chat-recall 0.5.31 → 0.6.0

package/dist/cli.js

@@ -4259,7 +4259,7 @@ var require_pino = __commonJS({
         messageKey,
         errorKey,
         nestedKey,
-        base: base2,
+        base: base3,
         name,
         level: level2,
         customLevels,
@@ -4298,11 +4298,11 @@ var require_pino = __commonJS({
         [formattersSym]: allFormatters
       });
       let chindings = "";
-      if (base2 !== null) {
+      if (base3 !== null) {
         if (name === void 0) {
-          chindings = coreChindings(base2);
+          chindings = coreChindings(base3);
         } else {
-          chindings = coreChindings(Object.assign({}, base2, { name }));
+          chindings = coreChindings(Object.assign({}, base3, { name }));
         }
       }
       const time2 = timestamp instanceof Function ? timestamp : timestamp ? epochTime : nullTime;
@@ -4743,56 +4743,56 @@ function freshDefaults() {
     team: defaultTeam()
   };
 }
-function mergeSources(base2, partial) {
+function mergeSources(base3, partial) {
   if (!partial)
-    return base2;
+    return base3;
   const enabled = {
-    claude: { ...base2.enabled.claude, ...partial.enabled?.claude ?? {} },
-    gemini: { ...base2.enabled.gemini, ...partial.enabled?.gemini ?? {} },
-    opencode: { ...base2.enabled.opencode, ...partial.enabled?.opencode ?? {} },
-    codex: { ...base2.enabled.codex, ...partial.enabled?.codex ?? {} },
-    agy: { ...base2.enabled.agy, ...partial.enabled?.agy ?? {} },
-    cursor: { ...base2.enabled.cursor, ...partial.enabled?.cursor ?? {} },
-    shared: { ...base2.enabled.shared, ...partial.enabled?.shared ?? {} },
-    common: { ...base2.enabled.common, ...partial.enabled?.common ?? {} }
+    claude: { ...base3.enabled.claude, ...partial.enabled?.claude ?? {} },
+    gemini: { ...base3.enabled.gemini, ...partial.enabled?.gemini ?? {} },
+    opencode: { ...base3.enabled.opencode, ...partial.enabled?.opencode ?? {} },
+    codex: { ...base3.enabled.codex, ...partial.enabled?.codex ?? {} },
+    agy: { ...base3.enabled.agy, ...partial.enabled?.agy ?? {} },
+    cursor: { ...base3.enabled.cursor, ...partial.enabled?.cursor ?? {} },
+    shared: { ...base3.enabled.shared, ...partial.enabled?.shared ?? {} },
+    common: { ...base3.enabled.common, ...partial.enabled?.common ?? {} }
   };
   return {
-    claudeHome: partial.claudeHome ?? base2.claudeHome,
-    geminiHome: partial.geminiHome ?? base2.geminiHome,
-    codexHome: partial.codexHome ?? base2.codexHome,
-    opencodeDbPath: partial.opencodeDbPath ?? base2.opencodeDbPath,
-    agyHome: partial.agyHome ?? base2.agyHome,
-    cursorHome: partial.cursorHome ?? base2.cursorHome,
-    cursorIdeHome: partial.cursorIdeHome ?? base2.cursorIdeHome,
-    extraClaudeHomes: partial.extraClaudeHomes ?? base2.extraClaudeHomes,
-    approvedHomes: partial.approvedHomes ?? base2.approvedHomes,
-    declinedHomes: partial.declinedHomes ?? base2.declinedHomes,
-    homesGrandfathered: partial.homesGrandfathered ?? base2.homesGrandfathered,
+    claudeHome: partial.claudeHome ?? base3.claudeHome,
+    geminiHome: partial.geminiHome ?? base3.geminiHome,
+    codexHome: partial.codexHome ?? base3.codexHome,
+    opencodeDbPath: partial.opencodeDbPath ?? base3.opencodeDbPath,
+    agyHome: partial.agyHome ?? base3.agyHome,
+    cursorHome: partial.cursorHome ?? base3.cursorHome,
+    cursorIdeHome: partial.cursorIdeHome ?? base3.cursorIdeHome,
+    extraClaudeHomes: partial.extraClaudeHomes ?? base3.extraClaudeHomes,
+    approvedHomes: partial.approvedHomes ?? base3.approvedHomes,
+    declinedHomes: partial.declinedHomes ?? base3.declinedHomes,
+    homesGrandfathered: partial.homesGrandfathered ?? base3.homesGrandfathered,
     enabled
   };
 }
-function mergePrivacy(base2, partial) {
+function mergePrivacy(base3, partial) {
   if (!partial)
-    return base2;
-  return { ...base2, ...partial };
+    return base3;
+  return { ...base3, ...partial };
 }
-function mergeSync(base2, partial) {
+function mergeSync(base3, partial) {
   if (!partial)
-    return base2;
+    return base3;
   return {
-    ...base2,
+    ...base3,
     ...partial,
-    upload: { ...base2.upload, ...partial.upload ?? {} }
+    upload: { ...base3.upload, ...partial.upload ?? {} }
   };
 }
-function mergeTeam(base2, partial) {
+function mergeTeam(base3, partial) {
   if (!partial)
-    return base2;
+    return base3;
   return {
-    ...base2,
+    ...base3,
     ...partial,
-    publishAllowed: { ...base2.publishAllowed, ...partial.publishAllowed ?? {} },
-    vault: { ...base2.vault, ...partial.vault ?? {} }
+    publishAllowed: { ...base3.publishAllowed, ...partial.publishAllowed ?? {} },
+    vault: { ...base3.vault, ...partial.vault ?? {} }
   };
 }
 function settingsFilePath() {
@@ -4910,15 +4910,15 @@ function loadSettings() {
   }
   try {
     const parsed = JSON.parse(readFileSync(path, "utf-8"));
-    const base2 = freshDefaults();
+    const base3 = freshDefaults();
     const result = {
       v: SCHEMA_VERSION,
-      embedding: { ...base2.embedding, ...parsed.embedding ?? {} },
-      summary: { ...base2.summary, ...parsed.summary ?? {} },
-      sources: mergeSources(base2.sources, parsed.sources),
-      privacy: mergePrivacy(base2.privacy, parsed.privacy),
-      sync: mergeSync(base2.sync, parsed.sync),
-      team: mergeTeam(base2.team, parsed.team)
+      embedding: { ...base3.embedding, ...parsed.embedding ?? {} },
+      summary: { ...base3.summary, ...parsed.summary ?? {} },
+      sources: mergeSources(base3.sources, parsed.sources),
+      privacy: mergePrivacy(base3.privacy, parsed.privacy),
+      sync: mergeSync(base3.sync, parsed.sync),
+      team: mergeTeam(base3.team, parsed.team)
     };
     if (mtimeMs >= 0)
       _settingsCache = { mtimeMs, size, value: structuredClone(result) };
@@ -5125,10 +5125,10 @@ function legacyAutoSyncedHomes() {
     { base: join3(home, ".local", "share", "opencode"), marker: "opencode.db" },
     { base: join3(home, ".cursor"), marker: "chats" }
   ];
-  for (const { base: base2, marker } of bases) {
-    add(base2, marker);
-    const parent = dirname3(base2);
-    const leaf = base2.slice(parent.length + 1);
+  for (const { base: base3, marker } of bases) {
+    add(base3, marker);
+    const parent = dirname3(base3);
+    const leaf = base3.slice(parent.length + 1);
     try {
       for (const e of readdirSync2(parent, { withFileTypes: true })) {
         if (!e.isDirectory())
@@ -5326,17 +5326,17 @@ function cursorHomeDir() {
 function cursorIdeHomeDir() {
   return process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome || (process.platform === "darwin" ? join4(homedir3(), "Library", "Application Support", "Cursor") : join4(homedir3(), ".config", "Cursor"));
 }
-function siblingHomes(base2, overridden, suffix) {
+function siblingHomes(base3, overridden, suffix) {
   const roots = [];
   const add = (home) => {
     const root = suffix ? join4(home, suffix) : home;
     if (existsSync4(root) && !roots.includes(root))
       roots.push(root);
   };
-  add(base2);
+  add(base3);
   if (!overridden) {
-    const parent = dirname4(base2);
-    const leaf = basename(base2);
+    const parent = dirname4(base3);
+    const leaf = basename(base3);
     try {
       for (const entry of readdirSync3(parent, { withFileTypes: true })) {
         if (!entry.isDirectory())
@@ -5594,8 +5594,8 @@ function _clearServerRulePack() {
   serverPack = null;
 }
 function activeRules() {
-  const base2 = settingsView().rules;
-  return serverPack && serverPack.rules.length > 0 ? [...base2, ...serverPack.rules] : base2;
+  const base3 = settingsView().rules;
+  return serverPack && serverPack.rules.length > 0 ? [...base3, ...serverPack.rules] : base3;
 }
 function isRedactionEnabled() {
   const env = isEnvRedactionRequested();
@@ -6063,6 +6063,64 @@ var init_chunker = __esm({
   }
 });
 
+// ../engine/dist/core/project-dir-name.js
+import { readdirSync as readdirSync4 } from "node:fs";
+function looksWindowsEncoded(dirName) {
+  return /^[A-Za-z]--/.test(dirName);
+}
+function decodeProjectDirName(dirName) {
+  if (!dirName)
+    return "";
+  if (looksWindowsEncoded(dirName)) {
+    const drive = dirName[0].toUpperCase();
+    const rest = dirName.slice(3).replace(/-/g, "\\");
+    return `${drive}:\\${rest}`;
+  }
+  return "/" + dirName.replace(/^-/, "").replace(/-/g, "/");
+}
+function resolveProjectDirName(dirName, deps = {}) {
+  const structural = decodeProjectDirName(dirName);
+  if (!dirName)
+    return structural;
+  if (looksWindowsEncoded(dirName))
+    return structural;
+  const readdir3 = deps.readdir ?? ((p) => readdirSync4(p, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name));
+  const encodeName = (name) => name.replace(/[-_.]/g, "-");
+  let remaining = dirName.replace(/^-/, "");
+  let current = "/";
+  while (remaining) {
+    let children;
+    try {
+      children = readdir3(current);
+    } catch {
+      break;
+    }
+    let best = "";
+    for (const child of children) {
+      const encoded = encodeName(child);
+      if (!encoded || encoded.length < best.length)
+        continue;
+      if (!remaining.startsWith(encoded))
+        continue;
+      const next = remaining[encoded.length];
+      if (next !== void 0 && next !== "-")
+        continue;
+      if (encoded.length > best.length)
+        best = child;
+    }
+    if (!best)
+      break;
+    current = current === "/" ? `/${best}` : `${current}/${best}`;
+    remaining = remaining.slice(encodeName(best).length).replace(/^-/, "");
+  }
+  return remaining ? structural : current;
+}
+var init_project_dir_name = __esm({
+  "../engine/dist/core/project-dir-name.js"() {
+    "use strict";
+  }
+});
+
 // ../engine/dist/core/model-pricing.js
 function pricingFor(modelId) {
   if (!modelId)
@@ -6234,7 +6292,7 @@ var init_model_pricing = __esm({
 });
 
 // ../engine/dist/parsers/session.js
-import { createReadStream, existsSync as existsSync5, readdirSync as readdirSync4, readFileSync as readFileSync2, statSync as statSync4, openSync, readSync, closeSync } from "fs";
+import { createReadStream, existsSync as existsSync5, readdirSync as readdirSync5, readFileSync as readFileSync2, statSync as statSync4, openSync, readSync, closeSync } from "fs";
 import { createInterface } from "readline";
 import { join as join5, basename as basename2 } from "path";
 function removeCodeBlocks(text) {
@@ -6305,7 +6363,7 @@ function* iterAllSessionIndices(claudeDir) {
   if (!existsSync5(dir)) {
     return;
   }
-  const entries = readdirSync4(dir, { withFileTypes: true });
+  const entries = readdirSync5(dir, { withFileTypes: true });
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
@@ -6327,7 +6385,7 @@ function getSubagentPaths(sessionPath) {
   const subagentsDir = join5(sessionPath.slice(0, -6), "subagents");
   if (!existsSync5(subagentsDir))
     return [];
-  return readdirSync4(subagentsDir).filter((f) => f.endsWith(".jsonl")).sort().map((f) => join5(subagentsDir, f));
+  return readdirSync5(subagentsDir).filter((f) => f.endsWith(".jsonl")).sort().map((f) => join5(subagentsDir, f));
 }
 function getSubagentProjectPath(sessionPath, folderDerivedPath) {
   const subagentPaths = getSubagentPaths(sessionPath);
@@ -6644,40 +6702,6 @@ ${resultText}` : resultText;
   });
   return content;
 }
-function decodeDirName(dirName) {
-  const segments = dirName.replace(/^-/, "").split("-");
-  let currentPath = "/";
-  let i = 0;
-  while (i < segments.length) {
-    let matched = false;
-    const singleCandidate = join5(currentPath, segments[i]);
-    if (existsSync5(singleCandidate)) {
-      currentPath = singleCandidate;
-      i++;
-      matched = true;
-      continue;
-    }
-    for (let len = 2; len <= segments.length - i; len++) {
-      const joinedSegments = segments.slice(i, i + len);
-      for (const sep4 of ["-", "_", "."]) {
-        const candidate = join5(currentPath, joinedSegments.join(sep4));
-        if (existsSync5(candidate)) {
-          currentPath = candidate;
-          i += len;
-          matched = true;
-          break;
-        }
-      }
-      if (matched)
-        break;
-    }
-    if (!matched) {
-      currentPath = join5(currentPath, segments[i]);
-      i++;
-    }
-  }
-  return currentPath;
-}
 function* getAllSessions(claudeDir) {
   const seenSessionIds = /* @__PURE__ */ new Set();
   const projectDirs = claudeDir ? [claudeDir] : claudeProjectDirs();
@@ -6692,12 +6716,12 @@ function* getAllSessions(claudeDir) {
     }
     if (!existsSync5(dir))
       continue;
-    const dirEntries = readdirSync4(dir, { withFileTypes: true });
+    const dirEntries = readdirSync5(dir, { withFileTypes: true });
     for (const projDirEntry of dirEntries) {
       if (!projDirEntry.isDirectory())
         continue;
       const projectPath = join5(dir, projDirEntry.name);
-      const files = readdirSync4(projectPath);
+      const files = readdirSync5(projectPath);
       for (const file of files) {
         if (!file.endsWith(".jsonl"))
           continue;
@@ -6711,7 +6735,7 @@ function* getAllSessions(claudeDir) {
         const fullPath = join5(projectPath, file);
         try {
           const stat3 = statSync4(fullPath);
-          const derivedProjectPath = decodeDirName(projDirEntry.name);
+          const derivedProjectPath = resolveProjectDirName(projDirEntry.name);
           const effectiveMtime = getSessionMtime(fullPath);
           let projectPath2 = "";
           if (hasSubagentsDir(fullPath)) {
@@ -6750,6 +6774,7 @@ var init_session = __esm({
     init_chunker();
     init_claude2();
     init_tool_paths();
+    init_project_dir_name();
     init_model_pricing();
   }
 });
@@ -7487,7 +7512,7 @@ async function archiveRawSession(store, sessionId) {
   return await store.putRawSession(sessionId, exp.tool, Math.floor(exp.mtime), gz, size);
 }
 function detectForkPredecessor(sessionPath) {
-  const { readFileSync: readFileSync50, readdirSync: readdirSync36 } = requireFs();
+  const { readFileSync: readFileSync50, readdirSync: readdirSync37 } = requireFs();
   const { dirname: dirname28, join: join61, basename: basename30 } = requirePath();
   let text;
   try {
@@ -7517,7 +7542,7 @@ function detectForkPredecessor(sessionPath) {
   const self = basename30(sessionPath);
   let entries;
   try {
-    entries = readdirSync36(dir);
+    entries = readdirSync37(dir);
   } catch {
     return null;
   }
@@ -8342,7 +8367,7 @@ var init_flat_string = __esm({
 
 // ../engine/dist/core/backends/gemini.js
 import { createHash as createHash3 } from "crypto";
-import { existsSync as existsSync7, readdirSync as readdirSync5, readFileSync as readFileSync3, statSync as statSync6 } from "fs";
+import { existsSync as existsSync7, readdirSync as readdirSync6, readFileSync as readFileSync3, statSync as statSync6 } from "fs";
 import { basename as basename7, join as join8 } from "path";
 function readSessionId(path, format) {
   try {
@@ -8456,7 +8481,7 @@ var init_gemini2 = __esm({
         const out = [];
         const seen = /* @__PURE__ */ new Map();
         for (const root of geminiTmpDirs()) {
-          for (const projDir of readdirSync5(root, { withFileTypes: true })) {
+          for (const projDir of readdirSync6(root, { withFileTypes: true })) {
             if (!projDir.isDirectory())
               continue;
             const projectPath = projMap.get(projDir.name) || "";
@@ -8467,7 +8492,7 @@ var init_gemini2 = __esm({
               continue;
             let files;
             try {
-              files = readdirSync5(chatsDir);
+              files = readdirSync6(chatsDir);
             } catch {
               continue;
             }
@@ -8690,7 +8715,7 @@ var init_gemini2 = __esm({
           return [];
         const projMap = this.loadProjectMap();
         const candidates2 = [];
-        for (const proj of readdirSync5(tmpRoot, { withFileTypes: true })) {
+        for (const proj of readdirSync6(tmpRoot, { withFileTypes: true })) {
           if (!proj.isDirectory())
             continue;
           const projectPath = projMap.get(proj.name) || "";
@@ -8704,7 +8729,7 @@ var init_gemini2 = __esm({
             continue;
           let files;
           try {
-            files = readdirSync5(chats);
+            files = readdirSync6(chats);
           } catch {
             continue;
           }
@@ -9370,7 +9395,7 @@ var init_opencode = __esm({
 });
 
 // ../engine/dist/core/backends/codex.js
-import { readdirSync as readdirSync6, readFileSync as readFileSync4, statSync as statSync7, openSync as openSync3, readSync as readSync3, closeSync as closeSync3 } from "fs";
+import { readdirSync as readdirSync7, readFileSync as readFileSync4, statSync as statSync7, openSync as openSync3, readSync as readSync3, closeSync as closeSync3 } from "fs";
 import { basename as basename8, dirname as dirname9, join as join10 } from "path";
 function parseShellWrites(cmd) {
   const out = [];
@@ -9466,7 +9491,7 @@ function parseCodexPatch(input) {
 function* walkRollouts(root) {
   let entries;
   try {
-    entries = readdirSync6(root, { withFileTypes: true });
+    entries = readdirSync7(root, { withFileTypes: true });
   } catch {
     return;
   }
@@ -9758,7 +9783,7 @@ var init_codex2 = __esm({
         const dayDir = located.path.substring(0, located.path.lastIndexOf("/"));
         let entries = [];
         try {
-          entries = readdirSync6(dayDir);
+          entries = readdirSync7(dayDir);
         } catch {
         }
         for (const entry of entries) {
@@ -9944,7 +9969,7 @@ var init_codex2 = __esm({
         const scanDir = (dir) => {
           let entries;
           try {
-            entries = readdirSync6(dir, { withFileTypes: true });
+            entries = readdirSync7(dir, { withFileTypes: true });
           } catch {
             return;
           }
@@ -10037,7 +10062,7 @@ var init_codex2 = __esm({
         if (parentId) {
           const dayDir = dirname9(loc.path);
           try {
-            for (const f of readdirSync6(dayDir)) {
+            for (const f of readdirSync7(dayDir)) {
               if (!f.endsWith(".jsonl") || !f.startsWith("rollout-"))
                 continue;
               const p = join10(dayDir, f);
@@ -10084,7 +10109,7 @@ var init_codex2 = __esm({
 });
 
 // ../engine/dist/core/backends/agy.js
-import { existsSync as existsSync9, readdirSync as readdirSync7, readFileSync as readFileSync5, statSync as statSync8 } from "fs";
+import { existsSync as existsSync9, readdirSync as readdirSync8, readFileSync as readFileSync5, statSync as statSync8 } from "fs";
 import { basename as basename9, dirname as dirname10, join as join11 } from "path";
 function agyTranscriptPath(logsDir) {
   const full = join11(logsDir, "transcript_full.jsonl");
@@ -10253,7 +10278,7 @@ var init_agy = __esm({
         for (const brainDir of agyBrainDirs()) {
           let sessionDirs;
           try {
-            sessionDirs = readdirSync7(brainDir);
+            sessionDirs = readdirSync8(brainDir);
           } catch {
             continue;
           }
@@ -10528,7 +10553,7 @@ var init_agy = __esm({
         const candidates2 = [];
         let sessionDirs;
         try {
-          sessionDirs = readdirSync7(brainDir);
+          sessionDirs = readdirSync8(brainDir);
         } catch {
           return [];
         }
@@ -10604,7 +10629,7 @@ var init_agy = __esm({
 });
 
 // ../engine/dist/core/backends/cursor-store.js
-import { existsSync as existsSync10, readdirSync as readdirSync8, readFileSync as readFileSync6, statSync as statSync9 } from "fs";
+import { existsSync as existsSync10, readdirSync as readdirSync9, readFileSync as readFileSync6, statSync as statSync9 } from "fs";
 import { join as join12 } from "path";
 function cursorProjectSlug(absPath) {
   return absPath.replace(/[^a-zA-Z0-9]/g, "-").replace(/-+/g, "-").replace(/^-+|-+$/g, "");
@@ -10613,7 +10638,7 @@ function listChatsIn(chatsRoot) {
   const out = [];
   let hashDirs;
   try {
-    hashDirs = readdirSync8(chatsRoot);
+    hashDirs = readdirSync9(chatsRoot);
   } catch {
     return out;
   }
@@ -10623,7 +10648,7 @@ function listChatsIn(chatsRoot) {
     try {
       if (!statSync9(hashPath3).isDirectory())
         continue;
-      chatIds = readdirSync8(hashPath3);
+      chatIds = readdirSync9(hashPath3);
     } catch {
       continue;
     }
@@ -10668,7 +10693,7 @@ function findChat(chatsRoots, chatId) {
   for (const root of chatsRoots) {
     let hashDirs;
     try {
-      hashDirs = readdirSync8(root);
+      hashDirs = readdirSync9(root);
     } catch {
       continue;
     }
@@ -10989,7 +11014,7 @@ var init_cursor_store = __esm({
 });
 
 // ../engine/dist/core/backends/cursor-ide.js
-import { existsSync as existsSync11, readFileSync as readFileSync7, readdirSync as readdirSync9, statSync as statSync10 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync7, readdirSync as readdirSync10, statSync as statSync10 } from "fs";
 import { dirname as dirname11, join as join13 } from "path";
 function jsonOf(value) {
   if (value == null)
@@ -11052,7 +11077,7 @@ function workspaceIndex(workspaceRoots) {
   for (const root of workspaceRoots) {
     let entries;
     try {
-      entries = readdirSync9(root);
+      entries = readdirSync10(root);
     } catch {
       continue;
     }
@@ -11139,7 +11164,7 @@ function listComposers(globalDbPath, workspaceRoots) {
   for (const root of workspaceRoots) {
     let entries;
     try {
-      entries = readdirSync9(root);
+      entries = readdirSync10(root);
     } catch {
       continue;
     }
@@ -12039,28 +12064,8 @@ var init_shadow = __esm({
   }
 });
 
-// ../engine/dist/core/project-dir-name.js
-function looksWindowsEncoded(dirName) {
-  return /^[A-Za-z]--/.test(dirName);
-}
-function decodeProjectDirName(dirName) {
-  if (!dirName)
-    return "";
-  if (looksWindowsEncoded(dirName)) {
-    const drive = dirName[0].toUpperCase();
-    const rest = dirName.slice(3).replace(/-/g, "\\");
-    return `${drive}:\\${rest}`;
-  }
-  return "/" + dirName.replace(/^-/, "").replace(/-/g, "/");
-}
-var init_project_dir_name = __esm({
-  "../engine/dist/core/project-dir-name.js"() {
-    "use strict";
-  }
-});
-
 // ../engine/dist/core/live-session-scan.js
-import { existsSync as existsSync14, readdirSync as readdirSync10, readFileSync as readFileSync10, statSync as statSync13, openSync as openSync4, readSync as readSync4, closeSync as closeSync4 } from "fs";
+import { existsSync as existsSync14, readdirSync as readdirSync11, readFileSync as readFileSync10, statSync as statSync13, openSync as openSync4, readSync as readSync4, closeSync as closeSync4 } from "fs";
 import { join as join16, basename as basename10 } from "path";
 import { createHash as createHash5 } from "crypto";
 function lazyGeminiProjectsJson() {
@@ -12097,7 +12102,7 @@ function sessionFileIndex() {
     seenRoots.add(root);
     let entries;
     try {
-      entries = readdirSync10(root, { withFileTypes: true });
+      entries = readdirSync11(root, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -12107,7 +12112,7 @@ function sessionFileIndex() {
       const dir = join16(root, entry.name);
       let names;
       try {
-        names = readdirSync10(dir);
+        names = readdirSync11(dir);
       } catch {
         continue;
       }
@@ -12118,7 +12123,7 @@ function sessionFileIndex() {
         const located = {
           path: join16(dir, name),
           projectDir: entry.name,
-          projectPath: decodeProjectDirName(entry.name)
+          projectPath: resolveProjectDirName(entry.name)
         };
         const prior = byId.get(id);
         if (prior)
@@ -12205,7 +12210,7 @@ function resolveSessionContentPaths(sessionFile) {
   const subDir = join16(sessionFile.slice(0, -6), "subagents");
   if (!existsSync14(subDir))
     return [sessionFile];
-  const subPaths = readdirSync10(subDir).filter((f) => f.endsWith(".jsonl")).sort().map((f) => join16(subDir, f));
+  const subPaths = readdirSync11(subDir).filter((f) => f.endsWith(".jsonl")).sort().map((f) => join16(subDir, f));
   return [sessionFile, ...subPaths];
 }
 function loadGeminiProjectMap() {
@@ -12253,7 +12258,7 @@ function geminiIndex() {
       continue;
     let projs;
     try {
-      projs = readdirSync10(tmpRoot, { withFileTypes: true });
+      projs = readdirSync11(tmpRoot, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -12265,14 +12270,14 @@ function geminiIndex() {
         continue;
       let files;
       try {
-        files = readdirSync10(chats);
+        files = readdirSync11(chats);
       } catch {
         continue;
       }
       for (const f of files) {
         if (!isGeminiChat(f))
           continue;
-        const base2 = f.replace(/\.jsonl?$/, "");
+        const base3 = f.replace(/\.jsonl?$/, "");
         const located = {
           path: join16(chats, f),
           projectDir: proj.name,
@@ -12280,9 +12285,9 @@ function geminiIndex() {
           format: f.endsWith(".jsonl") ? "jsonl" : "json"
         };
         all.push(located);
-        if (!byBase.has(base2))
-          byBase.set(base2, located);
-        const tail = base2.split("-").pop() || "";
+        if (!byBase.has(base3))
+          byBase.set(base3, located);
+        const tail = base3.split("-").pop() || "";
         if (tail.length >= 4 && !byTail.has(tail))
           byTail.set(tail, located);
       }
@@ -12384,21 +12389,21 @@ function findCodexSessionFile(sessionId) {
 function findCodexSessionFileIn(root, sessionId) {
   if (!existsSync14(root))
     return null;
-  for (const year of readdirSync10(root, { withFileTypes: true })) {
+  for (const year of readdirSync11(root, { withFileTypes: true })) {
     if (!year.isDirectory())
       continue;
     const yearPath = join16(root, year.name);
-    for (const month of readdirSync10(yearPath, { withFileTypes: true })) {
+    for (const month of readdirSync11(yearPath, { withFileTypes: true })) {
       if (!month.isDirectory())
         continue;
       const monthPath = join16(yearPath, month.name);
-      for (const day of readdirSync10(monthPath, { withFileTypes: true })) {
+      for (const day of readdirSync11(monthPath, { withFileTypes: true })) {
         if (!day.isDirectory())
           continue;
         const dayPath = join16(monthPath, day.name);
         let files;
         try {
-          files = readdirSync10(dayPath);
+          files = readdirSync11(dayPath);
         } catch {
           continue;
         }
@@ -12413,7 +12418,7 @@ function findCodexSessionFileIn(root, sessionId) {
     }
   }
   function scanDir(dir) {
-    for (const entry of readdirSync10(dir, { withFileTypes: true })) {
+    for (const entry of readdirSync11(dir, { withFileTypes: true })) {
       if (entry.isDirectory()) {
         const found = scanDir(join16(dir, entry.name));
         if (found)
@@ -12568,7 +12573,7 @@ var init_first_prompt = __esm({
 });
 
 // ../engine/dist/core/backends/claude.js
-import { existsSync as existsSync16, readdirSync as readdirSync11, readFileSync as readFileSync11, statSync as statSync14, openSync as openSync6, readSync as readSync6, closeSync as closeSync6 } from "fs";
+import { existsSync as existsSync16, readdirSync as readdirSync12, readFileSync as readFileSync11, statSync as statSync14, openSync as openSync6, readSync as readSync6, closeSync as closeSync6 } from "fs";
 import { join as join17, basename as basename11 } from "path";
 function stripReminders(text) {
   return text.replace(/<system-reminder>[\s\S]*?<\/system-reminder>/g, "").trim();
@@ -12723,13 +12728,13 @@ var init_claude2 = __esm({
       collectSessionsFromRoot(root, cutoff, filter, seen, out) {
         if (!existsSync16(root))
           return;
-        for (const proj of readdirSync11(root, { withFileTypes: true })) {
+        for (const proj of readdirSync12(root, { withFileTypes: true })) {
           if (!proj.isDirectory())
             continue;
           if (filter && !proj.name.toLowerCase().includes(filter))
             continue;
           const projPath = join17(root, proj.name);
-          const projectPath = decodeProjectDirName(proj.name);
+          const projectPath = resolveProjectDirName(proj.name);
           const indexPath = join17(projPath, "sessions-index.json");
           if (existsSync16(indexPath)) {
             try {
@@ -12760,7 +12765,7 @@ var init_claude2 = __esm({
           }
           let files;
           try {
-            files = readdirSync11(projPath);
+            files = readdirSync12(projPath);
           } catch {
             continue;
           }
@@ -13029,7 +13034,7 @@ var init_claude2 = __esm({
         for (const root of claudeProjectDirs()) {
           if (!existsSync16(root))
             continue;
-          for (const projEntry of readdirSync11(root, { withFileTypes: true })) {
+          for (const projEntry of readdirSync12(root, { withFileTypes: true })) {
             if (!projEntry.isDirectory())
               continue;
             if (opts.projectFilter && !projEntry.name.toLowerCase().includes(opts.projectFilter.toLowerCase()))
@@ -13037,7 +13042,7 @@ var init_claude2 = __esm({
             const projPath = join17(root, projEntry.name);
             let files;
             try {
-              files = readdirSync11(projPath);
+              files = readdirSync12(projPath);
             } catch {
               continue;
             }
@@ -13050,7 +13055,7 @@ var init_claude2 = __esm({
                 let mtime = st.mtimeMs;
                 const subDir = join17(projPath, f.slice(0, -6), "subagents");
                 if (existsSync16(subDir)) {
-                  for (const sub of readdirSync11(subDir)) {
+                  for (const sub of readdirSync12(subDir)) {
                     try {
                       const subSt = statSync14(join17(subDir, sub));
                       if (subSt.mtimeMs > mtime)
@@ -13167,7 +13172,7 @@ __export(project_resolver_exports, {
 });
 import { execSync } from "child_process";
 import { createHash as createHash6 } from "crypto";
-import { existsSync as existsSync17, readFileSync as readFileSync12, realpathSync as realpathSync2, readdirSync as readdirSync12, statSync as statSync15 } from "fs";
+import { existsSync as existsSync17, readFileSync as readFileSync12, realpathSync as realpathSync2, readdirSync as readdirSync13, statSync as statSync15 } from "fs";
 import { basename as basename12, dirname as dirname13, isAbsolute, join as join18, resolve, sep } from "path";
 function getProjectsConfigPath() {
   return join18(getDataDir(), "projects.json");
@@ -13440,7 +13445,7 @@ function countGitChildren(dir) {
   let count = 0;
   let entries;
   try {
-    entries = readdirSync12(dir);
+    entries = readdirSync13(dir);
   } catch {
     return 0;
   }
@@ -13555,7 +13560,7 @@ var init_credentials_env = __esm({
 
 // ../engine/dist/core/source-discovery.js
 import { createHash as createHash7 } from "crypto";
-import { existsSync as existsSync18, readdirSync as readdirSync13, statSync as statSync16 } from "fs";
+import { existsSync as existsSync18, readdirSync as readdirSync14, statSync as statSync16 } from "fs";
 import { join as join19 } from "path";
 function sourceId(path) {
   return "src_" + createHash7("sha256").update(path).digest("hex").slice(0, 12);
@@ -13592,7 +13597,7 @@ function countTranscripts(root, tool) {
       return;
     let entries;
     try {
-      entries = readdirSync13(dir, { withFileTypes: true });
+      entries = readdirSync14(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -13671,7 +13676,7 @@ __export(home_discovery_exports, {
   sessionIdsInHome: () => sessionIdsInHome
 });
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync19, readdirSync as readdirSync14, readFileSync as readFileSync13, realpathSync as realpathSync3, statSync as statSync17 } from "fs";
+import { existsSync as existsSync19, readdirSync as readdirSync15, readFileSync as readFileSync13, realpathSync as realpathSync3, statSync as statSync17 } from "fs";
 import { homedir as homedir5, platform as osPlatform } from "os";
 import { join as join20 } from "path";
 function candidateRoots(plat = osPlatform(), env = process.env) {
@@ -13715,7 +13720,7 @@ function dirHasTranscript(root, match, depth) {
     return false;
   let entries;
   try {
-    entries = readdirSync14(root, { withFileTypes: true });
+    entries = readdirSync15(root, { withFileTypes: true });
   } catch {
     return false;
   }
@@ -13747,7 +13752,7 @@ function countSessions(dir, tool) {
       return;
     let entries;
     try {
-      entries = readdirSync14(d, { withFileTypes: true });
+      entries = readdirSync15(d, { withFileTypes: true });
     } catch {
       return;
     }
@@ -13799,7 +13804,7 @@ function sessionIdsInHome(dir, tool) {
     return [];
   if (tool === "agy") {
     try {
-      for (const e of readdirSync14(join20(dir, "brain"), { withFileTypes: true })) {
+      for (const e of readdirSync15(join20(dir, "brain"), { withFileTypes: true })) {
         if (e.isDirectory())
           out.add(`agy_${e.name}`);
       }
@@ -13809,11 +13814,11 @@ function sessionIdsInHome(dir, tool) {
   }
   if (tool === "cursor") {
     try {
-      for (const hash of readdirSync14(join20(dir, "chats"), { withFileTypes: true })) {
+      for (const hash of readdirSync15(join20(dir, "chats"), { withFileTypes: true })) {
         if (!hash.isDirectory())
           continue;
         try {
-          for (const chat of readdirSync14(join20(dir, "chats", hash.name), { withFileTypes: true })) {
+          for (const chat of readdirSync15(join20(dir, "chats", hash.name), { withFileTypes: true })) {
             if (chat.isDirectory())
               out.add(`cursor_${chat.name}`);
           }
@@ -13829,7 +13834,7 @@ function sessionIdsInHome(dir, tool) {
       return;
     let entries;
     try {
-      entries = readdirSync14(d, { withFileTypes: true });
+      entries = readdirSync15(d, { withFileTypes: true });
     } catch {
       return;
     }
@@ -13901,7 +13906,7 @@ function runningToolHomes(plat = osPlatform()) {
   if (plat === "linux") {
     let pids;
     try {
-      pids = readdirSync14("/proc").filter((p) => /^\d+$/.test(p));
+      pids = readdirSync15("/proc").filter((p) => /^\d+$/.test(p));
     } catch {
       return out;
     }
@@ -13981,7 +13986,7 @@ function walkForHomes(dir, depth, visit) {
     return;
   let entries;
   try {
-    entries = readdirSync14(dir, { withFileTypes: true });
+    entries = readdirSync15(dir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -15657,7 +15662,7 @@ var init_session_source = __esm({
 });
 
 // ../engine/dist/core/utils.js
-import { existsSync as existsSync22, readdirSync as readdirSync15 } from "fs";
+import { existsSync as existsSync22, readdirSync as readdirSync16 } from "fs";
 import { homedir as homedir6 } from "os";
 import { join as join23 } from "path";
 function splitByHeaders(markdown) {
@@ -15708,7 +15713,7 @@ function getClaudeDirs() {
   }
   add(join23(home, ".claude"));
   try {
-    const entries = readdirSync15(home, { withFileTypes: true });
+    const entries = readdirSync16(home, { withFileTypes: true });
     for (const entry of entries) {
       if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
         const candidate = join23(home, entry.name);
@@ -15738,7 +15743,7 @@ var init_utils = __esm({
 });
 
 // ../engine/dist/parsers/plan-source.js
-import { existsSync as existsSync23, readdirSync as readdirSync16, readFileSync as readFileSync16, statSync as statSync21 } from "fs";
+import { existsSync as existsSync23, readdirSync as readdirSync17, readFileSync as readFileSync16, statSync as statSync21 } from "fs";
 import { homedir as homedir7 } from "os";
 import { join as join24, basename as basename13 } from "path";
 import { createHash as createHash9 } from "crypto";
@@ -15765,7 +15770,7 @@ function parseFrontmatter(content) {
 }
 function safeReaddir(dir) {
   try {
-    return readdirSync16(dir);
+    return readdirSync17(dir);
   } catch {
     return [];
   }
@@ -15801,11 +15806,11 @@ var init_plan_source = __esm({
         if (!existsSync23(projectsDir))
           return this._knownProjectDirs;
         try {
-          const entries = readdirSync16(projectsDir, { withFileTypes: true });
+          const entries = readdirSync17(projectsDir, { withFileTypes: true });
           for (const entry of entries) {
             if (!entry.isDirectory() || entry.name.startsWith("."))
               continue;
-            const projectPath = decodeProjectDirName(entry.name);
+            const projectPath = resolveProjectDirName(entry.name);
             if (existsSync23(projectPath)) {
               this._knownProjectDirs.push(projectPath);
             }
@@ -15833,7 +15838,7 @@ var init_plan_source = __esm({
         for (const plansDir of this.plansDirs) {
           if (!existsSync23(plansDir))
             continue;
-          const files = readdirSync16(plansDir).filter((f) => f.endsWith(".md"));
+          const files = readdirSync17(plansDir).filter((f) => f.endsWith(".md"));
           for (const file of files) {
             if (seenClaude.has(file))
               continue;
@@ -15877,7 +15882,7 @@ var init_plan_source = __esm({
           return;
         let files;
         try {
-          files = readdirSync16(plansDir).filter((f) => f.endsWith(".md"));
+          files = readdirSync17(plansDir).filter((f) => f.endsWith(".md"));
         } catch {
           return;
         }
@@ -15924,7 +15929,7 @@ var init_plan_source = __esm({
         }
         let projDirs;
         try {
-          projDirs = readdirSync16(tmpRoot);
+          projDirs = readdirSync17(tmpRoot);
         } catch {
           return;
         }
@@ -15933,7 +15938,7 @@ var init_plan_source = __esm({
           const projRoot = join24(tmpRoot, projDir);
           let sessions;
           try {
-            sessions = readdirSync16(projRoot);
+            sessions = readdirSync17(projRoot);
           } catch {
             continue;
           }
@@ -15943,7 +15948,7 @@ var init_plan_source = __esm({
               continue;
             let files;
             try {
-              files = readdirSync16(plansDir).filter((f) => f.endsWith(".md"));
+              files = readdirSync17(plansDir).filter((f) => f.endsWith(".md"));
             } catch {
               continue;
             }
@@ -16152,7 +16157,7 @@ var init_plan_source = __esm({
           return;
         let sessionDirs;
         try {
-          sessionDirs = readdirSync16(brainDir);
+          sessionDirs = readdirSync17(brainDir);
         } catch {
           return;
         }
@@ -16166,7 +16171,7 @@ var init_plan_source = __esm({
           }
           let files;
           try {
-            files = readdirSync16(sessionPath).filter((f) => f.endsWith(".md"));
+            files = readdirSync17(sessionPath).filter((f) => f.endsWith(".md"));
           } catch {
             continue;
           }
@@ -16203,7 +16208,7 @@ var init_plan_source = __esm({
 });
 
 // ../engine/dist/parsers/task-source.js
-import { existsSync as existsSync24, readdirSync as readdirSync17, readFileSync as readFileSync17, statSync as statSync22 } from "fs";
+import { existsSync as existsSync24, readdirSync as readdirSync18, readFileSync as readFileSync17, statSync as statSync22 } from "fs";
 import { join as join25 } from "path";
 var MAX_CHUNK_CHARS2, TaskSource;
 var init_task_source = __esm({
@@ -16237,7 +16242,7 @@ var init_task_source = __esm({
           return;
         let files;
         try {
-          files = readdirSync17(todosDir).filter((f) => f.endsWith(".json"));
+          files = readdirSync18(todosDir).filter((f) => f.endsWith(".json"));
         } catch {
           return;
         }
@@ -16286,7 +16291,7 @@ var init_task_source = __esm({
       async *discoverInDir(tasksDir) {
         if (!existsSync24(tasksDir))
           return;
-        const entries = readdirSync17(tasksDir, { withFileTypes: true });
+        const entries = readdirSync18(tasksDir, { withFileTypes: true });
         for (const entry of entries) {
           if (!entry.isDirectory())
             continue;
@@ -16294,7 +16299,7 @@ var init_task_source = __esm({
           const taskDir = join25(tasksDir, sessionUuid);
           try {
             const stat3 = statSync22(taskDir);
-            const taskFiles = readdirSync17(taskDir).filter((f) => f.endsWith(".json"));
+            const taskFiles = readdirSync18(taskDir).filter((f) => f.endsWith(".json"));
             if (taskFiles.length === 0)
               continue;
             const tasks2 = this.readTasks(taskDir, taskFiles);
@@ -16328,7 +16333,7 @@ var init_task_source = __esm({
         const taskDir = item.filePath;
         if (!existsSync24(taskDir))
           return [];
-        const taskFiles = readdirSync17(taskDir).filter((f) => f.endsWith(".json"));
+        const taskFiles = readdirSync18(taskDir).filter((f) => f.endsWith(".json"));
         const tasks2 = this.readTasks(taskDir, taskFiles);
         if (tasks2.length === 0)
           return [];
@@ -16439,7 +16444,7 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
 });
 
 // ../engine/dist/parsers/claude-md-source.js
-import { existsSync as existsSync25, readFileSync as readFileSync18, readdirSync as readdirSync18, statSync as statSync23 } from "fs";
+import { existsSync as existsSync25, readFileSync as readFileSync18, readdirSync as readdirSync19, statSync as statSync23 } from "fs";
 import { homedir as homedir8 } from "os";
 import { join as join26, basename as basename14, dirname as dirname14 } from "path";
 import { createHash as createHash10 } from "crypto";
@@ -16456,11 +16461,11 @@ function discoverProjectDirs(claudeDir) {
     if (!existsSync25(projectsDir))
       return;
     try {
-      const entries = readdirSync18(projectsDir, { withFileTypes: true });
+      const entries = readdirSync19(projectsDir, { withFileTypes: true });
       for (const entry of entries) {
         if (!entry.isDirectory() || entry.name.startsWith("."))
           continue;
-        const projectPath = decodeProjectDirName(entry.name);
+        const projectPath = resolveProjectDirName(entry.name);
         addProject(projectPath);
       }
     } catch {
@@ -16473,7 +16478,7 @@ function discoverProjectDirs(claudeDir) {
   const home = homedir8();
   scanProjectsDir(claudeBackend.projectsDir());
   try {
-    for (const entry of readdirSync18(home, { withFileTypes: true })) {
+    for (const entry of readdirSync19(home, { withFileTypes: true })) {
       if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
         scanProjectsDir(join26(home, entry.name, "projects"));
       }
@@ -16575,7 +16580,7 @@ var init_claude_md_source = __esm({
             }
           }
           try {
-            const entries = readdirSync18(searchDir, { withFileTypes: true });
+            const entries = readdirSync19(searchDir, { withFileTypes: true });
             for (const entry of entries) {
               if (!entry.isDirectory())
                 continue;
@@ -16665,7 +16670,7 @@ var init_claude_md_source = __esm({
 });
 
 // ../engine/dist/parsers/agent-memory-source.js
-import { existsSync as existsSync26, readFileSync as readFileSync19, readdirSync as readdirSync19, statSync as statSync24 } from "fs";
+import { existsSync as existsSync26, readFileSync as readFileSync19, readdirSync as readdirSync20, statSync as statSync24 } from "fs";
 import { homedir as homedir9 } from "os";
 import { join as join27, basename as basename15 } from "path";
 function parseFrontmatter2(content) {
@@ -16693,7 +16698,7 @@ function parseFrontmatter2(content) {
   return { fm, body };
 }
 function projectHashToPath(hashDir) {
-  return decodeProjectDirName(hashDir);
+  return resolveProjectDirName(hashDir);
 }
 function discoverMemoryDirs() {
   const out = [];
@@ -16707,7 +16712,7 @@ function discoverMemoryDirs() {
   const home = homedir9();
   const claudeRoots = [claudeBackend.projectsDir()];
   try {
-    for (const entry of readdirSync19(home, { withFileTypes: true })) {
+    for (const entry of readdirSync20(home, { withFileTypes: true })) {
       if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
         claudeRoots.push(join27(home, entry.name, "projects"));
       }
@@ -16718,7 +16723,7 @@ function discoverMemoryDirs() {
     if (!existsSync26(projectsDir))
       continue;
     try {
-      for (const entry of readdirSync19(projectsDir, { withFileTypes: true })) {
+      for (const entry of readdirSync20(projectsDir, { withFileTypes: true })) {
         if (!entry.isDirectory() || entry.name.startsWith("."))
           continue;
         add(join27(projectsDir, entry.name, "memory"), entry.name);
@@ -16747,7 +16752,7 @@ var init_agent_memory_source = __esm({
         for (const { memoryDir, projectHash } of discoverMemoryDirs()) {
           const projectPath = projectHashToPath(projectHash);
           try {
-            for (const entry of readdirSync19(memoryDir, { withFileTypes: true })) {
+            for (const entry of readdirSync20(memoryDir, { withFileTypes: true })) {
               if (!entry.isFile() || !entry.name.endsWith(".md"))
                 continue;
               const filePath = join27(memoryDir, entry.name);
@@ -16850,7 +16855,7 @@ var init_agent_memory_source = __esm({
 });
 
 // ../engine/dist/parsers/history-source.js
-import { existsSync as existsSync27, readdirSync as readdirSync20, statSync as statSync25 } from "fs";
+import { existsSync as existsSync27, readdirSync as readdirSync21, statSync as statSync25 } from "fs";
 import { createReadStream as createReadStream3 } from "fs";
 import { createInterface as createInterface2 } from "readline";
 import { homedir as homedir10 } from "os";
@@ -16877,7 +16882,7 @@ var init_history_source = __esm({
           };
           tryAdd(claudeBackend.historyFile());
           try {
-            for (const entry of readdirSync20(home, { withFileTypes: true })) {
+            for (const entry of readdirSync21(home, { withFileTypes: true })) {
               if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
                 tryAdd(join28(home, entry.name, "history.jsonl"));
               }
@@ -17034,7 +17039,7 @@ var init_history_source = __esm({
 });
 
 // ../engine/dist/parsers/paste-source.js
-import { existsSync as existsSync28, readdirSync as readdirSync21, readFileSync as readFileSync20, statSync as statSync26 } from "fs";
+import { existsSync as existsSync28, readdirSync as readdirSync22, readFileSync as readFileSync20, statSync as statSync26 } from "fs";
 import { homedir as homedir11 } from "os";
 import { join as join29, basename as basename16 } from "path";
 var MAX_CHUNK_CHARS6, MAX_FILE_SIZE, PasteSource;
@@ -17060,7 +17065,7 @@ var init_paste_source = __esm({
           };
           tryAdd(claudeBackend.pasteCacheDir());
           try {
-            for (const entry of readdirSync21(home, { withFileTypes: true })) {
+            for (const entry of readdirSync22(home, { withFileTypes: true })) {
               if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
                 tryAdd(join29(home, entry.name, "paste-cache"));
               }
@@ -17077,7 +17082,7 @@ var init_paste_source = __esm({
         for (const cacheDir of this.cacheDirs) {
           if (!existsSync28(cacheDir))
             continue;
-          const files = readdirSync21(cacheDir).filter((f) => f.endsWith(".txt"));
+          const files = readdirSync22(cacheDir).filter((f) => f.endsWith(".txt"));
           for (const file of files) {
             if (seen.has(file))
               continue;
@@ -17134,7 +17139,7 @@ var init_paste_source = __esm({
 });
 
 // ../engine/dist/parsers/gemini-source.js
-import { existsSync as existsSync29, readdirSync as readdirSync22, readFileSync as readFileSync21, statSync as statSync27 } from "fs";
+import { existsSync as existsSync29, readdirSync as readdirSync23, readFileSync as readFileSync21, statSync as statSync27 } from "fs";
 import { join as join30, basename as basename17 } from "path";
 import { createHash as createHash11 } from "crypto";
 function loadGeminiProjectMap2() {
@@ -17176,13 +17181,13 @@ var init_gemini_source = __esm({
           return;
         const seen = /* @__PURE__ */ new Set();
         try {
-          for (const projectDirEntry of readdirSync22(tmpDir, { withFileTypes: true })) {
+          for (const projectDirEntry of readdirSync23(tmpDir, { withFileTypes: true })) {
             if (!projectDirEntry.isDirectory())
               continue;
             const chatsDir = join30(tmpDir, projectDirEntry.name, "chats");
             if (!existsSync29(chatsDir))
               continue;
-            for (const file of readdirSync22(chatsDir)) {
+            for (const file of readdirSync23(chatsDir)) {
               if (!file.endsWith(".json") || !file.startsWith("session-"))
                 continue;
               const filePath = join30(chatsDir, file);
@@ -17317,7 +17322,7 @@ var init_gemini_source = __esm({
 });
 
 // ../engine/dist/parsers/gemini-brain-source.js
-import { existsSync as existsSync30, readdirSync as readdirSync23, readFileSync as readFileSync22, statSync as statSync28 } from "fs";
+import { existsSync as existsSync30, readdirSync as readdirSync24, readFileSync as readFileSync22, statSync as statSync28 } from "fs";
 import { join as join31 } from "path";
 var MAX_CHUNK_CHARS8, GeminiBrainSource;
 var init_gemini_brain_source = __esm({
@@ -17338,12 +17343,12 @@ var init_gemini_brain_source = __esm({
           return;
         if (!existsSync30(this.brainDir))
           return;
-        const sessions = readdirSync23(this.brainDir, { withFileTypes: true });
+        const sessions = readdirSync24(this.brainDir, { withFileTypes: true });
         for (const entry of sessions) {
           if (!entry.isDirectory())
             continue;
           const sessionDir = join31(this.brainDir, entry.name);
-          const files = readdirSync23(sessionDir).filter((f) => f.endsWith(".md") && !f.includes(".resolved") && !f.includes(".metadata"));
+          const files = readdirSync24(sessionDir).filter((f) => f.endsWith(".md") && !f.includes(".resolved") && !f.includes(".metadata"));
           if (files.length === 0)
             continue;
           for (const file of files) {
@@ -17731,7 +17736,7 @@ var init_opencode_todo_source = __esm({
 });
 
 // ../engine/dist/parsers/codex-session-source.js
-import { existsSync as existsSync33, readdirSync as readdirSync24, readFileSync as readFileSync23, statSync as statSync29 } from "fs";
+import { existsSync as existsSync33, readdirSync as readdirSync25, readFileSync as readFileSync23, statSync as statSync29 } from "fs";
 import { join as join32, basename as basename18 } from "path";
 function getCodexSessionsDir() {
   return codexBackend.sessionsDir();
@@ -17952,7 +17957,7 @@ var init_codex_session_source = __esm({
         const results = [];
         if (!existsSync33(dir))
           return results;
-        for (const entry of readdirSync24(dir, { withFileTypes: true })) {
+        for (const entry of readdirSync25(dir, { withFileTypes: true })) {
           const fullPath = join32(dir, entry.name);
           if (entry.isDirectory()) {
             results.push(...this.collectJsonlFiles(fullPath));
@@ -17967,7 +17972,7 @@ var init_codex_session_source = __esm({
 });
 
 // ../engine/dist/parsers/diary-source.js
-import { existsSync as existsSync34, mkdirSync as mkdirSync5, readdirSync as readdirSync25, readFileSync as readFileSync24, writeFileSync as writeFileSync4, statSync as statSync30 } from "fs";
+import { existsSync as existsSync34, mkdirSync as mkdirSync5, readdirSync as readdirSync26, readFileSync as readFileSync24, writeFileSync as writeFileSync4, statSync as statSync30 } from "fs";
 import { join as join33, basename as basename19 } from "path";
 var MAX_CHUNK_CHARS11, DiarySource;
 var init_diary_source = __esm({
@@ -17985,10 +17990,10 @@ var init_diary_source = __esm({
       async *discover() {
         if (!existsSync34(this.diaryDir))
           return;
-        const agents = readdirSync25(this.diaryDir, { withFileTypes: true }).filter((d) => d.isDirectory());
+        const agents = readdirSync26(this.diaryDir, { withFileTypes: true }).filter((d) => d.isDirectory());
         for (const agentDir of agents) {
           const agentPath2 = join33(this.diaryDir, agentDir.name);
-          const files = readdirSync25(agentPath2).filter((f) => f.endsWith(".json"));
+          const files = readdirSync26(agentPath2).filter((f) => f.endsWith(".json"));
           for (const file of files) {
             const filePath = join33(agentPath2, file);
             try {
@@ -18079,7 +18084,7 @@ var init_diary_source = __esm({
         const agentDir = join33(dir, agentName.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
         if (!existsSync34(agentDir))
           return [];
-        const files = readdirSync25(agentDir).filter((f) => f.endsWith(".json")).sort().reverse().slice(0, lastN);
+        const files = readdirSync26(agentDir).filter((f) => f.endsWith(".json")).sort().reverse().slice(0, lastN);
         const entries = [];
         for (const file of files) {
           try {
@@ -18128,7 +18133,7 @@ var init_redact_inline = __esm({
 });
 
 // ../engine/dist/parsers/skills-source.js
-import { existsSync as existsSync35, readdirSync as readdirSync26, readFileSync as readFileSync25, statSync as statSync31 } from "fs";
+import { existsSync as existsSync35, readdirSync as readdirSync27, readFileSync as readFileSync25, statSync as statSync31 } from "fs";
 import { homedir as homedir12 } from "os";
 import { join as join34 } from "path";
 function rebuildBody(content) {
@@ -18209,7 +18214,7 @@ var init_skills_source = __esm({
           return;
         const codexPluginsDir = codexBackend.pluginsDir();
         if (existsSync35(codexPluginsDir)) {
-          for (const pluginName of readdirSync26(codexPluginsDir)) {
+          for (const pluginName of readdirSync27(codexPluginsDir)) {
             const skillsDir = join34(codexPluginsDir, pluginName, "skills");
             if (!existsSync35(skillsDir))
               continue;
@@ -18220,7 +18225,7 @@ var init_skills_source = __esm({
       async *fromSkillRoot(root, pluginName) {
         let entries;
         try {
-          entries = readdirSync26(root.path);
+          entries = readdirSync27(root.path);
         } catch {
           return;
         }
@@ -18254,14 +18259,14 @@ var init_skills_source = __esm({
           }
           const subdirs = {};
           try {
-            for (const sub of readdirSync26(skillDir)) {
+            for (const sub of readdirSync27(skillDir)) {
               const subPath = join34(skillDir, sub);
               try {
                 const ss = statSync31(subPath);
                 if (ss.isDirectory()) {
                   let count = 0;
                   try {
-                    count = readdirSync26(subPath).length;
+                    count = readdirSync27(subPath).length;
                   } catch {
                   }
                   subdirs[sub] = count;
@@ -18327,7 +18332,7 @@ var init_skills_source = __esm({
 });
 
 // ../engine/dist/parsers/mcps-source.js
-import { existsSync as existsSync36, readdirSync as readdirSync27, readFileSync as readFileSync26, statSync as statSync32 } from "fs";
+import { existsSync as existsSync36, readdirSync as readdirSync28, readFileSync as readFileSync26, statSync as statSync32 } from "fs";
 import { homedir as homedir13 } from "os";
 import { join as join35 } from "path";
 function readJson(path) {
@@ -18441,7 +18446,7 @@ var init_mcps_source = __esm({
         yield* this.fromCodexToml(codexBackend.configToml());
         const pluginsDir = codexBackend.pluginsDir();
         if (existsSync36(pluginsDir)) {
-          for (const plugin of readdirSync27(pluginsDir)) {
+          for (const plugin of readdirSync28(pluginsDir)) {
             const mcpPath = join35(pluginsDir, plugin, ".mcp.json");
             yield* this.fromObject(readJson(mcpPath)?.mcpServers, {
               tool: "codex",
@@ -18665,7 +18670,7 @@ var init_toolkit_format = __esm({
 });
 
 // ../engine/dist/parsers/slash-commands-source.js
-import { existsSync as existsSync37, readdirSync as readdirSync28, readFileSync as readFileSync27, statSync as statSync33 } from "fs";
+import { existsSync as existsSync37, readdirSync as readdirSync29, readFileSync as readFileSync27, statSync as statSync33 } from "fs";
 import { join as join36, basename as basename20 } from "path";
 function rebuildBody2(content) {
   const { text, redacted } = redactInlineSecrets(content);
@@ -18720,10 +18725,10 @@ var init_slash_commands_source = __esm({
           const projectsRoot = claudeBackend.projectsDir();
           if (existsSync37(projectsRoot)) {
             try {
-              for (const entry of readdirSync28(projectsRoot, { withFileTypes: true })) {
+              for (const entry of readdirSync29(projectsRoot, { withFileTypes: true })) {
                 if (!entry.isDirectory() || entry.name.startsWith("."))
                   continue;
-                const projectPath = decodeProjectDirName(entry.name);
+                const projectPath = resolveProjectDirName(entry.name);
                 const cmdDir = join36(projectPath, ".claude", "commands");
                 if (existsSync37(cmdDir))
                   roots.push({ path: cmdDir, tool: "claude", scope: "project", projectPath, format: "md" });
@@ -18751,7 +18756,7 @@ var init_slash_commands_source = __esm({
           const ext = root.format === "toml" ? ".toml" : ".md";
           let files;
           try {
-            files = readdirSync28(root.path).filter((f) => f.endsWith(ext));
+            files = readdirSync29(root.path).filter((f) => f.endsWith(ext));
           } catch {
             continue;
           }
@@ -18811,7 +18816,7 @@ var init_slash_commands_source = __esm({
 });
 
 // ../engine/dist/parsers/subagents-source.js
-import { existsSync as existsSync38, readdirSync as readdirSync29, readFileSync as readFileSync28, statSync as statSync34 } from "fs";
+import { existsSync as existsSync38, readdirSync as readdirSync30, readFileSync as readFileSync28, statSync as statSync34 } from "fs";
 import { join as join37, basename as basename21 } from "path";
 function rebuildBody3(content) {
   const { text, redacted } = redactInlineSecrets(content);
@@ -18868,10 +18873,10 @@ var init_subagents_source = __esm({
           const projectsRoot = claudeBackend.projectsDir();
           if (existsSync38(projectsRoot)) {
             try {
-              for (const entry of readdirSync29(projectsRoot, { withFileTypes: true })) {
+              for (const entry of readdirSync30(projectsRoot, { withFileTypes: true })) {
                 if (!entry.isDirectory() || entry.name.startsWith("."))
                   continue;
-                const projectPath = decodeProjectDirName(entry.name);
+                const projectPath = resolveProjectDirName(entry.name);
                 const agentDir = join37(projectPath, ".claude", "agents");
                 if (existsSync38(agentDir))
                   roots.push({ path: agentDir, tool: "claude", scope: "project", projectPath, format: "md" });
@@ -18899,7 +18904,7 @@ var init_subagents_source = __esm({
           const ext = root.format === "toml" ? ".toml" : ".md";
           let files;
           try {
-            files = readdirSync29(root.path).filter((f) => f.endsWith(ext));
+            files = readdirSync30(root.path).filter((f) => f.endsWith(ext));
           } catch {
             continue;
           }
@@ -18960,7 +18965,7 @@ var init_subagents_source = __esm({
 });
 
 // ../engine/dist/parsers/hooks-source.js
-import { existsSync as existsSync39, readFileSync as readFileSync29, readdirSync as readdirSync30, statSync as statSync35 } from "fs";
+import { existsSync as existsSync39, readFileSync as readFileSync29, readdirSync as readdirSync31, statSync as statSync35 } from "fs";
 import { join as join38 } from "path";
 function readJson2(path) {
   if (!existsSync39(path))
@@ -18987,10 +18992,10 @@ var init_hooks_source = __esm({
         const projectsRoot = claudeBackend.projectsDir();
         if (existsSync39(projectsRoot)) {
           try {
-            for (const entry of readdirSync30(projectsRoot, { withFileTypes: true })) {
+            for (const entry of readdirSync31(projectsRoot, { withFileTypes: true })) {
               if (!entry.isDirectory() || entry.name.startsWith("."))
                 continue;
-              const projectPath = decodeProjectDirName(entry.name);
+              const projectPath = resolveProjectDirName(entry.name);
               const settingsPath2 = join38(projectPath, ".claude", "settings.json");
               if (existsSync39(settingsPath2)) {
                 yield* this.fromSettings(settingsPath2, "project", projectPath);
@@ -19083,7 +19088,7 @@ var init_hooks_source = __esm({
 });
 
 // ../engine/dist/parsers/plugins-source.js
-import { existsSync as existsSync40, readFileSync as readFileSync30, readdirSync as readdirSync31, statSync as statSync36 } from "fs";
+import { existsSync as existsSync40, readFileSync as readFileSync30, readdirSync as readdirSync32, statSync as statSync36 } from "fs";
 import { homedir as homedir14 } from "os";
 import { join as join39 } from "path";
 function readJson3(path) {
@@ -19145,7 +19150,7 @@ var init_plugins_source = __esm({
         if (isSourceEnabled("gemini", "extensions") && existsSync40(gemRoot)) {
           let entries;
           try {
-            entries = readdirSync31(gemRoot);
+            entries = readdirSync32(gemRoot);
           } catch {
             entries = [];
           }
@@ -19193,7 +19198,7 @@ var init_plugins_source = __esm({
         if (isSourceEnabled("codex", "plugins") && existsSync40(codexPluginsRoot)) {
           let entries;
           try {
-            entries = readdirSync31(codexPluginsRoot);
+            entries = readdirSync32(codexPluginsRoot);
           } catch {
             entries = [];
           }
@@ -19489,13 +19494,13 @@ function markSynced(server, rows) {
     const o = (cursorFromCaller ? r.offset : void 0) ?? prevOS.o ?? 0;
     const s = (cursorFromCaller ? r.size : void 0) ?? prevOS.s ?? 0;
     const ev = extractorVersionForId(r.id);
-    const base2 = prevF ? { m: Math.floor(r.mtime), v: ev, f: prevF } : { m: Math.floor(r.mtime), v: ev };
+    const base3 = prevF ? { m: Math.floor(r.mtime), v: ev, f: prevF } : { m: Math.floor(r.mtime), v: ev };
     if (o > 0 || s > 0) {
-      base2.o = o;
-      base2.s = s;
+      base3.o = o;
+      base3.s = s;
     }
-    if (r.hash !== void 0) base2.h = r.hash;
-    forServer[r.id] = base2;
+    if (r.hash !== void 0) base3.h = r.hash;
+    forServer[r.id] = base3;
   }
   persist(data);
 }
@@ -19737,7 +19742,7 @@ var init_http = __esm({
       CLI_VERSION = JSON.parse(readFileSync33(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.5.31";
+        if (true) CLI_VERSION = "0.6.0";
       } catch {
       }
     }
@@ -20257,7 +20262,7 @@ var init_telemetry = __esm({
     init_sync_client();
     cliVersion2 = () => {
       try {
-        return true ? "0.5.31" : "dev";
+        return true ? "0.6.0" : "dev";
       } catch {
         return "dev";
       }
@@ -20394,11 +20399,11 @@ __export(server_probe_exports, {
 function probeOk(r) {
   return r.kind === "ok" && r.apiVersion >= 2;
 }
-async function probeServer(base2, opts = {}) {
+async function probeServer(base3, opts = {}) {
   const f = opts.fetchImpl || fetch;
   let res;
   try {
-    res = await f(`${base2.replace(/\/+$/, "")}/api/capabilities`, {
+    res = await f(`${base3.replace(/\/+$/, "")}/api/capabilities`, {
       signal: AbortSignal.timeout(opts.timeoutMs ?? 1e4)
     });
   } catch (err) {
@@ -20435,34 +20440,34 @@ async function probeServer(base2, opts = {}) {
     raw: parsed
   };
 }
-function probeAdvice(r, base2) {
+function probeAdvice(r, base3) {
   switch (r.kind) {
     case "ok":
       return r.apiVersion >= 2 ? `apiVersion ${r.apiVersion}${r.edition ? `, edition ${r.edition}` : ""}` : `apiVersion ${r.apiVersion} is too old for this CLI \u2014 upgrade the server`;
     case "moved":
-      return `HTTP ${r.status} \u2014 nothing is served at ${base2}. If the host moved, re-point it: \`chat-recall login <new-server-url>\``;
+      return `HTTP ${r.status} \u2014 nothing is served at ${base3}. If the host moved, re-point it: \`chat-recall login <new-server-url>\``;
     case "unauthorized":
-      return `HTTP ${r.status} \u2014 ${base2} rejected the credential. Re-login: \`chat-recall login ` + base2 + "`";
+      return `HTTP ${r.status} \u2014 ${base3} rejected the credential. Re-login: \`chat-recall login ` + base3 + "`";
     case "server_error":
-      return `HTTP ${r.status} \u2014 ${base2} is up but failing. Nothing to fix locally; check the server.`;
+      return `HTTP ${r.status} \u2014 ${base3} is up but failing. Nothing to fix locally; check the server.`;
     case "not_api":
-      return `${base2} answered ${r.status} with something that is not the chat-recall API (${JSON.stringify(r.snippet)}) \u2014 check the URL, a proxy or a captive portal`;
+      return `${base3} answered ${r.status} with something that is not the chat-recall API (${JSON.stringify(r.snippet)}) \u2014 check the URL, a proxy or a captive portal`;
     case "unreachable":
       switch (r.reason) {
         case "dns":
-          return `cannot resolve the host in ${base2} (${r.error}) \u2014 check the URL for a typo, and your DNS or VPN`;
+          return `cannot resolve the host in ${base3} (${r.error}) \u2014 check the URL for a typo, and your DNS or VPN`;
         case "refused":
-          return `${base2} resolves but refused the connection (${r.error}) \u2014 the server is not running, or the port is wrong`;
+          return `${base3} resolves but refused the connection (${r.error}) \u2014 the server is not running, or the port is wrong`;
         case "tls":
-          return `the TLS certificate at ${base2} was rejected (${r.error}) \u2014 expired, self-signed, or issued for another host. A corporate proxy that re-signs traffic does this.`;
+          return `the TLS certificate at ${base3} was rejected (${r.error}) \u2014 expired, self-signed, or issued for another host. A corporate proxy that re-signs traffic does this.`;
         case "timeout":
-          return `${base2} did not answer in time (${r.error}) \u2014 a firewall or proxy that drops traffic silently looks exactly like this`;
+          return `${base3} did not answer in time (${r.error}) \u2014 a firewall or proxy that drops traffic silently looks exactly like this`;
         case "reset":
-          return `the connection to ${base2} was cut (${r.error}) \u2014 often a proxy or a captive portal`;
+          return `the connection to ${base3} was cut (${r.error}) \u2014 often a proxy or a captive portal`;
         case "bad_port":
-          return `${base2} names a port that Node and every browser refuse to open (the WHATWG bad-port list) \u2014 use the server's real port`;
+          return `${base3} names a port that Node and every browser refuse to open (the WHATWG bad-port list) \u2014 use the server's real port`;
         default:
-          return `no HTTP response from ${base2} (${r.error}) \u2014 check the URL, DNS, or that the server is running`;
+          return `no HTTP response from ${base3} (${r.error}) \u2014 check the URL, DNS, or that the server is running`;
       }
   }
 }
@@ -20495,8 +20500,8 @@ function describeCause(err) {
     const code2 = e.code;
     if (typeof code2 === "string" && code2 && !parts.includes(code2)) parts.push(code2);
   }
-  const base2 = err instanceof Error ? err.message : String(err);
-  return parts.length ? `${base2}: ${parts.join(" \u2192 ")}` : base2;
+  const base3 = err instanceof Error ? err.message : String(err);
+  return parts.length ? `${base3}: ${parts.join(" \u2192 ")}` : base3;
 }
 function describeUnreachable(err) {
   const reason = classifyUnreachable(err);
@@ -20600,7 +20605,7 @@ __export(auto_update_exports, {
 import { execSync as execSync2 } from "node:child_process";
 import { readFileSync as readFileSync36 } from "node:fs";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-import { writeFileSync as writeFileSync8, mkdtempSync as mkdtempSync3, rmSync as rmSync5, readdirSync as readdirSync32, statSync as statSync38 } from "node:fs";
+import { writeFileSync as writeFileSync8, mkdtempSync as mkdtempSync3, rmSync as rmSync5, readdirSync as readdirSync33, statSync as statSync38 } from "node:fs";
 import { join as join43, dirname as dirname18, sep as sep2 } from "node:path";
 import { tmpdir as tmpdir2 } from "node:os";
 import { createHash as createHash12 } from "node:crypto";
@@ -20632,12 +20637,12 @@ function installedVersion() {
     return null;
   }
 }
-function planAutoUpdate(base2, caps, ownVersion3, flag) {
+function planAutoUpdate(base3, caps, ownVersion3, flag) {
   const rel = caps.cli;
   if (!rel || !rel.version || !rel.sha256) return { update: false, reason: "server advertises no CLI release" };
   if (!isAutoUpdateEnabled(caps.edition, flag)) return { update: false, reason: `auto-update disabled (edition ${caps.edition ?? "?"})` };
   if (compareVersions(rel.version, ownVersion3) <= 0) return { update: false, reason: `already current (own ${ownVersion3} >= server ${rel.version})` };
-  return { update: true, reason: `server ${rel.version} > own ${ownVersion3}`, url: tarballUrl(base2), sha256: rel.sha256, from: ownVersion3, to: rel.version };
+  return { update: true, reason: `server ${rel.version} > own ${ownVersion3}`, url: tarballUrl(base3), sha256: rel.sha256, from: ownVersion3, to: rel.version };
 }
 function sweepStaleStaging(root = tmpdir2(), now = Date.now()) {
   const MKDTEMP_SUFFIX = /^cr-update-.{6}$/s;
@@ -20645,7 +20650,7 @@ function sweepStaleStaging(root = tmpdir2(), now = Date.now()) {
   let removed = 0;
   let entries;
   try {
-    entries = readdirSync32(root);
+    entries = readdirSync33(root);
   } catch {
     return 0;
   }
@@ -20655,7 +20660,7 @@ function sweepStaleStaging(root = tmpdir2(), now = Date.now()) {
     try {
       const st = statSync38(dir);
       if (!st.isDirectory() || now - st.mtimeMs < COLD_MS) continue;
-      const inside = readdirSync32(dir);
+      const inside = readdirSync33(dir);
       if (inside.length > 1 || inside.length === 1 && inside[0] !== "chat-recall.tgz") continue;
       rmSync5(dir, { recursive: true, force: true });
       removed++;
@@ -20733,20 +20738,20 @@ function realRestart(platform2) {
   else if (platform2 === "darwin") execSync2("launchctl kickstart -k gui/$(id -u)/com.chat-recall.watch", { stdio: "ignore", shell: "/bin/bash" });
   else if (platform2 === "win32") execSync2("schtasks /End /TN chat-recall-watch & schtasks /Run /TN chat-recall-watch", { stdio: "ignore" });
 }
-async function runAutoUpdate(base2, authHeaders, ownVersion3, deps) {
+async function runAutoUpdate(base3, authHeaders, ownVersion3, deps) {
   let caps;
   try {
-    const res = await fetchWithTimeout(`${base2.replace(/\/+$/, "")}/api/capabilities`, { headers: authHeaders });
+    const res = await fetchWithTimeout(`${base3.replace(/\/+$/, "")}/api/capabilities`, { headers: authHeaders });
     if (!res.ok) return { updated: false, reason: `capabilities HTTP ${res.status}` };
     caps = await res.json();
   } catch (e) {
     return { updated: false, reason: `capabilities unreachable: ${e instanceof Error ? e.message : e}` };
   }
   const effectiveOwn = newerOf(ownVersion3, installedVersion());
-  const plan = planAutoUpdate(base2, caps, effectiveOwn, process.env.CHAT_RECALL_AUTO_UPDATE);
+  const plan = planAutoUpdate(base3, caps, effectiveOwn, process.env.CHAT_RECALL_AUTO_UPDATE);
   if (!plan.update) {
-    if (/disabled|no CLI release/.test(plan.reason) && !reportedStandingSkip.has(base2)) {
-      reportedStandingSkip.add(base2);
+    if (/disabled|no CLI release/.test(plan.reason) && !reportedStandingSkip.has(base3)) {
+      reportedStandingSkip.add(base3);
       try {
         const { reportClientEvent: reportClientEvent2 } = await Promise.resolve().then(() => (init_client_events(), client_events_exports));
         reportClientEvent2("auto_update_skipped", { message: `${plan.reason} (server offers ${caps.cli?.version ?? "?"}, this device runs ${effectiveOwn})` });
@@ -20775,7 +20780,7 @@ var init_auto_update = __esm({
   "src/auto-update.ts"() {
     "use strict";
     init_http();
-    tarballUrl = (base2) => `${base2.replace(/\/+$/, "")}/install/chat-recall.tgz`;
+    tarballUrl = (base3) => `${base3.replace(/\/+$/, "")}/install/chat-recall.tgz`;
     reportedStandingSkip = /* @__PURE__ */ new Set();
   }
 });
@@ -20810,7 +20815,7 @@ __export(sync_client_exports, {
   syncSessions: () => syncSessions
 });
 import { join as join44, dirname as dirname19, basename as basename22 } from "node:path";
-import { readFileSync as readFileSync37, writeFileSync as writeFileSync9, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync4, rmSync as rmSync6, chmodSync as chmodSync3, unlinkSync as unlinkSync2, readdirSync as readdirSync33, statSync as statSync39 } from "node:fs";
+import { readFileSync as readFileSync37, writeFileSync as writeFileSync9, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync4, rmSync as rmSync6, chmodSync as chmodSync3, unlinkSync as unlinkSync2, readdirSync as readdirSync34, statSync as statSync39 } from "node:fs";
 import { tmpdir as tmpdir3, hostname as hostname2 } from "node:os";
 import { createHash as createHash13 } from "node:crypto";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
@@ -20873,15 +20878,15 @@ function loadAllCredentials() {
   return [];
 }
 async function fetchTenantSecurityConfig(cred) {
-  const base2 = cred.serverUrl.replace(/\/+$/, "");
-  const cached = _securityConfigCache.get(base2);
+  const base3 = cred.serverUrl.replace(/\/+$/, "");
+  const cached = _securityConfigCache.get(base3);
   if (cached && Date.now() - cached.fetchedAt < SECURITY_CONFIG_TTL_MS) return cached.config;
   const headers = { "content-type": "application/json" };
   if (cred.token) headers.authorization = `Bearer ${cred.token}`;
   try {
     const [rulesRes, settingsRes] = await Promise.all([
-      fetchWithTimeout(`${base2}/api/secrets/rules`, { headers }),
-      fetchWithTimeout(`${base2}/api/teams/security-config`, { headers }).catch(() => null)
+      fetchWithTimeout(`${base3}/api/secrets/rules`, { headers }),
+      fetchWithTimeout(`${base3}/api/teams/security-config`, { headers }).catch(() => null)
     ]);
     let tenantRules = [];
     let rulePackVersion = null;
@@ -20906,18 +20911,18 @@ async function fetchTenantSecurityConfig(cred) {
       const body = await settingsRes.json().catch(() => ({}));
       if (typeof body.verifySecrets === "boolean") verifySecrets = body.verifySecrets;
       if (typeof body.telemetry === "boolean") {
-        setTelemetryEligible(base2, body.telemetry);
+        setTelemetryEligible(base3, body.telemetry);
         try {
           const prior = readCollectorHealth()?.telemetryEligible ?? {};
           updateCollectorHealth({
-            telemetryEligible: { ...prior, [base2]: { allowed: body.telemetry, at: Date.now() } }
+            telemetryEligible: { ...prior, [base3]: { allowed: body.telemetry, at: Date.now() } }
           });
         } catch {
         }
       }
     }
     const config2 = { tenantRules, verifySecrets, rulePackVersion };
-    _securityConfigCache.set(base2, { fetchedAt: Date.now(), config: config2 });
+    _securityConfigCache.set(base3, { fetchedAt: Date.now(), config: config2 });
     return config2;
   } catch {
     return { tenantRules: [], verifySecrets: true, rulePackVersion: null };
@@ -20936,18 +20941,18 @@ function readPersistedSyncConfigs() {
     return {};
   }
 }
-function persistSyncConfig(base2, config2) {
+function persistSyncConfig(base3, config2) {
   try {
     const all = readPersistedSyncConfigs();
-    all[base2] = { fetchedAt: Date.now(), config: config2 };
+    all[base3] = { fetchedAt: Date.now(), config: config2 };
     mkdirSync9(dirname19(syncConfigCachePath()), { recursive: true });
     writeFileSync9(syncConfigCachePath(), JSON.stringify(all, null, 2));
   } catch {
   }
 }
 async function fetchTenantSyncConfig(cred) {
-  const base2 = cred.serverUrl.replace(/\/+$/, "");
-  const cached = _syncConfigCache.get(base2);
+  const base3 = cred.serverUrl.replace(/\/+$/, "");
+  const cached = _syncConfigCache.get(base3);
   if (cached && Date.now() - cached.fetchedAt < SECURITY_CONFIG_TTL_MS) return cached.config;
   const headers = { "content-type": "application/json" };
   if (cred.token) headers.authorization = `Bearer ${cred.token}`;
@@ -20955,7 +20960,7 @@ async function fetchTenantSyncConfig(cred) {
     try {
       const sources3 = discoverSessionSources();
       if (sources3.length > 0) {
-        await fetchWithTimeout(`${base2}/api/sync-config/sources`, {
+        await fetchWithTimeout(`${base3}/api/sync-config/sources`, {
           method: "POST",
           headers,
           body: JSON.stringify({ device: deviceLabel(), sources: sources3 })
@@ -20963,12 +20968,12 @@ async function fetchTenantSyncConfig(cred) {
       }
     } catch {
     }
-    const res = await fetchWithTimeout(`${base2}/api/sync-config`, { headers });
+    const res = await fetchWithTimeout(`${base3}/api/sync-config`, { headers });
     if (res.status === 404) {
-      _syncConfigCache.set(base2, { fetchedAt: Date.now(), config: EMPTY_SYNC_CONFIG });
+      _syncConfigCache.set(base3, { fetchedAt: Date.now(), config: EMPTY_SYNC_CONFIG });
       return EMPTY_SYNC_CONFIG;
     }
-    if (!res.ok) return lastKnownSyncConfig(base2, `HTTP ${res.status}`);
+    if (!res.ok) return lastKnownSyncConfig(base3, `HTTP ${res.status}`);
     const body = await res.json().catch(() => ({}));
     const config2 = {
       excludeTools: Array.isArray(body.excludeTools) ? body.excludeTools.filter((t) => typeof t === "string") : [],
@@ -21005,22 +21010,22 @@ async function fetchTenantSyncConfig(cred) {
       if (decided > 0) console.error(`[sync] applied ${decided} folder decision(s) from the dashboard`);
     } catch {
     }
-    _syncConfigCache.set(base2, { fetchedAt: Date.now(), config: config2 });
-    persistSyncConfig(base2, config2);
+    _syncConfigCache.set(base3, { fetchedAt: Date.now(), config: config2 });
+    persistSyncConfig(base3, config2);
     return config2;
   } catch (err) {
     if (isSyncRulesRefusal(err)) throw err;
-    return lastKnownSyncConfig(base2, err instanceof Error ? err.message : "request failed");
+    return lastKnownSyncConfig(base3, err instanceof Error ? err.message : "request failed");
   }
 }
-function lastKnownSyncConfig(base2, reason) {
-  const remembered = _syncConfigCache.get(base2) ?? readPersistedSyncConfigs()[base2];
+function lastKnownSyncConfig(base3, reason) {
+  const remembered = _syncConfigCache.get(base3) ?? readPersistedSyncConfigs()[base3];
   if (remembered) {
     console.error(`[sync] could not read server-side sync rules (${reason}) \u2014 applying the last known set from ${new Date(remembered.fetchedAt).toISOString()}`);
     return remembered.config;
   }
   const refusal = new Error(
-    `Cannot read the server-side sync rules from ${base2} (${reason}), and this machine has never successfully read them. Refusing to sync: uploading without knowing your exclusions could ship a project you told the dashboard to hold back. Fix the server or retry.`
+    `Cannot read the server-side sync rules from ${base3} (${reason}), and this machine has never successfully read them. Refusing to sync: uploading without knowing your exclusions could ship a project you told the dashboard to hold back. Fix the server or retry.`
   );
   refusal[SYNC_RULES_REFUSAL] = true;
   throw refusal;
@@ -21137,25 +21142,25 @@ async function syncSessions(opts = {}) {
   ${errors.join("\n  ")}`);
   return { ...agg, perTarget };
 }
-async function postFieldBatch(base2, token, rows) {
+async function postFieldBatch(base3, token, rows) {
   const headers = { "content-type": "application/json" };
   if (token) headers.authorization = `Bearer ${token}`;
   const sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
   for (let attempt = 0; ; attempt++) {
-    const res = await fetchWithTimeout(`${base2}/api/sync`, { method: "POST", headers, body: JSON.stringify({ fields: rows }) }, 6e4);
+    const res = await fetchWithTimeout(`${base3}/api/sync`, { method: "POST", headers, body: JSON.stringify({ fields: rows }) }, 6e4);
     if (res.ok) return;
     const retryable = res.status === 429 || res.status >= 500;
-    if (!retryable || attempt >= 5) throw new Error(`${base2}: fields batch HTTP ${res.status} ${await res.text().catch(() => "")}`);
+    if (!retryable || attempt >= 5) throw new Error(`${base3}: fields batch HTTP ${res.status} ${await res.text().catch(() => "")}`);
     const ra = Number(res.headers.get("retry-after")) || 0;
     await sleep2(ra > 0 ? ra * 1e3 : [500, 1500, 4e3, 8e3, 15e3][Math.min(attempt, 4)]);
   }
 }
 async function reconcileFieldsForTarget(cred, fullRefs, opts = {}) {
-  const base2 = cred.serverUrl.replace(/\/+$/, "");
-  const ledger = getSyncedRows(base2);
+  const base3 = cred.serverUrl.replace(/\/+$/, "");
+  const ledger = getSyncedRows(base3);
   let pushed = 0, absent = 0, scanned = 0;
   for (const field of SYNC_FIELDS) {
-    const needFull = !!opts.force || fieldNeedsFullPass(base2, field);
+    const needFull = !!opts.force || fieldNeedsFullPass(base3, field);
     const candidates2 = needFull ? fullRefs() : opts.convRefs ?? fullRefs();
     const send = [];
     const mtimeById = /* @__PURE__ */ new Map();
@@ -21171,15 +21176,15 @@ async function reconcileFieldsForTarget(cred, fullRefs, opts = {}) {
     }
     for (let i = 0; i < send.length; i += 200) {
       const chunk = send.slice(i, i + 200);
-      await postFieldBatch(base2, cred.token, chunk);
-      markFieldCoverage(base2, field, chunk.map((r) => ({ id: r.session_id, present: true, mtime: mtimeById.get(r.session_id) ?? 0 })));
+      await postFieldBatch(base3, cred.token, chunk);
+      markFieldCoverage(base3, field, chunk.map((r) => ({ id: r.session_id, present: true, mtime: mtimeById.get(r.session_id) ?? 0 })));
       pushed += chunk.length;
     }
     if (absentIds.length) {
-      markFieldCoverage(base2, field, absentIds.map((id) => ({ id, present: false, mtime: mtimeById.get(id) ?? 0 })));
+      markFieldCoverage(base3, field, absentIds.map((id) => ({ id, present: false, mtime: mtimeById.get(id) ?? 0 })));
       absent += absentIds.length;
     }
-    if (needFull) markFieldFullPassDone(base2, field);
+    if (needFull) markFieldFullPassDone(base3, field);
   }
   return { pushed, absent, scanned };
 }
@@ -21209,7 +21214,7 @@ function reapStaleScanDirs(dir = tmpdir3(), maxAgeMs = 6 * 36e5, now = Date.now(
   let reaped = 0;
   let names;
   try {
-    names = readdirSync33(dir);
+    names = readdirSync34(dir);
   } catch {
     return 0;
   }
@@ -21296,25 +21301,25 @@ function serverIngestConcurrency(serverUrl) {
   return advertisedIngestConc.get(serverUrl.replace(/\/$/, "")) ?? null;
 }
 async function verifyServerApi(serverUrl, minApi) {
-  const base2 = serverUrl.replace(/\/$/, "");
-  const seen = capsOk.get(base2);
+  const base3 = serverUrl.replace(/\/$/, "");
+  const seen = capsOk.get(base3);
   if (seen !== void 0 && Date.now() - seen < CAPS_TTL_MS) return true;
   const { probeServer: probeServer2, probeAdvice: probeAdvice2 } = await Promise.resolve().then(() => (init_server_probe(), server_probe_exports));
-  const probe = await probeServer2(base2, {
+  const probe = await probeServer2(base3, {
     fetchImpl: ((url, init) => fetchWithTimeout(String(url), init ?? {}))
   });
-  if (probe.kind !== "ok") throw new Error(probeAdvice2(probe, base2));
+  if (probe.kind !== "ok") throw new Error(probeAdvice2(probe, base3));
   const caps = probe.raw;
   if ((caps.apiVersion ?? 0) < minApi) {
     throw new Error(`server too old: apiVersion ${caps.apiVersion ?? "none"} < required ${minApi} \u2014 update the server image before syncing`);
   }
   const adv = caps.limits?.ingestConcurrencyPerTenant;
   if (typeof adv === "number" && Number.isFinite(adv) && adv >= 1) {
-    advertisedIngestConc.set(base2, Math.floor(adv));
+    advertisedIngestConc.set(base3, Math.floor(adv));
   }
-  if (caps.limits?.acceptsGzipBody === true) advertisedGzipBody.add(base2);
-  else advertisedGzipBody.delete(base2);
-  capsOk.set(base2, Date.now());
+  if (caps.limits?.acceptsGzipBody === true) advertisedGzipBody.add(base3);
+  else advertisedGzipBody.delete(base3);
+  capsOk.set(base3, Date.now());
   return true;
 }
 async function syncToTarget(cred, opts = {}) {
@@ -21379,7 +21384,7 @@ async function syncToTargetInScope(cred, opts = {}) {
       const ac = new AbortController();
       const timer = setTimeout(() => ac.abort(new Error(`upload timed out after ${UPLOAD_TIMEOUT_MS}ms`)), UPLOAD_TIMEOUT_MS);
       try {
-        const res = await fetch(`${base2}/api/sync`, {
+        const res = await fetch(`${base3}/api/sync`, {
           method: "POST",
           // No token ⇒ no auth header: a no-auth local server (AUTH_PROVIDER=none)
           // accepts it as the single 'default' tenant.
@@ -21394,26 +21399,26 @@ async function syncToTargetInScope(cred, opts = {}) {
         if (res.ok) {
           const body2 = await res.json().catch(() => ({}));
           if (typeof body2.telemetry === "boolean") {
-            setTelemetryEligible(base2, body2.telemetry);
+            setTelemetryEligible(base3, body2.telemetry);
             try {
               const prior = readCollectorHealth()?.telemetryEligible ?? {};
               updateCollectorHealth({
-                telemetryEligible: { ...prior, [base2]: { allowed: body2.telemetry, at: Date.now() } }
+                telemetryEligible: { ...prior, [base3]: { allowed: body2.telemetry, at: Date.now() } }
               });
             } catch {
             }
           }
           const adv = body2.limits?.ingestConcurrencyPerTenant;
           if (typeof adv === "number" && Number.isFinite(adv) && adv >= 1) {
-            setServerIngestConcurrency(base2, Math.floor(adv));
+            setServerIngestConcurrency(base3, Math.floor(adv));
           }
           if (body2.cli && body2.cli.version) {
             const { planAutoUpdate: planAutoUpdate2, runAutoUpdate: runAutoUpdate2, sweepStaleStaging: sweepStaleStaging2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
             const authHeaders = cred.token ? { authorization: `Bearer ${cred.token}` } : {};
-            const plan = planAutoUpdate2(base2, { cli: body2.cli }, ownVersion, process.env.CHAT_RECALL_AUTO_UPDATE);
+            const plan = planAutoUpdate2(base3, { cli: body2.cli }, ownVersion, process.env.CHAT_RECALL_AUTO_UPDATE);
             sweepStaleStaging2();
             if (plan.update) {
-              void runAutoUpdate2(base2, authHeaders, ownVersion).catch(() => {
+              void runAutoUpdate2(base3, authHeaders, ownVersion).catch(() => {
               });
             }
           }
@@ -21422,7 +21427,7 @@ async function syncToTargetInScope(cred, opts = {}) {
         const retryable = res.status === 429 || res.status >= 500;
         const text = await res.text().catch(() => "");
         if (res.status === 401 || res.status === 403) {
-          throw classedError("auth", `server rejected this machine's device token (HTTP ${res.status} \u2014 revoked?). Reconnect with: chat-recall login ${base2}`);
+          throw classedError("auth", `server rejected this machine's device token (HTTP ${res.status} \u2014 revoked?). Reconnect with: chat-recall login ${base3}`);
         }
         if (res.status === 402) {
           let detail = text;
@@ -21442,7 +21447,7 @@ async function syncToTargetInScope(cred, opts = {}) {
         if (attempt >= RETRY_DELAYS_MS.length) throw new Error(`sync failed after ${attempt + 1} attempts: HTTP ${res.status} ${text}`);
         const retryAfterS = Number(res.headers.get("retry-after"));
         const waitMs = res.status === 429 && retryAfterS > 0 ? retryAfterS * 1e3 : RETRY_DELAYS_MS[attempt];
-        console.error(`[sync] HTTP ${res.status} from ${base2} \u2014 backing off ${Math.round(waitMs / 1e3)}s (attempt ${attempt + 1})`);
+        console.error(`[sync] HTTP ${res.status} from ${base3} \u2014 backing off ${Math.round(waitMs / 1e3)}s (attempt ${attempt + 1})`);
         await sleep2(waitMs);
         continue;
       } catch (err) {
@@ -21509,11 +21514,11 @@ async function syncToTargetInScope(cred, opts = {}) {
       }
     };
   };
-  const base2 = cred.serverUrl.replace(/\/$/, "");
-  const ledger = opts.useLedger ? getSyncedRows(base2) : null;
+  const base3 = cred.serverUrl.replace(/\/$/, "");
+  const ledger = opts.useLedger ? getSyncedRows(base3) : null;
   const convBatch = makeBatcher("conversations", 25, false, (rows) => {
     try {
-      markSynced(base2, rows.map((r) => {
+      markSynced(base3, rows.map((r) => {
         const off = typeof r.from_offset === "number" ? r.from_offset : 0;
         const hash = shippedHash.get(r.session_id);
         return off > 0 ? { id: r.session_id, mtime: r.mtime, offset: off, size: off, hash, acked: true } : { id: r.session_id, mtime: r.mtime, hash };
@@ -21528,7 +21533,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     const ac = new AbortController();
     const timer = setTimeout(() => ac.abort(new Error(`upload timed out after ${UPLOAD_TIMEOUT_MS}ms`)), UPLOAD_TIMEOUT_MS);
     try {
-      const res = await fetch(`${base2}/api/sync`, {
+      const res = await fetch(`${base3}/api/sync`, {
         method: "POST",
         headers,
         body: JSON.stringify({ conversations: convs }),
@@ -21539,10 +21544,10 @@ async function syncToTargetInScope(cred, opts = {}) {
       if (body.cli && body.cli.version) {
         const { planAutoUpdate: planAutoUpdate2, runAutoUpdate: runAutoUpdate2, sweepStaleStaging: sweepStaleStaging2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
         const authHeaders = cred.token ? { authorization: `Bearer ${cred.token}` } : {};
-        const plan = planAutoUpdate2(base2, { cli: body.cli }, ownVersion, process.env.CHAT_RECALL_AUTO_UPDATE);
+        const plan = planAutoUpdate2(base3, { cli: body.cli }, ownVersion, process.env.CHAT_RECALL_AUTO_UPDATE);
         sweepStaleStaging2();
         if (plan.update) {
-          void runAutoUpdate2(base2, authHeaders, ownVersion).catch(() => {
+          void runAutoUpdate2(base3, authHeaders, ownVersion).catch(() => {
           });
         }
       }
@@ -21550,7 +21555,7 @@ async function syncToTargetInScope(cred, opts = {}) {
       const acked = convs.filter((c) => !fullNeeded.has(c.session_id));
       if (acked.length > 0) {
         try {
-          markSynced(base2, acked.map((c) => ({
+          markSynced(base3, acked.map((c) => ({
             id: c.session_id,
             mtime: c.mtime,
             offset: c.from_offset,
@@ -21620,7 +21625,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     const m = process.memoryUsage();
     console.error(`[sync-trace] ${msg} \xB7 heap=${(m.heapUsed / 1048576).toFixed(0)}MB rss=${(m.rss / 1048576).toFixed(0)}MB`);
   } : null;
-  trace?.(`walk start: ${slice.length} ref(s) \u2192 ${base2}`);
+  trace?.(`walk start: ${slice.length} ref(s) \u2192 ${base3}`);
   if (upload.sessionMeta) {
     try {
       await reconcileFieldsForTarget(
@@ -21635,7 +21640,7 @@ async function syncToTargetInScope(cred, opts = {}) {
         { convRefs: slice }
       );
     } catch (e) {
-      console.error(`[sync] field reconcile (${base2}): ${e instanceof Error ? e.message : e}`);
+      console.error(`[sync] field reconcile (${base3}): ${e instanceof Error ? e.message : e}`);
     }
   }
   trace?.("field reconcile done");
@@ -21710,7 +21715,7 @@ async function syncToTargetInScope(cred, opts = {}) {
           continue;
         } else {
           try {
-            markSynced(base2, [{ id: ref.prefixedId, mtime: ref.mtime }]);
+            markSynced(base3, [{ id: ref.prefixedId, mtime: ref.mtime }]);
           } catch {
           }
           skipped++;
@@ -21733,7 +21738,7 @@ async function syncToTargetInScope(cred, opts = {}) {
           const off = getBackendForId(ref.prefixedId)?.fileSize?.(ref.rawId) ?? 0;
           const priorCursor = ackRow?.s ?? 0;
           const safeToAck = off > 0 && off <= priorCursor;
-          markSynced(base2, [safeToAck ? { id: ref.prefixedId, mtime: ref.mtime, offset: off, size: off, hash: built.srcHash, acked: true } : { id: ref.prefixedId, mtime: ref.mtime, hash: built.srcHash }]);
+          markSynced(base3, [safeToAck ? { id: ref.prefixedId, mtime: ref.mtime, offset: off, size: off, hash: built.srcHash, acked: true } : { id: ref.prefixedId, mtime: ref.mtime, hash: built.srcHash }]);
         } catch {
         }
       }
@@ -21743,7 +21748,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     if (!built) {
       if (ledger) {
         try {
-          markSynced(base2, [{ id: ref.prefixedId, mtime: ref.mtime }]);
+          markSynced(base3, [{ id: ref.prefixedId, mtime: ref.mtime }]);
         } catch {
         }
       }
@@ -21799,7 +21804,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     walked++;
     if (walked % 250 === 0) console.error(`[sync] ${walked}/${slice.length} sessions\u2026`);
   }
-  const itemVersions = loadItemVersions(base2);
+  const itemVersions = loadItemVersions(base3);
   const seenTools = /* @__PURE__ */ new Set();
   const seenItemKeys = /* @__PURE__ */ new Map();
   const registry = buildSourceRegistry();
@@ -21885,7 +21890,7 @@ async function syncToTargetInScope(cred, opts = {}) {
   await appendFlush();
   for (const id of appendResults.fullResyncNeeded) {
     try {
-      markFullResync(base2, id);
+      markFullResync(base3, id);
     } catch {
     }
   }
@@ -21902,7 +21907,7 @@ async function syncToTargetInScope(cred, opts = {}) {
       const rec = {};
       for (const t of seenTools) rec[t] = extractorVersionForTool(t);
       for (const [k, v] of seenItemKeys) rec[k] = v;
-      saveItemVersions(base2, rec);
+      saveItemVersions(base3, rec);
     } catch {
     }
   }
@@ -21915,9 +21920,9 @@ async function syncToTargetInScope(cred, opts = {}) {
     }
     if (tombstones.length > 0) {
       await post({ tombstones });
-      const data = getLedgerData(base2);
+      const data = getLedgerData(base3);
       for (const t of tombstones) delete data[t.session_id];
-      persistLedgerData(base2, data);
+      persistLedgerData(base3, data);
     }
   }
   if (opts.prune) await post({ prune_empty_sessions: true });
@@ -22347,7 +22352,7 @@ var init_sync_client = __esm({
       ownVersion = JSON.parse(readFileSync37(join44(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.5.31";
+        if (true) ownVersion = "0.6.0";
       } catch {
       }
     }
@@ -22382,12 +22387,17 @@ var init_sync_client = __esm({
 // src/update-notice.ts
 var update_notice_exports = {};
 __export(update_notice_exports, {
+  newestKnown: () => newestKnown,
   printUpdateNotice: () => printUpdateNotice,
   refreshUpdateCheck: () => refreshUpdateCheck,
   updateNotice: () => updateNotice
 });
 import { readFileSync as readFileSync38, writeFileSync as writeFileSync10 } from "node:fs";
 import { join as join45 } from "node:path";
+function newestKnown(c) {
+  const npm = c.npmVersion ?? "0.0.0";
+  return compareVersions(npm, c.serverVersion) > 0 ? { version: npm, source: "npm" } : { version: c.serverVersion, source: "server" };
+}
 function readCheck() {
   try {
     const c = JSON.parse(readFileSync38(checkPath(), "utf-8"));
@@ -22406,8 +22416,24 @@ function updateNotice() {
   const c = readCheck();
   if (!c) return null;
   const own = cliVersion();
-  if (compareVersions(c.serverVersion, own) <= 0) return null;
-  return `chat-recall ${c.serverVersion} is available (you have ${own}). Auto-update should apply it; force it now with: chat-recall update`;
+  const { version: version2, source } = newestKnown(c);
+  if (compareVersions(version2, own) <= 0) return null;
+  const how = source === "npm" ? "The server you sync to has not rolled it yet \u2014 install it with: npm install -g chat-recall@latest" : "Auto-update should apply it; force it now with: chat-recall update";
+  return `chat-recall ${version2} is available (you have ${own}). ${how}`;
+}
+async function fetchNpmLatest() {
+  if (process.env.CHAT_RECALL_NO_NPM_CHECK === "1") return null;
+  try {
+    const res = await fetchWithTimeout(NPM_LATEST_URL, {
+      headers: { accept: "application/vnd.npm.install-v1+json" }
+    }, 5e3);
+    if (!res.ok) return null;
+    const body = await res.json();
+    const v = body["dist-tags"]?.latest;
+    return typeof v === "string" && v ? v : null;
+  } catch {
+    return null;
+  }
 }
 async function refreshUpdateCheck(force = false) {
   const prev = readCheck();
@@ -22417,9 +22443,9 @@ async function refreshUpdateCheck(force = false) {
     const { loadAllCredentials: loadAllCredentials2 } = await Promise.resolve().then(() => (init_sync_client(), sync_client_exports));
     for (const cred of loadAllCredentials2()) {
       if (!cred.serverUrl) continue;
-      const base2 = cred.serverUrl.replace(/\/+$/, "");
+      const base3 = cred.serverUrl.replace(/\/+$/, "");
       try {
-        const res = await fetchWithTimeout(`${base2}/api/capabilities`, {
+        const res = await fetchWithTimeout(`${base3}/api/capabilities`, {
           headers: cred.token ? { authorization: `Bearer ${cred.token}` } : {}
         }, 5e3);
         if (!res.ok) continue;
@@ -22432,8 +22458,14 @@ async function refreshUpdateCheck(force = false) {
   } catch {
     return prev;
   }
-  if (newest === "0.0.0") return prev;
-  const next = { serverVersion: newest, checkedAt: Date.now() };
+  const npmVersion = await fetchNpmLatest();
+  if (newest === "0.0.0" && !npmVersion) return prev;
+  const next = {
+    // A server that answered nothing must not erase what we last knew from one.
+    serverVersion: newest !== "0.0.0" ? newest : prev?.serverVersion ?? "0.0.0",
+    checkedAt: Date.now()
+  };
+  if (npmVersion) next.npmVersion = npmVersion;
   writeCheck(next);
   return next;
 }
@@ -22453,7 +22485,7 @@ function printUpdateNotice() {
   } catch {
   }
 }
-var CHECK_TTL_MS, checkPath, printed;
+var CHECK_TTL_MS, NPM_LATEST_URL, checkPath, printed;
 var init_update_notice = __esm({
   "src/update-notice.ts"() {
     "use strict";
@@ -22461,6 +22493,7 @@ var init_update_notice = __esm({
     init_auto_update();
     init_http();
     CHECK_TTL_MS = 6 * 3600 * 1e3;
+    NPM_LATEST_URL = "https://registry.npmjs.org/chat-recall";
     checkPath = () => join45(getDataDir(), "update-check.json");
     printed = false;
   }
@@ -23014,7 +23047,7 @@ __export(install_skills_exports, {
   skillsSourceDir: () => skillsSourceDir,
   uninstallSkills: () => uninstallSkills
 });
-import { readdirSync as readdirSync34, existsSync as existsSync46, mkdirSync as mkdirSync12, rmSync as rmSync7, cpSync, writeFileSync as writeFileSync13, readFileSync as readFileSync41, statSync as statSync42, realpathSync as realpathSync4 } from "fs";
+import { readdirSync as readdirSync35, existsSync as existsSync46, mkdirSync as mkdirSync12, rmSync as rmSync7, cpSync, writeFileSync as writeFileSync13, readFileSync as readFileSync41, statSync as statSync42, realpathSync as realpathSync4 } from "fs";
 import { createHash as createHash15 } from "crypto";
 import { join as join49, basename as basename23 } from "path";
 function skillsSourceDir() {
@@ -23040,7 +23073,7 @@ function skillsFingerprint() {
 }
 function filesUnder(dir, prefix = "") {
   const out = [];
-  for (const e of readdirSync34(dir, { withFileTypes: true })) {
+  for (const e of readdirSync35(dir, { withFileTypes: true })) {
     if (e.name === MARKER) continue;
     const rel = prefix ? `${prefix}/${e.name}` : e.name;
     if (e.isDirectory()) out.push(...filesUnder(join49(dir, e.name), rel));
@@ -23054,7 +23087,7 @@ function skillStamp() {
 function bundledSkillNames() {
   const src = skillsSourceDir();
   if (!existsSync46(src)) return [];
-  return readdirSync34(src, { withFileTypes: true }).filter((e) => e.isDirectory() && existsSync46(join49(src, e.name, "SKILL.md"))).map((e) => e.name).sort();
+  return readdirSync35(src, { withFileTypes: true }).filter((e) => e.isDirectory() && existsSync46(join49(src, e.name, "SKILL.md"))).map((e) => e.name).sort();
 }
 function realPathOrSelf(p) {
   try {
@@ -23146,7 +23179,7 @@ function uninstallSkills() {
       perTarget.push({ id: t.id, label: t.label, removed });
       continue;
     }
-    for (const entry of readdirSync34(t.dir, { withFileTypes: true })) {
+    for (const entry of readdirSync35(t.dir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
       const dir = join49(t.dir, entry.name);
       if (isManaged(dir) && (names.has(entry.name) || entry.name.startsWith("chat-recall"))) {
@@ -23849,9 +23882,9 @@ function portableCommand(cmd) {
   }
   if (isExecutableFile(cmd))
     return { command: cmd, rewritten: false };
-  const base2 = basename26(cmd);
-  if (onPath(base2))
-    return { command: base2, rewritten: true };
+  const base3 = basename26(cmd);
+  if (onPath(base3))
+    return { command: base3, rewritten: true };
   return { missing: cmd };
 }
 function entryFromSpec(spec) {
@@ -24917,17 +24950,17 @@ async function collectCode(opts) {
     return r;
   };
   log6(`indexing ${ws} + analyses \u2026`);
-  const base2 = await runMcp(bin, ws, [
+  const base3 = await runMcp(bin, ws, [
     call(1, "index_workspace", { path: ws }),
     call(2, "status"),
     call(3, "get_tree"),
     ...ANALYSES.map((a, i) => call(10 + i, "analyze", { analysis: a }))
   ]);
-  const st = parseJson(base2, 2, {});
-  const tree = parseJson(base2, 3, []);
+  const st = parseJson(base3, 2, {});
+  const tree = parseJson(base3, 3, []);
   const A = {};
   ANALYSES.forEach((a, i) => {
-    A[a] = parseJson(base2, 10 + i, {});
+    A[a] = parseJson(base3, 10 + i, {});
   });
   const { health, security: sec, duplication: dup, clones, literal_scan: lit, coupling: coup, cycles: cyc, dead_code: dead, unwrap_audit: unwrap, test_coverage: coverage, architecture: arch, crossref, type_drift: typeDrift, db_schema: dbSchema, migration_parity: migParity, manifest_compliance: manifest } = A;
   if (tree.length === 0) {
@@ -25827,14 +25860,14 @@ function writeLedger(l) {
   } catch {
   }
 }
-async function pushProjectTaskStatuses(base2, authHeaders, opts = {}) {
+async function pushProjectTaskStatuses(base3, authHeaders, opts = {}) {
   const out = { files: 0, pushedTasks: 0 };
   const ledger = readLedger();
   let ledgerDirty = false;
   for (const fk of FILE_KINDS) {
     let projects;
     try {
-      const res = await fetchWithTimeout(`${base2}${fk.trackedPath}`, { headers: authHeaders });
+      const res = await fetchWithTimeout(`${base3}${fk.trackedPath}`, { headers: authHeaders });
       if (!res.ok) continue;
       projects = (await res.json()).projects || [];
     } catch {
@@ -25862,7 +25895,7 @@ async function pushProjectTaskStatuses(base2, authHeaders, opts = {}) {
         continue;
       }
       try {
-        const res = await fetchWithTimeout(`${base2}${fk.statusPath}`, {
+        const res = await fetchWithTimeout(`${base3}${fk.statusPath}`, {
           method: "POST",
           headers: { "content-type": "application/json", ...authHeaders },
           body: JSON.stringify({ project, items: changed.map((t) => ({ id: t.id, status: t.intent })) })
@@ -25968,16 +26001,16 @@ ${block}`);
     return { status: "error", result: JSON.stringify({ error: e instanceof Error ? e.message : "failed" }) };
   }
 }
-async function runPull(base2, opts) {
+async function runPull(base3, opts) {
   const { executePull: executePull2 } = await Promise.resolve().then(() => (init_toolkit_pull(), toolkit_pull_exports));
   const { hostname: hostname3 } = await import("node:os");
-  const creds = loadAllCredentials().find((c) => c.serverUrl.replace(/\/+$/, "") === base2.replace(/\/+$/, ""));
+  const creds = loadAllCredentials().find((c) => c.serverUrl.replace(/\/+$/, "") === base3.replace(/\/+$/, ""));
   const headers = creds?.token ? { authorization: `Bearer ${creds.token}` } : {};
   const wanted = opts.types?.length ? opts.types : ["mcp", "skill", "command", "agent", "instructions"];
   const rows = [];
   for (const type of wanted) {
     try {
-      const res = await fetchWithTimeout(`${base2}/api/toolkit/browse/${type}?limit=1000`, { headers });
+      const res = await fetchWithTimeout(`${base3}/api/toolkit/browse/${type}?limit=1000`, { headers });
       if (!res.ok) continue;
       const body = await res.json();
       for (const it of body.items || []) rows.push(it);
@@ -26046,20 +26079,20 @@ async function runIntent(intent, ctx) {
 async function drainSyncIntents(opts = {}) {
   const out = { processed: 0, done: 0, errored: 0 };
   for (const cred of loadAllCredentials()) {
-    const base2 = cred.serverUrl.replace(/\/+$/, "");
+    const base3 = cred.serverUrl.replace(/\/+$/, "");
     const authHeaders = cred.token ? { authorization: `Bearer ${cred.token}` } : {};
     let pending;
     try {
-      const res = await fetchWithTimeout(`${base2}/api/sync-intents/pending`, { headers: authHeaders });
+      const res = await fetchWithTimeout(`${base3}/api/sync-intents/pending`, { headers: authHeaders });
       if (!res.ok) continue;
       const data = await res.json();
       pending = data.intents || [];
       if (data.cli && data.cli.version) {
         const { planAutoUpdate: planAutoUpdate2, runAutoUpdate: runAutoUpdate2, sweepStaleStaging: sweepStaleStaging2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
-        const plan = planAutoUpdate2(base2, { cli: data.cli }, ownVersion2, process.env.CHAT_RECALL_AUTO_UPDATE);
+        const plan = planAutoUpdate2(base3, { cli: data.cli }, ownVersion2, process.env.CHAT_RECALL_AUTO_UPDATE);
         sweepStaleStaging2();
         if (plan.update) {
-          void runAutoUpdate2(base2, authHeaders, ownVersion2).catch(() => {
+          void runAutoUpdate2(base3, authHeaders, ownVersion2).catch(() => {
           });
         }
       }
@@ -26067,7 +26100,7 @@ async function drainSyncIntents(opts = {}) {
       continue;
     }
     for (const intent of pending) {
-      const { status, result } = await runIntent(intent, { base: base2 });
+      const { status, result } = await runIntent(intent, { base: base3 });
       out.processed++;
       if (status === "done") out.done++;
       else out.errored++;
@@ -26076,7 +26109,7 @@ async function drainSyncIntents(opts = {}) {
         console.error(`[sync-intent] ${label}: ${status}`);
       }
       try {
-        await fetchWithTimeout(`${base2}/api/sync-intents/${intent.id}/ack`, {
+        await fetchWithTimeout(`${base3}/api/sync-intents/${intent.id}/ack`, {
           method: "POST",
           headers: { "content-type": "application/json", ...authHeaders },
           body: JSON.stringify({ status, result })
@@ -26085,7 +26118,7 @@ async function drainSyncIntents(opts = {}) {
       }
     }
     try {
-      await pushProjectTaskStatuses(base2, authHeaders, { verbose: opts.verbose });
+      await pushProjectTaskStatuses(base3, authHeaders, { verbose: opts.verbose });
     } catch {
     }
   }
@@ -26111,7 +26144,7 @@ var init_intent_drain = __esm({
       ownVersion2 = JSON.parse(readFileSync46(join55(dir, "../package.json"), "utf-8")).version || ownVersion2;
     } catch {
       try {
-        if (true) ownVersion2 = "0.5.31";
+        if (true) ownVersion2 = "0.6.0";
       } catch {
       }
     }
@@ -26533,7 +26566,7 @@ var init_vault_crypto = __esm({
 });
 
 // ../engine/dist/core/vault-source.js
-import { existsSync as existsSync53, readdirSync as readdirSync35, statSync as statSync46 } from "fs";
+import { existsSync as existsSync53, readdirSync as readdirSync36, statSync as statSync46 } from "fs";
 import { extname, join as join57 } from "path";
 function* walkVaultSources() {
   const t = loadSettings().team.vault;
@@ -26565,18 +26598,18 @@ function* walkClaude() {
     return;
   let projectDirs = [];
   try {
-    projectDirs = readdirSync35(root);
+    projectDirs = readdirSync36(root);
   } catch {
     return;
   }
   for (const proj of projectDirs) {
     if (proj.startsWith("."))
       continue;
-    const projectPath = decodeProjectDirName(proj);
+    const projectPath = resolveProjectDirName(proj);
     const projDir = join57(root, proj);
     let entries = [];
     try {
-      entries = readdirSync35(projDir);
+      entries = readdirSync36(projDir);
     } catch {
       continue;
     }
@@ -26598,7 +26631,7 @@ function* walkGemini() {
     return;
   let hashDirs = [];
   try {
-    hashDirs = readdirSync35(tmp);
+    hashDirs = readdirSync36(tmp);
   } catch {
     return;
   }
@@ -26608,7 +26641,7 @@ function* walkGemini() {
       continue;
     let entries = [];
     try {
-      entries = readdirSync35(chatsDir);
+      entries = readdirSync36(chatsDir);
     } catch {
       continue;
     }
@@ -26620,8 +26653,8 @@ function* walkGemini() {
       const s = safeStat(path);
       if (!s)
         continue;
-      const base2 = f.replace(/^session-/, "").replace(/\.(jsonl?)$/, "");
-      yield { sessionId: `gemini_${base2}`, tool: "gemini", path, mtimeMs: s.mtimeMs, sizeBytes: s.size };
+      const base3 = f.replace(/^session-/, "").replace(/\.(jsonl?)$/, "");
+      yield { sessionId: `gemini_${base3}`, tool: "gemini", path, mtimeMs: s.mtimeMs, sizeBytes: s.size };
     }
   }
 }
@@ -26654,7 +26687,7 @@ function* walkCodex() {
     const dir = stack.pop();
     let entries = [];
     try {
-      entries = readdirSync35(dir, { withFileTypes: true });
+      entries = readdirSync36(dir, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -26669,8 +26702,8 @@ function* walkCodex() {
       const s = safeStat(path);
       if (!s)
         continue;
-      const base2 = e.name.replace(/\.jsonl$/, "");
-      yield { sessionId: `codex_${base2}`, tool: "codex", path, mtimeMs: s.mtimeMs, sizeBytes: s.size };
+      const base3 = e.name.replace(/\.jsonl$/, "");
+      yield { sessionId: `codex_${base3}`, tool: "codex", path, mtimeMs: s.mtimeMs, sizeBytes: s.size };
     }
   }
 }
@@ -26680,7 +26713,7 @@ function* walkAgy() {
     return;
   let sessionDirs = [];
   try {
-    sessionDirs = readdirSync35(brainDir);
+    sessionDirs = readdirSync36(brainDir);
   } catch {
     return;
   }
@@ -26813,11 +26846,11 @@ function vaultEnable(passphrase, opts = {}) {
 }
 async function vaultEnableWithRemote(passphrase, remote, opts = {}) {
   const doFetch = opts.fetchImpl ?? fetch;
-  const base2 = remote.baseUrl.replace(/\/+$/, "");
+  const base3 = remote.baseUrl.replace(/\/+$/, "");
   const headers = { authorization: `Bearer ${remote.token}`, "content-type": "application/json" };
   let published = { saltHex: null, keyId: null };
   try {
-    const r = await doFetch(`${base2}/api/vault/salt`, { headers });
+    const r = await doFetch(`${base3}/api/vault/salt`, { headers });
     if (r.ok)
       published = await r.json();
   } catch {
@@ -26831,7 +26864,7 @@ async function vaultEnableWithRemote(passphrase, remote, opts = {}) {
   }
   const result = vaultEnable(passphrase);
   try {
-    const r = await doFetch(`${base2}/api/vault/salt`, {
+    const r = await doFetch(`${base3}/api/vault/salt`, {
       method: "POST",
       headers,
       body: JSON.stringify({ saltHex: result.saltHex, keyId: result.keyId })
@@ -26924,8 +26957,8 @@ async function vaultSync(passphrase) {
   return report;
 }
 function importedPathFor(tool, sessionId) {
-  const base2 = sessionId.replace(/^gemini_/, "").replace(/^codex_/, "").replace(/^agy_/, "").replace(/^cursor_/, "").replace(/^opencode_/, "");
-  return join58(IMPORTED_ROOT(), tool, `${base2}.jsonl`);
+  const base3 = sessionId.replace(/^gemini_/, "").replace(/^codex_/, "").replace(/^agy_/, "").replace(/^cursor_/, "").replace(/^opencode_/, "");
+  return join58(IMPORTED_ROOT(), tool, `${base3}.jsonl`);
 }
 async function vaultRestore(passphrase, opts = {}) {
   const ctx = context2();
@@ -27468,8 +27501,8 @@ async function deviceLogin(opts, onPrompt) {
   throw new Error("device-auth timed out \u2014 the code expired before approval.");
 }
 async function betterAuthDeviceLogin(serverUrl, onPrompt) {
-  const base2 = serverUrl.replace(/\/+$/, "");
-  const startRes = await fetch(`${base2}/api/auth/device/code`, {
+  const base3 = serverUrl.replace(/\/+$/, "");
+  const startRes = await fetch(`${base3}/api/auth/device/code`, {
     method: "POST",
     headers: { "content-type": "application/json" },
     body: JSON.stringify({ client_id: BETTER_AUTH_CLI_CLIENT_ID })
@@ -27477,7 +27510,7 @@ async function betterAuthDeviceLogin(serverUrl, onPrompt) {
   if (!startRes.ok) {
     throw new Error(`device-auth init failed: HTTP ${startRes.status} ${await startRes.text().catch(() => "")}`);
   }
-  const start = await readDeviceCode(startRes, base2);
+  const start = await readDeviceCode(startRes, base3);
   onPrompt({
     url: start.verification_uri_complete || start.verification_uri,
     userCode: start.user_code,
@@ -27487,7 +27520,7 @@ async function betterAuthDeviceLogin(serverUrl, onPrompt) {
   let interval = (start.interval ?? 5) * 1e3;
   while (Date.now() < deadline) {
     await sleep(interval);
-    const res = await fetch(`${base2}/api/auth/device/token`, {
+    const res = await fetch(`${base3}/api/auth/device/token`, {
       method: "POST",
       headers: { "content-type": "application/json" },
       body: JSON.stringify({
@@ -27572,6 +27605,140 @@ var init_install_report = __esm({
   }
 });
 
+// src/bulk-delete.ts
+var bulk_delete_exports = {};
+__export(bulk_delete_exports, {
+  BATCH: () => BATCH,
+  bulkDelete: () => bulkDelete,
+  listTombstones: () => listTombstones,
+  needsConfirmation: () => needsConfirmation,
+  restoreSessions: () => restoreSessions,
+  selectSessions: () => selectSessions
+});
+async function selectSessions(target, opts, fetchImpl = fetch) {
+  const found = [];
+  const want = opts.match?.trim();
+  for (let offset = 0; ; offset += PAGE) {
+    const qs = new URLSearchParams({ limit: String(PAGE), offset: String(offset) });
+    if (opts.project) qs.set("project", opts.project);
+    if (opts.tool) qs.set("tool", opts.tool);
+    const res = await fetchImpl(`${base2(target.serverUrl)}/api/conversations/recent?${qs}`, {
+      headers: { authorization: `Bearer ${target.token}` }
+    });
+    if (!res.ok) throw new Error(`list failed: HTTP ${res.status}`);
+    const body = await res.json();
+    const page = body.sessions ?? [];
+    if (page.length === 0) break;
+    for (const row of page) {
+      if (!row.sessionId) continue;
+      if (want !== void 0 && (row.firstPrompt ?? "").trim() !== want) continue;
+      found.push(row);
+      if (opts.limit && found.length >= opts.limit) return found;
+    }
+    if (page.length < PAGE) break;
+  }
+  return found;
+}
+async function bulkDelete(ids, opts = {}) {
+  const unique = [...new Set(ids.filter(Boolean))];
+  const targets = opts.targets ?? loadAllCredentials();
+  const fetchImpl = opts.fetchImpl ?? fetch;
+  const out = { requested: unique.length, perTarget: {}, deleted: 0 };
+  if (unique.length === 0 || targets.length === 0) return out;
+  const succeeded = /* @__PURE__ */ new Set();
+  for (const t of targets) {
+    let deleted = 0;
+    try {
+      for (let i = 0; i < unique.length; i += BATCH) {
+        const slice = unique.slice(i, i + BATCH);
+        const res = await fetchImpl(`${base2(t.serverUrl)}/api/sync`, {
+          method: "POST",
+          headers: { "content-type": "application/json", authorization: `Bearer ${t.token}` },
+          body: JSON.stringify({
+            tombstones: slice.map((session_id) => ({ session_id, deleted_at: Date.now() }))
+          })
+        });
+        if (!res.ok) throw new Error(`HTTP ${res.status}`);
+        deleted += slice.length;
+        for (const id of slice) succeeded.add(id);
+        opts.onProgress?.(deleted, unique.length);
+      }
+      out.perTarget[t.serverUrl] = { deleted };
+    } catch (e) {
+      out.perTarget[t.serverUrl] = { deleted, error: e instanceof Error ? e.message : "failed" };
+    }
+  }
+  out.deleted = succeeded.size;
+  for (const t of targets) {
+    if (!out.perTarget[t.serverUrl] || out.perTarget[t.serverUrl].error) continue;
+    try {
+      const data = getLedgerData(t.serverUrl);
+      let touched = false;
+      for (const id of succeeded) {
+        if (id in data) {
+          delete data[id];
+          touched = true;
+        }
+      }
+      if (touched) persistLedgerData(t.serverUrl, data);
+    } catch {
+    }
+  }
+  return out;
+}
+async function listTombstones(target, limit = 500, fetchImpl = fetch) {
+  const res = await fetchImpl(`${base2(target.serverUrl)}/api/data/tombstones?limit=${limit}`, {
+    headers: { authorization: `Bearer ${target.token}` }
+  });
+  if (!res.ok) throw new Error(`HTTP ${res.status}`);
+  return await res.json();
+}
+async function restoreSessions(ids, opts = {}) {
+  const unique = [...new Set(ids.filter(Boolean))];
+  const targets = opts.targets ?? loadAllCredentials();
+  const fetchImpl = opts.fetchImpl ?? fetch;
+  const out = { requested: unique.length, restored: 0, perTarget: {} };
+  if (unique.length === 0 || targets.length === 0) return out;
+  let best = 0;
+  for (const t of targets) {
+    try {
+      let restored = 0, notDeleted = 0;
+      for (let i = 0; i < unique.length; i += BATCH) {
+        const res = await fetchImpl(`${base2(t.serverUrl)}/api/data/restore`, {
+          method: "POST",
+          headers: { "content-type": "application/json", authorization: `Bearer ${t.token}` },
+          body: JSON.stringify({ session_ids: unique.slice(i, i + BATCH) })
+        });
+        if (!res.ok) throw new Error(`HTTP ${res.status}`);
+        const body = await res.json();
+        restored += body.restored ?? 0;
+        notDeleted += (body.notDeleted ?? []).length;
+      }
+      out.perTarget[t.serverUrl] = { restored, notDeleted };
+      best = Math.max(best, restored);
+    } catch (e) {
+      out.perTarget[t.serverUrl] = { restored: 0, notDeleted: 0, error: e instanceof Error ? e.message : "failed" };
+    }
+  }
+  out.restored = best;
+  return out;
+}
+function needsConfirmation(opts) {
+  const enumeratedByCaller = opts.argvIds > 0 && !opts.project && !opts.stdin;
+  return !enumeratedByCaller;
+}
+var PAGE, BATCH, base2;
+var init_bulk_delete = __esm({
+  "src/bulk-delete.ts"() {
+    "use strict";
+    init_sync_client();
+    init_sync_ledger();
+    PAGE = 200;
+    BATCH = 250;
+    base2 = (url) => url.replace(/\/+$/, "");
+  }
+});
+
 // ../engine/dist/core/resume-command.js
 function toolOfSessionId(sessionId) {
   if (sessionId.startsWith("codex_"))
@@ -27782,13 +27949,13 @@ function requireTarget() {
   }
   return t;
 }
-async function readJsonBody(res, base2, what) {
+async function readJsonBody(res, base3, what) {
   const text = await res.text().catch(() => "");
   try {
     return JSON.parse(text);
   } catch {
     throw new Error(
-      `${base2} answered ${res.status} with something that is not JSON (${JSON.stringify(text.trim().slice(0, 60))}) for ${what} \u2014 a proxy, a captive portal or a host that no longer serves the chat-recall API`
+      `${base3} answered ${res.status} with something that is not JSON (${JSON.stringify(text.trim().slice(0, 60))}) for ${what} \u2014 a proxy, a captive portal or a host that no longer serves the chat-recall API`
     );
   }
 }
@@ -28010,7 +28177,7 @@ program.command("init").description("Set up chat-recall: connect to your server,
       const projectRoot = join60(import.meta.dirname, "..");
       let mcpBinOnPath = false;
       mcpBinOnPath = isOnPath("chat-recall-mcp");
-      const launch = mcpBinOnPath ? { command: "chat-recall-mcp" } : { command: "node", args: [join60(projectRoot, "dist", "mcp.js")] };
+      const launch = mcpBinOnPath ? { command: "chat-recall-mcp" } : { command: "node", args: [join60(projectRoot, "dist", "mcp-relay.js")] };
       const MCP_ENV = { NODE_OPTIONS: "--max-old-space-size=1024" };
       const { registerMcpEverywhere: registerMcpEverywhere2 } = await Promise.resolve().then(() => (init_mcp_clients(), mcp_clients_exports));
       const MCP_CLIENT_FOR_BIN = {
@@ -28573,9 +28740,9 @@ program.command("feedback").argument("<message...>", "what you want to say \u201
     return;
   }
   const target = firstTarget();
-  const base2 = target?.base || (process.env.CHAT_RECALL_SERVER || "https://chatrecall.dev").replace(/\/+$/, "");
+  const base3 = target?.base || (process.env.CHAT_RECALL_SERVER || "https://chatrecall.dev").replace(/\/+$/, "");
   try {
-    const res = await fetch(`${base2}/api/contact/feedback`, {
+    const res = await fetch(`${base3}/api/contact/feedback`, {
       method: "POST",
       headers: {
         "content-type": "application/json",
@@ -28602,7 +28769,7 @@ program.command("feedback").argument("<message...>", "what you want to say \u201
       console.log(chalk2.dim("  Add --email <address> next time if you want a reply."));
     }
   } catch (err) {
-    console.error(chalk2.red(`Could not reach ${base2}.`));
+    console.error(chalk2.red(`Could not reach ${base3}.`));
     console.error(chalk2.dim("  Your message, so it is not lost:"));
     console.error(chalk2.dim(`  ${message}`));
     process.exitCode = 1;
@@ -29170,13 +29337,13 @@ sources2.command("decline <path>").description("Keep a folder out of sync (e.g.
   }
   const { fetchWithTimeout: fetchWithTimeout2 } = await Promise.resolve().then(() => (init_http(), http_exports));
   for (const t of targets) {
-    const base2 = t.serverUrl.replace(/\/+$/, "");
+    const base3 = t.serverUrl.replace(/\/+$/, "");
     const headers = {};
     if (t.token) headers.authorization = `Bearer ${t.token}`;
     let deleted = 0, missing = 0, failed = 0;
     for (const id of ids) {
       try {
-        const res = await fetchWithTimeout2(`${base2}/api/conversations/${encodeURIComponent(id)}`, { method: "DELETE", headers }, 3e4);
+        const res = await fetchWithTimeout2(`${base3}/api/conversations/${encodeURIComponent(id)}`, { method: "DELETE", headers }, 3e4);
         if (res.ok) deleted++;
         else if (res.status === 404) missing++;
         else failed++;
@@ -29184,7 +29351,7 @@ sources2.command("decline <path>").description("Keep a folder out of sync (e.g.
         failed++;
       }
     }
-    const line = `  ${base2}: deleted ${deleted}` + (missing ? `, ${missing} were not there` : "") + (failed ? chalk2.red(`, ${failed} FAILED`) : "");
+    const line = `  ${base3}: deleted ${deleted}` + (missing ? `, ${missing} were not there` : "") + (failed ? chalk2.red(`, ${failed} FAILED`) : "");
     console.log(failed ? chalk2.yellow(line) : chalk2.green(line));
     if (failed) process.exitCode = 1;
   }
@@ -30032,10 +30199,10 @@ program.command("service <action>").description("Manage the per-user background
 });
 async function runLogin(serverUrl, opts) {
   const { saveCredentials: saveCredentials2, loadAllCredentials: loadAllCredentials2 } = await Promise.resolve().then(() => (init_sync_client(), sync_client_exports));
-  const base2 = serverUrl.replace(/\/+$/, "");
+  const base3 = serverUrl.replace(/\/+$/, "");
   const verifyToken = async (token) => {
     try {
-      const res = await fetch(`${base2}/api/status`, {
+      const res = await fetch(`${base3}/api/status`, {
         headers: token ? { authorization: `Bearer ${token}` } : {},
         signal: AbortSignal.timeout(1e4)
       });
@@ -30051,36 +30218,36 @@ async function runLogin(serverUrl, opts) {
       return failLogin(opts, 'the token contains non-ASCII characters \u2014 this looks like a masked/truncated copy (e.g. "ct_12345678\u2026")');
     }
     const { probeServer: identifyServer, probeOk: identified, probeAdvice: identifyAdvice } = await Promise.resolve().then(() => (init_server_probe(), server_probe_exports));
-    const who = await identifyServer(base2, { timeoutMs: 1e4 });
-    if (!identified(who)) return failLogin(opts, identifyAdvice(who, base2));
+    const who = await identifyServer(base3, { timeoutMs: 1e4 });
+    if (!identified(who)) return failLogin(opts, identifyAdvice(who, base3));
     const check = await verifyToken(token);
     if (!check.ok) {
       if (check.status === 401 || check.status === 403) {
         console.error(chalk2.dim("Tokens are shown once \u2014 mint a fresh one (Account \u2192 Connect your machine) and copy the whole line."));
-        return failLogin(opts, `${base2} rejected the token (HTTP ${check.status})`);
+        return failLogin(opts, `${base3} rejected the token (HTTP ${check.status})`);
       }
       if (check.status !== void 0 && check.status >= 500) {
-        return failLogin(opts, `${base2} answered HTTP ${check.status} \u2014 the server is up but failing. The token was never checked. Nothing to fix locally.`);
+        return failLogin(opts, `${base3} answered HTTP ${check.status} \u2014 the server is up but failing. The token was never checked. Nothing to fix locally.`);
       }
       if (check.status === 404 || check.status === 410) {
-        return failLogin(opts, `${base2} does not serve the chat-recall API (HTTP ${check.status}). If the server moved, log in to its new URL.`);
+        return failLogin(opts, `${base3} does not serve the chat-recall API (HTTP ${check.status}). If the server moved, log in to its new URL.`);
       }
-      return failLogin(opts, `could not verify the token against ${base2}: ${check.error || `HTTP ${check.status}`}`);
+      return failLogin(opts, `could not verify the token against ${base3}: ${check.error || `HTTP ${check.status}`}`);
     }
     saveCredentials2({ serverUrl, token });
     console.log(chalk2.green("\u2713 Logged in.") + chalk2.dim(`  server: ${serverUrl} (token verified)`));
     return;
   }
-  const existing = loadAllCredentials2().find((t) => t.serverUrl.replace(/\/+$/, "") === base2);
+  const existing = loadAllCredentials2().find((t) => t.serverUrl.replace(/\/+$/, "") === base3);
   if (existing && (await verifyToken(existing.token)).ok) {
     console.log(chalk2.green("\u2713 Already connected.") + chalk2.dim(`  server: ${serverUrl} (existing token verified)`));
     return;
   }
   try {
     const { probeServer: probeServer2, probeOk: probeOk2 } = await Promise.resolve().then(() => (init_server_probe(), server_probe_exports));
-    const identified = await probeServer2(base2, { timeoutMs: 8e3 });
+    const identified = await probeServer2(base3, { timeoutMs: 8e3 });
     if (probeOk2(identified)) {
-      const probe = await fetch(`${base2}/api/status`, { signal: AbortSignal.timeout(8e3) });
+      const probe = await fetch(`${base3}/api/status`, { signal: AbortSignal.timeout(8e3) });
       if (probe.status === 200) {
         saveCredentials2({ serverUrl, token: "" });
         console.log(chalk2.green("\u2713 Logged in.") + chalk2.dim(`  ${serverUrl} (local server \u2014 no auth, no token needed)`));
@@ -30101,16 +30268,16 @@ async function runLogin(serverUrl, opts) {
     if (!issuer) {
       const { probeServer: probeServer2, probeOk: probeOk2, probeAdvice: probeAdvice2 } = await Promise.resolve().then(() => (init_server_probe(), server_probe_exports));
       for (let attempt = 1; attempt <= 3 && !authProvider; attempt++) {
-        const probe = await probeServer2(base2, { timeoutMs: 15e3 });
+        const probe = await probeServer2(base3, { timeoutMs: 15e3 });
         if (probeOk2(probe)) {
           const caps = probe.raw;
           authProvider = caps?.authProvider;
           if (caps?.oidcIssuer) issuer = caps.oidcIssuer;
           capsError = null;
         } else if (probe.kind === "moved" || probe.kind === "not_api") {
-          return failLogin(opts, probeAdvice2(probe, base2));
+          return failLogin(opts, probeAdvice2(probe, base3));
         } else {
-          capsError = probeAdvice2(probe, base2);
+          capsError = probeAdvice2(probe, base3);
         }
         if (!authProvider && attempt < 3) await new Promise((r) => setTimeout(r, attempt * 1e3));
       }
@@ -30119,7 +30286,7 @@ async function runLogin(serverUrl, opts) {
       authProvider = "better-auth";
       if (capsError) {
         console.log(`   ${chalk2.yellow("Could not read the server's capabilities")} (${capsError}) \u2014 assuming the standard sign-in flow.`);
-        void Promise.resolve().then(() => (init_install_report(), install_report_exports)).then(({ reportInstallFailure: reportInstallFailure2 }) => reportInstallFailure2(base2, {
+        void Promise.resolve().then(() => (init_install_report(), install_report_exports)).then(({ reportInstallFailure: reportInstallFailure2 }) => reportInstallFailure2(base3, {
           step: "cli_login_probe",
           reason: capsError?.slice(0, 40) ?? null,
           message: capsError
@@ -30141,20 +30308,20 @@ async function runLogin(serverUrl, opts) {
       console.log(chalk2.dim(`  If the page asks for a code: ${chalk2.bold(p.userCode)}`));
       console.log(chalk2.dim("Then come back here \u2014 this finishes on its own. Waiting\u2026"));
     };
-    const tokens = authProvider === "better-auth" ? await betterAuthDeviceLogin2(base2, onPrompt) : await deviceLogin2({ issuer, clientId: opts.clientId }, onPrompt);
+    const tokens = authProvider === "better-auth" ? await betterAuthDeviceLogin2(base3, onPrompt) : await deviceLogin2({ issuer, clientId: opts.clientId }, onPrompt);
     const authHdr = { authorization: `Bearer ${tokens.accessToken}`, "content-type": "application/json" };
-    const meRes = await fetch(`${base2}/api/me`, { headers: authHdr });
-    if (!meRes.ok) throw new Error(`${base2}/api/me: HTTP ${meRes.status} ${await meRes.text().catch(() => "")}`);
-    const me = await readJsonBody(meRes, base2, "GET /api/me");
+    const meRes = await fetch(`${base3}/api/me`, { headers: authHdr });
+    if (!meRes.ok) throw new Error(`${base3}/api/me: HTTP ${meRes.status} ${await meRes.text().catch(() => "")}`);
+    const me = await readJsonBody(meRes, base3, "GET /api/me");
     const teams = me.teams || [];
     let slug = opts.team;
     if (!slug) {
       if (teams.length === 1) slug = teams[0].team_slug;
       else if (teams.length === 0) {
         const name = me.user?.email?.split("@")[0]?.replace(/[^a-z0-9]/gi, "") || "workspace";
-        const created = await fetch(`${base2}/api/teams`, { method: "POST", headers: authHdr, body: JSON.stringify({ name }) });
+        const created = await fetch(`${base3}/api/teams`, { method: "POST", headers: authHdr, body: JSON.stringify({ name }) });
         if (!created.ok) throw new Error(`workspace create failed: HTTP ${created.status} ${await created.text().catch(() => "")}`);
-        slug = (await readJsonBody(created, base2, "POST /api/teams")).slug;
+        slug = (await readJsonBody(created, base3, "POST /api/teams")).slug;
         console.log(chalk2.dim(`Created workspace "${name}" (${slug}) \u2014 you're its owner.`));
       } else {
         teams.forEach((t) => console.error(`  ${t.team_slug}  ${chalk2.dim(t.name)}`));
@@ -30162,13 +30329,13 @@ async function runLogin(serverUrl, opts) {
       }
     }
     const deviceId = opts.deviceId || (await import("node:os")).hostname();
-    const mint = await fetch(`${base2}/api/teams/${encodeURIComponent(slug)}/tokens`, {
+    const mint = await fetch(`${base3}/api/teams/${encodeURIComponent(slug)}/tokens`, {
       method: "POST",
       headers: authHdr,
       body: JSON.stringify({ device_id: deviceId })
     });
     if (!mint.ok) throw new Error(`token mint failed: HTTP ${mint.status} ${await mint.text().catch(() => "")}`);
-    const { token } = await readJsonBody(mint, base2, "POST /api/teams/:slug/tokens");
+    const { token } = await readJsonBody(mint, base3, "POST /api/teams/:slug/tokens");
     saveCredentials2({ serverUrl, token });
     console.log(chalk2.green(`\u2713 Logged in to ${chalk2.bold(slug)}`) + chalk2.dim(`  (device: ${deviceId})  server: ${serverUrl}`));
     if (!opts.fromInit) {
@@ -30420,30 +30587,142 @@ program.command("logout <server-url>").description("Remove one sync target (othe
     process.exit(1);
   }
 });
-program.command("delete <session-id>").description("Delete a session from chat-recall everywhere: purges it on every logged-in server and tombstones it so it can't resurrect on the next sync. Does NOT touch the AI tool's own transcript file.").action(async (sessionId) => {
+program.command("delete [session-ids...]").description("Delete sessions from chat-recall everywhere: purges them on every logged-in server and tombstones them so they can't resurrect on the next sync. Does NOT touch the AI tool's own transcript files.").option("--project <id>", "Select every session in a project (e.g. git:github.com/me/repo)").option("--match <text>", "With --project: only sessions whose first prompt is EXACTLY this").option("--tool <name>", "With --project: only sessions from this tool (claude, codex, \u2026)").option("--stdin", "Read session ids from stdin, one per line").option("-n, --dry-run", "List what would be deleted and exit").option("-y, --yes", "Skip the confirmation prompt").action(async (sessionIds, opts) => {
   const { loadAllCredentials: loadAllCredentials2 } = await Promise.resolve().then(() => (init_sync_client(), sync_client_exports));
+  const { selectSessions: selectSessions2, bulkDelete: bulkDelete2, needsConfirmation: needsConfirmation2 } = await Promise.resolve().then(() => (init_bulk_delete(), bulk_delete_exports));
   const targets = loadAllCredentials2();
   if (targets.length === 0) {
     console.error(chalk2.red("Not logged in \u2014 run `chat-recall login <server-url>` first."));
     process.exit(1);
   }
-  let ok = 0;
-  for (const t of targets) {
+  if ((opts.match || opts.tool) && !opts.project) {
+    console.error(chalk2.red("--match and --tool select WITHIN a project; pass --project too."));
+    process.exit(1);
+  }
+  let ids = [...sessionIds];
+  let preview = [];
+  if (opts.stdin) {
+    const stdin = await new Promise((resolve3) => {
+      let buf = "";
+      process.stdin.setEncoding("utf-8");
+      process.stdin.on("data", (d) => {
+        buf += d;
+      });
+      process.stdin.on("end", () => resolve3(buf));
+    });
+    ids.push(...stdin.split("\n").map((l) => l.trim()).filter(Boolean));
+  }
+  if (opts.project) {
     try {
-      const res = await fetch(`${t.serverUrl.replace(/\/+$/, "")}/api/conversations/${encodeURIComponent(sessionId)}`, {
-        method: "DELETE",
-        headers: { authorization: `Bearer ${t.token}` }
+      preview = await selectSessions2(targets[0], { project: opts.project, match: opts.match, tool: opts.tool });
+    } catch (e) {
+      console.error(chalk2.red(`Could not list sessions: ${e instanceof Error ? e.message : "failed"}`));
+      process.exit(1);
+    }
+    ids.push(...preview.map((r) => r.sessionId));
+  }
+  ids = [...new Set(ids.filter(Boolean))];
+  if (ids.length === 0) {
+    console.log(chalk2.yellow("Nothing selected \u2014 no session ids given and no selector matched."));
+    return;
+  }
+  const shown = preview.length > 0 ? preview.slice(0, 10) : ids.slice(0, 10).map((id) => ({ sessionId: id, firstPrompt: void 0 }));
+  for (const r of shown) {
+    const label = r.firstPrompt ? chalk2.dim(` \u2014 ${r.firstPrompt.replace(/\s+/g, " ").slice(0, 60)}`) : "";
+    console.log(`  ${r.sessionId}${label}`);
+  }
+  if (ids.length > shown.length) console.log(chalk2.dim(`  \u2026 and ${ids.length - shown.length} more`));
+  if (opts.dryRun) {
+    console.log(chalk2.cyan(`
+Dry run \u2014 ${ids.length} session(s) would be deleted on ${targets.length} server(s). Nothing was changed.`));
+    return;
+  }
+  if (!opts.yes && needsConfirmation2({ argvIds: sessionIds.length, project: opts.project, stdin: opts.stdin })) {
+    if (!process.stdin.isTTY) {
+      console.error(chalk2.red(`
+Refusing to delete ${ids.length} session(s) without confirmation \u2014 pass --yes (or -n to preview).`));
+      process.exit(1);
+    }
+    const readline = await import("node:readline/promises");
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    const answer = await rl.question(chalk2.yellow(`
+Permanently delete ${ids.length} session(s) on ${targets.length} server(s)? This cannot be undone. [y/N] `));
+    rl.close();
+    if (answer.trim().toLowerCase() !== "y") {
+      console.log("Aborted \u2014 nothing was deleted.");
+      return;
+    }
+  }
+  const res = await bulkDelete2(ids, { targets });
+  for (const [server, r] of Object.entries(res.perTarget)) {
+    if (r.error) console.error(chalk2.red(`\u2717 ${server}: ${r.deleted}/${ids.length} deleted, then failed \u2014 ${r.error}`));
+    else console.log(chalk2.green(`\u2713 ${server}: ${r.deleted} deleted`));
+  }
+  if (res.deleted === 0) {
+    console.error(chalk2.red("Nothing was deleted."));
+    process.exit(1);
+  }
+  console.log(chalk2.dim(`Tombstoned \u2014 re-sync cannot resurrect them. Local transcript files were not touched.`));
+  if (res.deleted < ids.length) {
+    console.error(chalk2.yellow(`Note: ${ids.length - res.deleted} session(s) did not delete on any server.`));
+  }
+});
+program.command("restore [session-ids...]").description("Undo a delete: lifts the tombstone so those sessions can be synced again. Restores no content by itself \u2014 re-run `chat-recall index --force` on a machine that still has the transcript. With no ids, lists what has been deleted.").option("--stdin", "Read session ids from stdin, one per line").option("--list", "Just show what has been deleted, newest first").option("--limit <n>", "How many deletions to list (default 50)").action(async (sessionIds, opts) => {
+  const { loadAllCredentials: loadAllCredentials2 } = await Promise.resolve().then(() => (init_sync_client(), sync_client_exports));
+  const { listTombstones: listTombstones2, restoreSessions: restoreSessions2 } = await Promise.resolve().then(() => (init_bulk_delete(), bulk_delete_exports));
+  const targets = loadAllCredentials2();
+  if (targets.length === 0) {
+    console.error(chalk2.red("Not logged in \u2014 run `chat-recall login <server-url>` first."));
+    process.exit(1);
+  }
+  const ids = [...sessionIds];
+  if (opts.stdin) {
+    const buf = await new Promise((resolve3) => {
+      let b = "";
+      process.stdin.setEncoding("utf-8");
+      process.stdin.on("data", (d) => {
+        b += d;
       });
-      if (res.ok) {
-        ok++;
-        console.log(chalk2.green(`\u2713 Deleted on ${t.serverUrl}`));
-      } else console.error(chalk2.red(`\u2717 ${t.serverUrl}: HTTP ${res.status}`));
+      process.stdin.on("end", () => resolve3(b));
+    });
+    ids.push(...buf.split("\n").map((l) => l.trim()).filter(Boolean));
+  }
+  if (opts.list || ids.length === 0) {
+    const limit = Math.max(1, parseInt(opts.limit ?? "") || 50);
+    try {
+      const { total, tombstones } = await listTombstones2(targets[0], limit);
+      if (total === 0) {
+        console.log(chalk2.dim("Nothing has been deleted."));
+        return;
+      }
+      console.log(chalk2.bold(`${total} deleted session(s) \u2014 newest first:
+`));
+      for (const t of tombstones) {
+        console.log(`  ${t.session_id}  ${chalk2.dim(new Date(t.deleted_at).toISOString().replace("T", " ").slice(0, 19))}`);
+      }
+      if (total > tombstones.length) console.log(chalk2.dim(`
+  \u2026 and ${total - tombstones.length} more (--limit to see them)`));
+      console.log(chalk2.dim("\nRestore with: chat-recall restore <id...>"));
     } catch (e) {
-      console.error(chalk2.red(`\u2717 ${t.serverUrl}: ${e instanceof Error ? e.message : "failed"}`));
+      console.error(chalk2.red(`Could not list deletions: ${e instanceof Error ? e.message : "failed"}`));
+      process.exit(1);
     }
+    return;
   }
-  if (ok === 0) process.exit(1);
-  console.log(chalk2.dim(`Tombstoned on ${ok}/${targets.length} server(s) \u2014 re-sync cannot resurrect it.`));
+  const res = await restoreSessions2(ids, { targets });
+  for (const [server, r] of Object.entries(res.perTarget)) {
+    if (r.error) console.error(chalk2.red(`\u2717 ${server}: ${r.error}`));
+    else {
+      console.log(chalk2.green(`\u2713 ${server}: ${r.restored} tombstone(s) lifted`));
+      if (r.notDeleted > 0) console.log(chalk2.yellow(`  ${r.notDeleted} id(s) were not deleted here \u2014 nothing to lift`));
+    }
+  }
+  if (res.restored === 0) {
+    console.error(chalk2.red("No tombstones were lifted."));
+    process.exit(1);
+  }
+  console.log(chalk2.dim("\nThe content is still gone from the server. Re-upload it from a machine that"));
+  console.log(chalk2.dim("still holds the transcript:  chat-recall index --force"));
 });
 program.command("rename <session-id> <name>").description('Give a session a memorable name on every logged-in server (mirrors Claude Code\'s /rename \u2014 shows in `recall recent` and the web UI in place of the auto summary). Pass an empty name "" to clear it and revert to the auto title.').action(async (sessionId, name) => {
   const { loadAllCredentials: loadAllCredentials2 } = await Promise.resolve().then(() => (init_sync_client(), sync_client_exports));
@@ -30522,9 +30801,9 @@ program.command("reconcile").description("Reconcile DERIVED FIELDS (e.g. native
     process.exit(1);
   }
 });
-program.command("update").description("Update this CLI now from the server you sync to (same-origin, checksum-pinned) and report exactly why if it cannot").action(async () => {
-  const { runAutoUpdate: runAutoUpdate2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
-  const { refreshUpdateCheck: refreshUpdateCheck2 } = await Promise.resolve().then(() => (init_update_notice(), update_notice_exports));
+program.command("update").description("Update this CLI now from the server you sync to (same-origin, checksum-pinned) and report exactly why if it cannot. Use --from-npm when the server has not rolled the newest release yet.").option("--from-npm", "Install the newest published release straight from the npm registry instead of the server tarball").action(async (opts) => {
+  const { runAutoUpdate: runAutoUpdate2, compareVersions: compareVersions2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
+  const { refreshUpdateCheck: refreshUpdateCheck2, newestKnown: newestKnown2 } = await Promise.resolve().then(() => (init_update_notice(), update_notice_exports));
   const { cliVersion: cliVersion3 } = await Promise.resolve().then(() => (init_http(), http_exports));
   const targets = loadAllCredentials();
   if (!targets.length) {
@@ -30533,22 +30812,54 @@ program.command("update").description("Update this CLI now from the server you s
   }
   let installFailed = false;
   for (const cred of targets) {
-    const base2 = cred.serverUrl.replace(/\/+$/, "");
+    const base3 = cred.serverUrl.replace(/\/+$/, "");
     const headers = cred.token ? { authorization: `Bearer ${cred.token}` } : {};
-    const r = await runAutoUpdate2(base2, headers, cliVersion3());
+    const r = await runAutoUpdate2(base3, headers, cliVersion3());
     if (r.updated) {
-      console.log(chalk2.green(`\u2713 ${r.reason}`) + chalk2.dim(` (${base2})`));
+      console.log(chalk2.green(`\u2713 ${r.reason}`) + chalk2.dim(` (${base3})`));
       continue;
     }
     const benign = /already current|no CLI release|disabled/.test(r.reason);
     if (/install failed|download failed|checksum/.test(r.reason)) installFailed = true;
-    console.log((benign ? chalk2.dim("\u2022 ") : chalk2.red("\u2717 ")) + r.reason + chalk2.dim(` (${base2})`));
+    console.log((benign ? chalk2.dim("\u2022 ") : chalk2.red("\u2717 ")) + r.reason + chalk2.dim(` (${base3})`));
   }
-  await refreshUpdateCheck2(true);
+  const check = await refreshUpdateCheck2(true);
   if (installFailed) {
     console.log(chalk2.dim("\nThe update was available but did not install \u2014 usually npm cannot write the global prefix. Retry with:"));
     console.log(chalk2.dim(`  npm install -g chat-recall   (or re-run the installer: curl -fsSL ${targets[0].serverUrl.replace(/\/+$/, "")}/install | sh)`));
   }
+  if (check) {
+    const own = cliVersion3();
+    const { version: version2, source } = newestKnown2(check);
+    const behind = source === "npm" && compareVersions2(version2, own) > 0;
+    if (behind && !opts.fromNpm) {
+      console.log(chalk2.yellow(`
+npm has ${version2}; the server you sync to still serves ${check.serverVersion}.`));
+      console.log(chalk2.dim("The server tarball cannot deliver it until that deployment rolls. Get it now with:"));
+      console.log(chalk2.dim("  chat-recall update --from-npm"));
+    } else if (behind && opts.fromNpm) {
+      console.log(chalk2.dim(`
+Installing ${version2} from npm\u2026`));
+      try {
+        const { execFileSync: execFileSync4 } = await import("node:child_process");
+        execFileSync4("npm", ["install", "-g", `chat-recall@${version2}`], { stdio: "inherit" });
+        const { installedVersion: installedVersion2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
+        const landed = installedVersion2();
+        if (landed && compareVersions2(landed, version2) >= 0) {
+          console.log(chalk2.green(`\u2713 updated to ${landed} from npm`));
+        } else {
+          console.error(chalk2.red(`\u2717 npm reported success but ${landed ?? "an unknown version"} is still on disk \u2014 the package that runs is not the one npm wrote.`));
+          process.exit(1);
+        }
+      } catch (e) {
+        console.error(chalk2.red(`\u2717 npm install failed: ${e instanceof Error ? e.message : e}`));
+        process.exit(1);
+      }
+    } else if (opts.fromNpm) {
+      console.log(chalk2.dim(`
+npm has nothing newer than ${own} \u2014 nothing to do.`));
+    }
+  }
 });
 program.hook("preAction", () => {
   printUpdateNotice();