept-scanner",
+  "accept-indexing",
   "accept-limited",
   "apply",
-  "approve-host",
   "confirm",
   "without-scanner",
   "non-git",
@@ -5016,12 +5027,12 @@ var booleans = /* @__PURE__ */ new Set([
   "backup",
   "verify",
   "dry-run",
-  "reopen-install"
+  "reopen-install",
+  "automatic"
 ]);
 var values = /* @__PURE__ */ new Set([
   "components",
   "hosts",
-  "integration-scope",
   "scan-roots",
   "host",
   "scope",
@@ -5039,8 +5050,8 @@ Commands:
   status
   connect <claude-code|codex|cursor|grok>
   project <init|setup|status|link|ensure>
-  scanner <enable|start|stop|pause|resume|status|export-preview>
-  roots <add|remove|list>
+  add <folder>
+  remove <folder>
   data delete --project <id>
   diagnostics <preview|send>
   doctor
@@ -5053,7 +5064,7 @@ Commands:
   logout
 
 Global options: --json --non-interactive --no-browser --help --version
-Install consent: --accept-scanner --without-scanner --accept-limited --apply`;
+Install consent: --accept-indexing --accept-limited --apply`;
 function parse(args2) {
   const positionals = [];
   const flags2 = /* @__PURE__ */ new Map();
@@ -5071,7 +5082,7 @@ function parse(args2) {
     }
     if (booleans.has(name2)) {
       if (inline !== void 0) return { positionals, flags: flags2, error: `Unknown flag: ${argument}` };
-      flags2.set(name2, true);
+      flags2.set(name2 === "accept-scanner" ? "accept-indexing" : name2, true);
       continue;
     }
     if (values.has(name2)) {
@@ -5141,22 +5152,39 @@ async function hostDependencies(deps, output, state) {
   if (deps.hostManagement) return deps.hostManagement;
   const cliAuth = auth(deps, output, false);
   const grants = grantTransport(async () => {
-    const bearer = await cliAuth.getCliBearer();
-    if (typeof bearer !== "string") throw new Error(bearer.reason);
-    return bearer;
+    const bearer2 = await cliAuth.getCliBearer();
+    if (typeof bearer2 !== "string") throw new Error(bearer2.reason);
+    return bearer2;
   }, deps.grantFetch);
+  const bearer = await cliAuth.getCliBearer();
+  if (typeof bearer !== "string") throw new Error(bearer.reason);
+  if (!cliAuth.accountEmail) throw new Error("account_identity_failed");
+  const email = await cliAuth.accountEmail(bearer);
+  const installation = JSON.parse(
+    await readFile(join3(state, "installation.json"), "utf8").catch(() => "{}")
+  );
   return {
     stateDir: state,
-    account: (await grants.list()).account,
+    account: typeof installation.account === "string" ? installation.account : email,
     grants,
     getCliBearer: async () => {
-      const bearer = await cliAuth.getCliBearer();
-      if (typeof bearer !== "string") throw new Error(bearer.reason);
-      return bearer;
+      const bearer2 = await cliAuth.getCliBearer();
+      if (typeof bearer2 !== "string") throw new Error(bearer2.reason);
+      return bearer2;
     },
     credentialFetch: deps.grantFetch
   };
 }
+async function updateHostDependencies(deps, state) {
+  if (deps.hostManagement) return { ...deps.hostManagement, stateDir: state };
+  const installation = JSON.parse(
+    await readFile(join3(state, "installation.json"), "utf8").catch(() => "{}")
+  );
+  return {
+    stateDir: state,
+    account: typeof installation.account === "string" ? installation.account : ""
+  };
+}
 async function packageVersion() {
   const contents = await readFile(new URL("../package.json", import.meta.url), "utf8");
   return JSON.parse(contents).version;
@@ -5164,7 +5192,7 @@ async function packageVersion() {
 async function runHostCommand(command, parsed, deps, output, scannerSelected = false) {
   const json = parsed.flags.has("json");
   const state = deps.hostManagement?.stateDir ?? deps.installStateDir ?? stateDirectory(process.platform, process.env, deps.home);
-  const scope = parsed.flags.get(command === "install" ? "integration-scope" : "scope");
+  const scope = command === "install" ? void 0 : parsed.flags.get("scope");
   const host = parsed.flags.get("host");
   const component = parsed.flags.get("component");
   const fullUninstall = command === "uninstall" && !host && !scope && !component;
@@ -5179,7 +5207,6 @@ async function runHostCommand(command, parsed, deps, output, scannerSelected = f
     if (components.some((c) => !["hooks", "mcp"].includes(c)))
       return placeholder(output, json, "install scanner", "scanner setup");
     const missing = requireConsent(parsed, output, [
-      "integration-scope",
       ...scannerSelected ? [] : ["accept-limited"],
       "apply"
     ]);
@@ -5189,7 +5216,7 @@ async function runHostCommand(command, parsed, deps, output, scannerSelected = f
       (name2) => [...new Set(components)].map((component2) => ({
         component: component2,
         host: name2,
-        scope,
+        scope: "user",
         home: deps.home ?? homedir2(),
         projectRoot: deps.cwd ?? process.cwd()
       }))
@@ -5201,6 +5228,8 @@ async function runHostCommand(command, parsed, deps, output, scannerSelected = f
       scope ? String(scope) : void 0,
       component ? String(component) : void 0
     );
+    if (command === "update")
+      resolved.selected = resolved.selected.filter((target) => target.component === "hooks");
     if (resolved.ambiguous.length && !json && !parsed.flags.has("non-interactive")) {
       const profile = await chooseHostProfile(
         deps.input ?? process.stdin,
@@ -5238,7 +5267,7 @@ async function runHostCommand(command, parsed, deps, output, scannerSelected = f
     const store = new RuntimeStore(state);
     const cli = all ? await updateCli(store) : void 0;
     const updatedCli = selections.length && (cli?.status === "UPDATED" || cli?.status === "UP_TO_DATE") ? await store.verifyRuntime("cli") : void 0;
-    const managed = selections.length || (await interrupted(state)).length ? await hostDependencies(deps, output, state) : void 0;
+    const managed = selections.length || (await interrupted(state)).length ? command === "update" ? await updateHostDependencies(deps, state) : await hostDependencies(deps, output, state) : void 0;
     const result = managed ? await runHosts(
       command,
       selections,
@@ -5250,17 +5279,9 @@ async function runHostCommand(command, parsed, deps, output, scannerSelected = f
           join3(updatedCli.directory, "node_modules/@mnemonik/cli/package.json")
         ) : void 0),
         instruction: json ? void 0 : (text) => output.line(text),
-        timeout: managed.timeout ?? (json || parsed.flags.has("non-interactive") ? void 0 : async (host2) => (await chooseHostProfile(deps.input ?? process.stdin, output, [
-          `Retry ${host2}`,
-          `Skip ${host2}`
-        ]))?.startsWith("Retry") ? "retry" : "skip"),
-        apply: parsed.flags.has("apply"),
-        offerRevoke: managed.offerRevoke ?? (json || parsed.flags.has("non-interactive") ? void 0 : async (host2) => (await chooseHostProfile(deps.input ?? process.stdin, output, [
-          `Keep ${host2} grant`,
-          `Revoke ${host2} grant`
-        ]))?.startsWith("Revoke") ?? false)
+        apply: parsed.flags.has("apply")
       },
-      parsed.flags.has("integration-scope")
+      false
     ) : { journal: { state: "READY" }, results: [], reports: [] };
     let scanner;
     let launcher;
@@ -5269,11 +5290,15 @@ async function runHostCommand(command, parsed, deps, output, scannerSelected = f
       () => false
     )) {
       try {
+        const before = await store.verifyRuntime("scanner").catch(() => void 0);
         const runtime = await updateScanner(
           { stateDir: state, ...deps.scannerService },
           deps.scannerEnable?.source
         );
-        scanner = { status: "UPDATED", version: runtime.manifest.version };
+        scanner = {
+          status: before?.reference.version === runtime.reference.version ? "UP_TO_DATE" : "UPDATED",
+          version: runtime.manifest.version
+        };
       } catch (error) {
         scanner = { status: "FAILED", reason: error.message };
       }
@@ -5315,7 +5340,13 @@ async function runHostCommand(command, parsed, deps, output, scannerSelected = f
         ...launcher ? { launcher } : {},
         ...cli ? { cli } : {}
       });
-    else {
+    else if (command === "update") {
+      if (failed || hostExit !== 0)
+        output.error("Mnemonik could not update. Run mnemonik update again.");
+      else if (cli?.status === "UPDATED" || result.reports.length > 0 || scanner?.status === "UPDATED")
+        output.line("Mnemonik updated.");
+      else output.line("Mnemonik is up to date.");
+    } else {
       for (const target of result.results)
         output.line(
           `${target.target}: ${target.status} (${target.reason}${target.detail ? `: ${target.detail}` : ""})`
@@ -5328,11 +5359,14 @@ async function runHostCommand(command, parsed, deps, output, scannerSelected = f
         );
       else if (scanner)
         output.line(`Scanner ${scanner.status}: ${scanner.version ?? scanner.reason}.`);
-      if (cli) output.line(cliUpdateLine(cli));
     }
     if (scanner?.status === "failed") output.error(scanner.reason ?? "scanner_uninstall_failed");
     return failed ? 1 : hostExit;
   } catch (error) {
+    if (command === "update" && !json) {
+      output.error("Mnemonik could not update. Run mnemonik update again.");
+      return error instanceof LauncherError ? 3 : 1;
+    }
     if (error instanceof LauncherError) {
       if (json)
         output.json({ status: error.status, reason: error.message, launcher: error.launcher });
@@ -5349,13 +5383,13 @@ async function runHostCommand(command, parsed, deps, output, scannerSelected = f
 }
 async function hostCommand(command, parsed, deps, output, scannerSelected = false) {
   const code = await runHostCommand(command, parsed, deps, output, scannerSelected);
-  if (command === "update" || command === "repair") await reportCurrentInstallation(deps, output);
+  if (command === "repair") await reportCurrentInstallation(deps, output);
   return code;
 }
 async function enableCommand(parsed, deps, output) {
   const json = parsed.flags.has("json");
   if (parsed.flags.has("non-interactive") || json) {
-    const missing = requireConsent(parsed, output, ["accept-scanner", "apply"]);
+    const missing = requireConsent(parsed, output, ["accept-indexing", "apply"]);
     if (missing !== void 0) return missing;
     if (!parsed.flags.has("scan-roots"))
       return actionRequired2(
@@ -5371,6 +5405,7 @@ async function enableCommand(parsed, deps, output) {
     const result = await enableScanner({
       stateDir: deps.installStateDir ?? stateDirectory(process.platform, process.env, deps.home),
       cwd: deps.cwd ?? process.cwd(),
+      home: deps.home,
       input: deps.input ?? process.stdin,
       output,
       nonInteractive: parsed.flags.has("non-interactive") || json,
@@ -5378,7 +5413,9 @@ async function enableCommand(parsed, deps, output) {
       ...typeof roots === "string" ? { roots: roots.split(",").filter(Boolean) } : {},
       ...typeof exclusions === "string" ? { exclusions: exclusions.split(",").filter(Boolean) } : {},
       ...deps.scannerService,
-      ...deps.scannerEnable
+      ...deps.scannerEnable,
+      projectExecutor: deps.projectExecutor,
+      projectStateDir: deps.projectStateDir
     });
     if (json) output.json(result);
     else renderStatusSummaries(result, output);
@@ -5398,10 +5435,9 @@ async function installCommand(parsed, deps, output) {
   const invalid = allowed(parsed, [
     "components",
     "hosts",
-    "integration-scope",
     "scan-roots",
     "exclusions",
-    "accept-scanner",
+    "accept-indexing",
     "accept-limited",
     "without-scanner",
     "apply",
@@ -5416,7 +5452,7 @@ async function installCommand(parsed, deps, output) {
       parsed.flags,
       deps,
       output,
-      () => ensureCliAuth(deps, output, parsed.flags.has("no-browser"), !parsed.flags.has("json")),
+      () => ensureCliAuth(deps, output, parsed.flags.has("no-browser"), false),
       () => hostDependencies(deps, output, state)
     );
   }
@@ -5485,7 +5521,7 @@ async function doctorCommand(parsed, deps, output) {
   if (parsed.flags.has("json")) output.json(document);
   else {
     renderPreflight(result, output);
-    renderStatusSummaries(document, output);
+    renderStatusSummaries(document, output, { diagnostics: true });
   }
   return document.installation.state === "READY" ? 0 : document.installation.state === "FAILED" ? 1 : 3;
 }
@@ -5513,11 +5549,6 @@ async function collectCurrentInstallation(deps, output) {
     projectHookConditions: deps.projectHookConditions,
     configuredHosts: deps.configuredHosts ?? deps.install?.input.hosts,
     details: deps.statusDetails,
-    grants: deps.hostManagement?.grants ?? grantTransport(async () => {
-      const bearer = await auth(deps, output, false).getCliBearer();
-      if (typeof bearer !== "string") throw new Error(bearer.reason);
-      return bearer;
-    }, deps.grantFetch),
     generatedAt: deps.statusGeneratedAt,
     launcher: { ...deps.launcher, stateDir: hostStateDir, home: deps.home }
   });
@@ -5540,14 +5571,19 @@ async function reportCurrentInstallation(deps, output, document) {
   }
 }
 async function runCli(args2, deps = {}) {
-  const output = new Output(deps.stdout ?? process.stdout, deps.stderr ?? process.stderr, {
+  const parsed = parse(args2);
+  const silent = parsed.flags.has("automatic");
+  const discard = { write: () => {
+  } };
+  const stdout = silent ? discard : deps.stdout ?? process.stdout;
+  const stderr = silent ? discard : deps.stderr ?? process.stderr;
+  const output = new Output(stdout, stderr, {
     home: deps.home ?? homedir2()
   });
-  if (process.env.MNEMONIK_DEV_RELEASE_DIR)
-    (deps.stderr ?? process.stderr).write(
+  if (process.env.MNEMONIK_DEV_RELEASE_DIR && !silent)
+    stderr.write(
       "WARNING: MNEMONIK_DEV_RELEASE_DIR uses development artifacts; readiness remains LIMITED (dev_release_source).\n"
     );
-  const parsed = parse(args2);
   if (parsed.error) return output.error(parsed.error), 2;
   if (parsed.flags.has("version")) {
     if (parsed.positionals.length || parsed.flags.size !== 1)
@@ -5566,21 +5602,84 @@ async function runCli(args2, deps = {}) {
     if (subcommand) return output.error(`Unexpected argument: ${subcommand}`), 2;
     return installCommand(parsed, deps, output);
   }
-  if (command === "roots") {
-    const invalid = allowed(parsed, ["accept-scanner", "apply", "no-browser"]);
-    if (invalid || !["add", "remove", "list"].includes(subcommand ?? "") || rest.length !== (subcommand === "list" ? 0 : 1))
-      return output.error(invalid ?? "Usage: mnemonik roots <add|remove> <path>, or roots list"), 2;
+  if (command === "roots" || command === "add" || command === "remove") {
+    const action = command === "roots" ? subcommand : command;
+    const actionArguments = command === "roots" ? rest : [subcommand, ...rest].filter(Boolean);
+    const invalid = allowed(parsed, ["accept-indexing", "apply", "no-browser"]);
+    if (invalid || !["add", "remove", "list"].includes(action ?? "") || actionArguments.length !== (action === "list" ? 0 : 1))
+      return output.error(invalid ?? "Usage: mnemonik add <folder> or mnemonik remove <folder>"), 2;
     const stateDir = deps.installStateDir ?? stateDirectory(process.platform, process.env, deps.home);
     const saved = JSON.parse(
       await readFile(`${stateDir}/scanner/state.json`, "utf8").catch(() => "null")
     );
-    if (!saved) return actionRequired2(output, parsed.flags.has("json"), "mnemonik scanner enable");
-    if (subcommand === "list") {
+    if (!saved) return actionRequired2(output, parsed.flags.has("json"), "mnemonik install");
+    if (action === "list") {
       if (parsed.flags.has("json")) output.json(saved.config.roots);
       else for (const root of saved.config.roots) output.line(root);
       return 0;
     }
-    const roots = subcommand === "add" ? [.../* @__PURE__ */ new Set([...saved.config.roots, rest[0] ?? ""])] : saved.config.roots.filter((root) => root !== rest[0]);
+    if (action === "add" && (parsed.flags.has("non-interactive") || parsed.flags.has("json")) && !parsed.flags.has("apply"))
+      return actionRequired2(output, parsed.flags.has("json"), "Rerun with --apply", "--apply");
+    const pathArgument = actionArguments[0] ?? "";
+    const requested = action === "add" ? await realpath(pathArgument) : saved.config.roots.find((root) => root === pathArgument) ?? pathArgument;
+    const name2 = requested.split(/[\\/]/u).filter(Boolean).at(-1) ?? requested;
+    if (!parsed.flags.has("non-interactive") && !parsed.flags.has("json")) {
+      output.line(action === "add" ? connectFolderPrompt(name2) : removeFolderPrompt(name2));
+      const readline = createInterface({ input: deps.input ?? process.stdin, terminal: false });
+      const answer = String((await readline[Symbol.asyncIterator]().next()).value ?? "").trim();
+      readline.close();
+      if (action === "add" && /^(?:n|no)$/iu.test(answer) || action === "remove" && !/^(?:y|yes)$/iu.test(answer))
+        return 130;
+    }
+    const bearer = await ensureCliAuth(deps, output, parsed.flags.has("no-browser"), false);
+    if (action === "add") {
+      let executor = deps.projectExecutor;
+      if (!executor)
+        executor = (await createRealProjectRuntime({
+          stateDir: deps.projectStateDir ?? stateDir,
+          getCliBearer: async () => bearer,
+          fetch: deps.grantFetch
+        })).executor;
+      const resolution = await executor.resolveProjectIdentity(requested);
+      const decision = await evaluateRoot(resolution, {
+        cwd: requested,
+        home: deps.home,
+        nonGitSelected: true
+      });
+      if (!decision.allowed)
+        return actionRequired2(output, parsed.flags.has("json"), decision.reason);
+      const project = await ensureProjectRoot(requested, executor);
+      const limit = projectLimitMessage(project, requested);
+      if (limit) {
+        if (parsed.flags.has("json"))
+          output.json({
+            status: "ACTION_REQUIRED",
+            state: "project_limit_reached",
+            message: limit.join(" ")
+          });
+        else for (const line of limit) output.line(line);
+        return 3;
+      }
+      if (project.status !== "done") {
+        output.error(
+          `Project action required: ${"state" in project ? project.state : project.status}`
+        );
+        return 3;
+      }
+    }
+    const updated = await updateScannerRoots({
+      stateDir,
+      bearer,
+      add: action === "add" ? [requested] : [],
+      remove: action === "remove" ? [requested] : [],
+      fetch: deps.grantFetch
+    });
+    if (updated.status === "updated") {
+      if (parsed.flags.has("json")) output.json(updated.state.config.roots);
+      else output.line(action === "add" ? connectedFolderLine(name2) : removedFolderLine(name2));
+      return 0;
+    }
+    const roots = action === "add" ? [.../* @__PURE__ */ new Set([...saved.config.roots, requested])] : saved.config.roots.filter((root) => root !== requested);
     parsed.flags.set("scan-roots", roots.join(","));
     parsed.flags.set("exclusions", (saved.config.exclusions ?? []).join(","));
     return enableCommand(parsed, deps, output);
@@ -5642,15 +5741,20 @@ async function runCli(args2, deps = {}) {
         ...deps.scannerService
       };
       if (command === "update") {
+        const store = new RuntimeStore(options.stateDir);
+        const before = await store.verifyRuntime("scanner").catch(() => void 0);
         const runtime = await updateScanner(options, deps.scannerEnable?.source);
         const result = {
-          status: "updated",
+          status: before?.reference.version === runtime.reference.version ? "up_to_date" : "updated",
           version: runtime.manifest.version,
           cli: { status: "NOT_SELECTED" },
           ...process.env.MNEMONIK_DEV_RELEASE_DIR ? { status: "LIMITED", reason: "dev_release_source" } : {}
         };
         if (parsed.flags.has("json")) output.json(result);
-        else output.line(`Scanner ${result.status}: ${result.version}.`);
+        else
+          output.line(
+            result.status === "updated" ? "Mnemonik updated." : "Mnemonik is up to date."
+          );
       } else {
         await scannerService(options).uninstall();
         const result = {
@@ -5664,16 +5768,23 @@ async function runCli(args2, deps = {}) {
             "Stopped collection; removed local software. Credentials, cloud data and consent retained."
           );
       }
-      if (command === "update") await reportCurrentInstallation(deps, output);
       return 0;
     } catch (error) {
-      output.error(error.message);
-      if (command === "update") await reportCurrentInstallation(deps, output);
+      output.error(
+        command === "update" ? "Mnemonik could not update. Run mnemonik update again." : error.message
+      );
       return 3;
     }
   }
   if (command === "repair" || command === "update" || command === "uninstall") {
-    const invalid = allowed(parsed, ["host", "scope", "component", "confirm", "apply"]);
+    const invalid = allowed(parsed, [
+      "host",
+      "scope",
+      "component",
+      "confirm",
+      "apply",
+      ...command === "update" ? ["automatic"] : []
+    ]);
     if (invalid || subcommand)
       return output.error(invalid ?? `Unexpected argument: ${subcommand}`), 2;
     if (command === "uninstall" && parsed.flags.has("non-interactive")) {
@@ -5684,7 +5795,7 @@ async function runCli(args2, deps = {}) {
       return hostCommand(command, parsed, deps, output);
   }
   if (command === "update") {
-    const invalid = allowed(parsed, []);
+    const invalid = allowed(parsed, ["automatic"]);
     if (invalid || subcommand)
       return output.error(invalid ?? `Unexpected argument: ${subcommand}`), 2;
     if (!deps.runtimeUpdate)
@@ -5701,8 +5812,7 @@ async function runCli(args2, deps = {}) {
         artifact: runtime.manifest.artifact,
         version: runtime.manifest.version
       });
-    else output.line(`Updated ${runtime.manifest.artifact} to ${runtime.manifest.version}.`);
-    await reportCurrentInstallation(deps, output);
+    else output.line("Mnemonik updated.");
     return 0;
   }
   if (command === "doctor") {
@@ -5754,7 +5864,6 @@ Preview: ${preview.path}
       deps.installStateDir ?? stateDirectory(process.platform, process.env, deps.home)
     );
     if (!parsed.flags.has("json")) {
-      output.line(`CLI ${version}.`);
       renderStatusSummaries(document, output);
     }
     const hint = await cliUpdateHint(store, version);
@@ -5765,15 +5874,10 @@ Preview: ${preview.path}
     return statusExitCode(document);
   }
   if (command === "connect") {
-    const invalid = allowed(parsed, ["approve-host", "no-browser", "scope"]);
+    const invalid = allowed(parsed, ["scope"]);
     if (invalid) return output.error(invalid), 2;
     if (!subcommand || rest.length || !supportedHosts.includes(subcommand))
       return output.error("Usage: mnemonik connect <claude-code|codex|cursor|grok>"), 2;
-    if (parsed.flags.has("non-interactive") || parsed.flags.has("json")) {
-      const missing = requireConsent(parsed, output, ["approve-host"]);
-      if (missing !== void 0) return missing;
-    }
-    await ensureCliAuth(deps, output, parsed.flags.has("no-browser"), false);
     const state = deps.hostManagement?.stateDir ?? deps.installStateDir ?? stateDirectory(process.platform, process.env, deps.home);
     const owned = await selectOwned(
       state,
@@ -5781,33 +5885,33 @@ Preview: ${preview.path}
       parsed.flags.get("scope"),
       "mcp"
     );
+    if (!owned.selected.length && !parsed.flags.has("json")) {
+      output.line(
+        `${editorNames[subcommand]} will ask you to sign in to Mnemonik the first time you use it.`
+      );
+      return 3;
+    }
     if (owned.selected.length !== 1)
       return actionRequired2(
         output,
         parsed.flags.has("json"),
         owned.selected.length ? "ambiguous_profile" : "no_recorded_targets"
       );
-    const managed = await hostDependencies(deps, output, state);
+    const managed = deps.hostManagement ?? { stateDir: state, account: "" };
     const selected = owned.selected[0];
     if (!selected) throw new Error("no_recorded_targets");
-    let approval = parsed.flags.has("approve-host") ? true : void 0;
+    let instructionShown = false;
     const result = await connectHost(selected, {
       ...managed,
-      noBrowser: parsed.flags.has("no-browser"),
-      approveHost: async () => approval ??= (await chooseHostProfile(deps.input ?? process.stdin, output, [
-        `Approve ${subcommand} for account ${managed.account} on this machine`,
-        "Cancel"
-      ]))?.startsWith("Approve") ?? false,
       instruction: (text) => {
-        if (!parsed.flags.has("json")) output.line(text);
-      },
-      timeout: managed.timeout ?? (parsed.flags.has("json") || parsed.flags.has("non-interactive") ? void 0 : async (host) => (await chooseHostProfile(deps.input ?? process.stdin, output, [
-        `Retry ${host}`,
-        `Skip ${host}`
-      ]))?.startsWith("Retry") ? "retry" : "skip")
+        if (!parsed.flags.has("json")) {
+          output.line(text);
+          instructionShown = true;
+        }
+      }
     });
     if (parsed.flags.has("json")) output.json(result);
-    else
+    else if (!instructionShown)
       output.line(`${result.status}: ${result.reason}${result.action ? `. ${result.action}` : ""}`);
     return result.status === "READY" ? 0 : 3;
   }
@@ -5926,7 +6030,7 @@ Preview: ${preview.path}
       return output.error("Usage: mnemonik scanner <enable|start|stop|uninstall|status>"), 2;
     const invalid = allowed(
       parsed,
-      subcommand === "enable" ? ["accept-scanner", "apply", "scan-roots", "exclusions", "no-browser"] : subcommand === "export-preview" ? ["out"] : []
+      subcommand === "enable" ? ["accept-indexing", "apply", "scan-roots", "exclusions", "no-browser"] : subcommand === "export-preview" ? ["out"] : []
     );
     if (invalid) return output.error(invalid), 2;
     if (subcommand === "enable") return enableCommand(parsed, deps, output);
@@ -6162,7 +6266,11 @@ Preview: ${preview.path}
 }
 var serializeReadiness2 = (input) => devReadiness(serializeReadiness(input));
 export {
+  connectFolderPrompt,
+  connectedFolderLine,
   help,
   maintenanceExitCode,
+  removeFolderPrompt,
+  removedFolderLine,
   runCli
 };