chat-recall 0.5.30 → 0.5.31

package/dist/mcp.js

@@ -11716,19 +11716,6 @@ var init_codex2 = __esm({
 // ../engine/dist/core/backends/agy.js
 import { existsSync as existsSync14, readdirSync as readdirSync10, readFileSync as readFileSync9, statSync as statSync12 } from "fs";
 import { basename as basename12, dirname as dirname12, join as join15 } from "path";
-function getFallbackProjectPath(homeDir) {
-  try {
-    const settingsPath2 = join15(homeDir, "settings.json");
-    if (existsSync14(settingsPath2)) {
-      const json = JSON.parse(readFileSync9(settingsPath2, "utf-8"));
-      if (Array.isArray(json?.trustedWorkspaces) && json.trustedWorkspaces[0]) {
-        return json.trustedWorkspaces[0];
-      }
-    }
-  } catch {
-  }
-  return "";
-}
 function agyTranscriptPath(logsDir) {
   const full = join15(logsDir, "transcript_full.jsonl");
   if (existsSync14(full))
@@ -11741,8 +11728,8 @@ function agyTranscriptPath(logsDir) {
 function resolveAgyProject(logsDir, homeDir) {
   const deriveFrom = agyTranscriptPath(logsDir);
   if (!deriveFrom)
-    return getFallbackProjectPath(homeDir);
-  return extractProjectPathFromTranscript(deriveFrom, homeDir) || getFallbackProjectPath(homeDir);
+    return "";
+  return extractProjectPathFromTranscript(deriveFrom, homeDir);
 }
 function extractProjectPathFromTranscript(path, homeDir) {
   let content;
@@ -20274,7 +20261,7 @@ var init_extractor_version = __esm({
       command: 1
     };
     TOOL_EXTRACTOR_BUMP = {
-      agy: 2,
+      agy: 3,
       claude: 1,
       codex: 1
     };
@@ -20653,7 +20640,7 @@ var init_http = __esm({
       CLI_VERSION = JSON.parse(readFileSync37(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.5.30";
+        if (true) CLI_VERSION = "0.5.31";
       } catch {
       }
     }
@@ -21003,9 +20990,9 @@ function cooldownFor(failures) {
 function breakerState(serverUrl, now = Date.now()) {
   const s = state.get(key(serverUrl));
   if (!s || s.openUntil <= now) {
-    return { open: false, retryInMs: 0, failures: s?.failures ?? 0, lastError: s?.lastError ?? "" };
+    return { open: false, retryInMs: 0, failures: s?.failures ?? 0, lastError: s?.lastError ?? "", tripped: false };
   }
-  return { open: true, retryInMs: s.openUntil - now, failures: s.failures, lastError: s.lastError };
+  return { open: true, retryInMs: s.openUntil - now, failures: s.failures, lastError: s.lastError, tripped: false };
 }
 function noteTargetSuccess(serverUrl) {
   state.delete(key(serverUrl));
@@ -21017,11 +21004,11 @@ function noteTargetFailure(serverUrl, error, now = Date.now()) {
   const lastError = error.slice(0, 200);
   if (failures < TRIP_AFTER_FAILURES) {
     state.set(k, { failures, openUntil: 0, lastError });
-    return { open: false, retryInMs: 0, failures, lastError };
+    return { open: false, retryInMs: 0, failures, lastError, tripped: false };
   }
   const cooldown = cooldownFor(failures);
   state.set(k, { failures, openUntil: now + cooldown, lastError });
-  return { open: true, retryInMs: cooldown, failures, lastError };
+  return { open: true, retryInMs: cooldown, failures, lastError, tripped: failures === TRIP_AFTER_FAILURES };
 }
 function breakerNotice(serverUrl, v) {
   if (!v.open) return null;
@@ -21148,6 +21135,14 @@ async function flush() {
     }
   }));
 }
+function stableMark(value) {
+  try {
+    const { createHash: createHash16 } = __require("node:crypto");
+    return createHash16("sha256").update(value).digest("hex").slice(0, 12);
+  } catch {
+    return "";
+  }
+}
 function hashHost() {
   try {
     const { createHash: createHash16 } = __require("node:crypto");
@@ -21165,7 +21160,7 @@ var init_telemetry = __esm({
     init_sync_client();
     cliVersion2 = () => {
       try {
-        return true ? "0.5.30" : "dev";
+        return true ? "0.5.31" : "dev";
       } catch {
         return "dev";
       }
@@ -21473,7 +21468,17 @@ async function runAutoUpdate(base, authHeaders, ownVersion2, deps) {
   }
   const effectiveOwn = newerOf(ownVersion2, installedVersion());
   const plan = planAutoUpdate(base, caps, effectiveOwn, process.env.CHAT_RECALL_AUTO_UPDATE);
-  if (!plan.update) return { updated: false, reason: plan.reason };
+  if (!plan.update) {
+    if (/disabled|no CLI release/.test(plan.reason) && !reportedStandingSkip.has(base)) {
+      reportedStandingSkip.add(base);
+      try {
+        const { reportClientEvent: reportClientEvent3 } = await Promise.resolve().then(() => (init_client_events(), client_events_exports));
+        reportClientEvent3("auto_update_skipped", { message: `${plan.reason} (server offers ${caps.cli?.version ?? "?"}, this device runs ${effectiveOwn})` });
+      } catch {
+      }
+    }
+    return { updated: false, reason: plan.reason };
+  }
   const result = await executeAutoUpdate(plan, {
     download: deps?.download ?? realDownload,
     install: deps?.install ?? realInstall,
@@ -21489,12 +21494,13 @@ async function runAutoUpdate(base, authHeaders, ownVersion2, deps) {
   }
   return result;
 }
-var tarballUrl;
+var tarballUrl, reportedStandingSkip;
 var init_auto_update = __esm({
   "src/auto-update.ts"() {
     "use strict";
     init_http();
     tarballUrl = (base) => `${base.replace(/\/+$/, "")}/install/chat-recall.tgz`;
+    reportedStandingSkip = /* @__PURE__ */ new Set();
   }
 });
 
@@ -21510,6 +21516,9 @@ __export(sync_client_exports, {
   batchScanExternal: () => batchScanExternal,
   buildConversationSync: () => buildConversationSync,
   buildConversationTail: () => buildConversationTail,
+  classedError: () => classedError,
+  classifyError: () => classifyError,
+  isStandingFailure: () => isStandingFailure,
   isSyncSkip: () => isSyncSkip,
   loadAllCredentials: () => loadAllCredentials,
   loadCredentials: () => loadCredentials,
@@ -21530,17 +21539,32 @@ import { tmpdir as tmpdir3, hostname as hostname2 } from "node:os";
 import { createHash as createHash14 } from "node:crypto";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { gzipSync as gzipSync3 } from "zlib";
-function classifyError(msg) {
+function classedError(errorClass, message) {
+  const e = new Error(message);
+  Object.defineProperty(e, ERROR_CLASS, { value: errorClass, enumerable: false });
+  return e;
+}
+function taggedClass(err) {
+  const v = err?.[ERROR_CLASS];
+  return typeof v === "string" && v ? v : null;
+}
+function isStandingFailure(err) {
+  const c = taggedClass(err);
+  return c !== null && STANDING_FAILURE.has(c);
+}
+function classifyError(msg, err) {
+  const tagged = taggedClass(err);
+  if (tagged) return tagged;
   const m = msg.toLowerCase();
   if (m.includes("429")) return "rate_limited";
   if (m.includes("402")) return "payment_required";
   if (m.includes("401") || m.includes("403") || m.includes("token")) return "auth";
-  if (m.includes("timed out") || m.includes("etimedout")) return "timeout";
+  if (m.includes("timed out") || m.includes("etimedout") || m.includes("aborted due to timeout")) return "timeout";
   if (m.includes("econnrefused")) return "refused";
   if (m.includes("enotfound") || m.includes("dns")) return "dns";
   if (m.includes("fetch failed") || m.includes("econnreset")) return "network";
-  if (m.includes("plain http") || m.includes("https")) return "insecure_transport";
-  if (/5\d\d/.test(m)) return "server_error";
+  if (m.includes("over plain http") || m.includes("unsupported scheme")) return "insecure_transport";
+  if (/\b5\d\d\b/.test(m)) return "server_error";
   return "other";
 }
 function saveCredentials(c) {
@@ -21758,17 +21782,23 @@ async function syncSessions(opts = {}) {
   let agg = null;
   const errors = [];
   const skippedTargets = [];
+  const perTarget = {};
   for (const cred of targets) {
     const verdict = breakerState(cred.serverUrl);
     if (verdict.open) {
       const notice = breakerNotice(cred.serverUrl, verdict);
       if (notice) console.error(`[sync] ${notice}`);
       skippedTargets.push(cred.serverUrl);
+      perTarget[cred.serverUrl] = {
+        ok: false,
+        error: notice ?? `in failure cooldown for ~${Math.max(1, Math.round(verdict.retryInMs / 6e4))}m`
+      };
       continue;
     }
     try {
       const r = await syncToTarget(cred, opts);
       noteTargetSuccess(cred.serverUrl);
+      perTarget[cred.serverUrl] = { ok: true };
       agg = agg ? {
         uploaded: agg.uploaded + r.uploaded,
         skipped: agg.skipped + r.skipped,
@@ -21785,14 +21815,20 @@ async function syncSessions(opts = {}) {
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       errors.push(`${cred.serverUrl}: ${msg}`);
+      perTarget[cred.serverUrl] = { ok: false, error: msg };
       const next = noteTargetFailure(cred.serverUrl, msg);
       const notice = breakerNotice(cred.serverUrl, next);
       if (notice) console.error(`[sync] ${notice}`);
       record({
-        kind: next.open ? "breaker_trip" : "target_failure",
+        // `tripped`, not `open`: an open breaker re-opens on every attempt until
+        // a success clears it, so `open` counted elapsed time. Every failure is
+        // still reported — as `target_failure`, carrying the streak in
+        // `failures` — so nothing becomes invisible, it just stops being counted
+        // as a fresh incident.
+        kind: next.tripped ? "breaker_trip" : "target_failure",
         failures: next.failures,
         retryInMs: next.retryInMs,
-        errorClass: classifyError(msg),
+        errorClass: classifyError(msg, e),
         local: isLocalHost(cred.serverUrl) ? 1 : 0
       });
     }
@@ -21823,7 +21859,7 @@ async function syncSessions(opts = {}) {
   ${errors.join("\n  ")}`);
   if (errors.length > 0) console.error(`[sync] ${errors.length} target(s) failed (others succeeded):
   ${errors.join("\n  ")}`);
-  return agg;
+  return { ...agg, perTarget };
 }
 async function postFieldBatch(base, token, rows) {
   const headers = { "content-type": "application/json" };
@@ -22010,7 +22046,7 @@ async function syncToTarget(cred, opts = {}) {
 }
 async function syncToTargetInScope(cred, opts = {}) {
   const risk = transportRisk(cred.serverUrl);
-  if (risk) throw new Error(risk);
+  if (risk) throw classedError("insecure_transport", risk);
   const sync = loadSettings().sync;
   const serverCfg = await fetchTenantSyncConfig(cred);
   const excludeTools = /* @__PURE__ */ new Set([...sync?.excludeTools ?? [], ...serverCfg.excludeTools]);
@@ -22110,7 +22146,7 @@ async function syncToTargetInScope(cred, opts = {}) {
         const retryable = res.status === 429 || res.status >= 500;
         const text = await res.text().catch(() => "");
         if (res.status === 401 || res.status === 403) {
-          throw new Error(`server rejected this machine's device token (HTTP ${res.status} \u2014 revoked?). Reconnect with: chat-recall login ${base}`);
+          throw classedError("auth", `server rejected this machine's device token (HTTP ${res.status} \u2014 revoked?). Reconnect with: chat-recall login ${base}`);
         }
         if (res.status === 402) {
           let detail = text;
@@ -22124,7 +22160,7 @@ async function syncToTargetInScope(cred, opts = {}) {
   ${body2.upgradeUrl}`;
           } catch {
           }
-          throw new Error(`sync paused by the server: ${detail}`);
+          throw classedError("payment_required", `sync paused by the server: ${detail}`);
         }
         if (!retryable) throw new Error(`sync failed: HTTP ${res.status} ${text}`);
         if (attempt >= RETRY_DELAYS_MS.length) throw new Error(`sync failed after ${attempt + 1} attempts: HTTP ${res.status} ${text}`);
@@ -22134,7 +22170,7 @@ async function syncToTargetInScope(cred, opts = {}) {
         await sleep(waitMs);
         continue;
       } catch (err) {
-        const fatal = err instanceof Error && /HTTP 4\d\d|sync failed after/.test(err.message);
+        const fatal = isStandingFailure(err) || err instanceof Error && /HTTP 4\d\d|sync failed after/.test(err.message);
         if (fatal || attempt >= RETRY_DELAYS_MS.length) throw err;
         console.error(`[sync] upload attempt ${attempt + 1} failed (${err instanceof Error ? err.message : err}) \u2014 retrying in ${RETRY_DELAYS_MS[attempt] / 1e3}s`);
         await sleep(RETRY_DELAYS_MS[attempt]);
@@ -22673,7 +22709,12 @@ async function buildConversationSync(ref, mtime, opts = {}) {
         const containerBytes = built ? built.files.reduce((n, f) => n + Buffer.byteLength(f.text), 0) : 0;
         if (containerBytes > FULL_BUILD_MAX_BYTES) {
           console.error(`[sync] ${ref.prefixedId} is ${(containerBytes / 1048576).toFixed(0)}MB (over the ${(FULL_BUILD_MAX_BYTES / 1048576).toFixed(0)}MB ceiling) \u2014 shipping without the raw archive and derived data to keep the walk in memory`);
-          record({ kind: "oversized_session", mb: Math.round(containerBytes / 1048576), tool: ref.toolId });
+          record({
+            kind: "oversized_session",
+            mb: Math.round(containerBytes / 1048576),
+            tool: ref.toolId,
+            dedupeKey: stableMark(ref.prefixedId)
+          });
           includeRaw = false;
           includeMeta = false;
         }
@@ -22984,7 +23025,7 @@ async function syncIncremental(opts = {}) {
     lock.release();
   }
 }
-var ownVersion, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, EMPTY_SYNC_CONFIG, _fetchTenantSyncConfigForTests, SYNC_RULES_REFUSAL, hashPath, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
+var ownVersion, ERROR_CLASS, STANDING_FAILURE, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, EMPTY_SYNC_CONFIG, _fetchTenantSyncConfigForTests, SYNC_RULES_REFUSAL, hashPath, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
 var init_sync_client = __esm({
   "src/sync-client.ts"() {
     "use strict";
@@ -23030,10 +23071,16 @@ var init_sync_client = __esm({
       ownVersion = JSON.parse(readFileSync39(join49(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.5.30";
+        if (true) ownVersion = "0.5.31";
       } catch {
       }
     }
+    ERROR_CLASS = "__chatRecallErrorClass";
+    STANDING_FAILURE = /* @__PURE__ */ new Set([
+      "auth",
+      "payment_required",
+      "insecure_transport"
+    ]);
     walkProgressForUpload = null;
     lastServerPackSpec = null;
     credPath = () => join49(getDataDir(), "credentials.json");

package/dist/scan-worker.js

@@ -7881,19 +7881,6 @@ var init_codex = __esm({
 // ../engine/dist/core/backends/agy.js
 import { existsSync as existsSync7, readdirSync as readdirSync5, readFileSync as readFileSync4, statSync as statSync6 } from "fs";
 import { basename as basename6, dirname as dirname8, join as join8 } from "path";
-function getFallbackProjectPath(homeDir) {
-  try {
-    const settingsPath2 = join8(homeDir, "settings.json");
-    if (existsSync7(settingsPath2)) {
-      const json = JSON.parse(readFileSync4(settingsPath2, "utf-8"));
-      if (Array.isArray(json?.trustedWorkspaces) && json.trustedWorkspaces[0]) {
-        return json.trustedWorkspaces[0];
-      }
-    }
-  } catch {
-  }
-  return "";
-}
 function agyTranscriptPath(logsDir) {
   const full = join8(logsDir, "transcript_full.jsonl");
   if (existsSync7(full))
@@ -7906,8 +7893,8 @@ function agyTranscriptPath(logsDir) {
 function resolveAgyProject(logsDir, homeDir) {
   const deriveFrom = agyTranscriptPath(logsDir);
   if (!deriveFrom)
-    return getFallbackProjectPath(homeDir);
-  return extractProjectPathFromTranscript(deriveFrom, homeDir) || getFallbackProjectPath(homeDir);
+    return "";
+  return extractProjectPathFromTranscript(deriveFrom, homeDir);
 }
 function extractProjectPathFromTranscript(path, homeDir) {
   let content;

package/dist/sync-client.d.ts

@@ -1,5 +1,21 @@
 import { type ScanFinding, type DirScanFinding } from '@chat-recall/engine/core/secret-scanner.js';
 import { type SessionRef } from '@chat-recall/engine/core/tool-backend.js';
+/** An Error that already knows its own failure class. */
+export declare function classedError(errorClass: FailureClass, message: string): Error;
+/** True when this error must not be retried. Exported for the tests. */
+export declare function isStandingFailure(err: unknown): boolean;
+export type FailureClass = 'rate_limited' | 'payment_required' | 'auth' | 'timeout' | 'refused' | 'dns' | 'network' | 'insecure_transport' | 'server_error' | 'other';
+/**
+ * Reduce an error message to a bounded CLASS.
+ *
+ * Telemetry must never carry a raw error string: server errors quote paths,
+ * payload fragments and occasionally tokens. An enum is enough to answer "what
+ * is breaking for customers", and cannot leak.
+ *
+ * A tag from the throw site always wins. The message tests remain for errors
+ * thrown by fetch itself, and by code that predates the tag.
+ */
+export declare function classifyError(msg: string, err?: unknown): FailureClass;
 import '@chat-recall/engine/core/backends/index.js';
 export interface Credentials {
     serverUrl: string;
@@ -44,6 +60,27 @@ export interface SyncResult {
     scanned: number;
     /** Total wall-clock ms spent scanning this run. */
     scanMs: number;
+    /**
+     * THIS WALK'S OUTCOME PER TARGET, keyed by server URL.
+     *
+     * The aggregate above cannot answer "did target X accept anything", and the
+     * daemon needs exactly that: it writes the per-target health file that
+     * `chat-recall doctor` reads. Without this it marked EVERY target with the
+     * walk's aggregate verdict, so a walk where the SaaS succeeded and a LAN box
+     * refused the connection wrote `lastOkAt = now, failures = 0` for both — and
+     * `doctor` cheerfully reported a target that had not accepted a byte in days.
+     *
+     * Set by `syncSessions` (the multi-target walk) and absent from a
+     * single-target result, so a consumer must treat "absent" as "unknown" and
+     * mark nothing, never as "all fine".
+     */
+    perTarget?: Record<string, TargetOutcome>;
+}
+/** One target's outcome for one walk. */
+export interface TargetOutcome {
+    ok: boolean;
+    /** Why it failed, or why it was not attempted. Absent when ok. */
+    error?: string;
 }
 export declare function syncSessions(opts?: {
     sinceMs?: number;

package/dist/sync-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-client.d.ts","sourceRoot":"","sources":["../src/sync-client.ts"],"names":[],"mappings":"AAyCA,OAAO,EAAoF,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAWrL,OAAO,EAA+B,KAAK,UAAU,EAAE,MAAM,0CAA0C,CAAC;AA4ExG,OAAO,4CAA4C,CAAC;AAMpD,MAAM,WAAW,WAAW;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;CAAE;AAElE;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,WAAW,GAAG,IAAI,CAoBpD;AAED,wBAAgB,kBAAkB,IAAI,WAAW,EAAE,CAelD;AAwGD,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAuBD,UAAU,gBAAgB;IAAG,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAA;CAAE;AAkCpI,iBAAe,qBAAqB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2EjF;AAED;;4EAE4E;AAC5E,eAAO,MAAM,8BAA8B,8BAAwB,CAAC;AAuCpE,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED,oDAAoD;AACpD,wEAAwE;AACxE,wBAAgB,eAAe,IAAI,WAAW,GAAG,IAAI,CAEpD;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAM5D;AAMD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;CAChB;AAyBD,wBAAsB,YAAY,CAAC,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CA2FvN;AAED,MAAM,WAAW,eAAe;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE;AA+ErK;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAc9F;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAiB,EAAE,QAAQ,SAAe,EAAE,GAAG,SAAa,GAAG,MAAM,CAc3G;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EACvD,IAAI,GAAE;IACJ,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,cAAc,EAAE,CAAC;CAClE,GACL;IAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAwD3F;AAgBD,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAE7E;AAED,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAExE;AAymCD;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB;qGACiG;IACjG,QAAQ,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACpI,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf;;;qFAGiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;0EAE0E;AAC1E,MAAM,WAAW,qBAAqB;IAAG,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CAAE;AAE5E;;;;+EAI+E;AAC/E,eAAO,MAAM,oBAAoB,QAC2D,CAAC;AAI7F;;;;;gEAKgE;AAChE,eAAO,MAAM,oBAAoB,QAC0D,CAAC;AAE5F,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAIxD;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzL;;kFAE8E;IAC9E,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC;IACpC;;;;0EAIsE;IACtE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,OAAO,CAAC,iBAAiB,GAAG,qBAAqB,GAAG,IAAI,CAAC,CAyW3D;AAgBD;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,UAAU,EACf,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAO,GACnG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAA;CAAE,GAAG,IAAI,CAAC,CAkEnI;AAED;;;;;;GAMG;AACH;;;;;;;;GAQG;AACH;;;;yCAIyC;AACzC,MAAM,WAAW,QAAQ;IAAG,OAAO,EAAE,gBAAgB,GAAG,QAAQ,GAAG,WAAW,CAAA;CAAE;AAEhF,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,CAAC,IAAI,QAAQ,CAElE;AAED,wBAAsB,eAAe,CAAC,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CA4C/G"}
+{"version":3,"file":"sync-client.d.ts","sourceRoot":"","sources":["../src/sync-client.ts"],"names":[],"mappings":"AAyCA,OAAO,EAAoF,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAWrL,OAAO,EAA+B,KAAK,UAAU,EAAE,MAAM,0CAA0C,CAAC;AA2ExG,yDAAyD;AACzD,wBAAgB,YAAY,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,KAAK,CAI7E;AAgBD,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGvD;AAED,MAAM,MAAM,YAAY,GACpB,cAAc,GAAG,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GACpE,KAAK,GAAG,SAAS,GAAG,oBAAoB,GAAG,cAAc,GAAG,OAAO,CAAC;AAExE;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,CAqBtE;AAOD,OAAO,4CAA4C,CAAC;AAMpD,MAAM,WAAW,WAAW;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;CAAE;AAElE;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,WAAW,GAAG,IAAI,CAoBpD;AAED,wBAAgB,kBAAkB,IAAI,WAAW,EAAE,CAelD;AAwGD,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAuBD,UAAU,gBAAgB;IAAG,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAA;CAAE;AAkCpI,iBAAe,qBAAqB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2EjF;AAED;;4EAE4E;AAC5E,eAAO,MAAM,8BAA8B,8BAAwB,CAAC;AAuCpE,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED,oDAAoD;AACpD,wEAAwE;AACxE,wBAAgB,eAAe,IAAI,WAAW,GAAG,IAAI,CAEpD;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAM5D;AAMD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CAC3C;AAED,yCAAyC;AACzC,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAyBD,wBAAsB,YAAY,CAAC,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CA4GvN;AAED,MAAM,WAAW,eAAe;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE;AA+ErK;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAc9F;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAiB,EAAE,QAAQ,SAAe,EAAE,GAAG,SAAa,GAAG,MAAM,CAc3G;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EACvD,IAAI,GAAE;IACJ,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,cAAc,EAAE,CAAC;CAClE,GACL;IAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAwD3F;AAgBD,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAE7E;AAED,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAExE;AA+mCD;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB;qGACiG;IACjG,QAAQ,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACpI,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf;;;qFAGiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;0EAE0E;AAC1E,MAAM,WAAW,qBAAqB;IAAG,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CAAE;AAE5E;;;;+EAI+E;AAC/E,eAAO,MAAM,oBAAoB,QAC2D,CAAC;AAI7F;;;;;gEAKgE;AAChE,eAAO,MAAM,oBAAoB,QAC0D,CAAC;AAE5F,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAIxD;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzL;;kFAE8E;IAC9E,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC;IACpC;;;;0EAIsE;IACtE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,OAAO,CAAC,iBAAiB,GAAG,qBAAqB,GAAG,IAAI,CAAC,CAmX3D;AAgBD;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,UAAU,EACf,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAO,GACnG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAA;CAAE,GAAG,IAAI,CAAC,CAkEnI;AAED;;;;;;GAMG;AACH;;;;;;;;GAQG;AACH;;;;yCAIyC;AACzC,MAAM,WAAW,QAAQ;IAAG,OAAO,EAAE,gBAAgB,GAAG,QAAQ,GAAG,WAAW,CAAA;CAAE;AAEhF,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,CAAC,IAAI,QAAQ,CAElE;AAED,wBAAsB,eAAe,CAAC,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CA4C/G"}

package/dist/sync-client.js

@@ -81,7 +81,7 @@ import { scanPool } from './scan-pool.js';
 import { isPrivateHost, transportRisk, assertTransportSafe } from './transport-safety.js';
 import { breakerState, breakerNotice, noteTargetSuccess, noteTargetFailure } from './target-breaker.js';
 import { setTelemetryEligible } from './telemetry-consent.js';
-import { record, flush } from './telemetry.js';
+import { record, flush, stableMark } from './telemetry.js';
 /**
  * The server rule pack as it arrived, kept for the scan workers.
  *
@@ -96,14 +96,67 @@ import { record, flush } from './telemetry.js';
  * poster) are far apart, and threading it through every batcher signature to
  * deliver a cosmetic field would be worse than a single slot.
  */
+/**
+ * The failure class, carried ON the error, decided where the status is known.
+ *
+ * ── Why a tag and not a message test ─────────────────────────────────────
+ * `classifyError` below used to be the only classifier, and it read the message.
+ * That is a guess, and it guessed wrong for the most common failure this product
+ * has. The 402 handler deliberately prints the server's own sentence instead of
+ * the HTTP line, so `402` is NOT in the message, while the `upgradeUrl` it
+ * appends IS — and a substring test for `https` therefore filed a monthly quota
+ * pause as `insecure_transport`.
+ *
+ * One device reported 651 of them in a week. The fleet panel read that back as
+ * "refusing to sync to a server over plain HTTP — nothing from this device is
+ * reaching it", which was false twice over: the target was a LAN box on http://
+ * that the transport gate had never objected to, and the real condition — sync
+ * paused for billing — had no warning of its own at all.
+ *
+ * The same rewritten message also defeated the retry gate below, which decides
+ * "is this fatal" with /HTTP 4\d\d/. A quota pause was retried four times with
+ * backoff before failing, every batch, for days.
+ *
+ * So the class travels with the error from the place that read the status.
+ */
+const ERROR_CLASS = '__chatRecallErrorClass';
+/** An Error that already knows its own failure class. */
+export function classedError(errorClass, message) {
+    const e = new Error(message);
+    Object.defineProperty(e, ERROR_CLASS, { value: errorClass, enumerable: false });
+    return e;
+}
+/** The class a throw site attached, or null when it did not. */
+function taggedClass(err) {
+    const v = err?.[ERROR_CLASS];
+    return typeof v === 'string' && v ? v : null;
+}
+/**
+ * Classes that describe a STANDING condition of the plan or the target, not a
+ * glitch. Retrying one cannot change the answer, so the retry loop stops.
+ */
+const STANDING_FAILURE = new Set([
+    'auth', 'payment_required', 'insecure_transport',
+]);
+/** True when this error must not be retried. Exported for the tests. */
+export function isStandingFailure(err) {
+    const c = taggedClass(err);
+    return c !== null && STANDING_FAILURE.has(c);
+}
 /**
  * Reduce an error message to a bounded CLASS.
  *
  * Telemetry must never carry a raw error string: server errors quote paths,
  * payload fragments and occasionally tokens. An enum is enough to answer "what
  * is breaking for customers", and cannot leak.
+ *
+ * A tag from the throw site always wins. The message tests remain for errors
+ * thrown by fetch itself, and by code that predates the tag.
  */
-function classifyError(msg) {
+export function classifyError(msg, err) {
+    const tagged = taggedClass(err);
+    if (tagged)
+        return tagged;
     const m = msg.toLowerCase();
     if (m.includes('429'))
         return 'rate_limited';
@@ -111,7 +164,11 @@ function classifyError(msg) {
         return 'payment_required';
     if (m.includes('401') || m.includes('403') || m.includes('token'))
         return 'auth';
-    if (m.includes('timed out') || m.includes('etimedout'))
+    // 'aborted due to timeout' is what AbortSignal.timeout actually produces, and
+    // it matches neither of the other two spellings — so the most common timeout
+    // this collector suffers was being filed as 'other'. One machine logged 441 of
+    // them against /api/capabilities alone.
+    if (m.includes('timed out') || m.includes('etimedout') || m.includes('aborted due to timeout'))
         return 'timeout';
     if (m.includes('econnrefused'))
         return 'refused';
@@ -119,9 +176,12 @@ function classifyError(msg) {
         return 'dns';
     if (m.includes('fetch failed') || m.includes('econnreset'))
         return 'network';
-    if (m.includes('plain http') || m.includes('https'))
+    // The transport gate's OWN wording, and nothing else. A bare `https` test
+    // matched every message that merely quoted a URL — which is most of them,
+    // including every 5xx that used to fall through to the line below.
+    if (m.includes('over plain http') || m.includes('unsupported scheme'))
         return 'insecure_transport';
-    if (/5\d\d/.test(m))
+    if (/\b5\d\d\b/.test(m))
         return 'server_error';
     return 'other';
 }
@@ -474,6 +534,8 @@ export async function syncSessions(opts = {}) {
     let agg = null;
     const errors = [];
     const skippedTargets = [];
+    // Per target, for the health file the daemon writes. See SyncResult.perTarget.
+    const perTarget = {};
     for (const cred of targets) {
         // CIRCUIT BREAKER. Targets are walked in SEQUENCE, so a dead one does not
         // just fail — it delays every ship to the healthy targets behind it, and
@@ -486,11 +548,18 @@ export async function syncSessions(opts = {}) {
             if (notice)
                 console.error(`[sync] ${notice}`);
             skippedTargets.push(cred.serverUrl);
+            // A skipped target did NOT sync. Saying so is the whole point: it is the
+            // case that used to be recorded as a success.
+            perTarget[cred.serverUrl] = {
+                ok: false,
+                error: notice ?? `in failure cooldown for ~${Math.max(1, Math.round(verdict.retryInMs / 60_000))}m`,
+            };
             continue;
         }
         try {
             const r = await syncToTarget(cred, opts);
             noteTargetSuccess(cred.serverUrl);
+            perTarget[cred.serverUrl] = { ok: true };
             agg = agg ? {
                 uploaded: agg.uploaded + r.uploaded, skipped: agg.skipped + r.skipped, redactions: agg.redactions + r.redactions,
                 items: agg.items + r.items, links: agg.links + r.links, findings: agg.findings + r.findings,
@@ -501,6 +570,7 @@ export async function syncSessions(opts = {}) {
         catch (e) {
             const msg = e instanceof Error ? e.message : String(e);
             errors.push(`${cred.serverUrl}: ${msg}`);
+            perTarget[cred.serverUrl] = { ok: false, error: msg };
             // Report the NEXT attempt in the same breath as the failure, so the log
             // says what will happen rather than leaving the user to infer it.
             const next = noteTargetFailure(cred.serverUrl, msg);
@@ -510,10 +580,15 @@ export async function syncSessions(opts = {}) {
             // The error CLASS, never the message: a server error string can quote a
             // path or a payload, and this channel must not carry either.
             record({
-                kind: next.open ? 'breaker_trip' : 'target_failure',
+                // `tripped`, not `open`: an open breaker re-opens on every attempt until
+                // a success clears it, so `open` counted elapsed time. Every failure is
+                // still reported — as `target_failure`, carrying the streak in
+                // `failures` — so nothing becomes invisible, it just stops being counted
+                // as a fresh incident.
+                kind: next.tripped ? 'breaker_trip' : 'target_failure',
                 failures: next.failures,
                 retryInMs: next.retryInMs,
-                errorClass: classifyError(msg),
+                errorClass: classifyError(msg, e),
                 local: isLocalHost(cred.serverUrl) ? 1 : 0,
             });
         }
@@ -556,7 +631,9 @@ export async function syncSessions(opts = {}) {
         throw new Error(`sync failed for all targets:\n  ${errors.join('\n  ')}`);
     if (errors.length > 0)
         console.error(`[sync] ${errors.length} target(s) failed (others succeeded):\n  ${errors.join('\n  ')}`);
-    return agg;
+    // The per-target verdicts ride out with the aggregate, so the caller never has
+    // to infer one target's fate from the sum of all of them.
+    return { ...agg, perTarget };
 }
 /** POST one derived-field batch, retrying the ingest gate's 429 (honoring
  *  Retry-After) and transient 5xx. */
@@ -894,7 +971,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     // the check entirely. The upload path is the last place to say no.
     const risk = transportRisk(cred.serverUrl);
     if (risk)
-        throw new Error(risk);
+        throw classedError('insecure_transport', risk);
     const sync = loadSettings().sync;
     // Exclusions = local settings ∪ server-side tenant config (dashboard-edited).
     const serverCfg = await fetchTenantSyncConfig(cred);
@@ -1113,7 +1190,7 @@ async function syncToTargetInScope(cred, opts = {}) {
                 // token was revoked or the tenant is gone. Every future sync will fail
                 // the same way until the human reconnects — say exactly that.
                 if (res.status === 401 || res.status === 403) {
-                    throw new Error(`server rejected this machine's device token (HTTP ${res.status} — revoked?). Reconnect with: chat-recall login ${base}`);
+                    throw classedError('auth', `server rejected this machine's device token (HTTP ${res.status} — revoked?). Reconnect with: chat-recall login ${base}`);
                 }
                 // 402 is a standing plan condition, not a glitch: a meter (monthly
                 // quota / storage cap) or a missing email confirmation. The server's
@@ -1135,7 +1212,9 @@ async function syncToTargetInScope(cred, opts = {}) {
                             detail += `\n  ${body.upgradeUrl}`;
                     }
                     catch { /* non-JSON 402 — print as-is */ }
-                    throw new Error(`sync paused by the server: ${detail}`);
+                    // CLASSED, because this message deliberately drops the status: the
+                    // reader gets the server's sentence, and the machine gets the class.
+                    throw classedError('payment_required', `sync paused by the server: ${detail}`);
                 }
                 if (!retryable)
                     throw new Error(`sync failed: HTTP ${res.status} ${text}`);
@@ -1151,7 +1230,11 @@ async function syncToTargetInScope(cred, opts = {}) {
                 continue;
             }
             catch (err) {
-                const fatal = err instanceof Error && /HTTP 4\d\d|sync failed after/.test(err.message);
+                // A STANDING condition first, by tag — a 402 whose message was rewritten
+                // for the reader has no `HTTP 402` left to match, so the regex alone
+                // retried every quota-paused batch four times with backoff.
+                const fatal = isStandingFailure(err)
+                    || (err instanceof Error && /HTTP 4\d\d|sync failed after/.test(err.message));
                 if (fatal || attempt >= RETRY_DELAYS_MS.length)
                     throw err;
                 console.error(`[sync] upload attempt ${attempt + 1} failed (${err instanceof Error ? err.message : err}) — retrying in ${RETRY_DELAYS_MS[attempt] / 1000}s`);
@@ -2090,10 +2173,20 @@ export async function buildConversationSync(ref, mtime, opts = {}) {
                     console.error(`[sync] ${ref.prefixedId} is ${(containerBytes / 1048576).toFixed(0)}MB `
                         + `(over the ${(FULL_BUILD_MAX_BYTES / 1048576).toFixed(0)}MB ceiling) — shipping without `
                         + 'the raw archive and derived data to keep the walk in memory');
-                    // Size and tool only. Knowing that customers hit this, and how big
-                    // their sessions get, is how the ceiling gets set from evidence rather
-                    // than from one developer's corpus.
-                    record({ kind: 'oversized_session', mb: Math.round(containerBytes / 1048576), tool: ref.toolId });
+                    // Size, tool, and a de-duplication key. Knowing that customers hit
+                    // this, and how big their sessions get, is how the ceiling gets set
+                    // from evidence rather than from one developer's corpus.
+                    //
+                    // `dedupeKey` is what makes the count mean SESSIONS. This event repeats
+                    // on every walk while the transcript stays oversized, so the raw event
+                    // count read as 38 oversized sessions on a device that had one — the
+                    // same 117MB transcript, reported 38 times in a week.
+                    record({
+                        kind: 'oversized_session',
+                        mb: Math.round(containerBytes / 1048576),
+                        tool: ref.toolId,
+                        dedupeKey: stableMark(ref.prefixedId),
+                    });
                     includeRaw = false;
                     includeMeta = false;
                 }