@usepowerplant/cli 0.3.1 → 0.4.0

package/dist/cli.js

@@ -36252,7 +36252,7 @@ ${captureLines}` : capture.stack;
 });
 
 // src/cli.ts
-import { spawnSync as spawnSync4 } from "node:child_process";
+import { spawnSync as spawnSync5 } from "node:child_process";
 import { existsSync as existsSync7, realpathSync as realpathSync2 } from "node:fs";
 import { parseArgs } from "node:util";
 
@@ -50833,6 +50833,17 @@ function capturedSessionEvents(turns, anchor) {
   return events;
 }
 
+// ../core/src/workspaceClaims.ts
+function workspaceClaimsRepo(repoFullName, policy) {
+  const repo = repoFullName.toLowerCase();
+  if (policy.repos !== null) return policy.repos.includes(repo);
+  const owner = repo.split("/")[0] ?? "";
+  return policy.owners.length > 0 && policy.owners.includes(owner);
+}
+function workspaceClaimsAnyRepo(policy) {
+  return policy.repos !== null ? policy.repos.length > 0 : policy.owners.length > 0;
+}
+
 // ../core/src/transcriptImages.ts
 var IMAGE_DATA_URI_RE = /^data:(image\/[\w.+-]+);base64,([A-Za-z0-9+/=_-]*)$/;
 function isImageDataUri(value) {
@@ -51693,6 +51704,8 @@ var SESSION_SOURCES = [
   "cursor-cloud",
   "github-pr"
 ];
+var SESSION_SPEED_MODES = ["standard", "fast"];
+var SESSION_SPEED_OBSERVATIONS = [...SESSION_SPEED_MODES, "unknown"];
 function isSessionSource(source) {
   return typeof source === "string" && SESSION_SOURCES.includes(source);
 }
@@ -78558,6 +78571,23 @@ var storedCredentialsSchema = external_exports.object({
    * alongside the owners. Absent = the org has no list — the owner check
    * decides (and pre-list enrollments read the same way). */
   allowedRepos: external_exports.array(external_exports.string()).optional(),
+  /** org-repos mode: per-workspace claim policies across every workspace
+   * the member belongs to (home first), refreshed every sync — the union
+   * an offline pass still filters with. Absent = cached before routing;
+   * the flat fields above are the whole boundary. */
+  workspacePolicies: external_exports.array(
+    external_exports.object({
+      orgId: external_exports.string().min(1),
+      name: external_exports.string(),
+      owners: external_exports.array(external_exports.string()),
+      repos: external_exports.array(external_exports.string()).nullable(),
+      /** This entry's claims were UNRESOLVED when cached (a linked
+       * installation whose account failed to resolve, nothing usable to
+       * stand in) — unknown, never "claims nothing". A pass reading only
+       * the cache must not stamp a deep sweep done over it. */
+      unresolved: external_exports.literal(true).optional()
+    })
+  ).optional(),
   /** Folders this member explicitly chose. Under scope mode they are the
    * whole boundary (never empty — enrollment requires at least one); under
    * org-repos they are additions on top of the org policy
@@ -78652,7 +78682,7 @@ import os6 from "node:os";
 // ../../apps/collector/src/http.ts
 var import_undici = __toESM(require_undici(), 1);
 var CLI_VERSION_HEADER = "x-powerplant-cli-version";
-var cliVersion = true ? "0.3.1" : "0.0.0-checkout";
+var cliVersion = true ? "0.4.0" : "0.0.0-checkout";
 function cliVersionHeaders() {
   return { [CLI_VERSION_HEADER]: cliVersion, "user-agent": `powerplant-cli/${cliVersion}` };
 }
@@ -78729,30 +78759,78 @@ import os5 from "node:os";
 import path3 from "node:path";
 
 // ../../apps/collector/src/gitOwner.ts
+import { execFileSync as execFileSync2 } from "node:child_process";
 import { readFileSync as readFileSync3, statSync } from "node:fs";
 import os4 from "node:os";
 import path2 from "node:path";
-function parseGithubRepo(remoteUrl) {
+var GITHUB_HOSTS = /* @__PURE__ */ new Set(["github.com", "ssh.github.com"]);
+function parseRemoteUrl(remoteUrl) {
   const trimmed = remoteUrl.trim();
-  const separator = trimmed.indexOf(":");
-  if (separator > 0) {
-    const authority = trimmed.slice(0, separator).split("@").at(-1)?.toLowerCase();
-    const [owner, rawRepo, extra] = trimmed.slice(separator + 1).split("/");
-    if (authority === "github.com" && owner && rawRepo && extra === void 0) {
-      const repo = rawRepo.toLowerCase().endsWith(".git") ? rawRepo.slice(0, -4) : rawRepo;
-      return `${owner.toLowerCase()}/${repo}`;
-    }
+  const colon = trimmed.indexOf(":");
+  if (!trimmed.includes("://") && colon > 0 && !trimmed.slice(0, colon).includes("/")) {
+    const host = trimmed.slice(0, colon).split("@").at(-1) ?? "";
+    return { host: host.toLowerCase(), path: trimmed.slice(colon + 1), overSsh: true };
   }
   try {
     const url2 = new URL(trimmed);
-    if (url2.hostname.toLowerCase() !== "github.com") return null;
-    const [owner, repo] = url2.pathname.split("/").filter(Boolean);
-    if (!owner || !repo) return null;
-    return `${owner.toLowerCase()}/${repo.replace(/\.git$/i, "")}`;
+    if (!url2.hostname) return null;
+    const scheme = url2.protocol.slice(0, -1).toLowerCase();
+    return {
+      host: url2.hostname.toLowerCase(),
+      path: url2.pathname,
+      overSsh: scheme === "ssh" || scheme === "git+ssh"
+    };
+  } catch {
+    return null;
+  }
+}
+function parseGithubRepo(remoteUrl, sshHostnameOf = sshEffectiveHostname) {
+  const remote = parseRemoteUrl(remoteUrl);
+  if (!remote) return null;
+  const host = remote.overSsh && !GITHUB_HOSTS.has(remote.host) ? sshHostnameOf(remote.host)?.toLowerCase() : remote.host;
+  if (!host || !GITHUB_HOSTS.has(host)) return null;
+  const [owner, rawRepo, extra] = remote.path.split("/").filter(Boolean);
+  if (!owner || !rawRepo || extra !== void 0) return null;
+  return `${owner.toLowerCase()}/${rawRepo.replace(/\.git$/i, "")}`;
+}
+var SSH_PROBE_TIMEOUT_MS = 2e3;
+var SSH_PROBE_CACHE_TTL_MS = 5 * 6e4;
+var SSH_HOST_PATTERN = /^[a-z0-9][a-z0-9._-]*$/i;
+var sshProbeCache = /* @__PURE__ */ new Map();
+function sshEffectiveHostname(host, options = {}) {
+  if (!SSH_HOST_PATTERN.test(host)) return null;
+  const key = `${options.configFile ?? ""}\0${host}`;
+  const cached3 = sshProbeCache.get(key);
+  const now = Date.now();
+  if (cached3 && cached3.expiresAt > now) return cached3.hostname;
+  const hostname4 = probeSshHostname(host, options);
+  sshProbeCache.set(key, { hostname: hostname4, expiresAt: now + SSH_PROBE_CACHE_TTL_MS });
+  return hostname4;
+}
+function probeSshHostname(host, options) {
+  try {
+    const dump = execFileSync2(
+      "ssh",
+      ["-G", ...options.configFile ? ["-F", options.configFile] : [], host],
+      {
+        encoding: "utf8",
+        timeout: options.timeoutMs ?? SSH_PROBE_TIMEOUT_MS,
+        stdio: ["ignore", "pipe", "ignore"],
+        windowsHide: true
+      }
+    );
+    return hostnameFromSshConfigDump(dump);
   } catch {
     return null;
   }
 }
+function hostnameFromSshConfigDump(dump) {
+  for (const line of dump.split("\n")) {
+    const match = /^hostname\s+(\S+)$/i.exec(line.trim());
+    if (match?.[1]) return match[1];
+  }
+  return null;
+}
 function parseOriginUrl(configText) {
   let inOrigin = false;
   for (const raw of configText.split("\n")) {
@@ -78818,17 +78896,17 @@ function findGitConfigPath(cwd, environment = {}) {
   const dirs = resolveGitDirs(cwd, environment);
   return dirs ? path2.join(dirs.commonDir, "config") : null;
 }
-function resolveGithubRepo(cwd, environment = {}) {
+function resolveGithubRepo(cwd, environment = {}, sshHostnameOf = sshEffectiveHostname) {
   const configPath = findGitConfigPath(cwd, environment);
   const configText = configPath ? readIfExists(configPath) : null;
   const remoteUrl = configText ? parseOriginUrl(configText) : null;
-  return remoteUrl ? parseGithubRepo(remoteUrl) : null;
+  return remoteUrl ? parseGithubRepo(remoteUrl, sshHostnameOf) : null;
 }
-function repoResolver(environment = {}) {
+function repoResolver(environment = {}, sshHostnameOf = sshEffectiveHostname) {
   const cache = /* @__PURE__ */ new Map();
   return (cwd) => {
     const key = path2.resolve(cwd);
-    if (!cache.has(key)) cache.set(key, resolveGithubRepo(key, environment));
+    if (!cache.has(key)) cache.set(key, resolveGithubRepo(key, environment, sshHostnameOf));
     return cache.get(key);
   };
 }
@@ -78860,17 +78938,19 @@ var captureEverythingUnresolved = {
 function captureDecision(cwd, policy) {
   switch (policy.mode) {
     case "scope":
-      return cwd !== void 0 && isWithinScope(cwd, policy.scopePaths, policy.environment) ? memberChoice(cwd, policy) : { capture: false };
+      if (cwd === void 0) return { capture: false, reason: "no-cwd" };
+      return isWithinScope(cwd, policy.scopePaths, policy.environment) ? memberChoice(cwd, policy) : { capture: false, reason: "outside-policy" };
     case "org-repos": {
-      if (cwd === void 0) return { capture: false };
+      if (cwd === void 0) return { capture: false, reason: "no-cwd" };
       if (policy.memberFolders.length > 0 && isWithinScope(cwd, policy.memberFolders, policy.environment)) {
         return memberChoice(cwd, policy);
       }
       const repoFullName = policy.repoOf(cwd);
-      if (repoFullName === null) return { capture: false };
-      const repo = repoFullName.toLowerCase();
-      const admitted = policy.allowedRepos !== null ? policy.allowedRepos.includes(repo) : policy.allowedOwners.length > 0 && policy.allowedOwners.includes(ownerOfRepo(repo));
-      return admitted ? { capture: true, via: "org-policy", repoFullName } : { capture: false };
+      if (repoFullName === null) return { capture: false, reason: "no-github-repo" };
+      const claims = policy.workspaceClaims ?? [
+        { owners: policy.allowedOwners, repos: policy.allowedRepos }
+      ];
+      return claims.some((workspace) => workspaceClaimsRepo(repoFullName, workspace)) ? { capture: true, via: "org-policy", repoFullName } : { capture: false, reason: "outside-policy" };
     }
   }
 }
@@ -78882,9 +78962,6 @@ function memberChoice(cwd, policy) {
     ...repoFullName !== null && { repoFullName }
   };
 }
-function ownerOfRepo(repoFullName) {
-  return repoFullName.split("/")[0] ?? "";
-}
 function listSome(values, max = 6) {
   return values.length <= max ? values.join(", ") : `${values.slice(0, max).join(", ")} and ${values.length - max} more`;
 }
@@ -78893,8 +78970,11 @@ function describeCapturePolicy(policy) {
     case "scope":
       return `sessions under ${policy.scopePaths.join(", ")}`;
     case "org-repos": {
-      const repoPart = policy.allowedRepos !== null ? policy.allowedRepos.length > 0 ? `sessions in the org's synced repos: ${listSome(policy.allowedRepos)}` : "the org's synced repo list is empty \u2014 no repo-based uploads" : policy.allowedOwners.length > 0 ? `sessions in GitHub repos owned by ${policy.allowedOwners.join(", ")}` : "org-owned GitHub repos \u2014 but the org has no GitHub integration, so nothing uploads";
-      return policy.memberFolders.length > 0 ? `${repoPart}, plus folders you added: ${policy.memberFolders.join(", ")}` : repoPart;
+      const repoPart = policy.allowedRepos !== null ? policy.allowedRepos.length > 0 ? `sessions in the org's allowlisted repos: ${listSome(policy.allowedRepos)}` : "the org's repo allowlist is empty \u2014 no repo-based uploads" : policy.allowedOwners.length > 0 ? `sessions in GitHub repos owned by ${policy.allowedOwners.join(", ")}` : "org-owned GitHub repos \u2014 but the org has no GitHub integration, so nothing uploads";
+      const claiming = (policy.workspaceClaims ?? []).filter(workspaceClaimsAnyRepo);
+      const severalWorkspaces = (policy.workspaceClaims?.length ?? 0) > 1;
+      const withOthers = severalWorkspaces && claiming.length > 0 ? `${repoPart}, routing each repo to the workspace that syncs it (${listSome(claiming.map((workspace) => workspace.name))})` : repoPart;
+      return policy.memberFolders.length > 0 ? `${withOthers}, plus folders you added: ${policy.memberFolders.join(", ")}` : withOthers;
     }
   }
 }
@@ -78910,14 +78990,24 @@ function describeStoredCapture(credentials) {
     mode: "org-repos",
     allowedOwners: credentials.allowedOwners ?? [],
     allowedRepos: credentials.allowedRepos ?? null,
+    ...credentials.workspacePolicies !== void 0 && {
+      workspaceClaims: credentials.workspacePolicies
+    },
     memberFolders: credentials.scopePaths ?? [],
     repoOf: () => null
   });
 }
-function describeSkipReason(policy, platform2 = process.platform) {
+function countCaptureSkip(skips, reason) {
+  if (reason === "outside-policy") skips.skippedOutOfScope += 1;
+  else skips.skippedNoRepo += 1;
+}
+function describeSkipReason(policy) {
   if (policy.mode !== "org-repos") return "outside the sync boundary, stayed local";
-  const boundary = policy.allowedRepos !== null ? "outside the org's synced repos" : "not in org-owned repos";
-  return platform2 === "darwin" ? `${boundary} or in macOS-protected folders, stayed local (run \`powerplant init\` to review Git repository scanning)` : `${boundary}, stayed local`;
+  return policy.allowedRepos !== null ? "outside the org's allowlisted repos, stayed local" : "not in org-owned repos, stayed local";
+}
+function describeNoRepoSkipReason(policy, platform2 = process.platform) {
+  if (policy.mode !== "org-repos") return "with no working directory recorded, stayed local";
+  return platform2 === "darwin" ? "with no readable GitHub repo or in macOS-protected folders, stayed local (run `powerplant init` to review Git repository scanning)" : "with no readable GitHub repo, stayed local";
 }
 function normalizeScopePath(raw) {
   const expanded = raw === "~" || raw.startsWith("~/") ? path3.join(os5.homedir(), raw.slice(1)) : raw;
@@ -78939,6 +79029,37 @@ function isPathWithinScopes(resolved, scopePaths) {
   );
 }
 
+// ../../apps/collector/src/syncWindow.ts
+var STEADY_SYNC_WINDOW_DAYS = 3;
+var DEEP_FIRST_SYNC_DAYS = 90;
+var DEEP_FIRST_SYNC_MAX_SESSIONS = 100;
+function resolveSyncWindow(explicitSince, deepSyncedAt) {
+  if (explicitSince !== void 0) {
+    const days = Number(explicitSince);
+    if (!Number.isFinite(days) || days <= 0) {
+      throw new ExpectedCliError(`--since must be a positive number of days, got "${explicitSince}"`);
+    }
+    return { days, deepSweep: false };
+  }
+  if (deepSyncedAt === void 0) return { days: DEEP_FIRST_SYNC_DAYS, deepSweep: true };
+  return { days: STEADY_SYNC_WINDOW_DAYS, deepSweep: false };
+}
+var DAY_MS = 24 * 60 * 60 * 1e3;
+function resolveScanFloor(window2, nowMs, narrowSinceMs) {
+  if (window2.deepSweep || narrowSinceMs === void 0) return nowMs - window2.days * DAY_MS;
+  return narrowSinceMs;
+}
+function rawShipFloorMs(appEnv, nowMs, explicitSince) {
+  if (appEnv !== "development" || explicitSince !== void 0) return null;
+  return nowMs - STEADY_SYNC_WINDOW_DAYS * DAY_MS;
+}
+function describeScanReach(window2, narrowSinceMs) {
+  if (window2.deepSweep || narrowSinceMs === void 0) {
+    return `from the last ${window2.days} day(s)`;
+  }
+  return `changed since ${new Date(narrowSinceMs).toISOString()}`;
+}
+
 // ../../apps/collector/src/upload.ts
 import { readFileSync as readFileSync4 } from "node:fs";
 import { gzipSync } from "node:zlib";
@@ -78996,7 +79117,16 @@ async function fetchCapturePolicy(apiUrl, machineToken) {
       data: external_exports.object({
         owners: external_exports.array(external_exports.string()),
         repos: external_exports.array(external_exports.string()).nullable(),
-        integration: external_exports.enum(["none", "linked"])
+        integration: external_exports.enum(["none", "linked"]),
+        workspaces: external_exports.array(
+          external_exports.object({
+            orgId: external_exports.string().min(1),
+            name: external_exports.string(),
+            owners: external_exports.array(external_exports.string()),
+            repos: external_exports.array(external_exports.string()).nullable(),
+            integration: external_exports.enum(["none", "linked"])
+          })
+        ).optional()
       })
     }),
     await response.json().catch(() => null),
@@ -79008,6 +79138,7 @@ async function uploadSessions(apiUrl, machineToken, items) {
   let upserted = 0;
   let unchanged = 0;
   let outOfPolicy = 0;
+  let deferred = 0;
   for (let offset = 0; offset < items.length; offset += MAX_INGEST_BATCH) {
     const batch = items.slice(offset, offset + MAX_INGEST_BATCH);
     const response = await fetchWithRetry("uploading session metadata", `${apiUrl}/api/ingest/sessions`, {
@@ -79026,7 +79157,8 @@ async function uploadSessions(apiUrl, machineToken, items) {
         data: external_exports.object({
           upserted: external_exports.number(),
           unchanged: external_exports.number(),
-          outOfPolicy: external_exports.number()
+          outOfPolicy: external_exports.number(),
+          deferred: external_exports.number().optional()
         })
       }),
       await response.json().catch(() => null),
@@ -79035,8 +79167,9 @@ async function uploadSessions(apiUrl, machineToken, items) {
     upserted += result.data.upserted;
     unchanged += result.data.unchanged;
     outOfPolicy += result.data.outOfPolicy;
+    deferred += result.data.deferred ?? 0;
   }
-  return { upserted, unchanged, outOfPolicy };
+  return { upserted, unchanged, outOfPolicy, deferred };
 }
 async function uploadBranchFacts(apiUrl, machineToken, facts) {
   let recorded = 0;
@@ -79086,6 +79219,7 @@ async function uploadRawSessions(apiUrl, machineToken, collected, readTranscript
     uploaded: 0,
     skippedTooLarge: 0,
     skippedUnchanged: 0,
+    missingMetadata: 0,
     failed: [],
     unconfigured: false
   };
@@ -79118,6 +79252,10 @@ async function uploadRawSessions(apiUrl, machineToken, collected, readTranscript
         summary.unconfigured = true;
         return summary;
       }
+      if (response.status === 404) {
+        summary.missingMetadata += 1;
+        continue;
+      }
       if (!response.ok) {
         throw new Error(`${response.status}: ${await errorDetail(response)}`);
       }
@@ -79201,7 +79339,8 @@ async function runEnrollment(config2, options) {
     log: log3
   });
   let orgPolicy = captureMode === "org-repos" ? await fetchCapturePolicy(config2.apiUrl, result.token) : void 0;
-  if (orgPolicy !== void 0 && orgPolicy.owners.length === 0 && orgPolicy.repos === null) {
+  const anyWorkspaceClaims = (orgPolicy?.workspaces ?? []).some(workspaceClaimsAnyRepo);
+  if (orgPolicy !== void 0 && orgPolicy.owners.length === 0 && orgPolicy.repos === null && !anyWorkspaceClaims) {
     if (config2.appEnv === "development") {
       const home = normalizeScopePath(os6.homedir());
       log3(
@@ -79233,10 +79372,20 @@ async function runEnrollment(config2, options) {
       );
     }
   }
+  const workspacePolicies = orgPolicy?.workspaces?.map((workspace) => ({
+    orgId: workspace.orgId,
+    name: workspace.name,
+    owners: workspace.owners,
+    repos: workspace.repos,
+    // Cached unknownness survives enrollment: an unresolved workspace's
+    // claims are unknown, and the first sweep must not stamp over them.
+    ...workspace.integration === "linked" && workspace.owners.length === 0 && workspace.repos === null && { unresolved: true }
+  }));
   const policy = captureMode === "org-repos" ? {
     mode: "org-repos",
     allowedOwners: orgPolicy?.owners ?? [],
     allowedRepos: orgPolicy?.repos ?? null,
+    ...workspacePolicies !== void 0 && { workspaceClaims: workspacePolicies },
     memberFolders: [],
     repoOf: () => null
   } : { mode: "scope", scopePaths, repoOf: () => null };
@@ -79251,12 +79400,16 @@ async function runEnrollment(config2, options) {
     captureMode,
     ...orgPolicy && { allowedOwners: orgPolicy.owners },
     ...orgPolicy?.repos != null && { allowedRepos: orgPolicy.repos },
+    ...captureMode === "org-repos" && workspacePolicies !== void 0 && { workspacePolicies },
     scopePaths
   };
   const location = saveCredentials(config2.appEnv, credentials);
   log3(`Enrolled "${result.machine.name}" (${result.machine.id}) into org "${result.org.name}".`);
   log3(`Machine token stored in ${location}.`);
   log3(`Syncing: ${describeCapturePolicy(policy)}.`);
+  log3(
+    `First sync backfills up to the ${DEEP_FIRST_SYNC_MAX_SESSIONS} most recently active of those sessions from the last ${DEEP_FIRST_SYNC_DAYS} days; later syncs cover the last ${STEADY_SYNC_WINDOW_DAYS} days.`
+  );
   return credentials;
 }
 async function enroll(config2, options, createAuthClient = gotrueAuthClient) {
@@ -79453,7 +79606,7 @@ function addFolder(config2, rawPath, enrollCommand, log3, deps = defaultDeps) {
   });
   const org = credentials.orgName ?? "your org";
   log3(
-    credentials.captureMode === "org-repos" ? `Sessions under ${folder} will now upload to ${org} \u2014 even outside the org's synced repos.` : `Added ${folder} to this machine's sync boundary.`
+    credentials.captureMode === "org-repos" ? `Sessions under ${folder} will now upload to ${org} \u2014 even outside the org's allowlisted repos.` : `Added ${folder} to this machine's sync boundary.`
   );
   log3("Takes effect on the next sync pass; run the sync command to apply now.");
 }
@@ -79570,6 +79723,10 @@ function readIfExists2(file2) {
     throw error52;
   }
 }
+var MAX_TRANSCRIPT_FILE_BYTES = 256 * 1024 * 1024;
+function describeReadError(error52) {
+  return error52 instanceof Error ? error52.message : String(error52);
+}
 
 // ../../apps/collector/src/lifecycleJournal.ts
 var LIFECYCLE_JOURNAL_FILENAME = "session-lifecycle.jsonl";
@@ -79611,6 +79768,7 @@ function parseClaudeCodeTranscript(text) {
   let cwd;
   let gitBranch;
   let anonCounter = 0;
+  let speedMode;
   for (const record2 of parseJsonl(text)) {
     if (record2.type === "custom-title" && typeof record2.customTitle === "string") {
       title = record2.customTitle;
@@ -79629,25 +79787,42 @@ function parseClaudeCodeTranscript(text) {
     const message = record2.message;
     if (!message || message.model === "<synthetic>") continue;
     const id = message.id ?? (typeof record2.requestId === "string" ? record2.requestId : void 0) ?? (typeof record2.uuid === "string" ? record2.uuid : void 0) ?? `anon-${anonCounter++}`;
-    const isNewMessage = !usageByMessage.has(id);
-    if (message.usage) usageByMessage.set(id, toUsage(message.usage));
-    else if (isNewMessage) usageByMessage.set(id, { input: 0, cacheRead: 0, cacheCreation: 0, output: 0 });
+    const previousMessage = usageByMessage.get(id);
+    const isNewMessage = previousMessage === void 0;
+    const speedValue = message.usage?.speed;
+    const observedSpeed = speedModeOf(speedValue);
+    const messageSpeed = observedSpeed ?? previousMessage?.speedMode;
+    if (speedValue !== void 0) speedMode = observedSpeed ?? "unknown";
+    if (message.usage) {
+      usageByMessage.set(id, {
+        usage: toUsage(message.usage),
+        ...messageSpeed && { speedMode: messageSpeed }
+      });
+    } else if (isNewMessage) {
+      usageByMessage.set(id, {
+        usage: { input: 0, cacheRead: 0, cacheCreation: 0, output: 0 }
+      });
+    }
     if (isNewMessage && typeof message.model === "string") {
       modelCounts.set(message.model, (modelCounts.get(message.model) ?? 0) + 1);
     }
   }
   if (usageByMessage.size === 0 && timestamps.length === 0) return null;
-  const summed = [...usageByMessage.values()].reduce(addUsage, {
+  const summed = [...usageByMessage.values()].map((entry) => entry.usage).reduce(addUsage, {
     input: 0,
     cacheRead: 0,
     cacheCreation: 0,
     output: 0
   });
+  const speedFullyMeasured = usageByMessage.size > 0 && [...usageByMessage.values()].every((entry) => entry.speedMode !== void 0);
+  const fastUsage = speedFullyMeasured ? [...usageByMessage.values()].filter((entry) => entry.speedMode === "fast").map((entry) => entry.usage).reduce(addUsage, { input: 0, cacheRead: 0, cacheCreation: 0, output: 0 }) : null;
   return {
     startedAt: timestamps[0],
     endedAt: timestamps[timestamps.length - 1],
     model: dominantModel(modelCounts),
     usage: usageByMessage.size > 0 ? summed : null,
+    fastUsage,
+    ...speedMode && { speedMode },
     title,
     turnCount: usageByMessage.size,
     cwd,
@@ -79658,9 +79833,13 @@ async function collectClaudeCodeSessions(options = {}) {
   const claudeDir = options.claudeDir ?? path5.join(os7.homedir(), ".claude");
   const now = options.now ?? Date.now();
   const capture = options.capture ?? captureEverythingUnresolved;
+  const maxBytes = options.maxTranscriptBytes ?? MAX_TRANSCRIPT_FILE_BYTES;
   const projectsDir = path5.join(claudeDir, "projects");
   const items = [];
-  let skippedOutOfScope = 0;
+  const skips = { skippedOutOfScope: 0, skippedNoRepo: 0 };
+  const candidates = [];
+  const unreadable = [];
+  let skippedTooLarge = 0;
   const home = path5.dirname(claudeDir);
   const lifecycle = options.lifecycle ?? readLifecycleJournal(home);
   for (const projectDir of listDirs(projectsDir)) {
@@ -79670,39 +79849,76 @@ async function collectClaudeCodeSessions(options = {}) {
       const stat = statIfExists(transcriptPath);
       if (!stat) continue;
       if (options.sinceMs !== void 0 && stat.mtimeMs < options.sinceMs) continue;
+      if (stat.size > maxBytes) {
+        skippedTooLarge += 1;
+        continue;
+      }
       const sessionId = path5.basename(entry, ".jsonl");
       const endObservedAt = observedSessionEnd(lifecycle.get(sessionId), stat.mtimeMs);
       const status = endObservedAt === null && now - stat.mtimeMs < ACTIVE_GRACE_MS ? "active" : "inactive";
-      if (options.locationsOnly) {
+      try {
         const cwd = transcriptCwd(transcriptPath);
-        const decision2 = captureDecision(cwd, capture);
-        if (!decision2.capture) {
-          skippedOutOfScope += 1;
+        const decision = captureDecision(cwd, capture);
+        if (!decision.capture) {
+          countCaptureSkip(skips, decision.reason);
           continue;
         }
-        items.push({
-          mtimeMs: stat.mtimeMs,
+        if (options.locationsOnly) {
+          items.push({
+            mtimeMs: stat.mtimeMs,
+            transcriptPath,
+            ...cwd && { cwd },
+            item: { source: "claude-code", externalId: sessionId, status, capturedVia: decision.via }
+          });
+          continue;
+        }
+        candidates.push({
           transcriptPath,
+          projectDir,
+          sessionId,
+          mtimeMs: stat.mtimeMs,
+          status,
+          endObservedAt,
           ...cwd && { cwd },
-          item: { source: "claude-code", externalId: sessionId, status, capturedVia: decision2.via }
+          decision
         });
-        continue;
+      } catch (error52) {
+        unreadable.push(`${sessionId}: ${describeReadError(error52)}`);
       }
+    }
+  }
+  if (options.locationsOnly) {
+    return {
+      sessions: items.sort((a, b2) => b2.mtimeMs - a.mtimeMs),
+      ...skips,
+      skippedTooLarge,
+      unreadable,
+      heldBack: 0
+    };
+  }
+  candidates.sort((a, b2) => b2.mtimeMs - a.mtimeMs);
+  const chosen = options.maxSessions === void 0 ? candidates : candidates.slice(0, options.maxSessions);
+  for (const candidate of chosen) {
+    await yieldToEventLoop();
+    const { transcriptPath, projectDir, sessionId, mtimeMs, status, endObservedAt, cwd, decision } = candidate;
+    try {
       const text = readIfExists2(transcriptPath);
       if (text === null) continue;
       const summary = parseClaudeCodeTranscript(text);
       if (!summary) continue;
-      const decision = captureDecision(summary.cwd, capture);
-      if (!decision.capture) {
-        skippedOutOfScope += 1;
-        continue;
-      }
-      const usage = addSubagentUsage(summary.usage, path5.join(projectDir, sessionId, "subagents"));
+      const usage = addSubagentUsage(
+        summary.usage,
+        summary.fastUsage,
+        path5.join(projectDir, sessionId, "subagents"),
+        { maxBytes, sessionId }
+      );
+      skippedTooLarge += usage.skippedTooLarge;
+      unreadable.push(...usage.unreadable);
       const endedAt = endObservedAt ?? summary.endedAt;
       items.push({
-        mtimeMs: stat.mtimeMs,
+        mtimeMs,
         transcriptPath,
-        ...summary.cwd && { cwd: summary.cwd },
+        ...cwd && { cwd },
         item: {
           source: "claude-code",
           externalId: sessionId,
@@ -79710,28 +79926,42 @@ async function collectClaudeCodeSessions(options = {}) {
           ...summary.startedAt && { startedAt: summary.startedAt },
           ...endedAt && { endedAt },
           ...summary.model && { model: summary.model },
+          ...summary.speedMode && { speedMode: summary.speedMode },
           // Total input-class tokens the source reported (uncached + cache
           // reads + cache writes) — a real reported total, not an estimate.
           // The cache breakdown rides along: pricing bills reads at 0.1×
           // and writes at 1.25×, so collapsing it would inflate estimates.
-          ...usage && { inputTokens: usage.input + usage.cacheRead + usage.cacheCreation },
-          ...usage && { outputTokens: usage.output },
-          ...usage && { cacheReadTokens: usage.cacheRead },
-          ...usage && { cacheWriteTokens: usage.cacheCreation },
+          ...usage.total && {
+            inputTokens: usage.total.input + usage.total.cacheRead + usage.total.cacheCreation
+          },
+          ...usage.total && { outputTokens: usage.total.output },
+          ...usage.total && { cacheReadTokens: usage.total.cacheRead },
+          ...usage.total && { cacheWriteTokens: usage.total.cacheCreation },
+          ...usage.fast && {
+            fastInputTokens: usage.fast.input + usage.fast.cacheRead + usage.fast.cacheCreation,
+            fastOutputTokens: usage.fast.output,
+            fastCacheReadTokens: usage.fast.cacheRead,
+            fastCacheWriteTokens: usage.fast.cacheCreation
+          },
           ...summary.title && { title: redactText(summary.title).slice(0, 500) },
           // The PR-join coordinates: the checkout's directory name (bare
           // repo, not the local path) and the branch the work started on.
-          ...summary.cwd && { repoDir: path5.basename(summary.cwd) },
+          ...cwd && { repoDir: path5.basename(cwd) },
           ...summary.gitBranch && { gitBranch: summary.gitBranch },
           ...decision.repoFullName && { repoFullName: decision.repoFullName },
           capturedVia: decision.via
         }
       });
+    } catch (error52) {
+      unreadable.push(`${sessionId}: ${describeReadError(error52)}`);
     }
   }
   return {
     sessions: items.sort((a, b2) => b2.mtimeMs - a.mtimeMs),
-    skippedOutOfScope
+    ...skips,
+    skippedTooLarge,
+    unreadable,
+    heldBack: candidates.length - chosen.length
   };
 }
 function transcriptCwd(transcriptPath) {
@@ -79750,6 +79980,9 @@ function toUsage(u) {
     output: n(u.output_tokens)
   };
 }
+function speedModeOf(value) {
+  return value === "fast" || value === "standard" ? value : void 0;
+}
 function addUsage(a, b2) {
   return {
     input: a.input + b2.input,
@@ -79758,15 +79991,36 @@ function addUsage(a, b2) {
     output: a.output + b2.output
   };
 }
-function addSubagentUsage(main2, subagentsDir) {
-  let usage = main2;
+function addSubagentUsage(main2, mainFast, subagentsDir, bounds) {
+  let total = main2;
+  let fast = mainFast;
+  let fastCoverageComplete = main2 === null || mainFast !== null;
+  let skippedTooLarge = 0;
+  const unreadable = [];
   for (const entry of listFiles(subagentsDir, ".jsonl")) {
-    const text = readIfExists2(path5.join(subagentsDir, entry));
-    if (text === null) continue;
-    const summary = parseClaudeCodeTranscript(text);
-    if (summary?.usage) usage = addUsage(usage ?? { input: 0, cacheRead: 0, cacheCreation: 0, output: 0 }, summary.usage);
+    const sidecarPath = path5.join(subagentsDir, entry);
+    try {
+      const stat = statIfExists(sidecarPath);
+      if (stat === null) continue;
+      if (stat.size > bounds.maxBytes) {
+        skippedTooLarge += 1;
+        continue;
+      }
+      const text = readIfExists2(sidecarPath);
+      if (text === null) continue;
+      const summary = parseClaudeCodeTranscript(text);
+      if (summary?.usage) {
+        total = addUsage(total ?? { input: 0, cacheRead: 0, cacheCreation: 0, output: 0 }, summary.usage);
+        if (summary.fastUsage === null) fastCoverageComplete = false;
+      }
+      if (summary?.fastUsage) {
+        fast = addUsage(fast ?? { input: 0, cacheRead: 0, cacheCreation: 0, output: 0 }, summary.fastUsage);
+      }
+    } catch (error52) {
+      unreadable.push(`${bounds.sessionId} (subagent ${entry}): ${describeReadError(error52)}`);
+    }
   }
-  return usage;
+  return { total, fast: fastCoverageComplete ? fast : null, skippedTooLarge, unreadable };
 }
 function dominantModel(counts) {
   let best;
@@ -79785,6 +80039,10 @@ function parseCodexRollout(text) {
   let meta3 = null;
   let model;
   let totals = null;
+  let fastTotals = { input: 0, cached: 0, output: 0 };
+  let speedMode;
+  let fastCoverageComplete = true;
+  let classifiedUsage = false;
   const timestamps = [];
   for (const line of parseJsonl(text)) {
     if (typeof line.timestamp === "string") timestamps.push(line.timestamp);
@@ -79795,15 +80053,38 @@ function parseCodexRollout(text) {
       meta3 ??= record2;
     } else if (line.type === "turn_context" && typeof record2.model === "string") {
       model = record2.model;
+    } else if (line.type === "event_msg" && record2.type === "thread_settings_applied") {
+      const settings = record2.thread_settings;
+      if (settings && typeof settings === "object" && !Array.isArray(settings)) {
+        const tier = settings.service_tier;
+        if (tier !== void 0) speedMode = codexSpeedMode(tier) ?? "unknown";
+      }
     } else if (line.type === "event_msg" && record2.type === "token_count") {
       const info = record2.info;
       const usage = info?.total_token_usage;
       if (usage) {
         const n = (value) => typeof value === "number" ? value : 0;
-        totals ??= { input: 0, cached: 0, output: 0 };
-        totals.input = Math.max(totals.input, n(usage.input_tokens));
-        totals.cached = Math.max(totals.cached, n(usage.cached_input_tokens));
-        totals.output = Math.max(totals.output, n(usage.output_tokens));
+        const next = {
+          input: n(usage.input_tokens),
+          cached: n(usage.cached_input_tokens),
+          output: n(usage.output_tokens)
+        };
+        const previous = totals ?? { input: 0, cached: 0, output: 0 };
+        const delta = {
+          input: Math.max(0, next.input - previous.input),
+          cached: Math.max(0, next.cached - previous.cached),
+          output: Math.max(0, next.output - previous.output)
+        };
+        if (delta.input > 0 || delta.cached > 0 || delta.output > 0) {
+          if (speedMode === "fast" || speedMode === "standard") classifiedUsage = true;
+          else fastCoverageComplete = false;
+          if (speedMode === "fast") fastTotals = addCodexTotals(fastTotals, delta);
+        }
+        totals = {
+          input: Math.max(previous.input, next.input),
+          cached: Math.max(previous.cached, next.cached),
+          output: Math.max(previous.output, next.output)
+        };
       }
     }
   }
@@ -79817,6 +80098,8 @@ function parseCodexRollout(text) {
     endedAt: timestamps[timestamps.length - 1],
     ...model && { model },
     totals,
+    fastTotals: fastCoverageComplete && classifiedUsage ? fastTotals : null,
+    ...speedMode && { speedMode },
     ...typeof meta3?.cwd === "string" && meta3.cwd !== "" && { cwd: meta3.cwd },
     ...typeof git?.branch === "string" && git.branch !== "" && { gitBranch: git.branch },
     ...repoNameFromUrl(git?.repository_url) ?? {},
@@ -79830,14 +80113,23 @@ function parseRolloutFile(rolloutPath) {
 function rolloutLocation(rolloutPath) {
   const record2 = readFirstRecord(rolloutPath, (candidate) => candidate.type === "session_meta");
   const meta3 = record2?.payload;
-  if (!meta3 || typeof meta3 !== "object" || Array.isArray(meta3)) return { kind: "session", totals: null };
+  if (!meta3 || typeof meta3 !== "object" || Array.isArray(meta3)) return { kind: "session", totals: null, fastTotals: null };
   const { thread_source: threadSource, cwd } = meta3;
   return {
     kind: threadSource === "subagent" ? "subagent" : "session",
     totals: null,
+    fastTotals: null,
     ...typeof cwd === "string" && cwd !== "" && { cwd }
   };
 }
+function codexSpeedMode(value) {
+  if (value === "priority" || value === "fast") return "fast";
+  if (value === "default") return "standard";
+  return void 0;
+}
+function addCodexTotals(a, b2) {
+  return { input: a.input + b2.input, cached: a.cached + b2.cached, output: a.output + b2.output };
+}
 function repoFullNameFrom(url2) {
   const fullName = parseGithubRepo(url2);
   return fullName ? { repoFullName: fullName } : {};
@@ -79875,58 +80167,100 @@ async function collectCodexSessions(options = {}) {
   const sessionsDir = options.codexDir ?? path6.join(os8.homedir(), ".codex", "sessions");
   const now = options.now ?? Date.now();
   const capture = options.capture ?? captureEverythingUnresolved;
-  const threadNames = options.locationsOnly ? /* @__PURE__ */ new Map() : loadThreadNames(sessionsDir);
+  const maxBytes = options.maxTranscriptBytes ?? MAX_TRANSCRIPT_FILE_BYTES;
   const items = [];
-  let skippedOutOfScope = 0;
+  const candidates = [];
+  const unreadable = [];
+  const skips = { skippedOutOfScope: 0, skippedNoRepo: 0 };
   let skippedSubagentThreads = 0;
-  const collectFrom = async (rootDir, archived) => {
+  let skippedTooLarge = 0;
+  const externalIdOf = (rolloutPath) => path6.basename(rolloutPath, ".jsonl");
+  const admitFrom = async (rootDir, archived) => {
     for (const rolloutPath of rolloutFiles(rootDir)) {
       await yieldToEventLoop2();
       const stat = statIfExists(rolloutPath);
       if (!stat) continue;
       if (options.sinceMs !== void 0 && Math.max(stat.mtimeMs, stat.ctimeMs) < options.sinceMs)
         continue;
-      const summary = options.locationsOnly ? rolloutLocation(rolloutPath) : parseRolloutFile(rolloutPath);
-      if (!summary) continue;
-      if (summary.kind === "subagent") {
-        skippedSubagentThreads += 1;
-        continue;
-      }
-      const decision = captureDecision(summary.cwd, capture);
-      if (!decision.capture) {
-        skippedOutOfScope += 1;
+      if (stat.size > maxBytes) {
+        skippedTooLarge += 1;
         continue;
       }
-      if (options.locationsOnly) {
-        items.push({
+      try {
+        const location = rolloutLocation(rolloutPath);
+        if (location.kind === "subagent") {
+          skippedSubagentThreads += 1;
+          continue;
+        }
+        const decision = captureDecision(location.cwd, capture);
+        if (!decision.capture) {
+          countCaptureSkip(skips, decision.reason);
+          continue;
+        }
+        if (options.locationsOnly) {
+          items.push({
+            mtimeMs: stat.mtimeMs,
+            transcriptPath: rolloutPath,
+            ...location.cwd && { cwd: location.cwd },
+            item: {
+              source: "codex",
+              externalId: externalIdOf(rolloutPath),
+              status: now - stat.mtimeMs < ACTIVE_GRACE_MS ? "active" : "inactive",
+              archived,
+              capturedVia: decision.via
+            }
+          });
+          continue;
+        }
+        candidates.push({
+          rolloutPath,
+          archived,
           mtimeMs: stat.mtimeMs,
-          transcriptPath: rolloutPath,
-          ...summary.cwd && { cwd: summary.cwd },
-          item: {
-            source: "codex",
-            externalId: path6.basename(rolloutPath, ".jsonl"),
-            status: now - stat.mtimeMs < ACTIVE_GRACE_MS ? "active" : "inactive",
-            archived,
-            capturedVia: decision.via
-          }
+          ...location.cwd && { cwd: location.cwd },
+          decision
         });
-        continue;
+      } catch (error52) {
+        unreadable.push(`${externalIdOf(rolloutPath)}: ${describeReadError(error52)}`);
       }
-      const repoDir = summary.repoName ?? (summary.cwd ? path6.basename(summary.cwd) : void 0);
+    }
+  };
+  await admitFrom(sessionsDir, false);
+  await admitFrom(codexArchivedSessionsDir(sessionsDir), true);
+  if (options.locationsOnly) {
+    return {
+      sessions: items.sort((a, b2) => b2.mtimeMs - a.mtimeMs),
+      ...skips,
+      skippedSubagentThreads,
+      skippedTooLarge,
+      unreadable,
+      heldBack: 0
+    };
+  }
+  candidates.sort((a, b2) => b2.mtimeMs - a.mtimeMs);
+  const chosen = options.maxSessions === void 0 ? candidates : candidates.slice(0, options.maxSessions);
+  const threadNames = chosen.length > 0 ? loadThreadNames(sessionsDir) : /* @__PURE__ */ new Map();
+  for (const candidate of chosen) {
+    await yieldToEventLoop2();
+    const { rolloutPath, archived, mtimeMs, cwd, decision } = candidate;
+    try {
+      const summary = parseRolloutFile(rolloutPath);
+      if (!summary) continue;
+      const repoDir = summary.repoName ?? (cwd ? path6.basename(cwd) : void 0);
       const repoFullName = decision.repoFullName ?? summary.repoFullName;
       const title = summary.sessionId ? threadNames.get(summary.sessionId) : void 0;
       items.push({
-        mtimeMs: stat.mtimeMs,
+        mtimeMs,
         transcriptPath: rolloutPath,
-        ...summary.cwd && { cwd: summary.cwd },
+        ...cwd && { cwd },
         item: {
           source: "codex",
-          externalId: path6.basename(rolloutPath, ".jsonl"),
-          status: now - stat.mtimeMs < ACTIVE_GRACE_MS ? "active" : "inactive",
+          externalId: externalIdOf(rolloutPath),
+          status: now - mtimeMs < ACTIVE_GRACE_MS ? "active" : "inactive",
           archived,
           ...summary.startedAt && { startedAt: summary.startedAt },
           ...summary.endedAt && { endedAt: summary.endedAt },
           ...summary.model && { model: summary.model },
+          ...summary.speedMode && { speedMode: summary.speedMode },
           ...title && { title: redactText(title).slice(0, 500) },
           // input_tokens already includes the cached subset — it IS the
           // all-in input-class total. No cache-write figure exists, so
@@ -79934,20 +80268,29 @@ async function collectCodexSessions(options = {}) {
           ...summary.totals && { inputTokens: summary.totals.input },
           ...summary.totals && { outputTokens: summary.totals.output },
           ...summary.totals && { cacheReadTokens: summary.totals.cached },
+          ...summary.fastTotals && { fastInputTokens: summary.fastTotals.input },
+          ...summary.fastTotals && { fastOutputTokens: summary.fastTotals.output },
+          ...summary.fastTotals && { fastCacheReadTokens: summary.fastTotals.cached },
+          // OpenAI prompt-cache writes have no separate price in the current
+          // session cost model; zero is measured here, not an invented count.
+          ...summary.fastTotals && { fastCacheWriteTokens: 0 },
           ...repoDir && { repoDir },
           ...summary.gitBranch && { gitBranch: summary.gitBranch },
           ...repoFullName && { repoFullName },
           capturedVia: decision.via
         }
       });
+    } catch (error52) {
+      unreadable.push(`${externalIdOf(rolloutPath)}: ${describeReadError(error52)}`);
     }
-  };
-  await collectFrom(sessionsDir, false);
-  await collectFrom(codexArchivedSessionsDir(sessionsDir), true);
+  }
   return {
     sessions: items.sort((a, b2) => b2.mtimeMs - a.mtimeMs),
-    skippedOutOfScope,
-    skippedSubagentThreads
+    ...skips,
+    skippedSubagentThreads,
+    skippedTooLarge,
+    unreadable,
+    heldBack: candidates.length - chosen.length
   };
 }
 
@@ -79975,9 +80318,12 @@ function cursorSpoolDir(home) {
 var emptyResult = () => ({
   sessions: [],
   skippedOutOfScope: 0,
+  skippedNoRepo: 0,
   skippedSubagentComposers: 0,
   skippedNonLocalComposers: 0,
   skippedUnreadable: 0,
+  skippedTooLarge: 0,
+  truncatedTranscripts: 0,
   unavailable: null
 });
 var SQLITE_EXPERIMENTAL_WARNING = "SQLite is an experimental feature and might change at any time";
@@ -80005,9 +80351,6 @@ async function openCursorDatabase(dbPath) {
   const sqlite = await loadSqlite();
   return new sqlite.DatabaseSync(dbPath, { readOnly: true });
 }
-function describeError(error52) {
-  return error52 instanceof Error ? error52.message : String(error52);
-}
 function isRecord3(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -80082,6 +80425,8 @@ function toolFilePathOf(args) {
   }
   return void 0;
 }
+var SPOOL_META_RESERVE_BYTES = 64 * 1024;
+var lineBytes = (line) => Buffer.byteLength(JSON.stringify(line)) + 1;
 function bubbleLines(bubble) {
   const lines = [];
   const createdAt = typeof bubble.createdAt === "string" ? { createdAt: bubble.createdAt } : {};
@@ -80121,43 +80466,50 @@ function bubbleLines(bubble) {
   }
   return lines;
 }
-function extractTranscript(db, composerId) {
+function extractTranscript(db, composerId, maxBytes) {
   const valueByKey = db.prepare("select value from cursorDiskKV where key = ?");
   const dataRow = valueByKey.get(`composerData:${composerId}`);
   const dataText = isRecord3(dataRow) && typeof dataRow.value === "string" ? dataRow.value : null;
   const data = dataText === null ? null : safeJsonRecord2(dataText);
   const spine = Array.isArray(data?.fullConversationHeadersOnly) ? data.fullConversationHeadersOnly : [];
   if (spine.length === 0) return null;
+  const budget = maxBytes - SPOOL_META_RESERVE_BYTES;
   const lines = [];
   const modelCounts = /* @__PURE__ */ new Map();
+  let bytes = 0;
   let bubbleCount = 0;
-  for (const entry of spine) {
+  let bubblesOmitted = 0;
+  for (const [index, entry] of spine.entries()) {
     if (!isRecord3(entry) || typeof entry.bubbleId !== "string") continue;
     const row = valueByKey.get(`bubbleId:${composerId}:${entry.bubbleId}`);
     const text = isRecord3(row) && typeof row.value === "string" ? row.value : null;
     const bubble = text === null ? null : safeJsonRecord2(text);
     if (bubble === null) continue;
+    const bubbleLinesOut = bubbleLines(bubble);
+    const bubbleBytes = bubbleLinesOut.reduce((sum2, line) => sum2 + lineBytes(line), 0);
+    if (bytes + bubbleBytes > budget) {
+      bubblesOmitted = spine.length - index;
+      break;
+    }
+    bytes += bubbleBytes;
     bubbleCount += 1;
-    for (const line of bubbleLines(bubble)) {
+    for (const line of bubbleLinesOut) {
       lines.push(line);
       if (line.type === "agent" && line.model !== void 0) {
         modelCounts.set(line.model, (modelCounts.get(line.model) ?? 0) + 1);
       }
     }
   }
-  if (bubbleCount === 0) return null;
+  if (bubbleCount === 0 && bubblesOmitted === 0) return null;
   let model;
   let best = 0;
   for (const [name, count] of modelCounts) {
     if (count > best) [model, best] = [name, count];
   }
-  return { lines, ...model && { model }, bubbleCount };
+  return { lines, ...model && { model }, bubbleCount, bubblesOmitted };
 }
 function readSpoolModel(spoolPath) {
-  const text = readIfExists2(spoolPath);
-  if (text === null) return void 0;
-  const newline = text.indexOf("\n");
-  const record2 = safeJsonRecord2(newline === -1 ? text : text.slice(0, newline));
+  const record2 = readFirstRecord(spoolPath, () => true);
   if (record2 === null || record2.type !== "meta" || record2.format !== "cursor-local-transcript") {
     return void 0;
   }
@@ -80170,20 +80522,20 @@ async function collectCursorSessions(options = {}) {
   try {
     if (statIfExists(dbPath) === null) return result;
   } catch (error52) {
-    result.unavailable = `Cursor's session store isn't readable (${describeError(error52)})`;
+    result.unavailable = `Cursor's session store isn't readable (${describeReadError(error52)})`;
     return result;
   }
   let db;
   try {
     db = await openCursorDatabase(dbPath);
   } catch (error52) {
-    result.unavailable = `Cursor's session store couldn't be opened (${describeError(error52)})`;
+    result.unavailable = `Cursor's session store couldn't be opened (${describeReadError(error52)})`;
     return result;
   }
   try {
     collectFromStore(db, userDir, options, result);
   } catch (error52) {
-    result.unavailable = `reading Cursor's session store failed (${describeError(error52)})`;
+    result.unavailable = `reading Cursor's session store failed (${describeReadError(error52)})`;
   } finally {
     try {
       db.close();
@@ -80197,6 +80549,7 @@ function collectFromStore(db, userDir, options, result) {
   const now = options.now ?? Date.now();
   const capture = options.capture ?? captureEverythingUnresolved;
   const spoolDir = options.spoolDir ?? cursorSpoolDir(os9.homedir());
+  const maxBytes = options.maxTranscriptBytes ?? MAX_TRANSCRIPT_FILE_BYTES;
   let spoolDirReady = false;
   const headerRows = db.prepare(
     "select composerId, workspaceId, createdAt, lastUpdatedAt, isArchived, isSubagent, value from composerHeaders where lastUpdatedAt >= ? order by lastUpdatedAt desc"
@@ -80225,7 +80578,7 @@ function collectFromStore(db, userDir, options, result) {
       const cwd = facts.workspacePath ?? workspaceFolderOf(userDir, workspaceId);
       const decision = captureDecision(cwd, capture);
       if (!decision.capture) {
-        result.skippedOutOfScope += 1;
+        countCaptureSkip(result, decision.reason);
         continue;
       }
       if (options.locationsOnly) {
@@ -80246,10 +80599,15 @@ function collectFromStore(db, userDir, options, result) {
       const spoolStat = statIfExists(spoolPath);
       let model;
       if (spoolStat !== null && Math.abs(spoolStat.mtimeMs - lastUpdatedAt) < 1) {
+        if (spoolStat.size > maxBytes) {
+          result.skippedTooLarge += 1;
+          continue;
+        }
         model = readSpoolModel(spoolPath);
       } else {
-        const transcript = extractTranscript(db, raw.composerId);
+        const transcript = extractTranscript(db, raw.composerId, maxBytes);
         if (transcript === null) continue;
+        if (transcript.bubblesOmitted > 0) result.truncatedTranscripts += 1;
         model = transcript.model;
         const meta3 = {
           type: "meta",
@@ -80261,7 +80619,8 @@ function collectFromStore(db, userDir, options, result) {
           ...model && { model },
           ...typeof raw.createdAt === "number" && { createdAt: raw.createdAt },
           lastUpdatedAt,
-          ...cwd && { workspacePath: cwd }
+          ...cwd && { workspacePath: cwd },
+          ...transcript.bubblesOmitted > 0 && { bubblesOmitted: transcript.bubblesOmitted }
         };
         if (!spoolDirReady) {
           mkdirSync2(spoolDir, { recursive: true });
@@ -80306,36 +80665,6 @@ function collectFromStore(db, userDir, options, result) {
   }
 }
 
-// ../../apps/collector/src/syncWindow.ts
-var STEADY_SYNC_WINDOW_DAYS = 3;
-var DEEP_FIRST_SYNC_DAYS = 90;
-function resolveSyncWindow(explicitSince, deepSyncedAt) {
-  if (explicitSince !== void 0) {
-    const days = Number(explicitSince);
-    if (!Number.isFinite(days) || days <= 0) {
-      throw new ExpectedCliError(`--since must be a positive number of days, got "${explicitSince}"`);
-    }
-    return { days, deepSweep: false };
-  }
-  if (deepSyncedAt === void 0) return { days: DEEP_FIRST_SYNC_DAYS, deepSweep: true };
-  return { days: STEADY_SYNC_WINDOW_DAYS, deepSweep: false };
-}
-var DAY_MS = 24 * 60 * 60 * 1e3;
-function resolveScanFloor(window2, nowMs, narrowSinceMs) {
-  if (window2.deepSweep || narrowSinceMs === void 0) return nowMs - window2.days * DAY_MS;
-  return narrowSinceMs;
-}
-function rawShipFloorMs(appEnv, nowMs, explicitSince) {
-  if (appEnv !== "development" || explicitSince !== void 0) return null;
-  return nowMs - STEADY_SYNC_WINDOW_DAYS * DAY_MS;
-}
-function describeScanReach(window2, narrowSinceMs) {
-  if (window2.deepSweep || narrowSinceMs === void 0) {
-    return `from the last ${window2.days} day(s)`;
-  }
-  return `changed since ${new Date(narrowSinceMs).toISOString()}`;
-}
-
 // ../../apps/collector/src/protectedRepoDiscovery.ts
 var defaultDiscoveryDeps = {
   collectClaude: collectClaudeCodeSessions,
@@ -80512,7 +80841,7 @@ function installCollectorHooks(homeDir = os11.homedir()) {
 }
 
 // ../../apps/collector/src/service.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { chmodSync as chmodSync2, existsSync as existsSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync7, rmSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync4 } from "node:fs";
 import os12 from "node:os";
 import path10 from "node:path";
@@ -80660,7 +80989,7 @@ function restartService(config2) {
 }
 function runLaunchctl(args) {
   try {
-    execFileSync2("launchctl", args, { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
+    execFileSync3("launchctl", args, { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
   } catch (cause) {
     throw new Error(launchctlFailureMessage(args[0] ?? "", cause), { cause });
   }
@@ -80675,7 +81004,7 @@ function launchctlFailureMessage(subcommand, cause) {
 }
 function isLoaded(appEnv) {
   try {
-    execFileSync2("launchctl", ["print", `gui/${uid()}/${label(appEnv)}`], { stdio: "ignore" });
+    execFileSync3("launchctl", ["print", `gui/${uid()}/${label(appEnv)}`], { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -80683,7 +81012,7 @@ function isLoaded(appEnv) {
 }
 function bootout(appEnv) {
   try {
-    execFileSync2("launchctl", ["bootout", `gui/${uid()}/${label(appEnv)}`], { stdio: "ignore" });
+    execFileSync3("launchctl", ["bootout", `gui/${uid()}/${label(appEnv)}`], { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -80984,12 +81313,33 @@ async function resolveCapturePolicy(config2, credentials, log3, deps = defaultPo
   }
   let owners = credentials.allowedOwners ?? [];
   let repos = credentials.allowedRepos ?? null;
+  let workspacePolicies = credentials.workspacePolicies;
   let ownersUnresolved = false;
+  let claimsUnresolved = false;
   try {
     const fresh = await deps.fetchPolicy(credentials.apiUrl, credentials.token);
     ownersUnresolved = fresh.integration === "linked" && fresh.owners.length === 0;
     const nextOwners = ownersUnresolved ? owners : fresh.owners;
-    const changed = nextOwners.join(",") !== owners.join(",") || (fresh.repos?.join(",") ?? null) !== (repos?.join(",") ?? null);
+    const nextWorkspaces = fresh.workspaces?.map((workspace) => {
+      const unresolved = workspace.integration === "linked" && workspace.owners.length === 0 && workspace.repos === null;
+      const cached3 = workspacePolicies?.find((entry) => entry.orgId === workspace.orgId) ?? (credentials.orgId !== void 0 && workspace.orgId === credentials.orgId ? { orgId: workspace.orgId, name: workspace.name, owners, repos } : void 0);
+      const usableCache = cached3 !== void 0 && workspaceClaimsAnyRepo(cached3);
+      const effective = unresolved && usableCache ? cached3 : unresolved ? {
+        orgId: workspace.orgId,
+        name: workspace.name,
+        owners: workspace.owners,
+        repos: workspace.repos,
+        unresolved: true
+      } : {
+        orgId: workspace.orgId,
+        name: workspace.name,
+        owners: workspace.owners,
+        repos: workspace.repos
+      };
+      if (effective.unresolved) claimsUnresolved = true;
+      return effective;
+    });
+    const changed = nextOwners.join(",") !== owners.join(",") || (fresh.repos?.join(",") ?? null) !== (repos?.join(",") ?? null) || JSON.stringify(nextWorkspaces ?? null) !== JSON.stringify(workspacePolicies ?? null);
     if (changed) {
       const next = {
         ...credentials,
@@ -80997,34 +81347,48 @@ async function resolveCapturePolicy(config2, credentials, log3, deps = defaultPo
       };
       if (fresh.repos !== null) next.allowedRepos = fresh.repos;
       else delete next.allowedRepos;
+      if (nextWorkspaces !== void 0) next.workspacePolicies = nextWorkspaces;
+      else delete next.workspacePolicies;
       deps.persist(config2.appEnv, next);
     }
     owners = nextOwners;
     repos = fresh.repos;
+    workspacePolicies = nextWorkspaces;
   } catch (cause) {
+    const cachedCoversSomething = owners.length > 0 || repos !== null || (workspacePolicies ?? []).some((entry) => workspaceClaimsAnyRepo(entry));
+    if (!cachedCoversSomething || (workspacePolicies ?? []).some((entry) => entry.unresolved === true)) {
+      claimsUnresolved = true;
+    }
     log3(
-      `\u26A0 Couldn't refresh the org's repo sync policy (${describeSyncError(cause)}) \u2014 ` + (owners.length > 0 || repos !== null ? "using the cached policy." : "nothing will upload this pass.")
+      `\u26A0 Couldn't refresh the org's repo sync policy (${describeSyncError(cause)}) \u2014 ` + (cachedCoversSomething ? "using the cached policy." : "nothing will upload this pass.")
     );
   }
   const memberFolders = credentials.scopePaths ?? [];
+  if (ownersUnresolved && owners.length === 0 && repos === null) claimsUnresolved = true;
   if (ownersUnresolved) {
     log3(
       "\u26A0 The org's GitHub is connected, but its account couldn't be resolved just now \u2014 " + (owners.length > 0 ? `using the cached owner list: ${owners.join(", ")}.` : "no owner-based uploads this pass. This is usually temporary; syncing resumes when it resolves.")
     );
   }
+  const homeOrgId = credentials.orgId ?? workspacePolicies?.[0]?.orgId;
+  const foreignClaims = (workspacePolicies ?? []).filter(
+    (entry) => entry.orgId !== homeOrgId && workspaceClaimsAnyRepo(entry)
+  );
   if (repos !== null && repos.length === 0) {
     log3(
-      "\u26A0 The org's synced repo list is empty \u2014 no repo-based uploads" + (memberFolders.length > 0 ? "; only folders you added upload." : ".")
+      "\u26A0 The org's repo allowlist is empty \u2014 no repo-based uploads for it" + (foreignClaims.length > 0 ? `; repos synced by ${foreignClaims.map((entry) => entry.name).join(", ")} still upload.` : memberFolders.length > 0 ? "; only folders you added upload." : ".")
     );
   } else if (repos === null && owners.length === 0 && !ownersUnresolved) {
     log3(
-      "\u26A0 Syncing is gated on org-owned GitHub repos, but the org has no GitHub integration \u2014 nothing uploads. Connect GitHub in Settings, or add folders with `powerplant folders add`."
+      foreignClaims.length > 0 ? `Your home workspace has no GitHub integration \u2014 syncing repos for ${foreignClaims.map((entry) => entry.name).join(", ")}.` : "\u26A0 Syncing is gated on org-owned GitHub repos, but the org has no GitHub integration \u2014 nothing uploads. Connect GitHub in Settings, or add folders with `powerplant folders add`."
     );
   }
   return {
     mode: "org-repos",
     allowedOwners: owners,
     allowedRepos: repos,
+    ...workspacePolicies !== void 0 && { workspaceClaims: workspacePolicies },
+    ...claimsUnresolved && { claimsUnresolved },
     memberFolders,
     repoOf,
     environment
@@ -81041,26 +81405,33 @@ async function runSyncPass(config2, options = {}) {
   const window2 = resolveSyncWindow(options.explicitSince, credentials.deepSyncedAt);
   if (window2.deepSweep) {
     log3(
-      `First sync for this enrollment \u2014 sweeping the last ${window2.days} days to backfill transcripts already on this machine (later syncs cover ${STEADY_SYNC_WINDOW_DAYS}).`
+      `First sync for this enrollment \u2014 sweeping the last ${window2.days} days and backfilling up to the ${DEEP_FIRST_SYNC_MAX_SESSIONS} most recently active sessions already on this machine (later syncs cover ${STEADY_SYNC_WINDOW_DAYS} days).`
     );
   }
   const capture = await resolveCapturePolicy(config2, credentials, log3);
   const sinceMs = resolveScanFloor(window2, Date.now(), options.narrowSinceMs);
-  const claude = await collectClaudeCodeSessions({ sinceMs, capture });
-  const codex = await collectCodexSessions({ sinceMs, capture });
+  const maxSessions = window2.deepSweep ? DEEP_FIRST_SYNC_MAX_SESSIONS : void 0;
+  const claude = await collectClaudeCodeSessions({ sinceMs, capture, maxSessions });
+  const codex = await collectCodexSessions({ sinceMs, capture, maxSessions });
   const cursor = await collectCursorSessions({ sinceMs, capture });
   if (cursor.unavailable !== null) {
     log3(`\u26A0 Cursor sessions skipped this pass \u2014 ${cursor.unavailable}. Other syncing is unaffected.`);
   }
-  const collected = [...claude.sessions, ...codex.sessions, ...cursor.sessions].sort(
+  const inWindow = [...claude.sessions, ...codex.sessions, ...cursor.sessions].sort(
     (a, b2) => b2.mtimeMs - a.mtimeMs
   );
+  const collected = maxSessions === void 0 ? inWindow : inWindow.slice(0, maxSessions);
+  const heldBack = inWindow.length - collected.length + claude.heldBack + codex.heldBack;
   const skippedOutOfScope = claude.skippedOutOfScope + codex.skippedOutOfScope + cursor.skippedOutOfScope;
+  const skippedNoRepo = claude.skippedNoRepo + codex.skippedNoRepo + cursor.skippedNoRepo;
   const items = collected.map((c) => c.item);
   const active = items.filter((s) => s.status === "active").length;
+  const tooLarge = (count, what) => count > 0 ? ` \xB7 ${count} ${what} skipped (over ${MAX_TRANSCRIPT_FILE_BYTES / (1024 * 1024)}MB \u2014 too large to read)` : "";
   log3(
-    `Found ${items.length} local session(s) (${claude.sessions.length} claude, ${codex.sessions.length} codex, ${cursor.sessions.length} cursor) ` + describeScanReach(window2, options.narrowSinceMs) + (active > 0 ? ` (${active} still active)` : "") + (skippedOutOfScope > 0 ? ` \xB7 ${skippedOutOfScope} ${describeSkipReason(capture)}` : "") + (codex.skippedSubagentThreads > 0 ? ` \xB7 ${codex.skippedSubagentThreads} codex subagent thread(s) skipped (spend unmeasured)` : "") + (cursor.skippedSubagentComposers > 0 ? ` \xB7 ${cursor.skippedSubagentComposers} cursor subagent thread(s) skipped` : "") + (cursor.skippedNonLocalComposers > 0 ? ` \xB7 ${cursor.skippedNonLocalComposers} cursor session(s) skipped (not local to this machine)` : "") + (cursor.skippedUnreadable > 0 ? ` \xB7 ${cursor.skippedUnreadable} cursor session(s) unreadable, skipped` : "") + "."
+    `Found ${inWindow.length} local session(s) (${claude.sessions.length} claude, ${codex.sessions.length} codex, ${cursor.sessions.length} cursor) ` + describeScanReach(window2, options.narrowSinceMs) + (active > 0 ? ` (${active} still active)` : "") + (skippedOutOfScope > 0 ? ` \xB7 ${skippedOutOfScope} ${describeSkipReason(capture)}` : "") + (skippedNoRepo > 0 ? ` \xB7 ${skippedNoRepo} ${describeNoRepoSkipReason(capture)}` : "") + (codex.skippedSubagentThreads > 0 ? ` \xB7 ${codex.skippedSubagentThreads} codex subagent thread(s) skipped (spend unmeasured)` : "") + (cursor.skippedSubagentComposers > 0 ? ` \xB7 ${cursor.skippedSubagentComposers} cursor subagent thread(s) skipped` : "") + (cursor.skippedNonLocalComposers > 0 ? ` \xB7 ${cursor.skippedNonLocalComposers} cursor session(s) skipped (not local to this machine)` : "") + (cursor.skippedUnreadable > 0 ? ` \xB7 ${cursor.skippedUnreadable} cursor session(s) unreadable, skipped` : "") + tooLarge(claude.skippedTooLarge, "claude transcript(s)") + (claude.unreadable.length > 0 ? ` \xB7 ${claude.unreadable.length} claude transcript(s) unreadable, skipped` : "") + tooLarge(codex.skippedTooLarge, "codex rollout(s)") + (codex.unreadable.length > 0 ? ` \xB7 ${codex.unreadable.length} codex rollout(s) unreadable, skipped` : "") + tooLarge(cursor.skippedTooLarge, "cursor transcript(s)") + (cursor.truncatedTranscripts > 0 ? ` \xB7 ${cursor.truncatedTranscripts} cursor transcript(s) cut at ${MAX_TRANSCRIPT_FILE_BYTES / (1024 * 1024)}MB (the rest of the conversation stays local)` : "") + (heldBack > 0 ? ` \xB7 ${heldBack} older session(s) held back \u2014 the first sync backfills the ${DEEP_FIRST_SYNC_MAX_SESSIONS} most recently active` : "") + "."
   );
+  for (const failure of claude.unreadable) log3(`  claude transcript skipped \u2014 ${failure}`);
+  for (const failure of codex.unreadable) log3(`  codex rollout skipped \u2014 ${failure}`);
   if (options.dryRun) {
     for (const s of items.slice(0, 10)) {
       log3(`  ${s.externalId}  ${s.model ?? "model unmeasured"}  ${s.title ?? "(untitled)"}`);
@@ -81085,11 +81456,18 @@ async function runSyncPass(config2, options = {}) {
     saveCredentials(config2.appEnv, { ...current, deepSyncedAt: (/* @__PURE__ */ new Date()).toISOString() });
     log3(`Deep sync complete \u2014 future syncs cover the last ${STEADY_SYNC_WINDOW_DAYS} days.`);
   };
+  const claimsUnresolved = capture.mode === "org-repos" && capture.claimsUnresolved === true;
   if (items.length === 0) {
-    markDeepSynced();
+    if (claimsUnresolved) {
+      if (window2.deepSweep) {
+        log3("Deep sync not stamped \u2014 a workspace's claims are unresolved; the sweep re-runs next pass.");
+      }
+    } else {
+      markDeepSynced();
+    }
     return { sessions: collected, upserted: 0 };
   }
-  const { upserted, unchanged, outOfPolicy } = await uploadSessions(
+  const { upserted, unchanged, outOfPolicy, deferred } = await uploadSessions(
     credentials.apiUrl,
     credentials.token,
     items
@@ -81097,6 +81475,11 @@ async function runSyncPass(config2, options = {}) {
   log3(
     `Uploaded: ${upserted} session(s) upserted` + (unchanged > 0 ? `, ${unchanged} unchanged (no writes issued)` : "") + "."
   );
+  if (deferred > 0) {
+    log3(
+      `\u26A0 ${deferred} session(s) deferred \u2014 a workspace's GitHub owners couldn't be resolved just now, so routing waited rather than guessing a workspace. They upload on a later pass.`
+    );
+  }
   if (outOfPolicy > 0) {
     log3(
       `\u26A0 ${outOfPolicy} session(s) refused by the org's repo sync policy \u2014 they stayed out of Powerplant. The next pass refreshes the policy and stops offering them.`
@@ -81152,11 +81535,24 @@ async function runSyncPass(config2, options = {}) {
     if (raw.failed.length > 0) parts.push(`${raw.failed.length} failed`);
     log3(`Raw content: ${parts.join(", ")}.`);
     for (const failure of raw.failed) log3(`  raw upload failed \u2014 ${failure}`);
-    const nothingElseAccountedFor = raw.skippedUnchanged === 0 && raw.skippedTooLarge === 0 && rawWindowSkipped === 0;
+    if (raw.missingMetadata > 0) {
+      log3(
+        `${raw.missingMetadata} raw transcript(s) waiting on their session metadata \u2014 they re-send once it lands.`
+      );
+    }
+    const nothingElseAccountedFor = raw.skippedUnchanged === 0 && raw.skippedTooLarge === 0 && rawWindowSkipped === 0 && raw.missingMetadata === 0;
     if (raw.uploaded === 0 && (raw.failed.length > 1 || raw.failed.length === 1 && nothingElseAccountedFor)) {
       throw new Error(`all ${raw.failed.length} raw upload(s) failed this pass \u2014 ${raw.failed[0]}`);
     }
-    markDeepSynced();
+    if (deferred > 0 || claimsUnresolved) {
+      if (window2.deepSweep) {
+        log3(
+          deferred > 0 ? "Deep sync not stamped \u2014 deferred sessions still owe their upload; the sweep re-runs next pass." : "Deep sync not stamped \u2014 a workspace's claims are unresolved; the sweep re-runs next pass."
+        );
+      }
+    } else {
+      markDeepSynced();
+    }
   }
   return { sessions: collected, upserted };
 }
@@ -81198,7 +81594,7 @@ import os14 from "node:os";
 import path14 from "node:path";
 
 // ../../apps/collector/src/wake.ts
-import { execFile as execFile2, execFileSync as execFileSync3 } from "node:child_process";
+import { execFile as execFile2, execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync3 } from "node:fs";
 import path13 from "node:path";
 var WAKE_POLL_MS = 5e3;
@@ -81210,14 +81606,11 @@ function findClaudeTranscript(homeDir, externalId) {
     const transcript = path13.join(projectDir, `${externalId}.jsonl`);
     const stat = statIfExists(transcript);
     if (stat === null) continue;
-    const text = readIfExists2(transcript);
-    if (text === null) continue;
-    for (const record2 of parseJsonl(text)) {
-      if (typeof record2.cwd === "string" && record2.cwd !== "") {
-        return { cwd: record2.cwd, mtimeMs: stat.mtimeMs };
-      }
-    }
-    return null;
+    const record2 = readFirstRecord(
+      transcript,
+      (candidate) => typeof candidate.cwd === "string" && candidate.cwd !== ""
+    );
+    return typeof record2?.cwd === "string" ? { cwd: record2.cwd, mtimeMs: stat.mtimeMs } : null;
   }
   return null;
 }
@@ -81242,7 +81635,7 @@ function createWakePoller(deps) {
       try {
         for (const target of await deps.listPending()) {
           if (inFlight.has(target.externalId)) continue;
-          const home = deps.inspect(target);
+          const home = inspectTarget(deps, target);
           if (home === null) continue;
           if (deps.now() - home.mtimeMs < WAKE_QUIET_MS) continue;
           const messages = await deps.claim(target);
@@ -81252,13 +81645,13 @@ function createWakePoller(deps) {
             `waking session ${target.externalId} with ${messages.length} message(s) in ${home.cwd}`
           );
           void deps.runClaude(target, formatWakePrompt(messages), home.cwd).then(() => deps.log(`wake finished for session ${target.externalId}`)).catch(
-            (error52) => reportFailedWake(deps, target, messages, describeError2(error52))
+            (error52) => reportFailedWake(deps, target, messages, describeError(error52))
           ).finally(() => inFlight.delete(target.externalId));
         }
         consecutivePollFailures = 0;
       } catch (error52) {
         consecutivePollFailures += 1;
-        deps.log(`\u26A0 wake poll failed (${describeError2(error52)}) \u2014 next poll retries`);
+        deps.log(`\u26A0 wake poll failed (${describeError(error52)}) \u2014 next poll retries`);
         if (consecutivePollFailures === REPORT_AFTER_CONSECUTIVE_FAILURES) {
           deps.reportError?.(error52, "wake-poll", { consecutivePollFailures });
         }
@@ -81268,6 +81661,16 @@ function createWakePoller(deps) {
     }
   };
 }
+function inspectTarget(deps, target) {
+  try {
+    return deps.inspect(target);
+  } catch (error52) {
+    deps.log(
+      `\u26A0 wake skipped for session ${target.externalId} \u2014 its transcript could not be read (${describeError(error52)}); next poll retries`
+    );
+    return null;
+  }
+}
 async function reportFailedWake(deps, target, messages, reason) {
   deps.log(
     `\u26A0 wake failed for session ${target.externalId} AFTER its messages were claimed (${reason})`
@@ -81280,7 +81683,7 @@ async function reportFailedWake(deps, target, messages, reason) {
     );
   } catch (reportError) {
     deps.log(
-      `\u26A0 wake failure report for session ${target.externalId} ALSO failed \u2014 its messages read Delivered but no agent ran (${describeError2(reportError)})`
+      `\u26A0 wake failure report for session ${target.externalId} ALSO failed \u2014 its messages read Delivered but no agent ran (${describeError(reportError)})`
     );
     deps.reportError?.(reportError, "wake-failure-report", {
       externalId: target.externalId,
@@ -81300,7 +81703,7 @@ function resolveClaudeBin(homeDir, env = process.env) {
   const found = candidates.find((candidate) => existsSync3(candidate));
   if (found) return found;
   try {
-    const fromPath = execFileSync3("which", ["claude"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
+    const fromPath = execFileSync4("which", ["claude"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
     return fromPath === "" ? null : fromPath;
   } catch {
     return null;
@@ -81322,7 +81725,7 @@ function versionAtLeast(version2, floor) {
   return true;
 }
 function execClaudeVersion(claudeBin) {
-  return execFileSync3(claudeBin, ["--version"], {
+  return execFileSync4(claudeBin, ["--version"], {
     stdio: ["ignore", "pipe", "ignore"],
     timeout: VERSION_TIMEOUT_MS
   }).toString();
@@ -81332,7 +81735,7 @@ function preflightClaudeVersion(claudeBin, readVersionOutput = execClaudeVersion
   try {
     output = readVersionOutput(claudeBin);
   } catch (error52) {
-    return { ok: false, problem: `\`${claudeBin} --version\` failed (${describeError2(error52)})` };
+    return { ok: false, problem: `\`${claudeBin} --version\` failed (${describeError(error52)})` };
   }
   const version2 = /\d+\.\d+\.\d+/.exec(output)?.[0] ?? null;
   if (version2 === null) {
@@ -81477,7 +81880,7 @@ function startWakeService(config2, homeDir, log3) {
   log3(`wake-on-message armed: polling every ${WAKE_POLL_MS / 1e3}s (${config2.appEnv})`);
   return () => clearInterval(timer);
 }
-function describeError2(error52) {
+function describeError(error52) {
   return error52 instanceof Error ? error52.message : String(error52);
 }
 
@@ -81517,6 +81920,8 @@ var SAFETY_NET_INTERVAL_MS = 60 * 60 * 1e3;
 var NARROW_OVERLAP_MS = 6e4;
 var WATCHER_RETRY_MS = 6e4;
 var FAILED_PASS_RETRY_MS = 6e4;
+var FAILED_PASS_BACKOFF_CAP_MS = 15 * 6e4;
+var STREAK_REREPORT_INTERVAL_MS = 60 * 6e4;
 var VERSION_NOTICE_INTERVAL_MS = 60 * 6e4;
 var COMPLETION_SLACK_MS = 3e4;
 function createWatchLoop(deps) {
@@ -81529,6 +81934,10 @@ function createWatchLoop(deps) {
   let completionTimer = null;
   let running = false;
   let consecutiveFailures = 0;
+  let streakSignature = null;
+  let streakCount = 0;
+  let streakStartedAt = 0;
+  let streakReportedAt = 0;
   let pausedLogged = false;
   let queued = null;
   let retryNotBefore = 0;
@@ -81555,7 +81964,7 @@ function createWatchLoop(deps) {
     if (stopped) return;
     try {
       closeWatcher = deps.watch(onEvent, (error52) => {
-        deps.log(`watcher lost (${describeError3(error52)}) \u2014 re-arming and re-scanning`);
+        deps.log(`watcher lost (${describeError2(error52)}) \u2014 re-arming and re-scanning`);
         closeWatcher?.();
         closeWatcher = null;
         arm();
@@ -81563,7 +81972,7 @@ function createWatchLoop(deps) {
       });
     } catch (error52) {
       deps.log(
-        `cannot watch yet (${describeError3(error52)}) \u2014 retrying in ${WATCHER_RETRY_MS / 1e3}s`
+        `cannot watch yet (${describeError2(error52)}) \u2014 retrying in ${WATCHER_RETRY_MS / 1e3}s`
       );
       watcherRetry = setTimeout(arm, WATCHER_RETRY_MS);
     }
@@ -81620,6 +82029,8 @@ function createWatchLoop(deps) {
         }
       }
       consecutiveFailures = 0;
+      streakSignature = null;
+      streakCount = 0;
       deps.onPassResult?.({
         kind,
         at: startedAt,
@@ -81629,17 +82040,33 @@ function createWatchLoop(deps) {
       });
     } catch (error52) {
       consecutiveFailures += 1;
-      retryNotBefore = now() + Math.max(FAILED_PASS_RETRY_MS, retryAfterMs(error52) ?? 0);
+      const signature = errorSignature(error52);
+      if (signature === streakSignature) {
+        streakCount += 1;
+      } else {
+        streakSignature = signature;
+        streakCount = 1;
+        streakStartedAt = startedAt;
+        streakReportedAt = 0;
+      }
+      const holdMs = Math.max(
+        Math.min(FAILED_PASS_RETRY_MS * 2 ** (streakCount - 1), FAILED_PASS_BACKOFF_CAP_MS),
+        retryAfterMs(error52) ?? 0
+      );
+      retryNotBefore = now() + holdMs;
       lifecycleChanged ||= consultLifecycle;
       deps.onPassResult?.({
         kind,
         at: startedAt,
         ok: false,
-        error: describeError3(error52),
+        error: describeError2(error52),
         sessions: 0,
         upserted: 0
       });
-      deps.log(`${kind} pass failed (${describeError3(error52)}) \u2014 next pass re-covers this window`);
+      const failLine = `${kind} pass failed (${describeError2(error52)})`;
+      deps.log(
+        streakCount > 1 ? `${failLine}: same failure ${streakCount} times in a row, next attempt in ${describeDelay(holdMs)}` : `${failLine}, next attempt in ${describeDelay(holdMs)} re-covers this window`
+      );
       if (error52 instanceof Error && !(error52 instanceof ExpectedCliError) && error52.stack) {
         deps.log(error52.stack);
       }
@@ -81650,10 +82077,13 @@ function createWatchLoop(deps) {
         );
         return;
       }
-      if (consecutiveFailures >= REPORT_AFTER_CONSECUTIVE_FAILURES) {
+      if (consecutiveFailures >= REPORT_AFTER_CONSECUTIVE_FAILURES && (streakReportedAt === 0 || now() - streakReportedAt >= STREAK_REREPORT_INTERVAL_MS)) {
+        streakReportedAt = now();
         const report2 = error52 instanceof ExpectedCliError ? new Error(`${consecutiveFailures} consecutive failed passes: ${error52.message}`) : error52;
         deps.reportError?.(report2, `watch-pass-${kind}`, {
           consecutiveFailures,
+          sameFailureCount: streakCount,
+          streakMinutes: Math.round((now() - streakStartedAt) / 6e4),
           pendingCompletions: pendingCompletions.size
         });
       }
@@ -81741,7 +82171,7 @@ function startWatch(config2, homeDir, runtime = { version: "checkout" }) {
     try {
       return loadCredentials(config2.appEnv);
     } catch (error52) {
-      log3(`\u26A0 credential store unreadable (${describeError3(error52)}) \u2014 identity omitted from status`);
+      log3(`\u26A0 credential store unreadable (${describeError2(error52)}) \u2014 identity omitted from status`);
       return null;
     }
   })();
@@ -81755,14 +82185,14 @@ function startWatch(config2, homeDir, runtime = { version: "checkout" }) {
     );
   } catch (error52) {
     log3(
-      `\u26A0 Claude Code hook install failed (${describeError3(error52)}) \u2014 syncing continues without them`
+      `\u26A0 Claude Code hook install failed (${describeError2(error52)}) \u2014 syncing continues without them`
     );
     reportCollectorError(error52, "watch-hook-install");
   }
   try {
     startWakeService(config2, home, log3);
   } catch (error52) {
-    log3(`\u26A0 wake-on-message failed to start (${describeError3(error52)}) \u2014 syncing continues`);
+    log3(`\u26A0 wake-on-message failed to start (${describeError2(error52)}) \u2014 syncing continues`);
     reportCollectorError(error52, "watch-wake-start");
   }
   const presentRoots = storeRoots.filter(({ dir }) => existsSync4(dir)).map(({ dir }) => dir);
@@ -81793,7 +82223,7 @@ function startWatch(config2, homeDir, runtime = { version: "checkout" }) {
       statusWriteFailed = false;
     } catch (error52) {
       if (!statusWriteFailed) {
-        log3(`\u26A0 status file write failed (${describeError3(error52)}) \u2014 syncing continues`);
+        log3(`\u26A0 status file write failed (${describeError2(error52)}) \u2014 syncing continues`);
         reportCollectorError(error52, "watch-status-write");
       }
       statusWriteFailed = true;
@@ -81891,12 +82321,24 @@ function startWatch(config2, homeDir, runtime = { version: "checkout" }) {
   return new Promise(() => {
   });
 }
-function describeError3(error52) {
+function describeError2(error52) {
   return error52 instanceof Error ? error52.message : String(error52);
 }
+function errorSignature(error52) {
+  const parts = [];
+  for (let cause = error52; cause instanceof Error; cause = cause.cause) {
+    parts.push(`${cause.name}: ${cause.message}`);
+  }
+  if (parts.length === 0) parts.push(String(error52));
+  return parts.join(" | ").replace(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/gi, "#").replace(/[0-9a-f]{8,}/gi, "#").replace(/\d+/g, "#");
+}
+function describeDelay(ms) {
+  const seconds = Math.round(ms / 1e3);
+  return seconds < 120 ? `${seconds}s` : `${Math.round(seconds / 60)} minutes`;
+}
 
 // src/connect.ts
-import { execFileSync as execFileSync4, spawnSync } from "node:child_process";
+import { execFileSync as execFileSync5, spawnSync } from "node:child_process";
 import {
   existsSync as existsSync5,
   mkdirSync as mkdirSync6,
@@ -82122,7 +82564,7 @@ function desktopClaudeBinaries(homeDir) {
 }
 function defaultWhichAll(name) {
   try {
-    return execFileSync4("which", ["-a", name], { encoding: "utf8" }).split("\n").map((line) => line.trim()).filter(Boolean);
+    return execFileSync5("which", ["-a", name], { encoding: "utf8" }).split("\n").map((line) => line.trim()).filter(Boolean);
   } catch {
     return [];
   }
@@ -82915,7 +83357,7 @@ function realRunInteractive(bin, args, env) {
 }
 
 // src/connections.ts
-import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
+import { execFileSync as execFileSync6, spawnSync as spawnSync2 } from "node:child_process";
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync7 } from "node:fs";
 import path16 from "node:path";
 function probeConnections(clients, deps) {
@@ -83118,7 +83560,7 @@ function runWithPath(pathValue, budget = UNLIMITED_TIME_BUDGET) {
 function whichAllWith(pathValue) {
   return (name) => {
     try {
-      return execFileSync5("which", ["-a", name], {
+      return execFileSync6("which", ["-a", name], {
         encoding: "utf8",
         env: { ...process.env, PATH: pathValue }
       }).split("\n").map((line) => line.trim()).filter(Boolean);
@@ -83136,7 +83578,7 @@ function renderStatus(i) {
   const lines = [];
   lines.push(`Environment: ${i.config.appEnv} (API ${i.config.apiUrl})`);
   lines.push(
-    `CLI: powerplant ${i.cliVersion}` + (i.latestVersion !== null && i.latestVersion !== i.cliVersion ? ` \u2014 ${i.latestVersion} is available: npm install -g @usepowerplant/cli (the service restarts itself onto it)` : "")
+    `CLI: powerplant ${i.cliVersion}` + (i.latestVersion !== null && i.latestVersion !== i.cliVersion ? ` \u2014 ${i.latestVersion} is available: powerplant update` : "")
   );
   const unsupported = unsupportedVersionNotice(i.cliVersion, i.oldestSupportedVersion);
   if (unsupported !== null) lines.push(unsupported);
@@ -83607,7 +84049,7 @@ async function realPromptLine(question) {
 }
 
 // src/memberSessions.ts
-import { execFileSync as execFileSync6 } from "node:child_process";
+import { execFileSync as execFileSync7 } from "node:child_process";
 import { existsSync as existsSync6 } from "node:fs";
 import os16 from "node:os";
 import path17 from "node:path";
@@ -83682,7 +84124,7 @@ function detectCodexDesktop(probe = { exists: existsSync6, readUrlSchemes: realR
 function realReadUrlSchemes(bundlePath) {
   if (process.platform !== "darwin") return [];
   try {
-    const json2 = execFileSync6(
+    const json2 = execFileSync7(
       "plutil",
       ["-extract", "CFBundleURLTypes", "json", "-o", "-", path17.join(bundlePath, "Contents", "Info.plist")],
       { stdio: ["ignore", "pipe", "ignore"] }
@@ -84139,8 +84581,38 @@ function createTerminalOutput(options) {
   return { log: log3, activity };
 }
 
+// src/update.ts
+import { spawnSync as spawnSync4 } from "node:child_process";
+var npmLsSchema = external_exports.object({
+  dependencies: external_exports.record(external_exports.string(), external_exports.object({ version: external_exports.string().min(1) })).optional()
+});
+function runCapturing(command, args) {
+  const result = spawnSync4(command, args, {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "ignore"]
+  });
+  return { stdout: result.stdout ?? "" };
+}
+function installedGlobalVersion(packageName, run = runCapturing) {
+  const { stdout } = run("npm", ["ls", "-g", packageName, "--json"]);
+  try {
+    const parsed = npmLsSchema.safeParse(JSON.parse(stdout));
+    return parsed.success ? parsed.data.dependencies?.[packageName]?.version ?? null : null;
+  } catch {
+    return null;
+  }
+}
+var RESTART_NOTE = "Sync service will restart within minutes. (You can do this now with powerplant restart.)";
+function updatedMessage(version2) {
+  if (version2 === null) {
+    return `Updated, but could not read the installed version from npm. Check with: powerplant status
+${RESTART_NOTE}`;
+  }
+  return `Updated to v${version2}. ${RESTART_NOTE}`;
+}
+
 // src/version.ts
-var CLI_VERSION = true ? "0.3.1" : "0.0.0-checkout";
+var CLI_VERSION = true ? "0.4.0" : "0.0.0-checkout";
 var CLI_PACKAGE_NAME = "@usepowerplant/cli";
 
 // src/workspace.ts
@@ -84261,7 +84733,7 @@ Commands:
   sync        Run one sync pass in the foreground [--since <days>] [--dry-run].
   folders     The folders you explicitly sync on this machine:
               powerplant folders [add <path> | remove <path>]. Additions on
-              top of your org's synced repos \u2014 no re-enroll needed.
+              top of your org's allowlisted repos \u2014 no re-enroll needed.
   workspace   Your workspaces, and which one Powerplant and your connected
               agents use: powerplant workspace [<name>] switches to <name>.
   resume-session  Reopen a synced session in its own CLI, right here in
@@ -84573,7 +85045,7 @@ The access you granted these agents stays on your Powerplant account until you r
     }
     case "update": {
       console.log(`Updating ${CLI_PACKAGE_NAME} via npm\u2026`);
-      const npm = spawnSync4("npm", ["install", "-g", CLI_PACKAGE_NAME], { stdio: "inherit" });
+      const npm = spawnSync5("npm", ["install", "-g", CLI_PACKAGE_NAME], { stdio: "inherit" });
       if (npm.error) {
         throw new ExpectedCliError(
           `Could not run npm (${npm.error.message}) \u2014 update by hand: npm install -g ${CLI_PACKAGE_NAME}`
@@ -84582,9 +85054,7 @@ The access you granted these agents stays on your Powerplant account until you r
       if (npm.status !== 0) {
         throw new ExpectedCliError("npm install failed \u2014 see the output above.");
       }
-      console.log(
-        "Updated. The background service restarts itself onto the new version within minutes (or now: powerplant restart)."
-      );
+      console.log(updatedMessage(installedGlobalVersion(CLI_PACKAGE_NAME)));
       return;
     }
     case "restart": {