@wirecat/bitrix24-cli 0.4.0 → 0.5.0

package/dist/bundle/{chunk-ELBOQHJA.js → chunk-XUHHBEA7.js}

@@ -3,7 +3,7 @@ const require = __bundleRequire(import.meta.url);
 import {
   answerOf,
   messengerContext
-} from "./chunk-IWEWDVZ6.js";
+} from "./chunk-VMVAQHDC.js";
 import {
   FETCHING,
   RULES_VERSION,
@@ -11,7 +11,6 @@ import {
   capability,
   chatEventAnswer,
   memberAnswer,
-  newSendId,
   onlineDeps,
   openRequestTask,
   patiently,
@@ -24,7 +23,19 @@ import {
   typedQuery,
   withQuery,
   withTimeLimit
-} from "./chunk-DQIQIZQS.js";
+} from "./chunk-VMJS7FJZ.js";
+import {
+  newSendId
+} from "./chunk-6A4UPWDC.js";
+import {
+  checkedOptions,
+  range
+} from "./chunk-FSWRMQWX.js";
+import {
+  messagesFor,
+  systemFor,
+  validateImages
+} from "./chunk-WWMCJFMT.js";
 import {
   Command,
   LOCAL_READ,
@@ -32,11 +43,8 @@ import {
   REMOTE_READ,
   REMOTE_WRITE,
   annotate,
-  codeOf,
-  currentRun,
   destroysNothing,
   endpoint,
-  envName,
   environmentOf,
   itemOf,
   jsonlRecords,
@@ -52,45 +60,52 @@ import {
   snakeKeys,
   storeTable,
   withoutProviderRefs
-} from "./chunk-2IZ6GGU2.js";
+} from "./chunk-J7WCSZ2Q.js";
+import {
+  codeOf,
+  currentRun,
+  envName
+} from "./chunk-G5MW6RCM.js";
 import {
   failureKey
-} from "./chunk-6ERX33NC.js";
+} from "./chunk-5D4MJQ6X.js";
 import {
   holdLock,
   lockPath,
   releaseLock,
   servingProfiles,
   takeLock
-} from "./chunk-Q4ILKTV4.js";
+} from "./chunk-IGCLMEMB.js";
 import {
   holdersOf
-} from "./chunk-QVZSLBR6.js";
-import {
-  checkedOptions,
-  range
-} from "./chunk-AOUNT22U.js";
+} from "./chunk-DVFYRQGE.js";
 import {
-  messagesFor,
-  systemFor,
-  validateImages
-} from "./chunk-M5XMAUGZ.js";
+  QUICK_HEALTH_CHECKS,
+  explainDamage,
+  fts5Tables,
+  storeHealth
+} from "./chunk-BYZQBE63.js";
 import {
   renderMessages
-} from "./chunk-Y5PPMGCS.js";
+} from "./chunk-FCWPIWSR.js";
 import {
   levelFor
-} from "./chunk-VTIUWHZ3.js";
+} from "./chunk-OUMFNB34.js";
 import {
   readSecret
-} from "./chunk-COOOXDKZ.js";
+} from "./chunk-42F7Q7V6.js";
 import {
+  CORPORA,
   MIGRATIONS,
+  drainCorpus,
+  drainMeetingIndex,
   drainNoteIndex,
   dropAllUnusedVectors,
   fileFacts,
   fillSearchIndex,
   fillStems,
+  fillTrigrams,
+  fillVectorIndexes,
   involvementStoreOver,
   migrate,
   noteIndexState,
@@ -99,10 +114,12 @@ import {
   orphanPointers,
   pendingNormalization,
   readStoreTables,
+  rebuildMentions,
   resetAttachmentWords,
   resetNoteIndex,
   resetSearchIndex,
   resetStems,
+  rollBack,
   rowCounts,
   searchIndexState,
   stemmerCache,
@@ -110,20 +127,20 @@ import {
   storeClients,
   storeContents,
   vectorIndexCounts
-} from "./chunk-GTMCLOYY.js";
+} from "./chunk-HGFNC4CR.js";
 import {
   storePath
-} from "./chunk-OWILUBCI.js";
+} from "./chunk-KFSMY7SZ.js";
 import {
   formatLocator,
   parseLocator
-} from "./chunk-GTFRSYYJ.js";
+} from "./chunk-R5F2O5GX.js";
 import {
   queryFieldsOf
-} from "./chunk-VMQL4GNH.js";
+} from "./chunk-P2RQTNVJ.js";
 import {
   openCache
-} from "./chunk-D2IRPC5I.js";
+} from "./chunk-2I4KWS3H.js";
 import {
   CliError,
   Credentials,
@@ -152,7 +169,7 @@ import {
   trim,
   union,
   writeSecurely
-} from "./chunk-SBW2Y7AZ.js";
+} from "./chunk-EYYOKT23.js";
 import {
   __commonJS,
   __name,
@@ -1806,7 +1823,7 @@ var require_liquid_node = __commonJS({
       return readFileAsync(filepath, "utf8");
     }
     __name(readFile, "readFile");
-    function existsSync8(filepath) {
+    function existsSync10(filepath) {
       try {
         fs$1.statSync(filepath);
         return true;
@@ -1814,11 +1831,11 @@ var require_liquid_node = __commonJS({
         return false;
       }
     }
-    __name(existsSync8, "existsSync");
-    function readFileSync4(filepath) {
+    __name(existsSync10, "existsSync");
+    function readFileSync5(filepath) {
       return fs$1.readFileSync(filepath, "utf8");
     }
-    __name(readFileSync4, "readFileSync");
+    __name(readFileSync5, "readFileSync");
     function resolve2(root, file2, ext) {
       if (!path.extname(file2))
         file2 += ext;
@@ -1832,10 +1849,10 @@ var require_liquid_node = __commonJS({
       }
     }
     __name(fallback, "fallback");
-    function dirname2(filepath) {
+    function dirname3(filepath) {
       return path.dirname(filepath);
     }
-    __name(dirname2, "dirname");
+    __name(dirname3, "dirname");
     var realpathAsync = promisify(fs$1.realpath);
     async function contains(root, file2) {
       try {
@@ -1863,11 +1880,11 @@ var require_liquid_node = __commonJS({
       __proto__: null,
       exists,
       readFile,
-      existsSync: existsSync8,
-      readFileSync: readFileSync4,
+      existsSync: existsSync10,
+      readFileSync: readFileSync5,
       resolve: resolve2,
       fallback,
-      dirname: dirname2,
+      dirname: dirname3,
       contains,
       containsSync,
       sep: path.sep
@@ -3592,7 +3609,7 @@ var require_liquid_node = __commonJS({
       uri_escape,
       slugify
     });
-    var join4 = argumentsToValue(function(v, arg) {
+    var join5 = argumentsToValue(function(v, arg) {
       const array2 = toArray(v);
       const sep = isNil(arg) ? " " : stringify(arg);
       let outputSize = sep.length * Math.max(array2.length - 1, 0);
@@ -3868,7 +3885,7 @@ var require_liquid_node = __commonJS({
     __name(sample, "sample");
     var arrayFilters = /* @__PURE__ */ Object.freeze({
       __proto__: null,
-      join: join4,
+      join: join5,
       last,
       first,
       reverse,
@@ -4796,15 +4813,15 @@ var require_liquid_node = __commonJS({
       }
       *render(ctx, emitter) {
         const group = yield evalToken(this.group, ctx);
-        const fingerprint = `cycle:${group}:` + this.candidates.join(",");
+        const fingerprint2 = `cycle:${group}:` + this.candidates.join(",");
         const groups = ctx.getRegister("cycle", {});
-        let idx = groups[fingerprint];
+        let idx = groups[fingerprint2];
         if (idx === void 0) {
-          idx = groups[fingerprint] = 0;
+          idx = groups[fingerprint2] = 0;
         }
         const candidate = this.candidates[idx];
         idx = (idx + 1) % this.candidates.length;
-        groups[fingerprint] = idx;
+        groups[fingerprint2] = idx;
         return yield evalToken(candidate, ctx);
       }
       *arguments() {
@@ -5492,11 +5509,11 @@ var require_liquid_node = __commonJS({
   }
 });
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/store-maintenance-command.js
-import { chmodSync, constants, copyFileSync, existsSync as existsSync7, mkdirSync, realpathSync, renameSync as renameSync2, rmSync as rmSync2, statfsSync, statSync as statSync3, writeFileSync } from "node:fs";
-import { dirname, resolve } from "node:path";
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/store-maintenance-command.js
+import { chmodSync, constants, copyFileSync, existsSync as existsSync9, mkdirSync, realpathSync as realpathSync2, renameSync as renameSync3, rmSync as rmSync3, statfsSync as statfsSync2, statSync as statSync4, writeFileSync as writeFileSync2 } from "node:fs";
+import { dirname as dirname2, resolve } from "node:path";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/sealed.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/sealed.js
 import { createCipheriv, createDecipheriv, createHash, randomBytes, scrypt, timingSafeEqual } from "node:crypto";
 import { closeSync, createReadStream, createWriteStream, existsSync, openSync, readSync, renameSync, rmSync, statSync } from "node:fs";
 import { Transform } from "node:stream";
@@ -5603,7 +5620,7 @@ var unsealFile = /* @__PURE__ */ __name(async (from, to, password) => {
   renameSync(pending, to);
 }, "unsealFile");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/store/compatibility.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/store/compatibility.js
 var SPEAKS = MIGRATIONS.at(-1)?.version ?? 0;
 var fileSchemaOf = /* @__PURE__ */ __name((database) => {
   const tracked = database.prepare("SELECT 1 FROM sqlite_master WHERE name = 'schema_migrations'").get();
@@ -5627,7 +5644,7 @@ var compatibilityOf = /* @__PURE__ */ __name((file2, migrations = MIGRATIONS) =>
   };
 }, "compatibilityOf");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/store/repair.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/store/repair.js
 import { createHash as createHash2 } from "node:crypto";
 var COPY_MARK = "__repair_";
 var COPY_NAME = /__repair_[0-9a-f]{8}(_\d+)?$/;
@@ -5881,10 +5898,457 @@ var deleteCopy = /* @__PURE__ */ __name((database, name) => {
   return found;
 }, "deleteCopy");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/store-info.js
-import { existsSync as existsSync2, statSync as statSync2 } from "node:fs";
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/store-info.js
+import { existsSync as existsSync4, statSync as statSync3 } from "node:fs";
+
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/store-recover.js
+import { existsSync as existsSync3 } from "node:fs";
+
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/store/recover.js
+import { execFileSync, spawn } from "node:child_process";
+import { existsSync as existsSync2, readFileSync, realpathSync, renameSync as renameSync2, rmSync as rmSync2, statfsSync, statSync as statSync2, writeFileSync } from "node:fs";
+import { basename, dirname, join } from "node:path";
+import { Transform as Transform2 } from "node:stream";
+var SQLITE3_MINIMUM = [3, 43, 0];
+var STORE_PARTS = ["", "-wal", "-shm"];
+var INSERTED = /^INSERT OR IGNORE INTO '([^']+)'/;
+var LOST_AND_FOUND = "recover_lost_and_found";
+var recovers = /* @__PURE__ */ __name((program) => {
+  try {
+    execFileSync(program, [":memory:", ".recover"], { stdio: ["ignore", "ignore", "pipe"] });
+    return true;
+  } catch {
+    return false;
+  }
+}, "recovers");
+var sqlite3Program = /* @__PURE__ */ __name((program = "sqlite3") => {
+  let version = null;
+  try {
+    version = execFileSync(program, ["--version"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).split(" ")[0] ?? null;
+  } catch {
+    return { program, version: null, usable: false };
+  }
+  const parts = (version ?? "").split(".").map(Number);
+  const at = SQLITE3_MINIMUM.findIndex((wanted, i) => (parts[i] ?? 0) !== wanted);
+  const recent = at === -1 || (parts[at] ?? 0) > (SQLITE3_MINIMUM[at] ?? 0);
+  return { program, version, usable: recent && recovers(program) };
+}, "sqlite3Program");
+var activeTimers = /* @__PURE__ */ __name(() => {
+  if (process.platform !== "linux")
+    return void 0;
+  try {
+    return execFileSync("systemctl", ["--user", "list-timers", "--plain", "--no-legend"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).split("\n").map((line) => line.trim().split(/\s+/).at(-2) ?? "").filter((unit) => /^(memo|mail|tg|max|whatsapp|zoom|drive|gcal|wirecat)-.*\.timer$/.test(unit));
+  } catch {
+    return void 0;
+  }
+}, "activeTimers");
+var storeHolders = /* @__PURE__ */ __name((path) => {
+  const folder = realpathSync(dirname(path));
+  const files = STORE_PARTS.map((suffix) => join(folder, `${basename(path)}${suffix}`));
+  const wanted = process.platform === "linux" ? files.flatMap((file2) => [file2, `${file2} (deleted)`]) : files.filter(existsSync2);
+  return holdersOf(wanted)?.map((pid) => {
+    let name = "?";
+    try {
+      name = readFileSync(`/proc/${pid}/comm`, "utf8").trim();
+    } catch {
+    }
+    return { pid, name };
+  });
+}, "storeHolders");
+var tableRows = /* @__PURE__ */ __name((database) => {
+  const indexes = fts5Tables(database).map((index) => index.name);
+  const tables = database.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND rootpage > 0 AND name NOT LIKE 'sqlite_%' AND name NOT LIKE 'vector_index_%' ORDER BY name").all().map((row) => String(row.name)).filter((name) => !indexes.some((index) => name.startsWith(`${index}_`)));
+  return Object.fromEntries(tables.map((table) => {
+    try {
+      return [table, Number(database.prepare(`SELECT count(*) AS n FROM "${table}"`).get()?.n)];
+    } catch {
+      return [table, null];
+    }
+  }));
+}, "tableRows");
+var copyReadableRows = /* @__PURE__ */ __name((path, target, program = "sqlite3") => new Promise((resolve2, reject) => {
+  const reader = spawn(program, ["-readonly", path, `.recover --ignore-freelist --lost-and-found ${LOST_AND_FOUND}`], {
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+  const writer = spawn(program, ["-cmd", ".dbconfig defensive off", target], { stdio: ["pipe", "ignore", "pipe"] });
+  const errors = [];
+  const collect = /* @__PURE__ */ __name((chunk) => {
+    for (const line of chunk.toString("utf8").split("\n"))
+      if (line && errors.length < 50)
+        errors.push(line.slice(0, 300));
+  }, "collect");
+  reader.stderr.on("data", collect);
+  writer.stderr.on("data", collect);
+  const read = {};
+  let rest = "";
+  const counter = new Transform2({
+    transform(chunk, _encoding, done) {
+      const lines = (rest + chunk.toString("latin1")).split("\n");
+      rest = lines.pop() ?? "";
+      for (const line of lines) {
+        const table = INSERTED.exec(line)?.[1];
+        if (table)
+          read[table] = (read[table] ?? 0) + 1;
+      }
+      done(null, chunk);
+    }
+  });
+  reader.stdout.pipe(counter).pipe(writer.stdin);
+  let exits = 0;
+  let readerCode = null;
+  const exited = /* @__PURE__ */ __name(() => {
+    exits += 1;
+    if (exits < 2)
+      return;
+    if (readerCode !== 0)
+      reject(new CliError("validation_error", `sqlite3 could not read the store: ${errors.join("; ")}`));
+    else
+      resolve2({ errors, read });
+  }, "exited");
+  reader.on("error", reject);
+  writer.on("error", reject);
+  reader.on("close", (code) => {
+    readerCode = code;
+    exited();
+  });
+  writer.on("close", exited);
+}), "copyReadableRows");
+var FILLERS = {
+  message_words: /* @__PURE__ */ __name((database, now) => {
+    resetSearchIndex(database);
+    fillSearchIndex(database, { now });
+  }, "message_words"),
+  message_stems: /* @__PURE__ */ __name((database, now) => {
+    resetStems(database, { force: true, now });
+    fillStems(database, { now });
+  }, "message_stems"),
+  attachment_words: /* @__PURE__ */ __name((database) => void resetAttachmentWords(database), "attachment_words"),
+  attachment_name_words: /* @__PURE__ */ __name((database) => (
+    // As migration 20 filled it: й and ё fold as the triggers fold them.
+    database.exec("INSERT INTO attachment_name_words (rowid, name) SELECT id, replace(replace(replace(replace(name, '\u0439', '\u0438'), '\u0419', '\u0418'), '\u0451', '\u0435'), '\u0401', '\u0415') FROM attachments WHERE name IS NOT NULL")
+  ), "attachment_name_words"),
+  meeting_words: /* @__PURE__ */ __name((database) => {
+    database.exec("INSERT OR IGNORE INTO meeting_index_pending (indexable_type, id) SELECT 'meeting_transcript_row', id FROM meeting_transcript_rows UNION ALL SELECT 'meeting_chat_message', id FROM meeting_chat_messages UNION ALL SELECT 'meeting_summary', id FROM meeting_summaries");
+    drainMeetingIndex(database);
+  }, "meeting_words"),
+  // Built per account by the first search that needs them.
+  meeting_stems: /* @__PURE__ */ __name((database) => database.exec("UPDATE search_index_state SET filled_through = 0, built_at = NULL WHERE name LIKE 'meeting_stems:%'"), "meeting_stems")
+};
+var CORPUS_TABLES = new Set(Object.values(CORPORA).flatMap((corpus) => [`${corpus.type}_words`, `${corpus.type}_stems`]));
+var TRIGRAMS = ["note_trigrams", "document_trigrams"];
+var rebuildDerived = /* @__PURE__ */ __name((database, { now = Date.now, note = /* @__PURE__ */ __name(() => {
+}, "note") } = {}) => {
+  const lost = database.prepare("SELECT 1 FROM sqlite_master WHERE name = ?").get(LOST_AND_FOUND);
+  const lostAndFound = lost ? Number(database.prepare(`SELECT count(*) AS n FROM ${LOST_AND_FOUND}`).get()?.n) : 0;
+  if (lost)
+    database.exec(`DROP TABLE ${LOST_AND_FOUND}`);
+  const indexes = fts5Tables(database);
+  for (const { name, sql } of indexes) {
+    database.exec(`DROP TABLE "${name}"`);
+    database.exec(sql);
+  }
+  const vectors = database.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name GLOB 'vector_index_[0-9]*' AND sql LIKE 'CREATE VIRTUAL%'").all().map((row) => String(row.name));
+  for (const table of vectors) {
+    database.exec(`DROP TRIGGER IF EXISTS "${table}_redo"`);
+    database.exec(`DROP TABLE "${table}"`);
+    database.prepare("DELETE FROM vector_indexes WHERE id = ?").run(Number(table.replace("vector_index_", "")));
+  }
+  const unfilled = [];
+  const stemmerFor = stemmerCache();
+  for (const { name, external } of indexes) {
+    note(`rebuilding ${name}`);
+    if (external)
+      database.exec(`INSERT INTO "${name}" ("${name}") VALUES ('rebuild')`);
+    else if (FILLERS[name])
+      FILLERS[name](database, now);
+    else if (!CORPUS_TABLES.has(name) && !TRIGRAMS.includes(name))
+      unfilled.push(name);
+  }
+  note("rebuilding the words of notes, documents, memories, mail, tasks, transcripts and events");
+  resetNoteIndex(database);
+  for (const corpus of Object.values(CORPORA))
+    drainCorpus(database, corpus, stemmerFor);
+  for (const name of TRIGRAMS) {
+    const type = name.replace("_trigrams", "");
+    database.prepare(`UPDATE search_index_state SET filled_through = 0, watermark = (SELECT coalesce(max(id), 0) FROM ${type}s) WHERE name = ?`).run(name);
+  }
+  fillTrigrams(database);
+  note("finding mentions again");
+  const mentions = rebuildMentions(database, { now: now() }).mentions;
+  involvementStoreOver({ database, now }).rebuild();
+  note("indexing the stored vectors");
+  const vectorModels = fillVectorIndexes(database);
+  const without = database.prepare("SELECT count(*) AS n FROM chunks k WHERE NOT EXISTS (SELECT 1 FROM embeddings v WHERE v.model = ? AND v.content_hash = k.content_hash)");
+  const chunksWithoutVector = Object.fromEntries(database.prepare("SELECT model FROM vector_indexes ORDER BY model").all().map((row) => [String(row.model), Number(without.get(String(row.model))?.n)]));
+  return {
+    lostAndFound,
+    searchIndexes: indexes.map((index) => index.name),
+    unfilled,
+    mentions,
+    vectorModels,
+    chunksWithoutVector
+  };
+}, "rebuildDerived");
+var danglingRows = /* @__PURE__ */ __name((database) => database.prepare(`SELECT "table" AS child, parent, fkid, count(*) AS n FROM pragma_foreign_key_check GROUP BY 1, 2, 3 ORDER BY 4 DESC`).all().map((group) => {
+  const child = String(group.child);
+  const column = database.prepare(`SELECT "from" AS name FROM pragma_foreign_key_list(?) WHERE id = ? ORDER BY seq LIMIT 1`).get(child, Number(group.fkid))?.name;
+  let missing = [];
+  try {
+    missing = database.prepare(`SELECT DISTINCT "${String(column)}" AS id FROM "${child}" WHERE rowid IN (SELECT rowid FROM pragma_foreign_key_check(?) WHERE fkid = ?) ORDER BY 1 LIMIT 20`).all(child, Number(group.fkid)).map((row) => typeof row.id === "number" ? row.id : String(row.id));
+  } catch {
+  }
+  return { table: child, parent: String(group.parent), rows: Number(group.n), missing };
+}), "danglingRows");
+var mailToFetch = /* @__PURE__ */ __name((database) => {
+  try {
+    return database.prepare(`SELECT a.external_id AS account, count(DISTINCT l.email_id) AS n FROM email_locations l
+           JOIN mailboxes b ON b.id = l.mailbox_id JOIN accounts a ON a.id = b.account_id
+         WHERE NOT EXISTS (SELECT 1 FROM emails e WHERE e.id = l.email_id) GROUP BY a.id ORDER BY a.external_id`).all().map((row) => ({ account: String(row.account), emails: Number(row.n) }));
+  } catch {
+    return [];
+  }
+}, "mailToFetch");
+var fingerprint = /* @__PURE__ */ __name((path) => ["", "-wal"].map((suffix) => {
+  const stat = statSync2(`${path}${suffix}`, { throwIfNoEntry: false });
+  return stat ? `${stat.size}:${stat.mtimeMs}` : "-";
+}).join("|"), "fingerprint");
+var refuseInUse = /* @__PURE__ */ __name((path) => {
+  const holders = storeHolders(path);
+  if (holders && holders.length > 0) {
+    const timers = activeTimers() ?? [];
+    throw new CliError("validation_error", `the store is open in ${holders.map(({ pid, name }) => `${name} (process ${pid})`).join(", ")} \u2014 stop it first` + (timers.length ? `, and the timers: systemctl --user stop ${timers.join(" ")}` : ""), { reason: "store.in-use" });
+  }
+}, "refuseInUse");
+var recoverStore = /* @__PURE__ */ __name(async ({ path, command, version, sqlite3 = "sqlite3", now = Date.now, note = /* @__PURE__ */ __name(() => {
+}, "note"), copy }) => {
+  const started = Date.now();
+  if (!existsSync2(path))
+    throw new CliError("not_found", `no store at ${path}`);
+  const program = copy ? { program: sqlite3, version: "given", usable: true } : sqlite3Program(sqlite3);
+  if (!program.usable) {
+    throw new CliError("configuration_error", program.version ? `sqlite3 ${program.version} cannot recover: the recovery needs ${SQLITE3_MINIMUM.join(".")} or newer, built with .recover` : "the recovery needs the sqlite3 program with its .recover command: install it (apt install sqlite3, brew install sqlite)", { reason: "store.sqlite3-missing" });
+  }
+  refuseInUse(path);
+  const bytes = STORE_PARTS.reduce((sum, suffix) => sum + (statSync2(`${path}${suffix}`, { throwIfNoEntry: false })?.size ?? 0), 0);
+  const { bavail, bsize } = statfsSync(dirname(path));
+  if (Number(bavail) * Number(bsize) < bytes * 1.2)
+    throw new CliError("validation_error", `the recovery needs about ${Math.ceil(bytes * 1.2 / 1e9)} GB free beside the store`);
+  const old = await openSqlite(path, { readOnly: true });
+  let rowsBefore;
+  try {
+    rowsBefore = tableRows(old.database);
+  } finally {
+    old.database.close();
+  }
+  const before = fingerprint(path);
+  const stamp = new Date(now()).toISOString().replace(/[:.]/g, "-");
+  const target = `${path}.recovering-${stamp}`;
+  writeFileSync(target, "", { flag: "wx", mode: 384 });
+  const dropTarget = /* @__PURE__ */ __name(() => {
+    for (const suffix of [...STORE_PARTS, "-journal"])
+      rmSync2(`${target}${suffix}`, { force: true });
+  }, "dropTarget");
+  note(`copying the readable rows into ${target}`);
+  let copied;
+  let copyErrors;
+  let read;
+  let opened;
+  try {
+    ;
+    ({ errors: copyErrors, read } = await (copy ?? ((from, to) => copyReadableRows(from, to, sqlite3)))(path, target));
+    copied = Date.now();
+    opened = await openSqlite(target);
+  } catch (error) {
+    dropTarget();
+    throw error;
+  }
+  let rebuilt;
+  let kept;
+  let dangling;
+  let fetch2;
+  try {
+    kept = tableRows(opened.database);
+    migrate(opened.database, { command, ...version ? { version } : {} });
+    rebuilt = rebuildDerived(opened.database, { now, note });
+    note("looking for rows that point at rows that were lost");
+    dangling = danglingRows(opened.database);
+    fetch2 = mailToFetch(opened.database);
+    opened.database.exec("PRAGMA wal_checkpoint(TRUNCATE)");
+  } catch (error) {
+    opened.database.close();
+    dropTarget();
+    throw error;
+  }
+  opened.database.close();
+  const rebuiltAt = Date.now();
+  note("checking the recovered file");
+  const health = await storeHealth(target, { deep: true });
+  const checkedAt = Date.now();
+  if (!health.ok) {
+    throw new CliError("validation_error", `the recovered file did not pass its check, so the store was left as it was; the file is kept at ${target}`, { reason: "store.recovery-failed" });
+  }
+  refuseInUse(path);
+  if (fingerprint(path) !== before) {
+    throw new CliError("validation_error", `the store was written to during the recovery, so it was left as it was \u2014 stop every timer and run it again; ${target} can be deleted`, { reason: "store.changed-during-recovery" });
+  }
+  const keptAt = `${path}.before-recover-${stamp}`;
+  for (const suffix of STORE_PARTS)
+    if (existsSync2(`${path}${suffix}`))
+      renameSync2(`${path}${suffix}`, `${keptAt}${suffix}`);
+  for (const suffix of STORE_PARTS)
+    if (existsSync2(`${target}${suffix}`))
+      renameSync2(`${target}${suffix}`, `${path}${suffix}`);
+  const lost = Object.entries(rowsBefore).map(([table, before2]) => ({ table, before: before2, read: read[table] ?? 0, kept: kept[table] ?? 0 })).filter(({ before: before2, read: read2, kept: kept2 }) => before2 === null || before2 > kept2 || read2 > kept2);
+  const seconds = /* @__PURE__ */ __name((from, to) => Math.round((to - from) / 100) / 10, "seconds");
+  return {
+    path,
+    keptAt,
+    sqlite3: program.version,
+    lost,
+    dangling,
+    mailToFetch: fetch2,
+    rebuilt,
+    copyErrors,
+    health,
+    seconds: {
+      copy: seconds(started, copied),
+      rebuild: seconds(copied, rebuiltAt),
+      check: seconds(rebuiltAt, checkedAt),
+      total: seconds(started, Date.now())
+    }
+  };
+}, "recoverStore");
+
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/store-recover.js
+var COUNTED = [
+  "accounts",
+  "chats",
+  "messages",
+  "attachments",
+  "emails",
+  "documents",
+  "notes",
+  "meetings",
+  "chunks",
+  "embeddings",
+  "mentions"
+];
+var stopTimers = /* @__PURE__ */ __name((timers) => `systemctl --user stop ${timers.join(" ")}`, "stopTimers");
+var storeRecoveryCheck = /* @__PURE__ */ __name(async (env, command) => {
+  const path = storePath(env);
+  if (!existsSync3(path))
+    return { path, exists: false, ok: true, next: [] };
+  const health = await storeHealth(path, { deep: true });
+  let rows = {};
+  try {
+    const { database } = await openSqlite(path, { readOnly: true });
+    try {
+      const all = tableRows(database);
+      rows = Object.fromEntries(COUNTED.filter((table) => table in all).map((table) => [table, all[table] ?? null]));
+    } finally {
+      database.close();
+    }
+  } catch {
+  }
+  const explanation = explainDamage(health, command);
+  const inUse = storeHolders(path) ?? null;
+  const timers = activeTimers() ?? null;
+  const sqlite3 = sqlite3Program();
+  const next = health.ok ? [] : [
+    ...timers?.length ? [stopTimers(timers)] : [],
+    ...(inUse ?? []).map(({ pid, name }) => `stop ${name} (process ${pid}): it has the store open`),
+    ...sqlite3.usable ? [] : ["install sqlite3 3.43 or newer (apt install sqlite3, brew install sqlite)"],
+    `${command} store recover run`
+  ];
+  return {
+    path,
+    exists: true,
+    ok: health.ok,
+    seconds: Math.round(health.ms / 100) / 10,
+    problems: health.problems ?? 0,
+    damagedTables: health.damagedTables ?? [],
+    damagedSearchIndexes: (health.searchIndexes ?? []).filter((index) => !index.ok).map(({ name, error }) => ({ name, ...error ? { error } : {} })),
+    rows,
+    explanation,
+    inUse,
+    timers,
+    sqlite3: { version: sqlite3.version, usable: sqlite3.usable },
+    next
+  };
+}, "storeRecoveryCheck");
+var storeRecoveryRun = /* @__PURE__ */ __name(async (env, { command, version, note, timers: scheduled = activeTimers, copy }) => {
+  const timers = scheduled() ?? [];
+  if (timers.length > 0)
+    throw new CliError("validation_error", `stop the timers first, they open the store: ${stopTimers(timers)}`, {
+      reason: "store.in-use"
+    });
+  const recovery = await recoverStore({
+    path: storePath(env),
+    command,
+    ...version ? { version } : {},
+    ...note ? { note } : {},
+    ...copy ? { copy } : {}
+  });
+  const mail = recovery.mailToFetch.map(({ account, emails }) => `mail <profile of ${account}> sync --rescan   # ${emails} emails`);
+  const lostMail = recovery.lost.some(({ table }) => table === "emails") && mail.length === 0 ? ["mail <profile> sync --rescan   # each mail profile"] : [];
+  const { health, copyErrors, ...kept } = recovery;
+  return {
+    ...kept,
+    copyErrors: copyErrors.length,
+    checkedOk: health.ok,
+    next: [...mail, ...lostMail, "systemctl --user start <the timers stopped before>"]
+  };
+}, "storeRecoveryRun");
+var recoveryNotes = /* @__PURE__ */ __name((answer) => {
+  if ("keptAt" in answer) {
+    const lost = answer.lost.map(({ table, before, read, kept }) => `${table}: ${kept} kept of ${before ?? "an uncountable number"}${read > kept ? `, ${read - kept} read but unusable` : ""}`);
+    return [
+      `recovered in ${answer.seconds.total} s; the damaged file is kept at ${answer.keptAt}`,
+      ...lost.length ? lost : ["no table lost a row"],
+      ...answer.dangling.map(({ table, parent, rows }) => `${rows} rows of ${table} point at ${parent} rows the store does not hold`),
+      ...answer.next.map((line) => `next: ${line}`)
+    ];
+  }
+  if (!answer.exists)
+    return ["no store yet"];
+  if (answer.ok)
+    return [`the store is healthy (checked every page and search index in ${answer.seconds} s)`];
+  const why = answer.explanation;
+  return [
+    ...why ? [why.what, ...why.impact, why.externalUnaffected] : [],
+    ...answer.next.map((line) => `next: ${line}`)
+  ];
+}, "recoveryNotes");
+var storeRecoverCommand = /* @__PURE__ */ __name(({ command, version }) => {
+  const recover = annotate(new Command("recover"), { effects: LOCAL_READ, examples: [`${command} store recover`] }).summary("what is damaged in the store and how to recover it").description("check every page and search index of the store, say what is damaged, what it means and the commands that recover it; changes nothing").action(async function() {
+    const output = outputFor(this);
+    const answer = await storeRecoveryCheck(environmentOf(this).env ?? process.env, command);
+    renderAnswer(this, output, itemOf(snakeKeys(answer)));
+    if (output.format === "pretty")
+      for (const line of recoveryNotes(answer))
+        output.renderer.note(line);
+  });
+  recover.addCommand(annotate(new Command("run"), { effects: LOCAL_WRITE, examples: [`${command} store recover run`] }).summary("rebuild a damaged store from every row it can read").description("copy every readable row into a new file with the sqlite3 program, rebuild the search indexes, mentions and vector index, check it, and put it in place of the store; the damaged file is kept beside it. Refuses while a WireCat timer or process has the store").action(async function() {
+    const output = outputFor(this);
+    const answer = await storeRecoveryRun(environmentOf(this).env ?? process.env, {
+      command,
+      ...version ? { version } : {},
+      note: /* @__PURE__ */ __name((text) => output.renderer.note(text), "note")
+    });
+    renderAnswer(this, output, itemOf(snakeKeys(answer)));
+    if (output.format === "pretty")
+      for (const line of recoveryNotes(answer))
+        output.renderer.note(line);
+  }));
+  return recover;
+}, "storeRecoverCommand");
+
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/store-info.js
 var pendingIfKnown = /* @__PURE__ */ __name((database) => database.prepare("SELECT 1 FROM pragma_table_info('messages') WHERE name = 'normalized_text'").get() ? pendingNormalization(database) : null, "pendingIfKnown");
-var bytesOf = /* @__PURE__ */ __name((path) => existsSync2(path) ? statSync2(path).size : 0, "bytesOf");
+var bytesOf = /* @__PURE__ */ __name((path) => existsSync4(path) ? statSync3(path).size : 0, "bytesOf");
 var messageOf = /* @__PURE__ */ __name((error) => error instanceof Error ? error.message : String(error), "messageOf");
 var contentsOf = /* @__PURE__ */ __name((database, version, writable) => version > 0 && writable ? {
   rows: rowCounts(database),
@@ -5895,7 +6359,7 @@ var contentsOf = /* @__PURE__ */ __name((database, version, writable) => version
 } : { rows: {}, pendingNormalization: null, wordIndex: null, stemIndex: null }, "contentsOf");
 var storeInfo = /* @__PURE__ */ __name(async (env) => {
   const path = storePath(env);
-  if (!existsSync2(path))
+  if (!existsSync4(path))
     return snakeKeys({ path, exists: false, schema: compatibilityOf(void 0) });
   let schema = compatibilityOf(void 0);
   try {
@@ -5928,7 +6392,7 @@ var storeInfoCommand = /* @__PURE__ */ __name(() => annotate(new Command("info")
   renderAnswer(this, outputFor(this), itemOf(answer));
 }), "storeInfoCommand");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/password.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/password.js
 var ENCRYPT_OPTION = [
   "--encrypt",
   "compress and encrypt with a password, typed at a hidden prompt or piped on stdin; it is never kept \u2014 lose it and the file cannot be opened"
@@ -5947,9 +6411,9 @@ var passwordOf = /* @__PURE__ */ __name(async (command, { twice }) => {
   return password;
 }, "passwordOf");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/replies/rules.js
-import { existsSync as existsSync3, readFileSync } from "node:fs";
-import { join } from "node:path";
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/replies/rules.js
+import { existsSync as existsSync5, readFileSync as readFileSync2 } from "node:fs";
+import { join as join2 } from "node:path";
 var REPLY_ACTIONS = ["reply", "task"];
 var REPLY_MODELS = ["fill-only", "may-reword"];
 var REPLY_KINDS = ["dialog", "group"];
@@ -6035,7 +6499,7 @@ var defaultRule = /* @__PURE__ */ __name((id) => ({
   reply: { template: "", asReply: true },
   limits: { perChat: "1/1d", perPerson: "1/1d" }
 }), "defaultRule");
-var repliesPathFor = /* @__PURE__ */ __name((app, profile, env = process.env) => join(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).config, `${profile}.replies.json`), "repliesPathFor");
+var repliesPathFor = /* @__PURE__ */ __name((app, profile, env = process.env) => join2(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).config, `${profile}.replies.json`), "repliesPathFor");
 var EVERYONE = { reply: "all", allow: { people: [], chats: [] }, deny: { people: [], chats: [] } };
 var outsideAudience = /* @__PURE__ */ __name((audience, person, chat) => {
   if (person !== null && audience.deny.people.includes(person))
@@ -6065,11 +6529,11 @@ var readReplies = /* @__PURE__ */ __name((path, provider) => {
   return parseReplies(readRepliesFile(path, provider), path, provider);
 }, "readReplies");
 var readRepliesFile = /* @__PURE__ */ __name((path, provider) => {
-  if (!existsSync3(path))
+  if (!existsSync5(path))
     return { audience: structuredClone(EVERYONE), rules: [] };
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync(path, "utf8"));
+    parsed = JSON.parse(readFileSync2(path, "utf8"));
   } catch (error) {
     throw broken(path, error instanceof Error ? error.message : String(error));
   }
@@ -6118,9 +6582,9 @@ var problem = /* @__PURE__ */ __name((issue) => {
 }, "problem");
 var broken = /* @__PURE__ */ __name((path, why) => new CliError("configuration_error", `the reply rules ${path} cannot be read (${why}) \u2014 fix the file`), "broken");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/replies/state.js
-import { existsSync as existsSync4, readFileSync as readFileSync2 } from "node:fs";
-import { join as join2 } from "node:path";
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/replies/state.js
+import { existsSync as existsSync6, readFileSync as readFileSync3 } from "node:fs";
+import { join as join3 } from "node:path";
 var ANSWERED_KEPT = 1e3;
 var times = record(string(), array(string()));
 var stateFile = object({
@@ -6132,13 +6596,13 @@ var stateFile = object({
 });
 var emptyState = /* @__PURE__ */ __name(() => ({ paused: false, answered: [], sent: {} }), "emptyState");
 var answeredKey = /* @__PURE__ */ __name((message) => `${message.chatId}:${message.id}`, "answeredKey");
-var repliesStatePathFor = /* @__PURE__ */ __name((app, profile, env = process.env) => join2(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).state, `${profile}.replies-state.json`), "repliesStatePathFor");
+var repliesStatePathFor = /* @__PURE__ */ __name((app, profile, env = process.env) => join3(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).state, `${profile}.replies-state.json`), "repliesStatePathFor");
 var readRepliesState = /* @__PURE__ */ __name((path) => {
-  if (!existsSync4(path))
+  if (!existsSync6(path))
     return emptyState();
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync2(path, "utf8"));
+    parsed = JSON.parse(readFileSync3(path, "utf8"));
   } catch (error) {
     throw broken2(path, error instanceof Error ? error.message : String(error));
   }
@@ -6171,7 +6635,7 @@ var recordReply = /* @__PURE__ */ __name((state, rule2, message, now) => {
 }, "recordReply");
 var broken2 = /* @__PURE__ */ __name((path, why) => new CliError("configuration_error", `the reply state ${path} cannot be read (${why}) \u2014 fix or move the file`), "broken");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/replies/decide.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/replies/decide.js
 var skip = /* @__PURE__ */ __name((why) => ({ skip: why }), "skip");
 var decide = /* @__PURE__ */ __name((rule2, incoming, state, now) => {
   const { message, chat, owner, sender } = incoming;
@@ -6277,7 +6741,7 @@ var filled = /* @__PURE__ */ __name((template2, senderName) => {
   return template2.replaceAll("{firstName}", name.split(/\s+/)[0] ?? name).replaceAll("{name}", name);
 }, "filled");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/replies/template.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/replies/template.js
 var import_liquidjs = __toESM(require_liquid_node(), 1);
 var TEMPLATE_LIMITS = {
   parse: 32768,
@@ -6437,7 +6901,7 @@ var renderReplyTemplate = /* @__PURE__ */ __name(async (reply, input) => {
   }
 }, "renderReplyTemplate");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/replies/dry-run.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/replies/dry-run.js
 var DRY_RUN_DAYS = 7;
 var PAGE = 500;
 var dryRun = /* @__PURE__ */ __name(async (store, account, rules, { since, until = Date.now(), only, audience, render }) => {
@@ -6551,7 +7015,7 @@ var storedSince = /* @__PURE__ */ __name(async (store, account, chat, since) =>
   }
 }, "storedSince");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/embeddings/keys.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/embeddings/keys.js
 var endpointKeyName = /* @__PURE__ */ __name((baseUrl) => {
   const host = new URL(baseUrl).host;
   return ["openai", "anthropic"].includes(host) ? `endpoint:${host}` : host;
@@ -6582,7 +7046,7 @@ var embeddingKeys = /* @__PURE__ */ __name((app, env = process.env, keyring) =>
   };
 }, "embeddingKeys");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/models/openai.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/models/openai.js
 var options = strictObject({
   temperature: range(0, 2),
   top_p: range(0, 1),
@@ -6631,7 +7095,7 @@ var openai = {
   }), "complete")
 };
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/models/index.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/models/index.js
 var modelGateway = /* @__PURE__ */ __name((deps) => ({
   complete: /* @__PURE__ */ __name(async (request) => {
     if (deps.signal?.aborted)
@@ -6646,7 +7110,7 @@ var modelGateway = /* @__PURE__ */ __name((deps) => ({
     if (!adapter && target.provider === "openai")
       adapter = openai;
     if (!adapter && target.provider === "anthropic")
-      adapter = (await import("./anthropic-QCYLKSJJ.js")).anthropic;
+      adapter = (await import("./anthropic-JUJB4DCF.js")).anthropic;
     if (!adapter)
       throw new CliError("validation_error", `no model adapter for ${target.provider}`);
     if (request.images !== void 0 && adapter.images !== true)
@@ -6687,19 +7151,19 @@ var modelGateway = /* @__PURE__ */ __name((deps) => ({
   }, "complete")
 }), "modelGateway");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/replies/consents.js
-import { existsSync as existsSync5, readFileSync as readFileSync3 } from "node:fs";
-import { join as join3 } from "node:path";
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/replies/consents.js
+import { existsSync as existsSync7, readFileSync as readFileSync4 } from "node:fs";
+import { join as join4 } from "node:path";
 var shape = strictObject({
   provider: nullable(pipe(string(), minLength(1))),
   deniedChats: array(pipe(string(), minLength(1)))
 });
-var replyConsentPathFor = /* @__PURE__ */ __name((app, profile, env = process.env) => join3(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).config, `${profile}.replies-consents.json`), "replyConsentPathFor");
+var replyConsentPathFor = /* @__PURE__ */ __name((app, profile, env = process.env) => join4(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).config, `${profile}.replies-consents.json`), "replyConsentPathFor");
 var readReplyConsent = /* @__PURE__ */ __name((path) => {
-  if (!existsSync5(path))
+  if (!existsSync7(path))
     return { provider: null, deniedChats: [] };
   try {
-    return parse(shape, JSON.parse(readFileSync3(path, "utf8")));
+    return parse(shape, JSON.parse(readFileSync4(path, "utf8")));
   } catch {
     throw new CliError("configuration_error", "reply model consent is invalid; fix its file before granting consent");
   }
@@ -6712,7 +7176,7 @@ var mayModelReply = /* @__PURE__ */ __name((path, provider, chat) => {
   return consent.provider === provider && !consent.deniedChats.includes(chat);
 }, "mayModelReply");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/replies/rendering.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/replies/rendering.js
 var replyRenderer = /* @__PURE__ */ __name((app, profile, settings, env, warn, options2 = {
   ai: true
 }) => async (rule2, message, chat, now) => {
@@ -6759,7 +7223,7 @@ var replyRenderer = /* @__PURE__ */ __name((app, profile, settings, env, warn, o
   return result2;
 }, "replyRenderer");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/replies/serve.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/replies/serve.js
 var NOT_ALLOWED = "replies.send is not allow";
 var NO_RULES = "no rules";
 var ONLY_TASK = "opened a task, sent nothing";
@@ -6852,7 +7316,7 @@ var replyTo = /* @__PURE__ */ __name(async (deps, message) => {
   return { skip: why };
 }, "replyTo");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/serve-catch-up.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/serve-catch-up.js
 var START_SYNC_DELAY_MS = 3e4;
 var START_SYNC_BUDGET_MS = 5 * 6e4;
 var START_SYNC_WINDOW_MS = 7 * 864e5;
@@ -6929,7 +7393,7 @@ var startSync = /* @__PURE__ */ __name(({ chats, newestHeld, fetch: fetch2, note
   };
 }, "startSync");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/serve-members.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/serve-members.js
 var FIRST_FETCH_MS = 6e4;
 var DAY_MS = 864e5;
 var memberFetches = /* @__PURE__ */ __name(({ withStore, fetch: fetch2, warn, firstMs = FIRST_FETCH_MS, everyMs = DAY_MS }) => {
@@ -6983,7 +7447,7 @@ var memberFetches = /* @__PURE__ */ __name(({ withStore, fetch: fetch2, warn, fi
   };
 }, "memberFetches");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/serve-notice.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/serve-notice.js
 var record2 = /* @__PURE__ */ __name((context, app, severity, attributes) => recordLogFor(context.streams.diagnostic, app, { command: currentRun().command || "serve" })[severity](attributes), "record");
 var noticeFor = /* @__PURE__ */ __name((context, app, severity = "warn") => ({ text, ...attributes }) => {
   if (context.format === "pretty") {
@@ -7016,7 +7480,7 @@ var recordDiagnostics = /* @__PURE__ */ __name((context, app) => {
   return context;
 }, "recordDiagnostics");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/serve-stems.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/serve-stems.js
 var STEMS_EVERY_MS = 3e4;
 var STEMS_SLICE_MS = 2e3;
 var stemFills = /* @__PURE__ */ __name(({ withStore, warn, everyMs = STEMS_EVERY_MS, sliceMs = STEMS_SLICE_MS }) => {
@@ -7056,7 +7520,7 @@ var stemFills = /* @__PURE__ */ __name(({ withStore, warn, everyMs = STEMS_EVERY
   };
 }, "stemFills");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/message-items.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/message-items.js
 var defined = /* @__PURE__ */ __name((value) => Object.fromEntries(Object.entries(value).filter(([, one]) => one !== void 0)), "defined");
 var attachmentItem = /* @__PURE__ */ __name((attachment) => defined({
   kind: attachment.kind,
@@ -7151,7 +7615,7 @@ var viewOf = /* @__PURE__ */ __name((context, messenger) => ({
   locale: messenger.app.locale
 }), "viewOf");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/watch-answers.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/watch-answers.js
 var observed = /* @__PURE__ */ __name((value) => ({
   value: value.value,
   observed_at: value.observedAt,
@@ -7218,7 +7682,7 @@ var watchEventItem = /* @__PURE__ */ __name((value, account) => {
   }
 }, "watchEventItem");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/watch-command.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/watch-command.js
 var watchCommand = /* @__PURE__ */ __name((messenger) => annotate(new Command("watch"), {
   output: { entity: "watch_item" },
   effects: REMOTE_READ,
@@ -7373,7 +7837,7 @@ var describe = /* @__PURE__ */ __name((event, render) => {
   }
 }, "describe");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/serve-command.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/serve-command.js
 var serveCommand = /* @__PURE__ */ __name((messenger) => {
   const command = annotate(new Command("serve"), {
     output: { entity: "serve_summary" },
@@ -7637,8 +8101,8 @@ var tasking = /* @__PURE__ */ __name((context, warn) => {
   };
 }, "tasking");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/store-tables-command.js
-import { existsSync as existsSync6 } from "node:fs";
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/store-tables-command.js
+import { existsSync as existsSync8 } from "node:fs";
 var PATH = "store tables list";
 var STORE_TABLES_QUERY = {
   entity: "store_table",
@@ -7667,7 +8131,7 @@ var storeTablesCommand = /* @__PURE__ */ __name((messenger) => {
     const filter = filterOf(words);
     const { full } = this.optsWithGlobals();
     const path = storePath(environmentOf(this).env ?? process.env);
-    if (!existsSync6(path))
+    if (!existsSync8(path))
       throw new CliError("not_found", `no store at ${path}`);
     const items = await readStoreTables(path, { filter, sizes: full === true });
     renderAnswer(this, outputFor(this), listOf(PATH, {
@@ -7680,7 +8144,7 @@ var storeTablesCommand = /* @__PURE__ */ __name((messenger) => {
   return tables;
 }, "storeTablesCommand");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.590.0_@wirecat+cli-base@0.80.1_commander@15.0.0_esbuild@0.28.2_type_4c7167080feb2ba6356a64767981f5fd/node_modules/@wirecat/cli-core/dist/cli/messenger/store-maintenance-command.js
+// node_modules/.pnpm/@wirecat+cli-core@0.601.0_@wirecat+cli-base@0.80.9_commander@15.0.0_esbuild@0.28.2_type_4fddd50439ae4e4f952967ea26554e7b/node_modules/@wirecat/cli-core/dist/cli/messenger/store-maintenance-command.js
 var SEARCH_INDEXES = ["messages_fts", "chats_fts", "identities_fts"];
 var WORD_INDEX = "message_words";
 var schemaOf = /* @__PURE__ */ __name((database) => {
@@ -7689,7 +8153,7 @@ var schemaOf = /* @__PURE__ */ __name((database) => {
 }, "schemaOf");
 var count2 = /* @__PURE__ */ __name((database, table) => Number(database.prepare(`SELECT count(*) AS n FROM ${table}`).get()?.n ?? 0), "count");
 var pendingIfKnown2 = /* @__PURE__ */ __name((database) => database.prepare("SELECT 1 FROM pragma_table_info('messages') WHERE name = 'normalized_text'").get() ? pendingNormalization(database) : null, "pendingIfKnown");
-var bytesOf2 = /* @__PURE__ */ __name((path) => existsSync7(path) ? statSync3(path).size : 0, "bytesOf");
+var bytesOf2 = /* @__PURE__ */ __name((path) => existsSync9(path) ? statSync4(path).size : 0, "bytesOf");
 var reading = /* @__PURE__ */ __name(async (path, read) => {
   const database = await openCache(path);
   try {
@@ -7706,10 +8170,22 @@ var readingOnly = /* @__PURE__ */ __name(async (path, read) => {
     database.close();
   }
 }, "readingOnly");
-var storeSummary = /* @__PURE__ */ __name(async (env) => {
+var storeSummary = /* @__PURE__ */ __name(async (env, { deep = false, command } = {}) => {
   const path = storePath(env);
-  if (!existsSync7(path))
+  if (!existsSync9(path))
     return { path, exists: false };
+  const checked = await storeHealth(path, { deep });
+  const health = {
+    checked: checked.checked,
+    covers: deep ? "every page and every search index" : QUICK_HEALTH_CHECKS,
+    ok: checked.ok,
+    ms: checked.ms,
+    ...checked.problems ? { problems: checked.problems } : {},
+    ...checked.damagedTables?.length ? { damagedTables: checked.damagedTables } : {},
+    ...checked.searchIndexes?.some((index) => !index.ok) ? { damagedSearchIndexes: checked.searchIndexes.filter((index) => !index.ok).map((index) => index.name) } : {}
+  };
+  const damage = command ? explainDamage(checked, command) : null;
+  const healthOf = { health, ...damage ? { damage } : {} };
   try {
     return await reading(path, (database) => {
       const { version, writable } = schemaOf(database);
@@ -7719,11 +8195,12 @@ var storeSummary = /* @__PURE__ */ __name(async (env) => {
         schema: version,
         speaks: SPEAKS,
         writable,
-        ...version > 0 ? { chats: count2(database, "chats"), messages: count2(database, "messages") } : {}
+        ...version > 0 ? { chats: count2(database, "chats"), messages: count2(database, "messages") } : {},
+        ...healthOf
       };
     });
   } catch (error) {
-    return { path, exists: true, error: messageOf2(error) };
+    return { path, exists: true, error: messageOf2(error), ...healthOf };
   }
 }, "storeSummary");
 var result = /* @__PURE__ */ __name((command, value, next = []) => renderAnswer(command, outputFor(command), itemOf(snakeKeys(value), { next })), "result");
@@ -7738,7 +8215,8 @@ var storeMaintenanceCommands = /* @__PURE__ */ __name((messenger) => [
   repairCommand(messenger),
   resetCommand(messenger),
   copiesCommand(),
-  storeTablesCommand(messenger)
+  storeTablesCommand(messenger),
+  storeRecoverCommand({ command: messenger.app.command, version: messenger.app.version })
 ], "storeMaintenanceCommands");
 var refuseWhileServing = /* @__PURE__ */ __name((command, messenger) => {
   const serving = servingProfiles(messenger.app, environmentOf(command).env ?? process.env);
@@ -7750,7 +8228,7 @@ var repairCommand = /* @__PURE__ */ __name((messenger) => annotate(new Command("
   const { renderer, format } = outputFor(this);
   const { dryRun: dryRun2 } = this.opts();
   const path = storePath(environmentOf(this).env ?? process.env);
-  if (!existsSync7(path)) {
+  if (!existsSync9(path)) {
     result(this, { path, exists: false });
     return;
   }
@@ -7790,7 +8268,7 @@ var notesOf = /* @__PURE__ */ __name((report, command) => {
 }, "notesOf");
 var copiesCommand = /* @__PURE__ */ __name(() => new Command("copies").description("the tables `store repair` kept as copies").addCommand(annotate(new Command("delete"), { output: { entity: "store_copy_removal" }, effects: LOCAL_WRITE }).description("delete one copy `store repair` kept, named exactly; refuses any other table").argument("<name>", "the copy's name, as `store repair` printed it").action(async function(name) {
   const path = storePath(environmentOf(this).env ?? process.env);
-  if (!existsSync7(path))
+  if (!existsSync9(path))
     throw new CliError("not_found", `no store at ${path}`);
   const deleted = await reading(path, (database) => deleteCopy(database, name));
   result(this, { path, deleted });
@@ -7798,7 +8276,7 @@ var copiesCommand = /* @__PURE__ */ __name(() => new Command("copies").descripti
 var checkCommand = /* @__PURE__ */ __name((messenger) => annotate(new Command("check"), { output: { entity: "store_check" }, effects: LOCAL_READ }).summary("check the local archive for problems").description("whether the store is healthy \u2014 integrity, search indexes, disk, and which chats are behind").action(async function() {
   const { renderer } = outputFor(this);
   const path = storePath(environmentOf(this).env ?? process.env);
-  if (!existsSync7(path)) {
+  if (!existsSync9(path)) {
     result(this, { path, exists: false, ok: true });
     return;
   }
@@ -7861,7 +8339,7 @@ var inspect = /* @__PURE__ */ __name((path) => reading(path, (database) => {
     ...schema.version > 0 ? [["attachment_words", indexIntegrity(database, "attachment_words", 0)]] : []
   ]);
   const size = bytesOf2(path) + bytesOf2(`${path}-wal`);
-  const { bavail, bsize } = statfsSync(dirname(path));
+  const { bavail, bsize } = statfsSync2(dirname2(path));
   const free = Number(bavail) * Number(bsize);
   const behind = schema.version > 0 ? chatsBehind(database) : [];
   const vectorIndexes = schema.version >= 34 ? vectorIndexCounts(database) : [];
@@ -7949,14 +8427,18 @@ var chatsBehind = /* @__PURE__ */ __name((database) => database.prepare(`SELECT
 var migrateCommand = /* @__PURE__ */ __name((messenger) => annotate(new Command("migrate"), { output: { entity: "store_migration" }, effects: LOCAL_WRITE }).summary("migrate an older local archive").description("bring the store up to this build's schema, then normalize, index and stem the messages and notes stored before it").action(async function() {
   const { renderer } = outputFor(this);
   const path = storePath(environmentOf(this).env ?? process.env);
-  if (!existsSync7(path)) {
+  if (!existsSync9(path)) {
     result(this, { path, exists: false });
     renderer.note(`no store yet \u2014 the first \`${messenger.app.command}\` command that reads a chat creates it`);
     return;
   }
   const answer = await reading(path, (database) => {
     const from = schemaOf(database).version;
-    migrate(database, { command: messenger.app.command, version: messenger.app.version });
+    migrate(database, {
+      command: messenger.app.command,
+      version: messenger.app.version,
+      rollback: { store: path, warn: /* @__PURE__ */ __name((line) => renderer.warn(line), "warn") }
+    });
     const { normalized, indexed, terms } = buildWordIndex(database, (note) => renderer.note(note));
     const stemmed = buildStems(database, (note) => renderer.note(note));
     const notes = buildNoteIndex(database, (note) => renderer.note(note));
@@ -8009,7 +8491,7 @@ var buildNoteIndex = /* @__PURE__ */ __name((database, note, { reset = false } =
 var reindexCommand = /* @__PURE__ */ __name((messenger) => destroysNothing(annotate(new Command("rebuild"), { output: { entity: "store_reindex" }, effects: LOCAL_WRITE })).summary("rebuild the local archive's search indexes").description("rebuild the word index, its typo vocabulary, the stems, the files' word index, the notes' indexes and who took part in what, from what is stored, and drop the vectors no stored text uses; loses nothing").action(async function() {
   const { renderer } = outputFor(this);
   const path = storePath(environmentOf(this).env ?? process.env);
-  if (!existsSync7(path)) {
+  if (!existsSync9(path)) {
     result(this, { path, exists: false });
     return;
   }
@@ -8038,11 +8520,11 @@ var reindexCommand = /* @__PURE__ */ __name((messenger) => destroysNothing(annot
   result(this, answer);
 }), "reindexCommand");
 var vacuumInto = /* @__PURE__ */ __name(async (path, target) => {
-  writeFileSync(target, "", { flag: "wx", mode: 384 });
+  writeFileSync2(target, "", { flag: "wx", mode: 384 });
   try {
     await reading(path, (database) => database.prepare("VACUUM INTO ?").run(target));
   } catch (error) {
-    rmSync2(target, { force: true });
+    rmSync3(target, { force: true });
     throw error;
   }
 }, "vacuumInto");
@@ -8051,9 +8533,9 @@ var backupCommand = /* @__PURE__ */ __name(() => destroysNothing(annotate(new Co
   const { encrypt } = this.opts();
   const path = storePath(environmentOf(this).env ?? process.env);
   const target = resolve(file2);
-  if (!existsSync7(path))
+  if (!existsSync9(path))
     throw new CliError("not_found", `no store at ${path} to back up`);
-  if (existsSync7(target))
+  if (existsSync9(target))
     throw new CliError("validation_error", `${target} exists \u2014 a backup never overwrites a file`);
   const password = encrypt ? await passwordOf(this, { twice: true }) : void 0;
   const copyAt = password === void 0 ? target : `${path}.backup-${process.pid}`;
@@ -8075,67 +8557,69 @@ var backupCommand = /* @__PURE__ */ __name(() => destroysNothing(annotate(new Co
     });
   } catch (error) {
     if (password === void 0)
-      rmSync2(target, { force: true });
+      rmSync3(target, { force: true });
     throw error;
   } finally {
     if (password !== void 0)
-      rmSync2(copyAt, { force: true });
+      rmSync3(copyAt, { force: true });
   }
 }), "backupCommand");
 var decryptCommand = /* @__PURE__ */ __name(() => annotate(new Command("decrypt"), { output: { entity: "store_decrypt" }, effects: LOCAL_WRITE }).description("open a file written with --encrypt into a new file; asks for its password").argument("<file>", "a file `store backup --encrypt` or `store export --encrypt` wrote").requiredOption("--output <file>", "the new file, readable only by you").action(async function(file2) {
   const { output } = this.opts();
   const from = resolve(file2);
   const to = resolve(output);
-  if (!existsSync7(from))
+  if (!existsSync9(from))
     throw new CliError("not_found", `no file at ${from}`);
   if (!isSealed(from))
     throw new CliError("validation_error", `${from} was not written with --encrypt`);
-  if (existsSync7(to))
+  if (existsSync9(to))
     throw new CliError("validation_error", `${to} exists \u2014 never overwritten`);
   await unsealFile(from, to, await passwordOf(this, { twice: false }));
   result(this, { path: to, from, bytes: bytesOf2(to) });
 }), "decryptCommand");
-var restoreCommand = /* @__PURE__ */ __name((messenger) => annotate(new Command("restore"), { output: { entity: "store_restore" }, effects: LOCAL_WRITE }).summary("restore a backup while keeping the current store").description("put a backup in place of the store; the store it replaces is kept beside it, never deleted").argument("<file>", "a file `store backup` wrote; one written with --encrypt asks for its password").action(async function(file2) {
+var restoreCommand = /* @__PURE__ */ __name((messenger) => annotate(new Command("restore"), { output: { entity: "store_restore" }, effects: LOCAL_WRITE }).summary("restore a backup and keep the current store, or roll back a breaking upgrade").description("put a backup in place of the store; the store it replaces is kept beside it, never deleted. Given a rollback copy (backups/<store>-rollback-schema-<version>-<time>.db, kept for a day before an upgrade older tools cannot open), put its tables back in the store and return it to that version instead").argument("<file>", "a file `store backup` wrote, or a rollback copy; one written with --encrypt asks for its password").action(async function(file2) {
   const path = storePath(environmentOf(this).env ?? process.env);
   const given = resolve(file2);
-  if (!existsSync7(given))
+  if (!existsSync9(given))
     throw new CliError("not_found", `no file at ${given}`);
   refuseWhileServing(this, messenger);
   if (!isSealed(given))
     return restoreFrom(this, messenger, given, given);
   const opened = `${path}.unsealing-${process.pid}`;
-  mkdirSync(dirname(path), { recursive: true, mode: 448 });
+  mkdirSync(dirname2(path), { recursive: true, mode: 448 });
   try {
     await unsealFile(given, opened, await passwordOf(this, { twice: false }));
     await restoreFrom(this, messenger, opened, given);
   } finally {
-    rmSync2(opened, { force: true });
+    rmSync3(opened, { force: true });
   }
 }), "restoreCommand");
 var restoreFrom = /* @__PURE__ */ __name(async (command, messenger, backup, given) => {
   const { renderer } = outputFor(command);
   const path = storePath(environmentOf(command).env ?? process.env);
-  if (existsSync7(path) && realpathSync(backup) === realpathSync(path)) {
+  if (existsSync9(path) && realpathSync2(backup) === realpathSync2(path)) {
     throw new CliError("validation_error", `${backup} is the store itself`);
   }
+  if (await isRollbackCopy(backup))
+    return rollBackFrom(command, messenger, backup);
   const schema = await backupSchema(backup);
   const stamp = stampNow();
-  const kept = existsSync7(path) ? `${path}.before-restore-${stamp}` : null;
+  const kept = existsSync9(path) ? `${path}.before-restore-${stamp}` : null;
   if (kept) {
     const waitMs = environmentOf(command).storeLockWaitMs;
     await quiesce(path, messenger, "restore", (message) => renderer.warn(message), waitMs);
   } else
-    mkdirSync(dirname(path), { recursive: true, mode: 448 });
+    mkdirSync(dirname2(path), { recursive: true, mode: 448 });
   const incoming = `${path}.restoring-${stamp}`;
   copyFileSync(backup, incoming, constants.COPYFILE_EXCL);
   chmodSync(incoming, 384);
   if (kept) {
-    renameSync2(path, kept);
+    renameSync3(path, kept);
     for (const suffix of ["-wal", "-shm"])
-      if (existsSync7(`${path}${suffix}`))
-        renameSync2(`${path}${suffix}`, `${kept}${suffix}`);
+      if (existsSync9(`${path}${suffix}`))
+        renameSync3(`${path}${suffix}`, `${kept}${suffix}`);
   }
-  renameSync2(incoming, path);
+  renameSync3(incoming, path);
   result(command, { path, restoredFrom: given, keptAt: kept, schema: schema.version });
   if (kept)
     renderer.note(`the store it replaced is kept at ${kept}`);
@@ -8144,6 +8628,43 @@ var restoreFrom = /* @__PURE__ */ __name(async (command, messenger, backup, give
     renderer.note(`the backup is behind this build; the next command migrates it \u2014 \`${lineOf(command, "store migrate")}\` now`);
   }
 }, "restoreFrom");
+var isRollbackCopy = /* @__PURE__ */ __name(async (file2) => {
+  try {
+    return await readingOnly(file2, (database) => database.prepare("SELECT 1 FROM sqlite_master WHERE name = 'rollback_meta'").get() !== void 0);
+  } catch {
+    return false;
+  }
+}, "isRollbackCopy");
+var rollBackFrom = /* @__PURE__ */ __name(async (command, messenger, copy) => {
+  const { renderer } = outputFor(command);
+  const path = storePath(environmentOf(command).env ?? process.env);
+  if (!existsSync9(path))
+    throw new CliError("not_found", `no store at ${path} to roll back`);
+  const waitMs = environmentOf(command).storeLockWaitMs;
+  await quiesce(path, messenger, "restore", (message) => renderer.warn(message), waitMs);
+  const { database } = await openSqlite(path);
+  let rolled;
+  try {
+    rolled = rollBack(database, copy);
+  } finally {
+    database.close();
+  }
+  result(command, {
+    path,
+    restoredFrom: copy,
+    rolledBack: true,
+    schema: rolled.from,
+    was: rolled.was,
+    tables: rolled.restored,
+    rebuilt: rolled.rebuilt,
+    foreignKeyViolations: rolled.foreignKeyViolations
+  });
+  const taken = new Date(rolled.createdAt).toISOString();
+  renderer.note(`the store is back at schema ${rolled.from}; ${rolled.tables.length > 0 ? rolled.tables.join(", ") : "no table"} hold what they held at ${taken}, and what was written to them since is not kept`);
+  renderer.note("open it with the older tool and run its `store rebuild`: the search indexes are behind the tables");
+  renderer.note(`a tool that speaks schema ${rolled.to} or later migrates it again on its next run`);
+  renderer.note("restart every serve and mcp of either CLI that was running, so they read the restored store");
+}, "rollBackFrom");
 var backupSchema = /* @__PURE__ */ __name(async (backup) => {
   let read;
   try {
@@ -8167,7 +8688,7 @@ var backupSchema = /* @__PURE__ */ __name(async (backup) => {
 var STORE_LOCK_WAIT_MS = 1e3;
 var quiesce = /* @__PURE__ */ __name(async (path, messenger, then, warn, waitMs = STORE_LOCK_WAIT_MS) => {
   const { command } = messenger.app;
-  const files = [path, `${path}-wal`, `${path}-shm`].filter((file2) => existsSync7(file2)).map((file2) => realpathSync(file2));
+  const files = [path, `${path}-wal`, `${path}-shm`].filter((file2) => existsSync9(file2)).map((file2) => realpathSync2(file2));
   const holders = holdersOf(files);
   if (holders === void 0) {
     warn(`this system cannot say which processes have the store open \u2014 restart every running serve and mcp after this`);
@@ -8193,7 +8714,7 @@ var resetCommand = /* @__PURE__ */ __name((messenger) => annotate(new Command("r
   const { command } = messenger.app;
   const env = environmentOf(this).env ?? process.env;
   const path = storePath(env);
-  if (!existsSync7(path)) {
+  if (!existsSync9(path)) {
     result(this, { path, exists: false, reset: false });
     renderer.note(`no store at ${path} \u2014 nothing to reset; the first \`${command}\` command that reads a chat creates it`);
     return;
@@ -8229,17 +8750,17 @@ var resetCommand = /* @__PURE__ */ __name((messenger) => annotate(new Command("r
     });
     renderer.note(`backed the store up to ${backup}`);
   }
-  for (const suffix of STORE_PARTS)
-    rmSync2(`${path}${suffix}`, { force: true });
+  for (const suffix of STORE_PARTS2)
+    rmSync3(`${path}${suffix}`, { force: true });
   await (await openStore({ path, command })).close();
   const schema = await reading(path, (database) => schemaOf(database).version);
   result(this, { path, exists: true, reset: true, backup, backedUp, schema });
   renderer.note(backup ? `the store is empty at schema ${schema}; \`${command} store restore ${backup}\` puts the old one back once a build can read it` : `the store is empty at schema ${schema}; there is no backup`);
 }), "resetCommand");
-var STORE_PARTS = ["", "-wal", "-shm"];
+var STORE_PARTS2 = ["", "-wal", "-shm"];
 var resetPreview = /* @__PURE__ */ __name(async (path, messenger, env, keep) => {
-  const files = STORE_PARTS.map((suffix) => `${path}${suffix}`).filter((file2) => existsSync7(file2));
-  const holders = holdersOf(files.map((file2) => realpathSync(file2)));
+  const files = STORE_PARTS2.map((suffix) => `${path}${suffix}`).filter((file2) => existsSync9(file2));
+  const holders = holdersOf(files.map((file2) => realpathSync2(file2)));
   const serving = servingProfiles(messenger.app, env).length > 0;
   const read = await readingOnly(path, (database) => ({
     schema: schemaOf(database).version,