chat-recall 0.5.16 → 0.5.18

package/dist/mcp.js

@@ -4862,6 +4862,79 @@ var init_project_resolver = __esm({
   }
 });
 
+// ../engine/dist/mcp/login-prompt.js
+var login_prompt_exports = {};
+__export(login_prompt_exports, {
+  _resetLoginPrompts: () => _resetLoginPrompts,
+  defaultLoginServer: () => defaultLoginServer,
+  hasLoginStarter: () => hasLoginStarter,
+  loginInstruction: () => loginInstruction,
+  setLoginStarter: () => setLoginStarter
+});
+function setLoginStarter(fn) {
+  starter = fn;
+}
+function hasLoginStarter() {
+  return starter !== null;
+}
+function _resetLoginPrompts() {
+  pending.clear();
+}
+function defaultLoginServer() {
+  return (process.env.CHAT_RECALL_SERVER || "https://chatrecall.dev").replace(/\/+$/, "");
+}
+function loginInstruction(server = defaultLoginServer()) {
+  if (!starter) {
+    return `chat-recall is not logged in, and this host cannot start a login. Install the CLI and log in: \`npm i -g chat-recall && chat-recall login ${server}\`. A free 7-day trial starts as soon as you sign up.`;
+  }
+  const known = pending.get(server);
+  if (known && Date.now() - known.at < PROMPT_TTL_MS) {
+    if (known.prompt)
+      return signInText(known.prompt, server);
+    if (known.error) {
+      return `chat-recall could not start a login automatically (${known.error}). Sign up at ${server} and then run \`chat-recall login ${server}\`.`;
+    }
+    return "chat-recall is starting a sign-in \u2014 call this tool again in a moment and it will show you the link.";
+  }
+  pending.set(server, { at: Date.now(), prompt: null });
+  void starter(server).then((prompt) => {
+    pending.set(server, { at: Date.now(), prompt });
+  }).catch((err) => {
+    pending.set(server, { at: Date.now(), prompt: null, error: err instanceof Error ? err.message : String(err) });
+  });
+  return "chat-recall is not connected yet \u2014 starting a sign-in now. Call this tool again in a moment and it will show you the link to open.";
+}
+function signInText(p, server) {
+  return [
+    "**chat-recall needs one sign-in before it can recall anything.**",
+    "",
+    `Open: ${p.url}`,
+    `Code: ${p.userCode}`,
+    "",
+    `(If the link does not carry the code, enter it at ${p.verificationUri}.)`,
+    "",
+    "Sign in with Google or GitHub and your free 7-day trial starts on the spot \u2014 no card.",
+    "With an email address instead, confirm the 6-digit code we send and the trial starts then.",
+    "",
+    "Approving also finishes the setup for you: the chat-recall skills go into your AI",
+    "tools, the MCP is registered with them, and a background service starts shipping new",
+    "conversations. Your existing sessions then sync \u2014 the first pass reports progress, so",
+    'a tool that says "still syncing" is working rather than broken.',
+    "",
+    "Nothing is read or uploaded until you approve. To keep a repo out afterwards:",
+    "`recall_exclude_path`, or `chat-recall exclude project <path>`."
+  ].join("\n");
+}
+var starter, pending, PROMPT_TTL_MS;
+var init_login_prompt = __esm({
+  "../engine/dist/mcp/login-prompt.js"() {
+    "use strict";
+    starter = null;
+    pending = /* @__PURE__ */ new Map();
+    PROMPT_TTL_MS = 9 * 60 * 1e3;
+  }
+});
+
 // ../engine/dist/core/tool-backend.js
 var tool_backend_exports = {};
 __export(tool_backend_exports, {
@@ -4938,7 +5011,56 @@ var init_tool_backend = __esm({
   }
 });
 
+// ../engine/dist/core/project-path-match.js
+function canonicalProjectPath(p) {
+  return (p || "").trim().replace(/\\/g, "/").replace(/[-_]/g, "/").replace(/\/{2,}/g, "/").replace(/\/+$/, "").toLowerCase();
+}
+function projectPathIncludes(candidate, rule) {
+  if (!candidate || !rule)
+    return false;
+  if (candidate.includes(rule))
+    return true;
+  const c = canonicalProjectPath(candidate);
+  const r = canonicalProjectPath(rule);
+  return !!r && c.includes(r);
+}
+function projectPathAtOrUnder(candidate, rule) {
+  if (!candidate || !rule)
+    return false;
+  const strip = (s) => s.replace(/\/+$/, "");
+  const cRaw = strip(candidate);
+  const rRaw = strip(rule);
+  if (cRaw === rRaw || cRaw.startsWith(`${rRaw}/`))
+    return true;
+  const c = canonicalProjectPath(candidate);
+  const r = canonicalProjectPath(rule);
+  return !!r && (c === r || c.startsWith(`${r}/`));
+}
+var init_project_path_match = __esm({
+  "../engine/dist/core/project-path-match.js"() {
+    "use strict";
+  }
+});
+
 // ../engine/dist/core/settings.js
+var settings_exports = {};
+__export(settings_exports, {
+  PERSONAL_DIR_NAMES: () => PERSONAL_DIR_NAMES,
+  PERSONAL_DIR_PATTERNS: () => PERSONAL_DIR_PATTERNS,
+  _resetSecretsCacheForTests: () => _resetSecretsCacheForTests,
+  _resetSettingsCacheForTests: () => _resetSettingsCacheForTests,
+  _resetSourceSettingsCache: () => _resetSourceSettingsCache,
+  applySettingsToEnv: () => applySettingsToEnv,
+  isPersonalPath: () => isPersonalPath,
+  isProjectSyncable: () => isProjectSyncable,
+  isSourceEnabled: () => isSourceEnabled,
+  loadSettings: () => loadSettings,
+  loadSourceSettings: () => loadSourceSettings,
+  mergeSettings: () => mergeSettings,
+  redactSettings: () => redactSettings,
+  saveSettings: () => saveSettings,
+  settingsFilePath: () => settingsFilePath
+});
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync, chmodSync, statSync as statSync3 } from "fs";
 import { delimiter } from "path";
 import { dirname as dirname3, join as join3 } from "path";
@@ -4973,7 +5095,7 @@ function isProjectSyncable(projectId, projectPath, cfg) {
   if (projectId && cfg.syncOnly.has(projectId))
     return true;
   for (const x of cfg.syncOnly)
-    if (x && projectPath.includes(x))
+    if (projectPathIncludes(projectPath, x))
       return true;
   return false;
 }
@@ -5043,6 +5165,12 @@ function defaultSync() {
     includeProjects: []
   };
 }
+function isPersonalPath(projectPath, includeProjects = []) {
+  if (includeProjects.some((inc) => inc && projectPath.includes(inc)))
+    return false;
+  const norm = (projectPath.replace(/\\/g, "/") + "/").toLowerCase();
+  return PERSONAL_DIR_NAMES.some((n) => norm.includes(`/${n.toLowerCase()}/`));
+}
 function defaultTeam() {
   return {
     enabled: false,
@@ -5158,9 +5286,15 @@ function isSourceEnabled(tool, source) {
     return true;
   return block[source] !== false;
 }
+function _resetSourceSettingsCache() {
+  _sourceSettingsCache = null;
+}
 function secretsPath() {
   return join3(getDataDir(), "secrets.env");
 }
+function _resetSecretsCacheForTests() {
+  _secretsCache = null;
+}
 function loadSecrets() {
   const out = {};
   const p = secretsPath();
@@ -5218,6 +5352,9 @@ function applySecretOverlay(result) {
   }
   return result;
 }
+function _resetSettingsCacheForTests() {
+  _settingsCache = null;
+}
 function loadSettings() {
   const path = settingsPath();
   if (!existsSync3(path))
@@ -5277,10 +5414,101 @@ function saveSettings(settings2) {
   } catch {
   }
 }
+function applySettingsToEnv(s = loadSettings()) {
+  if (s.embedding.provider && s.embedding.provider !== "none") {
+    process.env.EMBEDDING_PROVIDER = s.embedding.provider;
+  }
+  if (s.embedding.ollamaHost)
+    process.env.OLLAMA_HOST = s.embedding.ollamaHost;
+  if (s.embedding.ollamaCloudApiKey)
+    process.env.OLLAMA_API_KEY = s.embedding.ollamaCloudApiKey;
+  if (s.embedding.geminiApiKey)
+    process.env.GEMINI_API_KEY = s.embedding.geminiApiKey;
+  if (s.embedding.openaiApiKey)
+    process.env.OPENAI_API_KEY = s.embedding.openaiApiKey;
+  if (s.embedding.nvidiaApiKey)
+    process.env.NVIDIA_API_KEY = s.embedding.nvidiaApiKey;
+  if (s.embedding.openaiCompatBaseUrl)
+    process.env.OPENAI_COMPAT_BASE_URL = s.embedding.openaiCompatBaseUrl;
+  if (s.embedding.openaiCompatModel)
+    process.env.OPENAI_COMPAT_MODEL = s.embedding.openaiCompatModel;
+  if (s.embedding.openaiCompatApiKey)
+    process.env.OPENAI_COMPAT_API_KEY = s.embedding.openaiCompatApiKey;
+  if (s.embedding.openaiCompatDimension)
+    process.env.OPENAI_COMPAT_DIMENSION = String(s.embedding.openaiCompatDimension);
+  if (s.summary.provider)
+    process.env.SUMMARY_PROVIDER = s.summary.provider;
+  if (s.summary.cliCommand)
+    process.env.SUMMARY_CLI_CMD = s.summary.cliCommand;
+  if (s.summary.cliPreset)
+    process.env.SUMMARY_CLI_PRESET = s.summary.cliPreset;
+  if (s.summary.cliTimeoutMs)
+    process.env.SUMMARY_CLI_TIMEOUT_MS = String(s.summary.cliTimeoutMs);
+  if (s.summary.anthropicApiKey)
+    process.env.ANTHROPIC_API_KEY = s.summary.anthropicApiKey;
+  if (s.summary.apiBaseUrl)
+    process.env.SUMMARY_API_BASE_URL = s.summary.apiBaseUrl;
+  if (s.summary.apiModel)
+    process.env.SUMMARY_API_MODEL = s.summary.apiModel;
+  if (s.summary.apiKey)
+    process.env.SUMMARY_API_KEY = s.summary.apiKey;
+}
+function redactSettings(s) {
+  const mask2 = (v) => v ? "\u2022\u2022\u2022\u2022" + v.slice(-4) : void 0;
+  return {
+    v: s.v,
+    embedding: {
+      ...s.embedding,
+      geminiApiKey: mask2(s.embedding.geminiApiKey),
+      openaiApiKey: mask2(s.embedding.openaiApiKey),
+      nvidiaApiKey: mask2(s.embedding.nvidiaApiKey),
+      ollamaCloudApiKey: mask2(s.embedding.ollamaCloudApiKey),
+      openaiCompatApiKey: mask2(s.embedding.openaiCompatApiKey)
+    },
+    summary: {
+      ...s.summary,
+      anthropicApiKey: mask2(s.summary.anthropicApiKey),
+      apiKey: mask2(s.summary.apiKey)
+    },
+    // sources/privacy/sync hold no secrets — the sync token is referenced
+    // by env-var name only, never persisted as a value.
+    sources: s.sources,
+    privacy: s.privacy,
+    sync: s.sync,
+    team: s.team
+  };
+}
+function mergeSettings(current, update) {
+  const isMask = (v) => typeof v === "string" && v.startsWith("\u2022\u2022\u2022\u2022");
+  const keepIfMasked = (currentVal, newVal) => {
+    if (isMask(newVal))
+      return currentVal;
+    return newVal === void 0 ? currentVal : newVal;
+  };
+  const e = { ...current.embedding, ...update.embedding ?? {} };
+  if (update.embedding) {
+    e.geminiApiKey = keepIfMasked(current.embedding.geminiApiKey, update.embedding.geminiApiKey);
+    e.openaiApiKey = keepIfMasked(current.embedding.openaiApiKey, update.embedding.openaiApiKey);
+    e.nvidiaApiKey = keepIfMasked(current.embedding.nvidiaApiKey, update.embedding.nvidiaApiKey);
+    e.ollamaCloudApiKey = keepIfMasked(current.embedding.ollamaCloudApiKey, update.embedding.ollamaCloudApiKey);
+    e.openaiCompatApiKey = keepIfMasked(current.embedding.openaiCompatApiKey, update.embedding.openaiCompatApiKey);
+  }
+  const sm = { ...current.summary, ...update.summary ?? {} };
+  if (update.summary) {
+    sm.anthropicApiKey = keepIfMasked(current.summary.anthropicApiKey, update.summary.anthropicApiKey);
+    sm.apiKey = keepIfMasked(current.summary.apiKey, update.summary.apiKey);
+  }
+  const sources2 = mergeSources(current.sources, update.sources);
+  const privacy = mergePrivacy(current.privacy, update.privacy);
+  const sync = mergeSync(current.sync, update.sync);
+  const team = mergeTeam(current.team, update.team);
+  return { v: SCHEMA_VERSION, embedding: e, summary: sm, sources: sources2, privacy, sync, team };
+}
 var CLI_DETECTION_ORDER, SCHEMA_VERSION, PERSONAL_DIR_NAMES, PERSONAL_DIR_PATTERNS, _sourceSettingsCache, SECRET_FIELDS, _secretsCache, _settingsCache;
 var init_settings = __esm({
   "../engine/dist/core/settings.js"() {
     "use strict";
+    init_project_path_match();
     init_paths();
     CLI_DETECTION_ORDER = [
       { preset: "gemini", bin: "gemini", cmd: 'gemini -p " "' },
@@ -7209,13 +7437,13 @@ async function parseCodexSubagents(sessionPath) {
     if (meta?.type !== "session_meta")
       continue;
     const payload = meta.payload || {};
-    const spawn3 = payload.source?.subagent?.thread_spawn;
-    if (!spawn3)
+    const spawn4 = payload.source?.subagent?.thread_spawn;
+    if (!spawn4)
       continue;
-    if (spawn3.parent_thread_id !== parentId)
+    if (spawn4.parent_thread_id !== parentId)
       continue;
     const id = fileName.replace(/\.jsonl$/i, "");
-    const role = String(spawn3.agent_role || payload.agent_role || "").toLowerCase();
+    const role = String(spawn4.agent_role || payload.agent_role || "").toLowerCase();
     const kind = role.includes("compact") ? "compact" : role.includes("aside") ? "aside" : role.includes("worker") || role.includes("explore") ? "explore" : "other";
     let messages = [];
     try {
@@ -7227,8 +7455,8 @@ async function parseCodexSubagents(sessionPath) {
     subagents.push({
       id,
       kind,
-      agentType: spawn3.agent_role || payload.agent_role,
-      description: spawn3.agent_nickname || payload.agent_nickname,
+      agentType: spawn4.agent_role || payload.agent_role,
+      description: spawn4.agent_nickname || payload.agent_nickname,
       filePath,
       messageCount: messages.length,
       toolUseCount,
@@ -11160,8 +11388,8 @@ var init_codex2 = __esm({
           } catch {
             continue;
           }
-          const spawn3 = meta?.payload?.source?.subagent?.thread_spawn;
-          if (!spawn3 || spawn3.parent_thread_id !== parentUuid)
+          const spawn4 = meta?.payload?.source?.subagent?.thread_spawn;
+          if (!spawn4 || spawn4.parent_thread_id !== parentUuid)
             continue;
           events.push(...this.parseRollout(path));
         }
@@ -11354,10 +11582,10 @@ var init_codex2 = __esm({
                 const meta = JSON.parse(first);
                 const payload = meta?.payload || {};
                 projectPath = payload.cwd || "";
-                const spawn3 = payload.source?.subagent?.thread_spawn;
-                if (spawn3 || payload.agent_role || payload.agent_nickname) {
+                const spawn4 = payload.source?.subagent?.thread_spawn;
+                if (spawn4 || payload.agent_role || payload.agent_nickname) {
                   isSubagent = true;
-                  parentId = spawn3?.parent_thread_id || null;
+                  parentId = spawn4?.parent_thread_id || null;
                 }
               }
             } catch {
@@ -13339,12 +13567,55 @@ var init_collector_health = __esm({
   }
 });
 
+// ../engine/dist/types/code-intel.js
+import { createHash as createHash6 } from "crypto";
+function shortHash(s) {
+  return createHash6("sha256").update(s).digest("hex").slice(0, 16);
+}
+function snippetKey(snippet) {
+  return (snippet ?? "").replace(/\s+/g, " ").trim().slice(0, 200);
+}
+function codeFindingIds(projectId, findings) {
+  const groups = /* @__PURE__ */ new Map();
+  findings.forEach((f, i) => {
+    const key2 = [f.category, f.file, f.rule, identityTitle(f.title ?? ""), snippetKey(f.snippet)].join("|");
+    const g = groups.get(key2);
+    if (g)
+      g.push(i);
+    else
+      groups.set(key2, [i]);
+  });
+  const lineOf = (i) => findings[i].line ?? -1;
+  const ids = new Array(findings.length);
+  for (const [key2, idxs] of groups) {
+    idxs.sort((a, b) => lineOf(a) - lineOf(b));
+    let ordinal = -1;
+    let prevLine = Number.NaN;
+    for (const idx of idxs) {
+      if (lineOf(idx) !== prevLine) {
+        ordinal++;
+        prevLine = lineOf(idx);
+      }
+      ids[idx] = "cf_" + shortHash([projectId, key2, ordinal].join("|"));
+    }
+  }
+  return ids;
+}
+function identityTitle(title) {
+  return title.replace(/\d+/g, "#");
+}
+var init_code_intel = __esm({
+  "../engine/dist/types/code-intel.js"() {
+    "use strict";
+  }
+});
+
 // ../engine/dist/core/companions.js
 import { existsSync as existsSync20, mkdirSync as mkdirSync6, statSync as statSync17, chmodSync as chmodSync3, unlinkSync, renameSync as renameSync3, createWriteStream, readFileSync as readFileSync14, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { join as join22 } from "node:path";
 import { execSync as execSync2 } from "node:child_process";
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 function expectedCodeindexSha256(artifact) {
   return CODEINDEX_SHA256[artifact.replace(/^codeindex-/, "").replace(/\.exe$/, "")] ?? null;
 }
@@ -13418,7 +13689,7 @@ async function downloadArtifact(artifact, dest) {
   if (!res.body)
     throw new Error("Download returned empty body");
   const file = createWriteStream(dest);
-  await new Promise((resolve2, reject) => {
+  await new Promise((resolve3, reject) => {
     const reader = res.body.getReader();
     const pump = async () => {
       try {
@@ -13429,7 +13700,7 @@ async function downloadArtifact(artifact, dest) {
           file.write(value);
         }
         file.end();
-        file.on("finish", () => resolve2());
+        file.on("finish", () => resolve3());
         file.on("error", reject);
       } catch (e) {
         reject(e);
@@ -13452,7 +13723,7 @@ async function installCodeindex(opts = {}) {
     if (!expected) {
       throw new Error(`No pinned checksum for ${status.artifactName} \u2014 refusing to install an unverified binary. Add its sha256 to CODEINDEX_SHA256 in companions.ts.`);
     }
-    const actual = createHash6("sha256").update(readFileSync14(tmpPath)).digest("hex");
+    const actual = createHash7("sha256").update(readFileSync14(tmpPath)).digest("hex");
     if (actual !== expected) {
       throw new Error(`Checksum mismatch for ${status.artifactName}.
   expected ${expected}
@@ -13493,7 +13764,7 @@ var init_companions = __esm({
 });
 
 // ../engine/dist/core/detector-install.js
-import { createHash as createHash7 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 import { existsSync as existsSync21, mkdirSync as mkdirSync7, mkdtempSync, chmodSync as chmodSync4, renameSync as renameSync4, rmSync as rmSync2, writeFileSync as writeFileSync5, readFileSync as readFileSync15, statSync as statSync18, copyFileSync as copyFileSync2 } from "fs";
 import { join as join23 } from "path";
 function managedDetectorPath(name) {
@@ -13503,7 +13774,7 @@ function receiptPath(name) {
   return join23(getDetectorBinDir(), `${name}.receipt.json`);
 }
 function sha256File(path) {
-  return createHash7("sha256").update(readFileSync15(path)).digest("hex");
+  return createHash8("sha256").update(readFileSync15(path)).digest("hex");
 }
 function readReceipt(name) {
   try {
@@ -13957,10 +14228,10 @@ async function resolveCodeindexBin(autoInstall = true) {
   return st.path;
 }
 function runMcp(binPath, workspace, calls, timeoutMs = 18e4) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     const p = spawn(binPath, ["--mcp", "--workspace", workspace], { stdio: ["pipe", "pipe", "ignore"] });
     const res = /* @__PURE__ */ new Map();
-    let pending = "";
+    let pending2 = "";
     let failed = false;
     const timer = setTimeout(() => {
       try {
@@ -13987,16 +14258,16 @@ function runMcp(binPath, workspace, calls, timeoutMs = 18e4) {
     p.stdout.on("data", (d) => {
       if (failed)
         return;
-      pending += d;
-      let nl = pending.indexOf("\n");
+      pending2 += d;
+      let nl = pending2.indexOf("\n");
       while (nl !== -1) {
-        takeLine(pending.slice(0, nl));
-        pending = pending.slice(nl + 1);
-        nl = pending.indexOf("\n");
+        takeLine(pending2.slice(0, nl));
+        pending2 = pending2.slice(nl + 1);
+        nl = pending2.indexOf("\n");
       }
-      if (pending.length > MCP_OUT_MAX_BYTES) {
+      if (pending2.length > MCP_OUT_MAX_BYTES) {
         failed = true;
-        pending = "";
+        pending2 = "";
         clearTimeout(timer);
         try {
           p.kill("SIGKILL");
@@ -14013,9 +14284,9 @@ function runMcp(binPath, workspace, calls, timeoutMs = 18e4) {
       clearTimeout(timer);
       if (failed)
         return;
-      if (pending)
-        takeLine(pending);
-      resolve2(res);
+      if (pending2)
+        takeLine(pending2);
+      resolve3(res);
     });
     p.stdin.write(calls.map((c) => JSON.stringify(c) + "\n").join(""));
     p.stdin.end();
@@ -14181,6 +14452,11 @@ async function collectCode(opts) {
     }
   }
   const findings = [];
+  const coveredBySecurityRule = /* @__PURE__ */ new Map();
+  const coveredByCloneGroup = /* @__PURE__ */ new Map();
+  const coveredByDupCluster = /* @__PURE__ */ new Map();
+  const coveredByGodModule = /* @__PURE__ */ new Map();
+  const coveredByCycle = /* @__PURE__ */ new Map();
   const sevFromLiteral = (cat) => cat === "secret_suspect" ? "medium" : cat === "todo_marker" ? "info" : "low";
   const securityRows = [];
   const heuristicSec = [];
@@ -14230,7 +14506,7 @@ async function collectCode(opts) {
     log6(`security: repo secret scan unavailable (${e instanceof Error ? e.message : e}) \u2014 install gitleaks/trufflehog for secret coverage`);
   }
   for (const f of [...securityRows, ...heuristicSec]) {
-    findings.push({
+    const finding = {
       category: "security",
       severity: f.severity,
       file: f.file,
@@ -14240,7 +14516,13 @@ async function collectCode(opts) {
       snippet: f.snippet,
       why: FINDING_WHY.security,
       agentPrompt: securityPrompt(f.rule, f.severity, f.file, f.line)
-    });
+    };
+    findings.push(finding);
+    const byRuleList = coveredBySecurityRule.get(f.rule);
+    if (byRuleList)
+      byRuleList.push(finding);
+    else
+      coveredBySecurityRule.set(f.rule, [finding]);
   }
   for (const f of (lit?.findings ?? []).slice(0, 150)) {
     const file = rel(f.file);
@@ -14262,7 +14544,7 @@ async function collectCode(opts) {
     const names = [...new Set(fns.map((x) => x.name))];
     const fileList = fns.map((x) => rel(x.file)).slice(0, 6);
     const heavy = (g.lines ?? 0) * (g.count ?? 0) >= 150;
-    findings.push({
+    const finding = {
       category: "clone",
       severity: heavy ? "high" : "medium",
       file: fileList[0] ?? "",
@@ -14272,10 +14554,12 @@ async function collectCode(opts) {
       snippet: `${g.lines} lines, ${g.count} copies`,
       why: FINDING_WHY.clone,
       agentPrompt: clonePrompt(names, g.lines ?? 0, g.count ?? 0, fileList)
-    });
+    };
+    findings.push(finding);
+    coveredByCloneGroup.set(g, finding);
   }
   for (const c of (dup?.clusters ?? []).slice(0, 40)) {
-    findings.push({
+    const finding = {
       category: "duplication",
       severity: "low",
       file: c.name ?? "",
@@ -14285,7 +14569,9 @@ async function collectCode(opts) {
       snippet: `${c.kind}, ${c.count} files`,
       why: FINDING_WHY.duplication,
       agentPrompt: duplicationPrompt(c.name, c.kind ?? "", c.count ?? 0)
-    });
+    };
+    findings.push(finding);
+    coveredByDupCluster.set(c, finding);
   }
   for (const s of (dead?.symbols ?? []).slice(0, 120)) {
     const file = rel(s.file);
@@ -14303,7 +14589,7 @@ async function collectCode(opts) {
   }
   for (const m of (coup?.god_modules ?? []).slice(0, 15)) {
     const file = rel(m.file);
-    findings.push({
+    const finding = {
       category: "coupling",
       severity: "medium",
       file,
@@ -14313,11 +14599,13 @@ async function collectCode(opts) {
       snippet: `fan-in ${m.fan_in}, fan-out ${m.fan_out}`,
       why: FINDING_WHY.coupling,
       agentPrompt: couplingPrompt(file, m.fan_in ?? 0, m.fan_out ?? 0, Math.round((m.instability ?? 0) * 100) / 100)
-    });
+    };
+    findings.push(finding);
+    coveredByGodModule.set(file, finding);
   }
   for (const c of (cyc?.cycles ?? []).slice(0, 25)) {
     const chain = (c.files ?? []).map(rel);
-    findings.push({
+    const finding = {
       category: "cycle",
       severity: "medium",
       file: chain[0] ?? "",
@@ -14327,7 +14615,9 @@ async function collectCode(opts) {
       snippet: chain.slice(0, 4).join(" \u2192 "),
       why: FINDING_WHY.cycle,
       agentPrompt: cyclePrompt(chain.slice(0, 6))
-    });
+    };
+    findings.push(finding);
+    coveredByCycle.set(c, finding);
   }
   for (const f of (unwrap?.findings ?? []).slice(0, 150)) {
     const file = rel(f.file);
@@ -14556,7 +14846,13 @@ async function collectCode(opts) {
   }
   log6("synthesising action plan \u2026");
   const actions = [];
-  const pushAction = (pri, category, title, fix, loc, agentPrompt) => actions.push({ pri, category, title, fix, loc, agentPrompt });
+  const findingIdOf = /* @__PURE__ */ new Map();
+  {
+    const ids = codeFindingIds(projectId, findings);
+    findings.forEach((f, i) => findingIdOf.set(f, ids[i]));
+  }
+  const coversOf = (fs) => [...new Set(fs.map((f) => f ? findingIdOf.get(f) : void 0).filter((id) => !!id))];
+  const pushAction = (pri, category, title, fix, loc, agentPrompt, covers = []) => actions.push({ pri, category, title, fix, loc, agentPrompt, covers });
   const byRule = /* @__PURE__ */ new Map();
   for (const f of securityRows) {
     if (isTestOrExampleFile(f.file))
@@ -14568,7 +14864,17 @@ async function collectCode(opts) {
   for (const [rule, hits] of byRule) {
     const sev = hits.some((h) => h.sev === "critical") ? "critical" : hits.some((h) => h.sev === "high") ? "high" : "medium";
     const pri = sev === "critical" ? 0 : sev === "high" ? 1 : 2;
-    pushAction(pri, "security", `${rule} \u2014 ${hits.length} occurrence(s)`, secFix(rule), hits.slice(0, 4).map((h) => ({ file: h.file, line: h.line })), securityPrompt(rule, sev, hits[0].file, hits[0].line));
+    pushAction(
+      pri,
+      "security",
+      `${rule} \u2014 ${hits.length} occurrence(s)`,
+      secFix(rule),
+      hits.slice(0, 4).map((h) => ({ file: h.file, line: h.line })),
+      securityPrompt(rule, sev, hits[0].file, hits[0].line),
+      // Every security finding on this rule. The card IS the roll-up, so the
+      // members must not each file one of their own.
+      coversOf(coveredBySecurityRule.get(rule) ?? [])
+    );
   }
   for (const g of clones?.groups ?? []) {
     if ((g.count ?? 0) >= 3 || (g.lines ?? 0) >= 12) {
@@ -14577,7 +14883,7 @@ async function collectCode(opts) {
         continue;
       const names = [...new Set(fns.map((x) => x.name))];
       const locs = fns.map((x) => rel(x.file)).slice(0, 5);
-      pushAction((g.lines ?? 0) * (g.count ?? 0) >= 150 ? 1 : 2, "duplication", `${names.join(", ")} copy-pasted ${g.count}\xD7 (${g.lines} lines each)`, "Extract one shared implementation and replace the copies.", locs.map((f) => ({ file: f })), clonePrompt(names, g.lines ?? 0, g.count ?? 0, locs));
+      pushAction((g.lines ?? 0) * (g.count ?? 0) >= 150 ? 1 : 2, "duplication", `${names.join(", ")} copy-pasted ${g.count}\xD7 (${g.lines} lines each)`, "Extract one shared implementation and replace the copies.", locs.map((f) => ({ file: f })), clonePrompt(names, g.lines ?? 0, g.count ?? 0, locs), coversOf([coveredByCloneGroup.get(g)]));
     }
   }
   for (const c of (dup?.clusters ?? []).slice(0, 12)) {
@@ -14589,19 +14895,19 @@ async function collectCode(opts) {
       continue;
     if (kind === "type_alias" || kind === "interface" || kind === "enum" || kind === "type")
       continue;
-    pushAction(2, "reuse", `${nm} (${c.kind}) reimplemented in ${c.count} files`, "Consolidate into a single shared utility/module.", [], duplicationPrompt(nm, c.kind ?? "", c.count));
+    pushAction(2, "reuse", `${nm} (${c.kind}) reimplemented in ${c.count} files`, "Consolidate into a single shared utility/module.", [], duplicationPrompt(nm, c.kind ?? "", c.count), coversOf([coveredByDupCluster.get(c)]));
   }
   for (const m of (coup?.god_modules ?? []).slice(0, 5)) {
     const file = rel(m.file);
     if (isGenerated(file))
       continue;
-    pushAction(2, "modularity", `God module ${file} (fan-in ${m.fan_in}, fan-out ${m.fan_out})`, "Split into cohesive sub-modules; introduce interfaces to cut fan-out.", [{ file }], couplingPrompt(file, m.fan_in ?? 0, m.fan_out ?? 0, Math.round((m.instability ?? 0) * 100) / 100));
+    pushAction(2, "modularity", `God module ${file} (fan-in ${m.fan_in}, fan-out ${m.fan_out})`, "Split into cohesive sub-modules; introduce interfaces to cut fan-out.", [{ file }], couplingPrompt(file, m.fan_in ?? 0, m.fan_out ?? 0, Math.round((m.instability ?? 0) * 100) / 100), coversOf([coveredByGodModule.get(file)]));
   }
   for (const c of (cyc?.cycles ?? []).slice(0, 5)) {
     const chain = (c.files ?? []).map(rel).filter((f) => !isGenerated(f));
     if (chain.length < 2)
       continue;
-    pushAction(2, "architecture", `Circular dependency (${chain.length} files)`, "Break the cycle: extract the shared type/interface into a separate module.", chain.slice(0, 4).map((f) => ({ file: f })), cyclePrompt(chain.slice(0, 6)));
+    pushAction(2, "architecture", `Circular dependency (${chain.length} files)`, "Break the cycle: extract the shared type/interface into a separate module.", chain.slice(0, 4).map((f) => ({ file: f })), cyclePrompt(chain.slice(0, 6)), coversOf([coveredByCycle.get(c)]));
   }
   for (const h of hotspotsAll.slice(0, 5)) {
     pushAction(2, "stability", `Hotspot ${h.file} (${h.churn}\xD7 changes, complexity ${h.complexity})`, "Add regression tests and refactor into smaller functions before the next change.", [{ file: h.file }], hotspotPrompt(h.file, h.churn, h.complexity, h.suggestion));
@@ -14714,11 +15020,12 @@ var init_collector = __esm({
   "../engine/dist/core/code/collector.js"() {
     "use strict";
     init_project_resolver();
+    init_code_intel();
     init_companions();
     init_secret_redactor();
     init_secret_scanner();
     init_prompts();
-    COLLECTOR_VERSION = 2;
+    COLLECTOR_VERSION = 3;
     ANALYSES = [
       "health",
       "security",
@@ -14840,11 +15147,11 @@ var init_collector = __esm({
 });
 
 // ../engine/dist/core/source-discovery.js
-import { createHash as createHash8 } from "crypto";
+import { createHash as createHash9 } from "crypto";
 import { existsSync as existsSync24, readdirSync as readdirSync13, statSync as statSync20 } from "fs";
 import { join as join27 } from "path";
 function sourceId(path) {
-  return "src_" + createHash8("sha256").update(path).digest("hex").slice(0, 12);
+  return "src_" + createHash9("sha256").update(path).digest("hex").slice(0, 12);
 }
 function installSourceExclusions(ids) {
   excludedIds = new Set((ids || []).filter((s) => typeof s === "string" && SOURCE_ID_RE.test(s)));
@@ -14949,10 +15256,10 @@ var init_source_discovery = __esm({
 // ../engine/dist/core/home-discovery.js
 import { execFileSync as execFileSync2 } from "child_process";
 import { existsSync as existsSync25, readdirSync as readdirSync14, readFileSync as readFileSync19, realpathSync as realpathSync3, statSync as statSync21 } from "fs";
-import { homedir as homedir6, platform as osPlatform } from "os";
+import { homedir as homedir7, platform as osPlatform } from "os";
 import { join as join28 } from "path";
 function candidateRoots(plat = osPlatform(), env = process.env) {
-  const home = homedir6();
+  const home = homedir7();
   const roots = [home];
   const add = (p) => {
     if (p && !roots.includes(p))
@@ -15070,7 +15377,7 @@ function declaredHomes(env = process.env, plat = osPlatform()) {
     }
     return out;
   }
-  const home = homedir6();
+  const home = homedir7();
   const rcs = [".bashrc", ".bash_profile", ".zshrc", ".zprofile", ".profile"].map((f) => join28(home, f)).concat([join28(home, ".config", "fish", "config.fish")]);
   for (const rc of rcs) {
     let text;
@@ -16040,7 +16347,7 @@ function matchesProjectList(projectPath, patterns) {
       const tail = projectPath.slice(parent.length + 1);
       if (projectPath.startsWith(parent + "/") && !tail.includes("/"))
         return true;
-    } else if (projectPath === p || projectPath.startsWith(p + "/")) {
+    } else if (projectPathAtOrUnder(projectPath, p)) {
       return true;
     }
   }
@@ -16066,6 +16373,7 @@ var cache2, TOOLS;
 var init_source_policy = __esm({
   "../engine/dist/core/source-policy.js"() {
     "use strict";
+    init_project_path_match();
     init_settings();
     cache2 = null;
     TOOLS = ["claude", "gemini", "opencode", "codex", "agy", "cursor"];
@@ -16269,7 +16577,7 @@ var init_session_source = __esm({
 
 // ../engine/dist/core/utils.js
 import { existsSync as existsSync26, readdirSync as readdirSync15 } from "fs";
-import { homedir as homedir7 } from "os";
+import { homedir as homedir8 } from "os";
 import { join as join29 } from "path";
 function splitByHeaders(markdown) {
   const lines = markdown.split("\n");
@@ -16300,7 +16608,7 @@ function splitByHeaders(markdown) {
   return sections;
 }
 function getClaudeDirs() {
-  const home = homedir7();
+  const home = homedir8();
   const dirs = [];
   const seen = /* @__PURE__ */ new Set();
   const add = (dir) => {
@@ -16340,7 +16648,7 @@ function discoverSubdirs(subdir) {
       result.push(path);
     }
   }
-  return result.length > 0 ? result : [join29(homedir7(), ".claude", subdir)];
+  return result.length > 0 ? result : [join29(homedir8(), ".claude", subdir)];
 }
 var init_utils = __esm({
   "../engine/dist/core/utils.js"() {
@@ -16350,9 +16658,9 @@ var init_utils = __esm({
 
 // ../engine/dist/parsers/plan-source.js
 import { existsSync as existsSync27, readdirSync as readdirSync16, readFileSync as readFileSync20, statSync as statSync24 } from "fs";
-import { homedir as homedir8 } from "os";
+import { homedir as homedir9 } from "os";
 import { join as join30, basename as basename14 } from "path";
-import { createHash as createHash9 } from "crypto";
+import { createHash as createHash10 } from "crypto";
 function parseFrontmatter(content) {
   if (!content.startsWith("---"))
     return { body: content };
@@ -16528,7 +16836,7 @@ var init_plan_source = __esm({
           try {
             const data = JSON.parse(readFileSync20(projectsPath, "utf-8"));
             for (const path of Object.keys(data.projects || {})) {
-              projMap.set(createHash9("sha256").update(path).digest("hex"), path);
+              projMap.set(createHash10("sha256").update(path).digest("hex"), path);
             }
           } catch {
           }
@@ -16592,7 +16900,7 @@ var init_plan_source = __esm({
         for (const match of content.matchAll(fullPathPattern)) {
           let path = (match[1] || "").trim();
           if (path.startsWith("~/")) {
-            path = join30(homedir8(), path.slice(2));
+            path = join30(homedir9(), path.slice(2));
           }
           for (const projectDir of knownProjects) {
             if (path.startsWith(projectDir)) {
@@ -17051,9 +17359,9 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
 
 // ../engine/dist/parsers/claude-md-source.js
 import { existsSync as existsSync29, readFileSync as readFileSync22, readdirSync as readdirSync18, statSync as statSync26 } from "fs";
-import { homedir as homedir9 } from "os";
+import { homedir as homedir10 } from "os";
 import { join as join32, basename as basename15, dirname as dirname15 } from "path";
-import { createHash as createHash10 } from "crypto";
+import { createHash as createHash11 } from "crypto";
 function discoverProjectDirs(claudeDir) {
   const dirs = [];
   const seen = /* @__PURE__ */ new Set();
@@ -17081,7 +17389,7 @@ function discoverProjectDirs(claudeDir) {
     scanProjectsDir(join32(claudeDir, "projects"));
     return dirs;
   }
-  const home = homedir9();
+  const home = homedir10();
   scanProjectsDir(claudeBackend.projectsDir());
   try {
     for (const entry of readdirSync18(home, { withFileTypes: true })) {
@@ -17115,7 +17423,7 @@ function discoverProjectDirs(claudeDir) {
     } catch {
     }
   }
-  void createHash10;
+  void createHash11;
   return dirs;
 }
 var MAX_CHUNK_CHARS3, NOTE_FILES, ClaudeMdSource;
@@ -17150,7 +17458,7 @@ var init_claude_md_source = __esm({
         const seen = /* @__PURE__ */ new Set();
         const seenKey = (path, tool) => `${tool}:${path}`;
         for (const note of NOTE_FILES) {
-          const p = join32(homedir9(), note.filename);
+          const p = join32(homedir10(), note.filename);
           const key2 = seenKey(p, note.tool);
           if (existsSync29(p) && !seen.has(key2)) {
             seen.add(key2);
@@ -17277,7 +17585,7 @@ var init_claude_md_source = __esm({
 
 // ../engine/dist/parsers/agent-memory-source.js
 import { existsSync as existsSync30, readFileSync as readFileSync23, readdirSync as readdirSync19, statSync as statSync27 } from "fs";
-import { homedir as homedir10 } from "os";
+import { homedir as homedir11 } from "os";
 import { join as join33, basename as basename16 } from "path";
 function parseFrontmatter2(content) {
   const fm = {};
@@ -17315,7 +17623,7 @@ function discoverMemoryDirs() {
       out.push({ memoryDir, projectHash });
     }
   };
-  const home = homedir10();
+  const home = homedir11();
   const claudeRoots = [claudeBackend.projectsDir()];
   try {
     for (const entry of readdirSync19(home, { withFileTypes: true })) {
@@ -17464,7 +17772,7 @@ var init_agent_memory_source = __esm({
 import { existsSync as existsSync31, readdirSync as readdirSync20, statSync as statSync28 } from "fs";
 import { createReadStream as createReadStream3 } from "fs";
 import { createInterface as createInterface2 } from "readline";
-import { homedir as homedir11 } from "os";
+import { homedir as homedir12 } from "os";
 import { join as join34 } from "path";
 var MAX_CHUNK_CHARS5, HistorySource;
 var init_history_source = __esm({
@@ -17480,7 +17788,7 @@ var init_history_source = __esm({
         if (historyPath) {
           this.historyPaths = [historyPath];
         } else {
-          const home = homedir11();
+          const home = homedir12();
           const paths = [];
           const tryAdd = (p) => {
             if (existsSync31(p) && !paths.includes(p))
@@ -17646,7 +17954,7 @@ var init_history_source = __esm({
 
 // ../engine/dist/parsers/paste-source.js
 import { existsSync as existsSync32, readdirSync as readdirSync21, readFileSync as readFileSync24, statSync as statSync29 } from "fs";
-import { homedir as homedir12 } from "os";
+import { homedir as homedir13 } from "os";
 import { join as join35, basename as basename17 } from "path";
 var MAX_CHUNK_CHARS6, MAX_FILE_SIZE, PasteSource;
 var init_paste_source = __esm({
@@ -17663,7 +17971,7 @@ var init_paste_source = __esm({
         if (cacheDir) {
           this.cacheDirs = [cacheDir];
         } else {
-          const home = homedir12();
+          const home = homedir13();
           const dirs = [];
           const tryAdd = (p) => {
             if (existsSync32(p) && !dirs.includes(p))
@@ -17747,7 +18055,7 @@ var init_paste_source = __esm({
 // ../engine/dist/parsers/gemini-source.js
 import { existsSync as existsSync33, readdirSync as readdirSync22, readFileSync as readFileSync25, statSync as statSync30 } from "fs";
 import { join as join36, basename as basename18 } from "path";
-import { createHash as createHash11 } from "crypto";
+import { createHash as createHash12 } from "crypto";
 function loadGeminiProjectMap2() {
   const map = /* @__PURE__ */ new Map();
   const projectsPath = geminiBackend.projectsJson();
@@ -17757,7 +18065,7 @@ function loadGeminiProjectMap2() {
     const data = JSON.parse(readFileSync25(projectsPath, "utf-8"));
     const projects = data.projects || {};
     for (const [path] of Object.entries(projects)) {
-      const hash = createHash11("sha256").update(path).digest("hex");
+      const hash = createHash12("sha256").update(path).digest("hex");
       map.set(hash, path);
     }
   } catch {
@@ -18740,7 +19048,7 @@ var init_redact_inline = __esm({
 
 // ../engine/dist/parsers/skills-source.js
 import { existsSync as existsSync39, readdirSync as readdirSync26, readFileSync as readFileSync29, statSync as statSync34 } from "fs";
-import { homedir as homedir13 } from "os";
+import { homedir as homedir14 } from "os";
 import { join as join40 } from "path";
 function rebuildBody(content) {
   const { text, redacted } = redactInlineSecrets(content);
@@ -18756,7 +19064,7 @@ function rebuildBody(content) {
   return out;
 }
 function resolveRoots() {
-  const home = homedir13();
+  const home = homedir14();
   const all = [];
   if (isSourceEnabled("shared", "skills")) {
     all.push({ path: join40(home, ".agents", "skills"), tool: "shared" });
@@ -18939,7 +19247,7 @@ var init_skills_source = __esm({
 
 // ../engine/dist/parsers/mcps-source.js
 import { existsSync as existsSync40, readdirSync as readdirSync27, readFileSync as readFileSync30, statSync as statSync35 } from "fs";
-import { homedir as homedir14 } from "os";
+import { homedir as homedir15 } from "os";
 import { join as join41 } from "path";
 function readJson(path) {
   if (!existsSync40(path))
@@ -19005,7 +19313,7 @@ var init_mcps_source = __esm({
       async *discover() {
         if (!isSourceEnabled("common", "mcps"))
           return;
-        const home = homedir14();
+        const home = homedir15();
         yield* this.fromObject(readJson(join41(home, ".mcp.json"))?.mcpServers, {
           tool: "claude",
           filePath: join41(home, ".mcp.json"),
@@ -19678,7 +19986,7 @@ var init_hooks_source = __esm({
 
 // ../engine/dist/parsers/plugins-source.js
 import { existsSync as existsSync44, readFileSync as readFileSync34, readdirSync as readdirSync31, statSync as statSync39 } from "fs";
-import { homedir as homedir15 } from "os";
+import { homedir as homedir16 } from "os";
 import { join as join45 } from "path";
 function readJson3(path) {
   if (!existsSync44(path))
@@ -19700,7 +20008,7 @@ var init_plugins_source = __esm({
     PluginsSource = class {
       sourceType = "plugin";
       async *discover() {
-        const home = homedir15();
+        const home = homedir16();
         const claudePluginsManifest = claudeBackend.pluginsManifestPath();
         const claudeJson = isSourceEnabled("claude", "plugins") ? readJson3(claudePluginsManifest) : null;
         if (claudeJson?.plugins && typeof claudeJson.plugins === "object") {
@@ -20322,7 +20630,7 @@ var init_http = __esm({
       CLI_VERSION = JSON.parse(readFileSync37(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.5.16";
+        if (true) CLI_VERSION = "0.5.18";
       } catch {
       }
     }
@@ -20509,17 +20817,17 @@ var init_scan_pool = __esm({
             });
             const slot = { worker, pending: null };
             worker.on("message", (r) => {
-              const resolve2 = slot.pending;
+              const resolve3 = slot.pending;
               slot.pending = null;
-              resolve2?.(r);
+              resolve3?.(r);
               this.pump();
             });
             const die = (err) => {
-              const resolve2 = slot.pending;
+              const resolve3 = slot.pending;
               slot.pending = null;
               this.slots = this.slots.filter((s) => s !== slot);
               if (this.slots.length === 0) this.disabled = true;
-              resolve2?.({ id: -1, findings: [], redactions: 0, rows: null, error: `scan worker died: ${err}` });
+              resolve3?.({ id: -1, findings: [], redactions: 0, rows: null, error: `scan worker died: ${err}` });
               this.pump();
             };
             worker.on("error", die);
@@ -20585,8 +20893,8 @@ var init_scan_pool = __esm({
         this.start();
         if (this.disabled) return null;
         task.id = this.nextId++;
-        const result = await new Promise((resolve2) => {
-          this.queue.push({ task, resolve: resolve2 });
+        const result = await new Promise((resolve3) => {
+          this.queue.push({ task, resolve: resolve3 });
           this.pump();
         });
         if (result.error) return null;
@@ -20819,8 +21127,8 @@ async function flush() {
 }
 function hashHost() {
   try {
-    const { createHash: createHash15 } = __require("node:crypto");
-    return createHash15("sha256").update(hostname()).digest("hex").slice(0, 12);
+    const { createHash: createHash16 } = __require("node:crypto");
+    return createHash16("sha256").update(hostname()).digest("hex").slice(0, 12);
   } catch {
     return "";
   }
@@ -20834,7 +21142,7 @@ var init_telemetry = __esm({
     init_sync_client();
     cliVersion2 = () => {
       try {
-        return true ? "0.5.16" : "dev";
+        return true ? "0.5.18" : "dev";
       } catch {
         return "dev";
       }
@@ -20858,7 +21166,7 @@ import { execSync as execSync4 } from "node:child_process";
 import { writeFileSync as writeFileSync9, mkdtempSync as mkdtempSync3 } from "node:fs";
 import { join as join48 } from "node:path";
 import { tmpdir as tmpdir2 } from "node:os";
-import { createHash as createHash12 } from "node:crypto";
+import { createHash as createHash13 } from "node:crypto";
 function compareVersions(a, b) {
   const pa = String(a).split("-")[0].split(".").map((n) => parseInt(n, 10) || 0);
   const pb = String(b).split("-")[0].split(".").map((n) => parseInt(n, 10) || 0);
@@ -20888,7 +21196,7 @@ async function executeAutoUpdate(plan, deps) {
   } catch (e) {
     return { updated: false, reason: `download failed: ${e instanceof Error ? e.message : e}` };
   }
-  const got = createHash12("sha256").update(buf).digest("hex");
+  const got = createHash13("sha256").update(buf).digest("hex");
   if (got !== plan.sha256) return { updated: false, reason: `checksum mismatch (expected ${plan.sha256.slice(0, 12)}\u2026, got ${got.slice(0, 12)}\u2026) \u2014 NOT installing` };
   const dir = mkdtempSync3(join48(tmpdir2(), "cr-update-"));
   const tgz = join48(dir, "chat-recall.tgz");
@@ -20961,6 +21269,7 @@ var sync_client_exports = {};
 __export(sync_client_exports, {
   BATCH_SCAN_MAX_BYTES: () => BATCH_SCAN_MAX_BYTES,
   FULL_BUILD_MAX_BYTES: () => FULL_BUILD_MAX_BYTES,
+  _fetchTenantSyncConfigForTests: () => _fetchTenantSyncConfigForTests,
   _resetCapsCacheForTests: () => _resetCapsCacheForTests,
   _resetTenantSecurityConfigCache: () => _resetTenantSecurityConfigCache,
   _resetTenantSyncConfigCache: () => _resetTenantSyncConfigCache,
@@ -20984,7 +21293,7 @@ __export(sync_client_exports, {
 import { join as join49, dirname as dirname18, basename as basename23 } from "node:path";
 import { readFileSync as readFileSync38, writeFileSync as writeFileSync10, mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync4, rmSync as rmSync5, chmodSync as chmodSync5, unlinkSync as unlinkSync3, readdirSync as readdirSync32, statSync as statSync41 } from "node:fs";
 import { tmpdir as tmpdir3, hostname as hostname2 } from "node:os";
-import { createHash as createHash13 } from "node:crypto";
+import { createHash as createHash14 } from "node:crypto";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { gzipSync as gzipSync3 } from "zlib";
 function classifyError(msg) {
@@ -21083,6 +21392,25 @@ async function fetchTenantSecurityConfig(cred) {
 function _resetTenantSecurityConfigCache() {
   _securityConfigCache.clear();
 }
+function syncConfigCachePath() {
+  return join49(getDataDir(), "sync-config-cache.json");
+}
+function readPersistedSyncConfigs() {
+  try {
+    return JSON.parse(readFileSync38(syncConfigCachePath(), "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function persistSyncConfig(base, config2) {
+  try {
+    const all = readPersistedSyncConfigs();
+    all[base] = { fetchedAt: Date.now(), config: config2 };
+    mkdirSync11(dirname18(syncConfigCachePath()), { recursive: true });
+    writeFileSync10(syncConfigCachePath(), JSON.stringify(all, null, 2));
+  } catch {
+  }
+}
 async function fetchTenantSyncConfig(cred) {
   const base = cred.serverUrl.replace(/\/+$/, "");
   const cached = _syncConfigCache.get(base);
@@ -21102,7 +21430,11 @@ async function fetchTenantSyncConfig(cred) {
     } catch {
     }
     const res = await fetchWithTimeout(`${base}/api/sync-config`, { headers });
-    if (!res.ok) return { excludeTools: [], excludeProjects: [], excludeSources: [], approveSources: [] };
+    if (res.status === 404) {
+      _syncConfigCache.set(base, { fetchedAt: Date.now(), config: EMPTY_SYNC_CONFIG });
+      return EMPTY_SYNC_CONFIG;
+    }
+    if (!res.ok) return lastKnownSyncConfig(base, `HTTP ${res.status}`);
     const body = await res.json().catch(() => ({}));
     const config2 = {
       excludeTools: Array.isArray(body.excludeTools) ? body.excludeTools.filter((t) => typeof t === "string") : [],
@@ -21140,11 +21472,22 @@ async function fetchTenantSyncConfig(cred) {
     } catch {
     }
     _syncConfigCache.set(base, { fetchedAt: Date.now(), config: config2 });
+    persistSyncConfig(base, config2);
     return config2;
-  } catch {
-    return { excludeTools: [], excludeProjects: [], excludeSources: [], approveSources: [] };
+  } catch (err) {
+    return lastKnownSyncConfig(base, err instanceof Error ? err.message : "request failed");
   }
 }
+function lastKnownSyncConfig(base, reason) {
+  const remembered = _syncConfigCache.get(base) ?? readPersistedSyncConfigs()[base];
+  if (remembered) {
+    console.error(`[sync] could not read server-side sync rules (${reason}) \u2014 applying the last known set from ${new Date(remembered.fetchedAt).toISOString()}`);
+    return remembered.config;
+  }
+  throw new Error(
+    `Cannot read the server-side sync rules from ${base} (${reason}), and this machine has never successfully read them. Refusing to sync: uploading without knowing your exclusions could ship a project you told the dashboard to hold back. Fix the server or retry.`
+  );
+}
 function deviceLabel() {
   try {
     return hostname2();
@@ -21434,7 +21777,7 @@ async function syncToTargetInScope(cred, opts = {}) {
   };
   const cleartext = opts.cleartextPaths ?? sync?.pathsCleartext === true;
   const mapPath = (p) => cleartext ? p : hashPath(p);
-  const excluded = (projectPath) => excludeProjects.some((x) => x && projectPath.includes(x));
+  const excluded = (projectPath) => excludeProjects.some((x) => projectPathIncludes(projectPath, x));
   const syncOnly = /* @__PURE__ */ new Set([...sync?.syncOnlyProjects ?? [], ...serverCfg.syncOnlyProjects ?? []]);
   const includedProject = (projectPath) => {
     if ((sync?.syncMode ?? "all") !== "only") return true;
@@ -21690,7 +22033,7 @@ async function syncToTargetInScope(cred, opts = {}) {
   const kgSeen = /* @__PURE__ */ new Set();
   const kgEntityType = /* @__PURE__ */ new Map();
   const kgEntityNames = /* @__PURE__ */ new Set();
-  const kgKey = (subject, predicate, object, validFrom) => createHash13("sha1").update(`${subject}|${predicate}|${object}|${validFrom}`).digest("hex").slice(0, 16);
+  const kgKey = (subject, predicate, object, validFrom) => createHash14("sha1").update(`${subject}|${predicate}|${object}|${validFrom}`).digest("hex").slice(0, 16);
   const accumulateKg = async (triples, sourceSession) => {
     for (const t of triples) {
       const key2 = kgKey(t.subject, t.predicate, t.object, t.validFrom ?? "");
@@ -21780,7 +22123,7 @@ async function syncToTargetInScope(cred, opts = {}) {
   let traceN = 0;
   let considered = 0;
   for (const ref of slice) {
-    await new Promise((resolve2) => setImmediate(resolve2));
+    await new Promise((resolve3) => setImmediate(resolve3));
     considered++;
     const walkDone = considered >= slice.length;
     reportWalkProgress({ done: considered, total: slice.length, startedAt: walkStartedAt, complete: walkDone });
@@ -22394,7 +22737,7 @@ async function syncIncremental(opts = {}) {
     lock.release();
   }
 }
-var ownVersion, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, hashPath, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
+var ownVersion, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, EMPTY_SYNC_CONFIG, _fetchTenantSyncConfigForTests, hashPath, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
 var init_sync_client = __esm({
   "src/sync-client.ts"() {
     "use strict";
@@ -22416,6 +22759,7 @@ var init_sync_client = __esm({
     init_tool_backend();
     init_session();
     init_project_resolver();
+    init_project_path_match();
     init_entity_extractor();
     init_all_sources();
     init_sync_ledger();
@@ -22439,7 +22783,7 @@ var init_sync_client = __esm({
       ownVersion = JSON.parse(readFileSync38(join49(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.5.16";
+        if (true) ownVersion = "0.5.18";
       } catch {
       }
     }
@@ -22449,7 +22793,9 @@ var init_sync_client = __esm({
     _securityConfigCache = /* @__PURE__ */ new Map();
     SECURITY_CONFIG_TTL_MS = 5 * 60 * 1e3;
     _syncConfigCache = /* @__PURE__ */ new Map();
-    hashPath = (p) => p ? "p_" + createHash13("sha256").update(p).digest("hex").slice(0, 12) : "";
+    EMPTY_SYNC_CONFIG = { excludeTools: [], excludeProjects: [], excludeSources: [], approveSources: [] };
+    _fetchTenantSyncConfigForTests = fetchTenantSyncConfig;
+    hashPath = (p) => p ? "p_" + createHash14("sha256").update(p).digest("hex").slice(0, 12) : "";
     MAX_DERIVED_ROW_BYTES = 2 * 1024 * 1024;
     isLocalHost = isPrivateHost;
     CAPS_TTL_MS = 60 * 6e4;
@@ -22626,7 +22972,7 @@ __export(install_skills_exports, {
   uninstallSkills: () => uninstallSkills
 });
 import { readdirSync as readdirSync33, existsSync as existsSync47, mkdirSync as mkdirSync12, rmSync as rmSync6, cpSync, writeFileSync as writeFileSync12, readFileSync as readFileSync41, statSync as statSync42, realpathSync as realpathSync4 } from "fs";
-import { createHash as createHash14 } from "crypto";
+import { createHash as createHash15 } from "crypto";
 import { join as join51, basename as basename24 } from "path";
 function skillsSourceDir() {
   return join51(import.meta.dirname, "..", "skills");
@@ -22640,7 +22986,7 @@ function version() {
 }
 function skillsFingerprint() {
   const src = skillsSourceDir();
-  const h = createHash14("sha256");
+  const h = createHash15("sha256");
   for (const name of bundledSkillNames()) {
     for (const rel of filesUnder(join51(src, name)).sort()) {
       h.update(name + "/" + rel);
@@ -22836,13 +23182,13 @@ __export(service_installer_exports, {
 });
 import { execSync as execSync5 } from "child_process";
 import { existsSync as existsSync48, mkdirSync as mkdirSync13, rmSync as rmSync7, writeFileSync as writeFileSync13 } from "fs";
-import { homedir as homedir16 } from "os";
+import { homedir as homedir17 } from "os";
 import { join as join52 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 function resolveDaemonPaths() {
   const watchJs = fileURLToPath3(new URL("./watch.js", import.meta.url));
   const node = process.execPath;
-  const dataDir = join52(homedir16(), ".chat-recall");
+  const dataDir = join52(homedir17(), ".chat-recall");
   const logFile = join52(dataDir, "watch.log");
   return { watchJs, node, logFile, dataDir };
 }
@@ -22884,7 +23230,7 @@ function installService() {
   );
 }
 function installSystemd(watchJs, node, logFile) {
-  const unitDir = join52(homedir16(), ".config", "systemd", "user");
+  const unitDir = join52(homedir17(), ".config", "systemd", "user");
   const unitPath = join52(unitDir, "chat-recall-watch.service");
   const unit = renderSystemdUnit(watchJs, node, logFile);
   mkdirSync13(unitDir, { recursive: true });
@@ -22932,7 +23278,7 @@ function renderSystemdUnit(watchJs, node, logFile) {
 }
 function installLaunchd(watchJs, node, logFile) {
   const label = "com.chat-recall.watch";
-  const plistDir = join52(homedir16(), "Library", "LaunchAgents");
+  const plistDir = join52(homedir17(), "Library", "LaunchAgents");
   const plistPath = join52(plistDir, `${label}.plist`);
   const plist = renderLaunchdPlist(watchJs, node, logFile, label);
   mkdirSync13(plistDir, { recursive: true });
@@ -22989,7 +23335,7 @@ function uninstallService() {
       removed = true;
     } catch {
     }
-    const unitPath = join52(homedir16(), ".config", "systemd", "user", "chat-recall-watch.service");
+    const unitPath = join52(homedir17(), ".config", "systemd", "user", "chat-recall-watch.service");
     if (existsSync48(unitPath)) {
       rmSync7(unitPath, { force: true });
       removed = true;
@@ -23001,7 +23347,7 @@ function uninstallService() {
     return removed;
   }
   if (process.platform === "darwin") {
-    const plistPath = join52(homedir16(), "Library", "LaunchAgents", "com.chat-recall.watch.plist");
+    const plistPath = join52(homedir17(), "Library", "LaunchAgents", "com.chat-recall.watch.plist");
     try {
       execSync5(`launchctl unload "${plistPath}" 2>/dev/null`, { stdio: "ignore" });
     } catch {
@@ -23045,9 +23391,13 @@ var init_service_installer = __esm({
 
 // src/mcp.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { spawn as spawn2 } from "child_process";
+import { spawn as spawn3 } from "child_process";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
+// ../engine/dist/mcp/tools.js
+import { homedir as homedir6 } from "node:os";
+import { resolve as resolve2 } from "node:path";
+
 // ../engine/dist/core/resume-command.js
 function toolOfSessionId(sessionId) {
   if (sessionId.startsWith("codex_"))
@@ -23164,6 +23514,9 @@ function trialEndingBanner(state2, serverBase) {
   ].join(" ");
 }
 
+// ../engine/dist/mcp/tools.js
+init_login_prompt();
+
 // ../engine/dist/mcp/credential-context.js
 import { AsyncLocalStorage } from "node:async_hooks";
 var store = new AsyncLocalStorage();
@@ -23480,6 +23833,9 @@ function setIndexRunner(fn) {
 function localOnlyRefusal(tool) {
   return `${tool} runs on YOUR machine, not on the server \u2014 this connection has no access to your files. Install the chat-recall CLI and run it there; everything it collects syncs here and stays searchable from this connection.`;
 }
+function emptyIndexHint() {
+  return isMultiTenant() ? "No coding history in this account yet \u2014 normal for a new one, not an error. The account already exists and the free trial is running; there is nothing to sign up for. The transcripts live on the user's own machine, so they must be indexed there.\n\nIF YOU HAVE A SHELL, DO THIS NOW \u2014 it is the whole setup:\n  1. npm install -g chat-recall\n  2. chat-recall init\n     Prints a URL and waits. Tell the user to open it and approve \u2014 one click, same account,\n     not a second signup. Do not kill the command while it waits.\n  3. It then indexes this machine's Claude Code, Codex, Gemini CLI, OpenCode, Antigravity and\n     Cursor sessions, redacts secrets locally, and syncs them.\n  4. Call recall_status to confirm, then retry what you were asked.\nIf you have no shell, give the user steps 1 and 2 verbatim.\n\nMeanwhile this connection already works for memory created here \u2014 facts, decisions, tasks and diary entries persist across conversations right now." : "Nothing has been indexed yet. Run `chat-recall init` (first time) or `chat-recall index` to collect this machine's sessions and sync them.";
+}
 async function runIndexChild(force) {
   if (!indexRunner) {
     return "Indexing runs on YOUR machine, not on the server \u2014 this connection has no access to your transcripts. Install the CLI and run `chat-recall index` (or `chat-recall init` for first-time setup) on the machine whose history you want searchable here.";
@@ -23595,10 +23951,22 @@ async function remotePatch(path, body) {
     throw await buildHttpError(path, res);
   return res.json();
 }
+async function remoteDelete(path) {
+  const cred = remoteCredentials();
+  if (!cred)
+    throw new Error('scope "server" needs a login \u2014 run `chat-recall login <server-url>` first.');
+  const res = await fetch(cred.base + path, {
+    method: "DELETE",
+    headers: { authorization: `Bearer ${cred.token}` }
+  });
+  if (!res.ok)
+    throw await buildHttpError(path, res);
+  return res.json();
+}
 function requireRemote() {
   const cred = remoteCredentials();
   if (!cred) {
-    throw new Error("chat-recall is not logged in. Run `chat-recall login <server-url>` to connect this machine to your chat-recall server (self-host or cloud), then retry.");
+    throw new Error(loginInstruction());
   }
   return cred;
 }
@@ -23670,6 +24038,14 @@ var RecallRenameSchema = z.object({
   session_id: z.string().describe("Session ID to name (from recall_recent / recall_search)."),
   name: z.string().describe("The name to give this conversation. Pass an empty string to clear it and revert to the auto title.")
 });
+var RecallForgetSchema = z.object({
+  session_id: z.string().describe("Session ID to delete everywhere (from recall_recent / recall_search)."),
+  confirm: z.literal(true).describe("Must be true. Only pass it when the user has actually asked for this conversation to be deleted.")
+});
+var RecallExcludePathSchema = z.object({
+  path: z.string().min(1).describe("Absolute path (or a distinctive part of one) to stop syncing."),
+  confirm: z.literal(true).describe("Must be true. Only pass it when the user has actually asked to stop syncing this path.")
+});
 var RecallEditsTimelineSchema = z.object({
   since_hours: z.number().optional().default(24).describe("Time window in hours. Defaults to 24h."),
   limit: z.number().optional().default(100).describe("Maximum edit rows to return"),
@@ -23713,7 +24089,13 @@ var RecallMemorySearchSchema = z.object({
   semantic: z.boolean().optional().default(false).describe("Reserved and currently ignored: the semantic tier is switched off server-side, so every search runs keyword FTS.")
 });
 var RecallSmartResumeSchema = z.object({
-  session_id: z.string().describe("Session ID to get smart resume context for")
+  // OPTIONAL, because the question this tool answers is "continue where we left
+  // off" and whoever asks it does not have a session id. Requiring one made the
+  // routing advice ("continue" -> recall_smart_resume) impossible to follow: the
+  // agent had to call recall_recent first, and a bare call failed with a zod
+  // error about a missing field rather than doing the obvious thing.
+  session_id: z.string().optional().describe("Session to resume. Omit for the most recent one."),
+  project_filter: z.string().optional().describe("When session_id is omitted, resume the latest session from this project (path or name substring).")
 });
 var RecallSubagentSearchSchema = z.object({
   query: z.string().describe("Text to find inside subagent transcripts (explore/compact/aside sub-tasks)"),
@@ -23865,7 +24247,7 @@ var RecallUserPromptsSchema = z.object({
 });
 var RecallDecisionRecordSchema = z.object({
   subject: z.string().describe('What the decision is about (e.g., "chat-recall", "auth strategy")'),
-  decision: z.string().describe('The decision itself in plain words (e.g., "use SQLite FTS5 as the default search backend")'),
+  decision: z.string().describe('The decision itself in plain words (e.g., "use Postgres full-text search as the default backend")'),
   reason: z.string().optional().describe("Why this was decided \u2014 short rationale"),
   importance: z.number().min(1).max(5).optional().default(4).describe("1\u20135; the classifier surfaces 4+ in wake-up context"),
   session_id: z.string().optional().describe("Session this decision was made in (for traceability)"),
@@ -23984,12 +24366,28 @@ var LEAN_TOOLS = /* @__PURE__ */ new Set([
   // Health, and the one that pays out on day one.
   "recall_status",
   "recall_index",
-  "recall_security_summary"
+  "recall_security_summary",
+  // The two REMOVE tools. They are here for the same reason as the rest — they
+  // answer something a person says mid-conversation ("forget that", "stop
+  // syncing this repo") — and a privacy control the agent cannot see is a
+  // dashboard feature wearing an MCP badge. They shipped outside this set and
+  // the e2e harness proved them working under CHAT_RECALL_MCP_PROFILE=full,
+  // which is the one profile no user runs.
+  //
+  // Cost: two names on a 25-name list. Brake: `confirm: true` is a
+  // z.literal(true), and both are kept out of the alwaysAllow list `init`
+  // writes, so the host prompts every time. Neither depends on the listing.
+  "recall_forget",
+  "recall_exclude_path"
 ]);
 function toolProfile() {
   return (process.env.CHAT_RECALL_MCP_PROFILE || "").toLowerCase() === "full" ? "full" : "lean";
 }
 var WRITE_TOOLS = /* @__PURE__ */ new Set([
+  "recall_forget",
+  // deletes a session everywhere, with a tombstone
+  "recall_exclude_path",
+  // changes what syncs, here and on the account
   "recall_index",
   // indexes and ships new rows
   "recall_code_index",
@@ -24017,6 +24415,10 @@ var WRITE_TOOLS = /* @__PURE__ */ new Set([
   // overwrites the session name
 ]);
 var DESTRUCTIVE_TOOLS = /* @__PURE__ */ new Set([
+  // The two scope-narrowing tools. recall_forget has no undo at all; excluding a
+  // path changes what leaves the machine until someone removes the rule by hand.
+  "recall_forget",
+  "recall_exclude_path",
   "recall_kg_invalidate",
   "recall_recommendation_dismiss",
   // retires advice; undo exists but it is a decision
@@ -24129,7 +24531,7 @@ when the user is asking "what did we change?" and the diffs/SQL/commands matter.
       },
       {
         name: "recall_recent",
-        description: `List recent Claude Code sessions.
+        description: `List recent sessions across every AI tool chat-recall indexes.
 
 Shows your most recent conversations across all projects or filtered by project.
 Use this when the user says "continue our last conversation" or wants to see recent work.
@@ -24145,6 +24547,50 @@ Pass \`since_hours: N\` to restrict to sessions modified in the last N hours.`,
           }
         }
       },
+      {
+        name: "recall_forget",
+        description: `Delete one conversation from chat-recall, everywhere, permanently.
+
+Use it when the user says "forget this conversation", "delete that session", "remove what we discussed
+about X" \u2014 anything that asks for a conversation to stop existing on the server.
+
+WHAT IT DOES: purges the session on every server this machine is logged in to, and tombstones the id so
+no later sync can bring it back. The AI tool's own transcript file on the user's disk is NOT touched \u2014
+tell them that, because it is usually what they mean to keep.
+
+IRREVERSIBLE. There is no undo and no tool that restores it. Only pass \`confirm: true\` when the user
+has actually asked for this; do not infer it from a complaint about a conversation.`,
+        inputSchema: {
+          type: "object",
+          properties: {
+            session_id: { type: "string", description: "Session ID to delete (from recall_recent / recall_search)." },
+            confirm: { type: "boolean", description: "Must be true. Only when the user actually asked to delete it." }
+          },
+          required: ["session_id", "confirm"]
+        }
+      },
+      {
+        name: "recall_exclude_path",
+        description: `Stop syncing a project path. Nothing under it leaves the machine from the next sync on.
+
+Use it when the user says "stop syncing this repo", "don't upload anything from ~/work/client", "keep this
+project out of chat-recall".
+
+WHAT IT DOES: adds the path to the exclusion rules \u2014 on this machine, and on the account so every device
+the user syncs from honours it. Sessions ALREADY uploaded from that path stay until they are deleted; say
+so, and offer recall_forget for the ones that matter.
+
+There is deliberately no tool to REMOVE an exclusion: an agent may narrow what is synced, never widen it.
+Undo it with \`chat-recall exclude remove <path>\` or in the dashboard.`,
+        inputSchema: {
+          type: "object",
+          properties: {
+            path: { type: "string", description: "Absolute path (or a distinctive part of one) to stop syncing." },
+            confirm: { type: "boolean", description: "Must be true. Only when the user actually asked to stop syncing it." }
+          },
+          required: ["path", "confirm"]
+        }
+      },
       {
         name: "recall_rename_session",
         description: `Give a conversation a memorable name \u2014 or rename it \u2014 so you (and the user) can find and resume it later.
@@ -24166,7 +24612,7 @@ The name persists across re-syncs and summary regeneration (it's stored separate
       {
         name: "recall_edits_timeline",
         description: `Chronological list of file edits across recent sessions, spanning every AI tool
-chat-recall indexes \u2014 Claude Code, Gemini CLI, OpenCode, Codex and Antigravity.
+chat-recall indexes \u2014 Claude Code, Gemini CLI, OpenCode, Codex, Antigravity and Cursor.
 
 Returns rows shaped like (timestamp, tool, session_id, project, file, op) sorted newest
 first. Pulls live from each tool's native session store \u2014 Claude JSONL, Gemini chat
@@ -24268,8 +24714,8 @@ by extension, with tools used) \u2014 "which files did session X actually touch?
         name: "recall_commits",
         description: `Find git commits that landed during a session's edit window, grouped by repo.
 
-Multi-repo aware: a session that touched ~/code/personal/k8s_gpu and
-~/code/personal/munbot returns commits from each repo, with overlap shown
+Multi-repo aware: a session that touched ~/code/example/infra and
+~/code/example/api returns commits from each repo, with overlap shown
 between commit-files and session-touched-files.
 
 Use this to verify "shipped" claims \u2014 if the session edited 18 files but no
@@ -24333,7 +24779,11 @@ with recall_show (pass the plan id).`,
       },
       {
         name: "recall_smart_resume",
-        description: `Get structured resume context for a session.
+        description: `Get structured resume context for a session \u2014 by default, the most recent one.
+
+Call it with NO arguments to resume the latest session. That is the common case:
+"continue", "pick up where we left off". Pass session_id only to resume a
+specific one, or project_filter to take the latest from one project.
 
 Returns:
 - What was done (completed work, decisions made)
@@ -24346,9 +24796,9 @@ Use this instead of recall_context for a more actionable summary when resuming w
         inputSchema: {
           type: "object",
           properties: {
-            session_id: { type: "string", description: "Session ID to resume" }
-          },
-          required: ["session_id"]
+            session_id: { type: "string", description: "Session to resume. OMIT to resume the most recent session." },
+            project_filter: { type: "string", description: "With session_id omitted, resume the latest session from this project." }
+          }
         }
       },
       {
@@ -24360,9 +24810,9 @@ overview (from CLAUDE.md), tech stack (KG uses), architecture / deployment / sec
 sections (from CLAUDE.md), decisions log (KG chose/rejected), recent session activity
 with summaries, open tasks, plans, agent diary conclusions, and cost rollup.
 
-Accepts EITHER a project path / name substring (e.g. "munbot", "chat-recall",
-"/home/user/code/poly") OR a stable project_id:
-  - "git:<host>/<owner>/<repo>"   (e.g. "git:github.com/me/munbot")
+Accepts EITHER a project path / name substring (e.g. "api", "example-app",
+"/home/user/code/example") OR a stable project_id:
+  - "git:<host>/<owner>/<repo>"   (e.g. "git:github.com/owner/repo")
   - "ws:<name>"                   (workspace rollup)
   - "git-local:<sha1>"            (local-only git repo)
   - "user:<custom>"               (declared in ~/.chat-recall/projects.json)
@@ -24508,7 +24958,7 @@ without editing the task itself. Pass the task id (t_\u2026) from recall_tasks.`
         name: "recall_kg_query",
         description: `Query the knowledge graph for an entity's relationships.
 
-Returns typed facts with temporal validity. E.g. "chat-recall" \u2192 uses TypeScript, has source FTS5.
+Returns typed facts with temporal validity. E.g. "example-app" \u2192 uses TypeScript, deploys to Kubernetes.
 Filter by date with as_of to see what was true at a specific point in time.
 Use this to VERIFY facts before asserting them.`,
         inputSchema: {
@@ -24525,7 +24975,7 @@ Use this to VERIFY facts before asserting them.`,
         name: "recall_kg_add",
         description: `Add a fact to the knowledge graph. Subject \u2192 predicate \u2192 object with optional time window.
 
-E.g. ("chat-recall", "uses", "LanceDB", valid_from="2024-01-15")`,
+E.g. ("example-app", "uses", "Postgres", valid_from="2026-01-15")`,
         inputSchema: {
           type: "object",
           properties: {
@@ -25098,7 +25548,12 @@ Complements recall_memory_search: search finds candidates, this reads the specif
     if (hidden > 0) {
       lean.push({
         name: "recall_help",
-        description: `List the ${hidden} additional chat-recall tools that are not registered in this profile (analytics, knowledge-graph navigation, code intelligence, sharing, security triage, maintenance). They all still WORK if called by name. Set CHAT_RECALL_MCP_PROFILE=full to register every tool up front.`,
+        // The env-var advice only applies to a LOCAL server the user launches.
+        // Over the remote endpoint the process is ours, so telling a connector
+        // user to set CHAT_RECALL_MCP_PROFILE names a knob they cannot reach —
+        // and the useful half of the sentence (they still work by name) got lost
+        // behind it.
+        description: `List the ${hidden} additional chat-recall tools that are not registered in this profile (analytics, knowledge-graph navigation, code intelligence, sharing, security triage, maintenance). Every one of them still WORKS if you call it by name \u2014 this profile shortens the LIST, not the surface, because tool choice degrades as the list grows.` + (isMultiTenant() ? "" : " Set CHAT_RECALL_MCP_PROFILE=full to register them all up front."),
         inputSchema: { type: "object", properties: {} }
       });
     }
@@ -25258,7 +25713,14 @@ async function dispatchTool(request) {
         const searchQuery = sanitized.cleanQuery;
         const remote = await remotePost("/api/search", { query: searchQuery, topK: params.top_k, projectFilter: params.project_filter });
         if (!remote.results?.length) {
-          return { content: [{ type: "text", text: `No matching sessions on the server for "${params.query}".` }] };
+          let indexed = 1;
+          try {
+            const st = await remoteGet("/api/status");
+            indexed = st.totalChunks ?? 1;
+          } catch {
+          }
+          const text = indexed === 0 ? emptyIndexHint() : `No matching sessions on the server for "${params.query}".`;
+          return { content: [{ type: "text", text }] };
         }
         const lines = [`# Server results for: "${params.query}"`, "_(synced history across your devices)_", ""];
         for (let i = 0; i < remote.results.length; i++) {
@@ -25302,7 +25764,7 @@ async function dispatchTool(request) {
         const lines = [
           "Chat-Recall Server Status",
           `Synced sessions: ${sync.sessions}`,
-          `FTS5 chunks: ${status.totalChunks}`,
+          `Indexed chunks: ${status.totalChunks}`,
           `Raw archives: ${sync.rawArchived}`
         ];
         {
@@ -25444,7 +25906,7 @@ ${plan.data.content}` }] };
           qs.set("project", params.project_filter);
         const remote = await remoteGet(`/api/conversations/recent?${qs.toString()}`);
         if (!remote.sessions?.length) {
-          const empty = params.project_filter || params.since_hours ? `No sessions match${params.project_filter ? ` project filter "${params.project_filter}"` : ""}${params.since_hours ? ` in the last ${params.since_hours}h` : ""}. The project filter is a case-insensitive substring of the project path \u2014 try a broader term, or drop it.` : "No sessions on the server yet \u2014 run `chat-recall sync` on your machines.";
+          const empty = params.project_filter || params.since_hours ? `No sessions match${params.project_filter ? ` project filter "${params.project_filter}"` : ""}${params.since_hours ? ` in the last ${params.since_hours}h` : ""}. The project filter is a case-insensitive substring of the project path \u2014 try a broader term, or drop it.` : emptyIndexHint();
           return { content: [{ type: "text", text: empty }] };
         }
         const lines = [`# Recent sessions (server \u2014 ${remote.total} total synced)
@@ -25460,6 +25922,61 @@ ${plan.data.content}` }] };
         }
         return { content: [{ type: "text", text: lines.join("\n") }] };
       }
+      case "recall_forget": {
+        const params = RecallForgetSchema.parse(args);
+        getWAL().log("forget", { session_id: params.session_id });
+        requireRemote();
+        const r = await remoteDelete(`/api/conversations/${encodeURIComponent(params.session_id)}`);
+        return {
+          content: [{
+            type: "text",
+            text: `\u2713 Deleted session \`${r.deleted || params.session_id}\` from the server${r.tombstoned ? " and tombstoned it, so no later sync can bring it back" : ""}.
+The transcript on this machine is untouched \u2014 this only removed the copy chat-recall held.`
+          }]
+        };
+      }
+      case "recall_exclude_path": {
+        const params = RecallExcludePathSchema.parse(args);
+        getWAL().log("exclude_path", { path: params.path });
+        const written = [];
+        if (!isMultiTenant()) {
+          const { loadSettings: loadSettings2, saveSettings: saveSettings2 } = await Promise.resolve().then(() => (init_settings(), settings_exports));
+          const settings2 = loadSettings2();
+          const abs = resolve2(params.path.replace(/^~(?=\/|$)/, homedir6()));
+          if (!settings2.sync.excludeProjects.includes(abs)) {
+            settings2.sync.excludeProjects.push(abs);
+            saveSettings2(settings2);
+          }
+          written.push("this machine");
+        }
+        try {
+          const current = await remoteGet("/api/sync-config");
+          if (!current.excludeProjects.includes(params.path)) {
+            await remotePost("/api/sync-config", {
+              ...current,
+              excludeProjects: [...current.excludeProjects, params.path]
+            });
+          }
+          written.push("your account (every device)");
+        } catch (err) {
+          if (!written.length)
+            throw err;
+          return {
+            content: [{
+              type: "text",
+              text: `\u2713 Stopped syncing \`${params.path}\` from this machine.
+\u26A0 Could not write the rule to your account (${err instanceof Error ? err.message : "request failed"}), so your other devices are NOT covered yet. Retry, or add it in the dashboard.`
+            }]
+          };
+        }
+        return {
+          content: [{
+            type: "text",
+            text: `\u2713 Stopped syncing \`${params.path}\` \u2014 rule written to ${written.join(" and ")}.
+Sessions already uploaded from that path stay until they are deleted; use recall_forget for the ones that matter.`
+          }]
+        };
+      }
       case "recall_rename_session": {
         const params = RecallRenameSchema.parse(args);
         requireRemote();
@@ -25802,7 +26319,18 @@ _Edits stayed local or window was off \u2014 try increasing buffer_minutes._` }]
       }
       case "recall_smart_resume": {
         const params = RecallSmartResumeSchema.parse(args);
-        const sid = params.session_id;
+        requireRemote();
+        let sid = params.session_id;
+        if (!sid) {
+          const qs = new URLSearchParams({ limit: "1" });
+          if (params.project_filter)
+            qs.set("project", params.project_filter);
+          const recent = await remoteGet(`/api/conversations/recent?${qs.toString()}`);
+          sid = recent.sessions?.[0]?.sessionId;
+          if (!sid) {
+            return { content: [{ type: "text", text: params.project_filter ? `No sessions found for project \`${params.project_filter}\` \u2014 nothing to resume.` : "No sessions have synced yet, so there is nothing to resume. Run `chat-recall index` first." }] };
+          }
+        }
         const enc = encodeURIComponent(sid);
         const metaSoft = await remoteGetSoft(`/api/conversations/${enc}/metadata`);
         if (!metaSoft.data) {
@@ -27307,6 +27835,34 @@ ${JSON.stringify(r, null, 2)}
   }
 }
 
+// src/mcp.ts
+init_login_prompt();
+
+// src/open-browser.ts
+import { spawn as spawn2 } from "node:child_process";
+function isSafeUrl(url) {
+  try {
+    const u = new URL(url);
+    return u.protocol === "https:" || u.protocol === "http:";
+  } catch {
+    return false;
+  }
+}
+function openBrowser(url) {
+  if (!isSafeUrl(url)) return false;
+  if (process.env.CHAT_RECALL_NO_BROWSER === "1" || process.env.CI) return false;
+  const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+  try {
+    const child = spawn2(cmd, args, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+    return true;
+  } catch {
+    return false;
+  }
+}
+
 // src/mcp.ts
 init_client_events();
 init_update_notice();
@@ -27317,13 +27873,74 @@ setServerVersion(JSON.parse(
 setEventReporter(reportClientEvent2);
 setIndexRunner(runIndexChild2);
 setUpdateNotice(updateNotice2);
+setLoginStarter(startLoginChild);
+function withVia(url) {
+  try {
+    const u = new URL(url);
+    u.searchParams.set("via", "mcp");
+    return u.toString();
+  } catch {
+    return url;
+  }
+}
+function startLoginChild(server) {
+  return new Promise((resolve3, reject) => {
+    let cliPath;
+    try {
+      cliPath = fileURLToPath4(new URL("./cli.js", import.meta.url));
+    } catch {
+      reject(new Error("could not locate the CLI entry point"));
+      return;
+    }
+    const child = spawn3(process.execPath, [cliPath, "init", "--server", server, "--prompt-json", "--yes"], {
+      env: process.env,
+      stdio: ["ignore", "pipe", "pipe"],
+      // Outlives this call by design: it polls until the user approves. Detached
+      // so a client that restarts the MCP does not abort a sign-in the user is
+      // halfway through in their browser.
+      detached: true
+    });
+    child.unref();
+    let out = "";
+    let settled = false;
+    const fail = (msg) => {
+      if (!settled) {
+        settled = true;
+        reject(new Error(msg));
+      }
+    };
+    child.stdout?.on("data", (d) => {
+      if (settled) return;
+      out += d;
+      for (const line of out.split("\n")) {
+        const t = line.trim();
+        if (!t.startsWith("{")) continue;
+        try {
+          const parsed = JSON.parse(t);
+          if (parsed.prompt?.url) {
+            settled = true;
+            const tagged = { ...parsed.prompt, url: withVia(parsed.prompt.url) };
+            openBrowser(tagged.url);
+            resolve3(tagged);
+            return;
+          }
+        } catch {
+        }
+      }
+    });
+    child.on("error", (e) => fail(e.message));
+    child.on("exit", (code) => fail(`login helper exited (${code ?? "signal"}) before issuing a code`));
+    const timer = setTimeout(() => fail("the server did not issue a device code in time"), 3e4);
+    timer.unref?.();
+  });
+}
 function runIndexChild2(force) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     let cliPath;
     try {
       cliPath = fileURLToPath4(new URL("./cli.js", import.meta.url));
     } catch {
-      resolve2("Index unavailable: could not locate the CLI entry point.");
+      resolve3("Index unavailable: could not locate the CLI entry point.");
       return;
     }
     const args = [cliPath, "index"];
@@ -27333,10 +27950,10 @@ function runIndexChild2(force) {
     const finish = (msg) => {
       if (!done) {
         done = true;
-        resolve2(msg);
+        resolve3(msg);
       }
     };
-    const child = spawn2(process.execPath, args, { env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+    const child = spawn3(process.execPath, args, { env: process.env, stdio: ["ignore", "pipe", "pipe"] });
     child.stdout?.on("data", (d) => {
       out += d;
     });
@@ -27422,6 +28039,14 @@ async function main() {
     } catch {
     }
   })();
+  try {
+    const { loadAllCredentials: loadAllCredentials2 } = await Promise.resolve().then(() => (init_sync_client(), sync_client_exports));
+    if (loadAllCredentials2().length === 0 && !process.env.CHAT_RECALL_TOKEN) {
+      const { loginInstruction: loginInstruction2 } = await Promise.resolve().then(() => (init_login_prompt(), login_prompt_exports));
+      loginInstruction2();
+    }
+  } catch {
+  }
   let daemonRunning = false;
   try {
     const { isServiceRunning: isServiceRunning2 } = await Promise.resolve().then(() => (init_service_installer(), service_installer_exports));