chat-recall 0.5.5 → 0.5.6

package/dist/cli.js

@@ -2034,7 +2034,7 @@ var require_thread_stream = __commonJS({
     var { version: version2 } = require_package();
     var { EventEmitter } = __require("events");
     var { Worker } = __require("worker_threads");
-    var { join: join54 } = __require("path");
+    var { join: join57 } = __require("path");
     var { pathToFileURL } = __require("url");
     var { wait } = require_wait();
     var {
@@ -2077,7 +2077,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join54(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join57(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -2480,7 +2480,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire: createRequire3 } = __require("module");
     var getCallers = require_caller();
-    var { join: join54, isAbsolute: isAbsolute2, sep: sep2 } = __require("node:path");
+    var { join: join57, isAbsolute: isAbsolute3, sep: sep3 } = __require("node:path");
     var sleep2 = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -2543,7 +2543,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join54(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join57(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -2561,7 +2561,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline) {
-        target = bundlerOverrides["pino-worker"] || join54(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join57(__dirname, "worker.js");
         options.pipelines = [pipeline.map((dest) => {
           return {
             ...dest,
@@ -2579,16 +2579,16 @@ var require_transport = __commonJS({
       return buildStream(fixTarget(target), options, worker, sync);
       function fixTarget(origin) {
         origin = bundlerOverrides[origin] || origin;
-        if (isAbsolute2(origin) || origin.indexOf("file://") === 0) {
+        if (isAbsolute3(origin) || origin.indexOf("file://") === 0) {
           return origin;
         }
         if (origin === "pino/file") {
-          return join54(__dirname, "..", "file.js");
+          return join57(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
           try {
-            const context3 = filePath === "node:repl" ? process.cwd() + sep2 : filePath;
+            const context3 = filePath === "node:repl" ? process.cwd() + sep3 : filePath;
             fixTarget2 = createRequire3(context3).resolve(origin);
             break;
           } catch (err) {
@@ -3572,7 +3572,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join54 = ",";
+            let join57 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -3586,7 +3586,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join54 = `,
+                join57 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3594,13 +3594,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join54;
+                res += join57;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join54}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join57}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3621,7 +3621,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join54 = `,
+              join57 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3635,13 +3635,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join54;
+                separator = join57;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join54;
+              separator = join57;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -3682,7 +3682,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join54 = ",";
+            let join57 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -3695,7 +3695,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join54 = `,
+                join57 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3703,13 +3703,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join54;
+                res += join57;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join54}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join57}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3722,7 +3722,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join54 = `,
+              join57 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3731,7 +3731,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join54;
+                separator = join57;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -3789,20 +3789,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join55 = `,
+              const join58 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join55;
+                res2 += join58;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join55}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join58}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -3818,16 +3818,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join54 = `,
+            const join57 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join54, maximumBreadth);
+              res += stringifyTypedArray(value, join57, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join54;
+              separator = join57;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -3838,13 +3838,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join54;
+                separator = join57;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join54;
+              separator = join57;
             }
             if (separator !== "") {
               res = `
@@ -4552,7 +4552,10 @@ var init_paths = __esm({
 // ../engine/dist/core/settings.js
 var settings_exports = {};
 __export(settings_exports, {
+  PERSONAL_DIR_NAMES: () => PERSONAL_DIR_NAMES,
   PERSONAL_DIR_PATTERNS: () => PERSONAL_DIR_PATTERNS,
+  _resetSecretsCacheForTests: () => _resetSecretsCacheForTests,
+  _resetSettingsCacheForTests: () => _resetSettingsCacheForTests,
   _resetSourceSettingsCache: () => _resetSourceSettingsCache,
   applySettingsToEnv: () => applySettingsToEnv,
   isPersonalPath: () => isPersonalPath,
@@ -4671,7 +4674,8 @@ function defaultSync() {
 function isPersonalPath(projectPath, includeProjects = []) {
   if (includeProjects.some((inc) => inc && projectPath.includes(inc)))
     return false;
-  return PERSONAL_DIR_PATTERNS.some((pat) => projectPath.includes(pat));
+  const norm = (projectPath.replace(/\\/g, "/") + "/").toLowerCase();
+  return PERSONAL_DIR_NAMES.some((n) => norm.includes(`/${n.toLowerCase()}/`));
 }
 function defaultTeam() {
   return {
@@ -4791,11 +4795,24 @@ function _resetSourceSettingsCache() {
 function secretsPath() {
   return join2(getDataDir(), "secrets.env");
 }
+function _resetSecretsCacheForTests() {
+  _secretsCache = null;
+}
 function loadSecrets() {
   const out = {};
   const p = secretsPath();
   if (!existsSync2(p))
     return out;
+  let mtimeMs = -1, size = -1;
+  try {
+    const st = statSync2(p);
+    mtimeMs = st.mtimeMs;
+    size = st.size;
+  } catch {
+  }
+  if (_secretsCache && _secretsCache.mtimeMs === mtimeMs && _secretsCache.size === size) {
+    return { ..._secretsCache.value };
+  }
   try {
     for (const line of readFileSync(p, "utf-8").split("\n")) {
       const t = line.trim();
@@ -4813,9 +4830,12 @@ function loadSecrets() {
     }
   } catch {
   }
+  if (mtimeMs >= 0)
+    _secretsCache = { mtimeMs, size, value: { ...out } };
   return out;
 }
 function writeSecrets(secrets) {
+  _secretsCache = null;
   const p = secretsPath();
   mkdirSync2(dirname2(p), { recursive: true });
   const body = "# chat-recall secrets \u2014 NOT committed/synced. Mode 0600.\n" + Object.entries(secrets).filter(([, v]) => v).map(([k, v]) => `${k}=${v}`).join("\n") + "\n";
@@ -4825,10 +4845,34 @@ function writeSecrets(secrets) {
   } catch {
   }
 }
+function applySecretOverlay(result) {
+  const secrets = loadSecrets();
+  for (const { block, field, env } of SECRET_FIELDS) {
+    const blk = result[block];
+    const value = process.env[env] || secrets[env] || blk[field];
+    if (value)
+      blk[field] = value;
+  }
+  return result;
+}
+function _resetSettingsCacheForTests() {
+  _settingsCache = null;
+}
 function loadSettings() {
   const path = settingsPath();
   if (!existsSync2(path))
     return freshDefaults();
+  let mtimeMs = -1, size = -1;
+  try {
+    const st = statSync2(path);
+    mtimeMs = st.mtimeMs;
+    size = st.size;
+  } catch {
+  }
+  if (_settingsCache && _settingsCache.mtimeMs === mtimeMs && _settingsCache.size === size) {
+    const cached = structuredClone(_settingsCache.value);
+    return applySecretOverlay(cached);
+  }
   try {
     const parsed = JSON.parse(readFileSync(path, "utf-8"));
     const base2 = freshDefaults();
@@ -4841,19 +4885,15 @@ function loadSettings() {
       sync: mergeSync(base2.sync, parsed.sync),
       team: mergeTeam(base2.team, parsed.team)
     };
-    const secrets = loadSecrets();
-    for (const { block, field, env } of SECRET_FIELDS) {
-      const blk = result[block];
-      const value = process.env[env] || secrets[env] || blk[field];
-      if (value)
-        blk[field] = value;
-    }
-    return result;
+    if (mtimeMs >= 0)
+      _settingsCache = { mtimeMs, size, value: structuredClone(result) };
+    return applySecretOverlay(result);
   } catch {
     return freshDefaults();
   }
 }
 function saveSettings(settings2) {
+  _settingsCache = null;
   const secrets = loadSecrets();
   const stripped = {
     ...settings2,
@@ -4967,7 +5007,7 @@ function mergeSettings(current, update) {
   const team2 = mergeTeam(current.team, update.team);
   return { v: SCHEMA_VERSION, embedding: e, summary: sm, sources: sources3, privacy, sync, team: team2 };
 }
-var CLI_DETECTION_ORDER, SCHEMA_VERSION, PERSONAL_DIR_PATTERNS, _sourceSettingsCache, SECRET_FIELDS;
+var CLI_DETECTION_ORDER, SCHEMA_VERSION, PERSONAL_DIR_NAMES, PERSONAL_DIR_PATTERNS, _sourceSettingsCache, SECRET_FIELDS, _secretsCache, _settingsCache;
 var init_settings = __esm({
   "../engine/dist/core/settings.js"() {
     "use strict";
@@ -4981,17 +5021,18 @@ var init_settings = __esm({
       { preset: "aichat", bin: "aichat", cmd: "aichat --no-stream" }
     ];
     SCHEMA_VERSION = 3;
-    PERSONAL_DIR_PATTERNS = [
-      "/Pictures/",
-      "/Music/",
-      "/Movies/",
-      "/Videos/",
-      "/Photos Library",
-      "/Documents/",
-      "/Desktop/",
-      "/Downloads/",
-      "/Library/"
+    PERSONAL_DIR_NAMES = [
+      "Pictures",
+      "Music",
+      "Movies",
+      "Videos",
+      "Photos Library",
+      "Documents",
+      "Desktop",
+      "Downloads",
+      "Library"
     ];
+    PERSONAL_DIR_PATTERNS = PERSONAL_DIR_NAMES.map((n) => `/${n}/`);
     _sourceSettingsCache = null;
     SECRET_FIELDS = [
       { block: "summary", field: "apiKey", env: "SUMMARY_API_KEY" },
@@ -5002,6 +5043,8 @@ var init_settings = __esm({
       { block: "embedding", field: "ollamaCloudApiKey", env: "OLLAMA_API_KEY" },
       { block: "embedding", field: "openaiCompatApiKey", env: "OPENAI_COMPAT_API_KEY" }
     ];
+    _secretsCache = null;
+    _settingsCache = null;
   }
 });
 
@@ -5101,14 +5144,14 @@ function primaryHomes() {
     s = void 0;
   }
   const opencodeDb = env.CHAT_RECALL_OPENCODE_DB || s?.opencodeDbPath || join3(home, ".local", "share", "opencode", "opencode.db");
-  const candidates = [
+  const candidates2 = [
     env.CHAT_RECALL_CLAUDE_HOME || s?.claudeHome || join3(home, ".claude"),
     env.CHAT_RECALL_GEMINI_HOME || s?.geminiHome || join3(home, ".gemini"),
     env.CHAT_RECALL_CODEX_HOME || s?.codexHome || join3(home, ".codex"),
     env.CHAT_RECALL_AGY_HOME || s?.agyHome || join3(home, ".gemini", "antigravity-cli"),
     dirOf(opencodeDb)
   ];
-  return candidates.map(normalizeHomePath);
+  return candidates2.map(normalizeHomePath);
 }
 function homeDecision(path) {
   const p = normalizeHomePath(path);
@@ -5522,28 +5565,55 @@ function maskSecret(s) {
     return "*".repeat(s.length);
   return "*".repeat(Math.min(s.length - 4, 60)) + s.slice(-4);
 }
+function globalRegexFor(pattern) {
+  const flags = pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g";
+  const key = pattern.source + "\0" + flags;
+  let re = globalRegexCache.get(key);
+  if (!re) {
+    re = new RegExp(pattern.source, flags);
+    globalRegexCache.set(key, re);
+  }
+  return re;
+}
+function makeLineResolver(text) {
+  const starts = [];
+  for (let i = text.indexOf("\n"); i !== -1; i = text.indexOf("\n", i + 1))
+    starts.push(i);
+  return (index) => {
+    let lo = 0, hi = starts.length;
+    while (lo < hi) {
+      const mid = lo + hi >> 1;
+      if (starts[mid] < index)
+        lo = mid + 1;
+      else
+        hi = mid;
+    }
+    return lo + 1;
+  };
+}
 function scanTextForFindings(text, opts = {}) {
   if (!text)
     return [];
   const rules = opts.rules || activeRules();
   const findings = [];
   const seenSpans = /* @__PURE__ */ new Set();
+  const lineAt = makeLineResolver(text);
   for (const r of rules) {
-    const re = new RegExp(r.pattern.source, r.pattern.flags.includes("g") ? r.pattern.flags : r.pattern.flags + "g");
+    const re = globalRegexFor(r.pattern);
+    re.lastIndex = 0;
     let m;
     while ((m = re.exec(text)) !== null) {
       const span = `${m.index}:${m[0].length}`;
       if (!seenSpans.has(span)) {
         seenSpans.add(span);
-        const line = text.slice(0, m.index).split("\n").length;
-        findings.push({ rule: r.label, line, preview: maskSecret(m[0]) });
+        findings.push({ rule: r.label, line: lineAt(m.index), preview: maskSecret(m[0]) });
       }
       if (re.lastIndex === m.index)
         re.lastIndex++;
     }
   }
   for (const { start, end } of findContextualSecrets(text)) {
-    const line = text.slice(0, start).split("\n").length;
+    const line = lineAt(start);
     findings.push({ rule: "secret-context", line, preview: maskSecret(text.slice(start, end)) });
   }
   return findings;
@@ -5596,7 +5666,7 @@ function redactToolResultBody(toolName, body) {
     return body;
   return `[redacted: ${toolName} output, ${body.length} chars]`;
 }
-var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, privacyCache, PATH_REGEX;
+var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, globalRegexCache, privacyCache, PATH_REGEX;
 var init_secret_redactor = __esm({
   "../engine/dist/core/secret-redactor.js"() {
     "use strict";
@@ -5734,6 +5804,7 @@ var init_secret_redactor = __esm({
     MAX_PACK_RULES = 200;
     MAX_PATTERN_LEN = 512;
     serverPack = null;
+    globalRegexCache = /* @__PURE__ */ new Map();
     privacyCache = null;
     PATH_REGEX = /(?<![A-Za-z0-9_])(?:\/[^\s'"`<>]+|[A-Za-z]:\\[^\s'"`<>]+)/g;
   }
@@ -6494,8 +6565,8 @@ function decodeDirName(dirName) {
     }
     for (let len = 2; len <= segments.length - i; len++) {
       const joinedSegments = segments.slice(i, i + len);
-      for (const sep2 of ["-", "_", "."]) {
-        const candidate = join5(currentPath, joinedSegments.join(sep2));
+      for (const sep3 of ["-", "_", "."]) {
+        const candidate = join5(currentPath, joinedSegments.join(sep3));
         if (existsSync5(candidate)) {
           currentPath = candidate;
           i += len;
@@ -6865,8 +6936,8 @@ var init_claude = __esm({
 
 // ../engine/dist/transcript/gemini.js
 async function parseGeminiTranscript(sessionPath) {
-  const { readFileSync: readFileSync45 } = await import("fs");
-  return parseGeminiTranscriptText(readFileSync45(sessionPath, "utf-8"));
+  const { readFileSync: readFileSync46 } = await import("fs");
+  return parseGeminiTranscriptText(readFileSync46(sessionPath, "utf-8"));
 }
 function parseGeminiTranscriptText(text) {
   let content;
@@ -7322,11 +7393,11 @@ async function archiveRawSession(store, sessionId) {
   return await store.putRawSession(sessionId, exp.tool, Math.floor(exp.mtime), gz, size);
 }
 function detectForkPredecessor(sessionPath) {
-  const { readFileSync: readFileSync45, readdirSync: readdirSync33 } = requireFs();
-  const { dirname: dirname23, join: join54, basename: basename28 } = requirePath();
+  const { readFileSync: readFileSync46, readdirSync: readdirSync33 } = requireFs();
+  const { dirname: dirname25, join: join57, basename: basename28 } = requirePath();
   let text;
   try {
-    text = readFileSync45(sessionPath, "utf-8");
+    text = readFileSync46(sessionPath, "utf-8");
   } catch {
     return null;
   }
@@ -7348,7 +7419,7 @@ function detectForkPredecessor(sessionPath) {
     return null;
   if (text.includes(`"uuid":"${headParent}"`))
     return null;
-  const dir = dirname23(sessionPath);
+  const dir = dirname25(sessionPath);
   const self = basename28(sessionPath);
   let entries;
   try {
@@ -7360,7 +7431,7 @@ function detectForkPredecessor(sessionPath) {
     if (!f.endsWith(".jsonl") || f === self || f === "sessions-index.json")
       continue;
     try {
-      if (readFileSync45(join54(dir, f), "utf-8").includes(`"uuid":"${headParent}"`)) {
+      if (readFileSync46(join57(dir, f), "utf-8").includes(`"uuid":"${headParent}"`)) {
         return basename28(f, ".jsonl");
       }
     } catch {
@@ -8161,6 +8232,20 @@ var init_tail_read = __esm({
   }
 });
 
+// ../engine/dist/core/flat-string.js
+function flatString(s) {
+  if (!s)
+    return "";
+  if (s.length < 13)
+    return s;
+  return Buffer.from(s, "utf8").toString("utf8");
+}
+var init_flat_string = __esm({
+  "../engine/dist/core/flat-string.js"() {
+    "use strict";
+  }
+});
+
 // ../engine/dist/core/backends/gemini.js
 import { createHash as createHash3 } from "crypto";
 import { existsSync as existsSync7, readdirSync as readdirSync5, readFileSync as readFileSync3, statSync as statSync6 } from "fs";
@@ -8202,6 +8287,7 @@ var init_gemini2 = __esm({
     init_session_git();
     init_generic_engine();
     init_tail_read();
+    init_flat_string();
     PREFIX = "gemini_";
     FULL_PARSE_MAX = 4 * 1024 * 1024;
     GeminiBackend = class {
@@ -8311,7 +8397,7 @@ var init_gemini2 = __esm({
                 sessionId = readSessionId(fullPath, format);
                 const messages = readGeminiMessages(fullPath, format);
                 const firstUser = messages.find((m) => m.type === "user");
-                firstPrompt = (typeof firstUser?.text === "string" ? firstUser.text : flatten(firstUser?.content)).slice(0, 200);
+                firstPrompt = flatString((typeof firstUser?.text === "string" ? firstUser.text : flatten(firstUser?.content)).slice(0, 200));
                 messageCount = messages.length;
               } else if (format === "jsonl") {
                 const lines = readHeadSync(fullPath, 1048576).split("\n");
@@ -8333,7 +8419,7 @@ var init_gemini2 = __esm({
                   }
                   if (m?.type !== "user")
                     continue;
-                  firstPrompt = (typeof m.text === "string" ? m.text : flatten(m.content)).slice(0, 200);
+                  firstPrompt = flatString((typeof m.text === "string" ? m.text : flatten(m.content)).slice(0, 200));
                   break;
                 }
               }
@@ -8509,7 +8595,7 @@ var init_gemini2 = __esm({
         if (!existsSync7(tmpRoot))
           return [];
         const projMap = this.loadProjectMap();
-        const candidates = [];
+        const candidates2 = [];
         for (const proj of readdirSync5(tmpRoot, { withFileTypes: true })) {
           if (!proj.isDirectory())
             continue;
@@ -8540,13 +8626,13 @@ var init_gemini2 = __esm({
               if (st.mtimeMs < opts.sinceMs)
                 continue;
               const trimLen = isJsonl ? 6 : 5;
-              candidates.push({ rawIdHint: f.slice(0, -trimLen), mtime: st.mtimeMs });
+              candidates2.push({ rawIdHint: f.slice(0, -trimLen), mtime: st.mtimeMs });
             } catch {
             }
           }
         }
-        candidates.sort((a, b) => b.mtime - a.mtime);
-        const limited = opts.limitSessions ? candidates.slice(0, opts.limitSessions) : candidates;
+        candidates2.sort((a, b) => b.mtime - a.mtime);
+        const limited = opts.limitSessions ? candidates2.slice(0, opts.limitSessions) : candidates2;
         const edits = [];
         for (const c of limited) {
           const scan = this.liveScanEdits(c.rawIdHint);
@@ -8678,6 +8764,7 @@ var init_opencode = __esm({
     init_session_outcome();
     init_session_git();
     init_generic_engine();
+    init_flat_string();
     PREFIX2 = "opencode_";
     OpencodeBackend = class {
       id = "opencode";
@@ -8845,7 +8932,7 @@ var init_opencode = __esm({
             if (firstUser) {
               try {
                 const parsed = JSON.parse(firstUser.data);
-                firstPrompt = String(parsed?.text || "").slice(0, 200);
+                firstPrompt = flatString(String(parsed?.text || "").slice(0, 200));
               } catch {
               }
             }
@@ -9336,6 +9423,7 @@ var init_codex2 = __esm({
     init_session_git();
     init_generic_engine();
     init_tail_read();
+    init_flat_string();
     PREFIX3 = "codex_";
     CodexBackend = class {
       id = "codex";
@@ -9448,7 +9536,7 @@ var init_codex2 = __esm({
                 if (ev.type === "event_msg" && ev.payload?.type === "user_message") {
                   messageCount++;
                   if (!firstPrompt && ev.payload.message) {
-                    firstPrompt = String(ev.payload.message).slice(0, 200);
+                    firstPrompt = flatString(String(ev.payload.message).slice(0, 200));
                   }
                 } else if (ev.type === "response_item" && ev.payload?.type === "message") {
                   messageCount++;
@@ -10021,6 +10109,7 @@ var init_agy = __esm({
     init_session_outcome();
     init_session_git();
     init_generic_engine();
+    init_flat_string();
     PREFIX4 = "agy_";
     AgyBackend = class {
       id = "agy";
@@ -10121,7 +10210,7 @@ var init_agy = __esm({
                   const content = obj.content;
                   const match = content.match(/<USER_REQUEST>([\s\S]*?)<\/USER_REQUEST>/);
                   const rawText = match ? match[1].trim() : content.trim();
-                  firstPrompt = rawText.slice(0, 200);
+                  firstPrompt = flatString(rawText.slice(0, 200));
                   break;
                 }
               }
@@ -10355,7 +10444,7 @@ var init_agy = __esm({
         if (brainRoots.length === 0)
           return [];
         const brainDir = brainRoots[0];
-        const candidates = [];
+        const candidates2 = [];
         let sessionDirs;
         try {
           sessionDirs = readdirSync7(brainDir);
@@ -10377,12 +10466,12 @@ var init_agy = __esm({
             const st = statSync8(filePath);
             if (st.mtimeMs < opts.sinceMs)
               continue;
-            candidates.push({ rawId, mtime: st.mtimeMs });
+            candidates2.push({ rawId, mtime: st.mtimeMs });
           } catch {
           }
         }
-        candidates.sort((a, b) => b.mtime - a.mtime);
-        const limited = opts.limitSessions ? candidates.slice(0, opts.limitSessions) : candidates;
+        candidates2.sort((a, b) => b.mtime - a.mtime);
+        const limited = opts.limitSessions ? candidates2.slice(0, opts.limitSessions) : candidates2;
         const edits = [];
         for (const c of limited) {
           const scan = this.liveScanEdits(c.rawId);
@@ -10654,18 +10743,43 @@ function updateShadow(sessionId, exp) {
     path
   };
 }
-async function snapshotShadow(sessionId) {
+async function snapshotShadow(sessionId, opts = {}) {
   await Promise.resolve().then(() => (init_backends(), backends_exports));
   const { getBackendForId: getBackendForId2, getBackend: getBackend2 } = await Promise.resolve().then(() => (init_tool_backend(), tool_backend_exports));
   const backend = getBackendForId2(sessionId) ?? getBackend2("claude");
   const rawId = backend.toRawId(sessionId);
+  const fp = liveFingerprint(backend, rawId);
+  if (!opts.force && fp && lastLiveFingerprint.get(rawId) === fp) {
+    return {
+      status: "skipped",
+      sessionId,
+      tool: backend.id,
+      container: null,
+      recovered: 0,
+      path: shadowFileFor(backend.id, rawId)
+    };
+  }
   let exp = null;
   try {
     exp = backend.exportRawSession(rawId);
   } catch {
     exp = null;
   }
-  return updateShadow(rawId, exp);
+  const result = updateShadow(rawId, exp);
+  if (fp && result.status !== "unavailable")
+    lastLiveFingerprint.set(rawId, fp);
+  return result;
+}
+function liveFingerprint(backend, rawId) {
+  try {
+    const loc = backend.findSession(rawId);
+    if (!loc?.path)
+      return "";
+    const st = statSync9(loc.path);
+    return `${st.mtimeMs}:${st.size}`;
+  } catch {
+    return "";
+  }
 }
 function seedShadow(sessionId, container) {
   const tool = container.tool;
@@ -10684,7 +10798,7 @@ function shadowSizeOnDisk(tool, rawId) {
     return 0;
   }
 }
-var WHOLE_FILE_TOOLS, SINGLETON_META;
+var WHOLE_FILE_TOOLS, SINGLETON_META, lastLiveFingerprint;
 var init_shadow = __esm({
   "../engine/dist/transcript/shadow.js"() {
     "use strict";
@@ -10692,6 +10806,27 @@ var init_shadow = __esm({
     init_raw();
     WHOLE_FILE_TOOLS = /* @__PURE__ */ new Set(["gemini"]);
     SINGLETON_META = /* @__PURE__ */ new Set(["mode", "permission-mode", "ai-title", "last-prompt", "pr-link", "summary"]);
+    lastLiveFingerprint = /* @__PURE__ */ new Map();
+  }
+});
+
+// ../engine/dist/core/project-dir-name.js
+function looksWindowsEncoded(dirName) {
+  return /^[A-Za-z]--/.test(dirName);
+}
+function decodeProjectDirName(dirName) {
+  if (!dirName)
+    return "";
+  if (looksWindowsEncoded(dirName)) {
+    const drive = dirName[0].toUpperCase();
+    const rest = dirName.slice(3).replace(/-/g, "\\");
+    return `${drive}:\\${rest}`;
+  }
+  return "/" + dirName.replace(/^-/, "").replace(/-/g, "/");
+}
+var init_project_dir_name = __esm({
+  "../engine/dist/core/project-dir-name.js"() {
+    "use strict";
   }
 });
 
@@ -10718,7 +10853,7 @@ function findSessionFile(sessionId) {
           path: candidate,
           projectDir: entry.name,
           // Project path is encoded by replacing slashes with dashes.
-          projectPath: entry.name.replace(/-/g, "/").replace(/^\//, "/")
+          projectPath: decodeProjectDirName(entry.name)
         };
       }
     }
@@ -10747,7 +10882,7 @@ function findSessionFiles(sessionId) {
       out.push({
         path: candidate,
         projectDir: entry.name,
-        projectPath: entry.name.replace(/-/g, "/").replace(/^\//, "/")
+        projectPath: decodeProjectDirName(entry.name)
       });
     }
   }
@@ -10771,7 +10906,31 @@ function resolveSessionContentGroups(sessionId) {
   const names = [...groups.keys()].sort((a, b) => a === "main" ? -1 : b === "main" ? 1 : a.localeCompare(b));
   return names.map((name) => ({ name, paths: groups.get(name) }));
 }
+function withSessionReadCache(fn) {
+  readScopeDepth++;
+  try {
+    return fn();
+  } finally {
+    if (--readScopeDepth === 0)
+      readScope = null;
+  }
+}
 function readSessionGroupText(group) {
+  let key = "";
+  if (readScopeDepth > 0) {
+    const parts = [];
+    for (const p of group.paths) {
+      try {
+        const st = statSync10(p);
+        parts.push(`${p}:${st.mtimeMs}:${st.size}`);
+      } catch {
+        parts.push(`${p}:missing`);
+      }
+    }
+    key = parts.join("|");
+    if (readScope && readScope.key === key)
+      return readScope.value;
+  }
   let text = "";
   let mtime = 0;
   for (const p of group.paths) {
@@ -10787,7 +10946,10 @@ function readSessionGroupText(group) {
     }
     text = text ? mergeLineText(text, raw).text : raw;
   }
-  return { text, mtime };
+  const out = { text, mtime };
+  if (readScopeDepth > 0 && key)
+    readScope = { key, value: out };
+  return out;
 }
 function resolveSessionContentPaths(sessionFile) {
   if (!hasSubagentsDir(sessionFile))
@@ -11010,7 +11172,7 @@ function findCodexSessionFileIn(root, sessionId) {
   }
   return scanDir(root);
 }
-var geminiProjectMapCache, MAX_EVENT_LINE_BYTES;
+var readScope, readScopeDepth, geminiProjectMapCache, MAX_EVENT_LINE_BYTES;
 var init_live_session_scan = __esm({
   "../engine/dist/core/live-session-scan.js"() {
     "use strict";
@@ -11019,79 +11181,117 @@ var init_live_session_scan = __esm({
     init_tool_backend();
     init_tool_paths();
     init_backends();
+    init_project_dir_name();
+    readScope = null;
+    readScopeDepth = 0;
     geminiProjectMapCache = null;
     MAX_EVENT_LINE_BYTES = 8 * 1024 * 1024;
   }
 });
 
 // ../engine/dist/core/first-prompt.js
-import { createReadStream as createReadStream2, existsSync as existsSync12, readFileSync as readFileSync8 } from "fs";
+import { createReadStream as createReadStream2, existsSync as existsSync12, openSync as openSync5, readSync as readSync5, closeSync as closeSync5 } from "fs";
+import { StringDecoder } from "string_decoder";
 function stripBanners2(s) {
   let out = s;
   for (const re of BANNERS)
     out = out.replace(re, " ");
   return out.replace(/[ \t]{2,}/g, " ").trim();
 }
+function promptFromLine(raw, maxLength) {
+  if (!raw.trim())
+    return null;
+  let obj;
+  try {
+    obj = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (obj.type !== "user")
+    return null;
+  if (obj.isSidechain === true)
+    return null;
+  const message = obj.message;
+  if (!message)
+    return null;
+  const content = message.content;
+  let text = "";
+  if (typeof content === "string") {
+    text = content;
+  } else if (Array.isArray(content)) {
+    const parts = [];
+    for (const block of content) {
+      if (block && typeof block === "object" && block.type === "text" && typeof block.text === "string") {
+        parts.push(block.text);
+      }
+    }
+    text = parts.join("\n");
+  }
+  if (!text)
+    return null;
+  if (text.includes("<system-reminder>"))
+    return null;
+  if (text.trim() === "[Request interrupted by user]")
+    return null;
+  const cleaned = stripBanners2(text);
+  if (cleaned.length < 10)
+    return null;
+  return flatString(cleaned.slice(0, maxLength));
+}
 function extractFirstUserPromptSync(filePath, options = {}) {
   const maxLines = options.maxLines ?? 500;
   const maxLength = options.maxLength ?? 1e3;
-  if (!existsSync12(filePath))
-    return "";
-  let raw;
+  const maxBytes = options.maxBytes ?? 4 * 1024 * 1024;
+  let fd;
   try {
-    raw = readFileSync8(filePath, "utf-8");
+    fd = openSync5(filePath, "r");
   } catch {
     return "";
   }
-  const lines = raw.split("\n");
-  const upTo = Math.min(lines.length, maxLines);
-  for (let i = 0; i < upTo; i++) {
-    const line = lines[i];
-    if (!line.trim())
-      continue;
-    let obj;
+  try {
+    const CHUNK = 64 * 1024;
+    const buf = Buffer.allocUnsafe(CHUNK);
+    const decoder = new StringDecoder("utf-8");
+    let carry = "";
+    let pos = 0;
+    let lineNo = 0;
+    for (; ; ) {
+      const n = readSync5(fd, buf, 0, CHUNK, pos);
+      if (n <= 0)
+        break;
+      pos += n;
+      carry += decoder.write(buf.subarray(0, n));
+      const parts = carry.split("\n");
+      carry = parts.pop() ?? "";
+      for (const line of parts) {
+        if (++lineNo > maxLines)
+          return "";
+        const found = promptFromLine(line, maxLength);
+        if (found !== null)
+          return found;
+      }
+      if (pos >= maxBytes)
+        return "";
+    }
+    carry += decoder.end();
+    if (carry && lineNo < maxLines) {
+      const found = promptFromLine(carry, maxLength);
+      if (found !== null)
+        return found;
+    }
+    return "";
+  } finally {
     try {
-      obj = JSON.parse(line);
+      closeSync5(fd);
     } catch {
-      continue;
     }
-    if (obj.type !== "user")
-      continue;
-    if (obj.isSidechain === true)
-      continue;
-    const message = obj.message;
-    if (!message)
-      continue;
-    const content = message.content;
-    let text = "";
-    if (typeof content === "string") {
-      text = content;
-    } else if (Array.isArray(content)) {
-      const parts = [];
-      for (const block of content) {
-        if (block && typeof block === "object" && block.type === "text" && typeof block.text === "string") {
-          parts.push(block.text);
-        }
-      }
-      text = parts.join("\n");
-    }
-    if (!text)
-      continue;
-    if (text.includes("<system-reminder>"))
-      continue;
-    if (text.trim() === "[Request interrupted by user]")
-      continue;
-    const cleaned = stripBanners2(text);
-    if (cleaned.length < 10)
-      continue;
-    return cleaned.slice(0, maxLength);
   }
-  return "";
 }
 var BANNERS;
 var init_first_prompt = __esm({
   "../engine/dist/core/first-prompt.js"() {
     "use strict";
+    init_flat_string();
     BANNERS = [
       /MCP issues detected\. ?Run \/mcp list for status\.?/g,
       /Context low[^\n]*Run \/compact[^\n]*/g,
@@ -11101,7 +11301,7 @@ var init_first_prompt = __esm({
 });
 
 // ../engine/dist/core/backends/claude.js
-import { existsSync as existsSync13, readdirSync as readdirSync9, readFileSync as readFileSync9, statSync as statSync11, openSync as openSync5, readSync as readSync5, closeSync as closeSync5 } from "fs";
+import { existsSync as existsSync13, readdirSync as readdirSync9, readFileSync as readFileSync8, statSync as statSync11, openSync as openSync6, readSync as readSync6, closeSync as closeSync6 } from "fs";
 import { join as join14, basename as basename11 } from "path";
 function stripReminders(text) {
   return text.replace(/<system-reminder>[\s\S]*?<\/system-reminder>/g, "").trim();
@@ -11120,6 +11320,7 @@ var init_claude2 = __esm({
     init_session_git();
     init_first_prompt();
     init_tail_read();
+    init_project_dir_name();
     init_generic_engine();
     UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     ClaudeBackend = class {
@@ -11196,13 +11397,13 @@ var init_claude2 = __esm({
           return null;
         let head;
         try {
-          const fd = openSync5(located.path, "r");
+          const fd = openSync6(located.path, "r");
           try {
             const buf = Buffer.alloc(65536);
-            const n = readSync5(fd, buf, 0, buf.length, 0);
+            const n = readSync6(fd, buf, 0, buf.length, 0);
             head = buf.toString("utf-8", 0, n);
           } finally {
-            closeSync5(fd);
+            closeSync6(fd);
           }
         } catch {
           return null;
@@ -11261,11 +11462,11 @@ var init_claude2 = __esm({
           if (filter && !proj.name.toLowerCase().includes(filter))
             continue;
           const projPath = join14(root, proj.name);
-          const projectPath = proj.name.replace(/-/g, "/").replace(/^\//, "/");
+          const projectPath = decodeProjectDirName(proj.name);
           const indexPath = join14(projPath, "sessions-index.json");
           if (existsSync13(indexPath)) {
             try {
-              const indexData = JSON.parse(readFileSync9(indexPath, "utf-8"));
+              const indexData = JSON.parse(readFileSync8(indexPath, "utf-8"));
               const entries = indexData.entries || [];
               for (const entry of entries) {
                 if (!entry.fullPath || !existsSync13(entry.fullPath))
@@ -11557,7 +11758,7 @@ var init_claude2 = __esm({
        * with quiet main + active subagents still surfaces.
        */
       collectRecentEdits(opts) {
-        const candidates = [];
+        const candidates2 = [];
         for (const root of claudeProjectDirs()) {
           if (!existsSync13(root))
             continue;
@@ -11593,14 +11794,14 @@ var init_claude2 = __esm({
                 }
                 if (mtime < opts.sinceMs)
                   continue;
-                candidates.push({ rawId: basename11(f, ".jsonl"), mtime });
+                candidates2.push({ rawId: basename11(f, ".jsonl"), mtime });
               } catch {
               }
             }
           }
         }
-        candidates.sort((a, b) => b.mtime - a.mtime);
-        const limited = opts.limitSessions ? candidates.slice(0, opts.limitSessions) : candidates;
+        candidates2.sort((a, b) => b.mtime - a.mtime);
+        const limited = opts.limitSessions ? candidates2.slice(0, opts.limitSessions) : candidates2;
         const edits = [];
         for (const c of limited) {
           const scan = this.liveScanEdits(c.rawId);
@@ -11699,7 +11900,7 @@ __export(project_resolver_exports, {
 });
 import { execSync } from "child_process";
 import { createHash as createHash6 } from "crypto";
-import { existsSync as existsSync14, readFileSync as readFileSync10, realpathSync as realpathSync2, readdirSync as readdirSync10, statSync as statSync12 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync9, realpathSync as realpathSync2, readdirSync as readdirSync10, statSync as statSync12 } from "fs";
 import { basename as basename12, dirname as dirname12, isAbsolute, join as join15, resolve, sep } from "path";
 function getProjectsConfigPath() {
   return join15(getDataDir(), "projects.json");
@@ -11717,7 +11918,7 @@ function loadProjectsConfig() {
   if (cachedConfig && cachedConfig.mtime === mtime)
     return cachedConfig.cfg;
   try {
-    const raw = readFileSync10(path, "utf-8");
+    const raw = readFileSync9(path, "utf-8");
     const cfg = JSON.parse(raw);
     cachedConfig = { mtime, cfg };
     return cfg;
@@ -11818,8 +12019,8 @@ function resolveBotWorktree(realPath) {
   };
 }
 function matchDeclaredProject(realPath, projects) {
-  const candidates = [...projects].sort((a, b) => b.root.length - a.root.length);
-  for (const proj of candidates) {
+  const candidates2 = [...projects].sort((a, b) => b.root.length - a.root.length);
+  for (const proj of candidates2) {
     const root = safeRealpath(proj.root);
     if (!isInside(realPath, root))
       continue;
@@ -12044,6 +12245,24 @@ var init_project_resolver = __esm({
   }
 });
 
+// ../engine/dist/core/credentials-env.js
+function envCredentials(env = process.env) {
+  const token = (env.CHAT_RECALL_TOKEN || "").trim();
+  const server = (env.CHAT_RECALL_SERVER || "").trim();
+  if (!token || !server)
+    return null;
+  if (!/^https?:\/\//i.test(server))
+    return null;
+  return { serverUrl: normalise(server), token };
+}
+var normalise;
+var init_credentials_env = __esm({
+  "../engine/dist/core/credentials-env.js"() {
+    "use strict";
+    normalise = (u) => u.trim().replace(/\/+$/, "");
+  }
+});
+
 // ../engine/dist/core/source-discovery.js
 import { createHash as createHash7 } from "crypto";
 import { existsSync as existsSync15, readdirSync as readdirSync11, statSync as statSync13 } from "fs";
@@ -12159,7 +12378,7 @@ __export(home_discovery_exports, {
   sessionIdsInHome: () => sessionIdsInHome
 });
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync16, readdirSync as readdirSync12, readFileSync as readFileSync11, realpathSync as realpathSync3, statSync as statSync14 } from "fs";
+import { existsSync as existsSync16, readdirSync as readdirSync12, readFileSync as readFileSync10, realpathSync as realpathSync3, statSync as statSync14 } from "fs";
 import { homedir as homedir5, platform as osPlatform } from "os";
 import { join as join17 } from "path";
 function candidateRoots(plat = osPlatform(), env = process.env) {
@@ -12347,7 +12566,7 @@ function declaredHomes(env = process.env, plat = osPlatform()) {
   for (const rc of rcs) {
     let text;
     try {
-      text = readFileSync11(rc, "utf-8");
+      text = readFileSync10(rc, "utf-8");
     } catch {
       continue;
     }
@@ -12372,7 +12591,7 @@ function runningToolHomes(plat = osPlatform()) {
     for (const pid of pids) {
       let env;
       try {
-        env = readFileSync11(`/proc/${pid}/environ`, "utf-8");
+        env = readFileSync10(`/proc/${pid}/environ`, "utf-8");
       } catch {
         continue;
       }
@@ -12506,7 +12725,7 @@ __export(detector_install_exports, {
 });
 import { spawnSync } from "child_process";
 import { createHash as createHash8 } from "crypto";
-import { existsSync as existsSync17, mkdirSync as mkdirSync4, mkdtempSync, chmodSync as chmodSync2, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync3, readFileSync as readFileSync12, statSync as statSync15, copyFileSync as copyFileSync2 } from "fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync4, mkdtempSync, chmodSync as chmodSync2, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync3, readFileSync as readFileSync11, statSync as statSync15, copyFileSync as copyFileSync2 } from "fs";
 import { join as join18 } from "path";
 function managedDetectorPath(name) {
   return join18(getDetectorBinDir(), name + exeSuffix());
@@ -12515,11 +12734,11 @@ function receiptPath(name) {
   return join18(getDetectorBinDir(), `${name}.receipt.json`);
 }
 function sha256File(path) {
-  return createHash8("sha256").update(readFileSync12(path)).digest("hex");
+  return createHash8("sha256").update(readFileSync11(path)).digest("hex");
 }
 function readReceipt(name) {
   try {
-    return JSON.parse(readFileSync12(receiptPath(name), "utf-8"));
+    return JSON.parse(readFileSync11(receiptPath(name), "utf-8"));
   } catch {
     return null;
   }
@@ -12730,7 +12949,7 @@ __export(secret_scanner_exports, {
   scanTenantRules: () => scanTenantRules
 });
 import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync18, unlinkSync, readFileSync as readFileSync13, mkdtempSync as mkdtempSync2, rmSync as rmSync3 } from "fs";
+import { existsSync as existsSync18, unlinkSync, readFileSync as readFileSync12, mkdtempSync as mkdtempSync2, rmSync as rmSync3 } from "fs";
 import { tmpdir } from "os";
 import { join as join19 } from "path";
 function mask(s) {
@@ -12794,7 +13013,7 @@ function runGitleaks(binary, filePath) {
     return [];
   let parsed = [];
   try {
-    parsed = JSON.parse(readFileSync13(reportPath, "utf-8")) || [];
+    parsed = JSON.parse(readFileSync12(reportPath, "utf-8")) || [];
   } catch {
   }
   try {
@@ -12858,7 +13077,7 @@ function runGitleaksDir(binary, dir) {
   }
   let parsed = [];
   try {
-    parsed = JSON.parse(readFileSync13(reportPath, "utf-8")) || [];
+    parsed = JSON.parse(readFileSync12(reportPath, "utf-8")) || [];
   } catch {
   }
   try {
@@ -12949,7 +13168,7 @@ function scanFileForSecrets(filePath, opts = {}) {
       out.push({ detector: "trufflehog", ...f });
   if (opts.tenantRules && opts.tenantRules.length > 0) {
     try {
-      const text = readFileSync13(filePath, "utf-8");
+      const text = readFileSync12(filePath, "utf-8");
       out.push(...scanTenantRules(text, opts.tenantRules));
     } catch {
     }
@@ -12977,7 +13196,7 @@ async function scanSessionForSecrets(opts) {
   try {
     const tenantRules = (await opts.store.listSecretRules()).filter((r) => r.enabled).map((r) => ({ name: r.name, regex: r.regex, severity: r.severity }));
     if (tenantRules.length > 0) {
-      const text = readFileSync13(opts.filePath, "utf-8");
+      const text = readFileSync12(opts.filePath, "utf-8");
       const lines = text.split("\n");
       for (const r of tenantRules) {
         let re;
@@ -13135,10 +13354,10 @@ var init_types = __esm({
 
 // ../engine/dist/transcript/opencode.js
 async function parseOpenCodeSubagents(parentSessionId) {
-  const { existsSync: existsSync50 } = await import("fs");
+  const { existsSync: existsSync52 } = await import("fs");
   const { opencodeBackend: opencodeBackend2 } = await Promise.resolve().then(() => (init_opencode(), opencode_exports));
   const dbPath = opencodeBackend2.dbPath();
-  if (!existsSync50(dbPath))
+  if (!existsSync52(dbPath))
     return [];
   const realParent = parentSessionId.replace("opencode_", "");
   const db = openSqliteReadonlyOrThrow(dbPath);
@@ -13179,10 +13398,10 @@ async function parseOpenCodeSubagents(parentSessionId) {
   }
 }
 async function parseOpenCodeTranscript(sessionId) {
-  const { existsSync: existsSync50 } = await import("fs");
+  const { existsSync: existsSync52 } = await import("fs");
   const { opencodeBackend: opencodeBackend2 } = await Promise.resolve().then(() => (init_opencode(), opencode_exports));
   const dbPath = opencodeBackend2.dbPath();
-  if (!existsSync50(dbPath))
+  if (!existsSync52(dbPath))
     return [];
   const realId = sessionId.replace("opencode_", "");
   const db = openSqliteReadonlyOrThrow(dbPath);
@@ -14223,7 +14442,7 @@ var init_utils = __esm({
 });
 
 // ../engine/dist/parsers/plan-source.js
-import { existsSync as existsSync20, readdirSync as readdirSync14, readFileSync as readFileSync14, statSync as statSync18 } from "fs";
+import { existsSync as existsSync20, readdirSync as readdirSync14, readFileSync as readFileSync13, statSync as statSync18 } from "fs";
 import { homedir as homedir7 } from "os";
 import { join as join21, basename as basename13 } from "path";
 import { createHash as createHash9 } from "crypto";
@@ -14265,6 +14484,7 @@ var init_plan_source = __esm({
     init_claude2();
     init_agy();
     init_settings();
+    init_project_dir_name();
     MAX_CHUNK_CHARS = 2e3;
     UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     PlanSource = class {
@@ -14289,7 +14509,7 @@ var init_plan_source = __esm({
           for (const entry of entries) {
             if (!entry.isDirectory() || entry.name.startsWith("."))
               continue;
-            const projectPath = entry.name.replace(/^-/, "/").replace(/-/g, "/");
+            const projectPath = decodeProjectDirName(entry.name);
             if (existsSync20(projectPath)) {
               this._knownProjectDirs.push(projectPath);
             }
@@ -14327,7 +14547,7 @@ var init_plan_source = __esm({
               const stat3 = statSync18(filePath);
               const planName = basename13(file, ".md");
               const isAgentPlan = planName.includes("-agent-");
-              const content = readFileSync14(filePath, "utf-8");
+              const content = readFileSync13(filePath, "utf-8");
               const fm = parseFrontmatter(content);
               const body = fm.body;
               const firstLine = body.split("\n").find((l) => l.trim())?.replace(/^#+\s*/, "").trim() || planName;
@@ -14369,7 +14589,7 @@ var init_plan_source = __esm({
           const filePath = join21(plansDir, file);
           try {
             const stat3 = statSync18(filePath);
-            const content = readFileSync14(filePath, "utf-8");
+            const content = readFileSync13(filePath, "utf-8");
             const firstLine = content.split("\n").find((l) => l.trim())?.replace(/^#+\s*/, "").trim() || file;
             const planName = `${opencodeBackend.idPrefix}plan_${basename13(file, ".md")}`;
             const projectPath = this.extractProjectPath(content);
@@ -14399,7 +14619,7 @@ var init_plan_source = __esm({
         const projectsPath = geminiBackend.projectsJson();
         if (existsSync20(projectsPath)) {
           try {
-            const data = JSON.parse(readFileSync14(projectsPath, "utf-8"));
+            const data = JSON.parse(readFileSync13(projectsPath, "utf-8"));
             for (const path of Object.keys(data.projects || {})) {
               projMap.set(createHash9("sha256").update(path).digest("hex"), path);
             }
@@ -14435,7 +14655,7 @@ var init_plan_source = __esm({
               const filePath = join21(plansDir, file);
               try {
                 const stat3 = statSync18(filePath);
-                const content = readFileSync14(filePath, "utf-8");
+                const content = readFileSync13(filePath, "utf-8");
                 const firstLine = content.split("\n").find((l) => l.trim())?.replace(/^#+\s*/, "").trim() || file;
                 const planName = `${geminiBackend.idPrefix}plan_${sess}_${basename13(file, ".md")}`;
                 yield {
@@ -14514,7 +14734,7 @@ var init_plan_source = __esm({
       async parse(item) {
         if (!existsSync20(item.filePath))
           return [];
-        const content = readFileSync14(item.filePath, "utf-8");
+        const content = readFileSync13(item.filePath, "utf-8");
         const chunks = [];
         const { body } = parseFrontmatter(content);
         const sections = splitByHeaders(body);
@@ -14658,7 +14878,7 @@ var init_plan_source = __esm({
             const filePath = join21(sessionPath, file);
             try {
               const stat3 = statSync18(filePath);
-              const content = readFileSync14(filePath, "utf-8");
+              const content = readFileSync13(filePath, "utf-8");
               const firstLine = content.split("\n").find((l) => l.trim())?.replace(/^#+\s*/, "").trim() || file;
               const sessionLoc = agyBackend.findSession(rawId);
               const projectPath = sessionLoc?.projectPath || this.extractProjectPath(content);
@@ -14687,7 +14907,7 @@ var init_plan_source = __esm({
 });
 
 // ../engine/dist/parsers/task-source.js
-import { existsSync as existsSync21, readdirSync as readdirSync15, readFileSync as readFileSync15, statSync as statSync19 } from "fs";
+import { existsSync as existsSync21, readdirSync as readdirSync15, readFileSync as readFileSync14, statSync as statSync19 } from "fs";
 import { join as join22 } from "path";
 var MAX_CHUNK_CHARS2, TaskSource;
 var init_task_source = __esm({
@@ -14737,7 +14957,7 @@ var init_task_source = __esm({
             continue;
           let parsed;
           try {
-            const raw = readFileSync15(filePath, "utf-8");
+            const raw = readFileSync14(filePath, "utf-8");
             parsed = JSON.parse(raw);
             if (!Array.isArray(parsed) || parsed.length === 0)
               continue;
@@ -14875,7 +15095,7 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
           return [];
         let parsed;
         try {
-          parsed = JSON.parse(readFileSync15(item.filePath, "utf-8"));
+          parsed = JSON.parse(readFileSync14(item.filePath, "utf-8"));
         } catch {
           return [];
         }
@@ -14907,7 +15127,7 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
         });
         for (const file of sorted) {
           try {
-            const content = readFileSync15(join22(taskDir, file), "utf-8");
+            const content = readFileSync14(join22(taskDir, file), "utf-8");
             const task = JSON.parse(content);
             if (task.subject) {
               tasks2.push(task);
@@ -14923,7 +15143,7 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
 });
 
 // ../engine/dist/parsers/claude-md-source.js
-import { existsSync as existsSync22, readFileSync as readFileSync16, readdirSync as readdirSync16, statSync as statSync20 } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync15, readdirSync as readdirSync16, statSync as statSync20 } from "fs";
 import { homedir as homedir8 } from "os";
 import { join as join23, basename as basename14, dirname as dirname13 } from "path";
 import { createHash as createHash10 } from "crypto";
@@ -14944,7 +15164,7 @@ function discoverProjectDirs(claudeDir) {
       for (const entry of entries) {
         if (!entry.isDirectory() || entry.name.startsWith("."))
           continue;
-        const projectPath = entry.name.replace(/^-/, "/").replace(/-/g, "/");
+        const projectPath = decodeProjectDirName(entry.name);
         addProject(projectPath);
       }
     } catch {
@@ -14967,7 +15187,7 @@ function discoverProjectDirs(claudeDir) {
   const gemProjects = geminiBackend.projectsJson();
   if (existsSync22(gemProjects)) {
     try {
-      const data = JSON.parse(readFileSync16(gemProjects, "utf-8"));
+      const data = JSON.parse(readFileSync15(gemProjects, "utf-8"));
       for (const path of Object.keys(data.projects || {}))
         addProject(path);
     } catch {
@@ -15001,6 +15221,7 @@ var init_claude_md_source = __esm({
     init_gemini2();
     init_settings();
     init_opencode();
+    init_project_dir_name();
     MAX_CHUNK_CHARS3 = 2e3;
     NOTE_FILES = [
       { filename: "CLAUDE.md", tool: "claude" },
@@ -15081,7 +15302,7 @@ var init_claude_md_source = __esm({
       async parse(item) {
         if (!existsSync22(item.filePath))
           return [];
-        const content = readFileSync16(item.filePath, "utf-8");
+        const content = readFileSync15(item.filePath, "utf-8");
         const chunks = [];
         const sections = splitByHeaders(content);
         for (let i = 0; i < sections.length; i++) {
@@ -15123,7 +15344,7 @@ var init_claude_md_source = __esm({
           const projectDir = dirname13(filePath);
           const projectName = basename14(projectDir);
           const projectPath = projectDir;
-          const content = readFileSync16(filePath, "utf-8");
+          const content = readFileSync15(filePath, "utf-8");
           const firstLine = content.split("\n").find((l) => l.trim() && !l.startsWith("#"))?.trim()?.slice(0, 200) || `${filename} for ${projectName}`;
           const id = tool === "claude" ? projectName : `${projectName}_${tool}`;
           return {
@@ -15148,7 +15369,7 @@ var init_claude_md_source = __esm({
 });
 
 // ../engine/dist/parsers/agent-memory-source.js
-import { existsSync as existsSync23, readFileSync as readFileSync17, readdirSync as readdirSync17, statSync as statSync21 } from "fs";
+import { existsSync as existsSync23, readFileSync as readFileSync16, readdirSync as readdirSync17, statSync as statSync21 } from "fs";
 import { homedir as homedir9 } from "os";
 import { join as join24, basename as basename15 } from "path";
 function parseFrontmatter2(content) {
@@ -15176,7 +15397,7 @@ function parseFrontmatter2(content) {
   return { fm, body };
 }
 function projectHashToPath(hashDir) {
-  return hashDir.replace(/^-/, "/").replace(/-/g, "/");
+  return decodeProjectDirName(hashDir);
 }
 function discoverMemoryDirs() {
   const out = [];
@@ -15218,6 +15439,7 @@ var init_agent_memory_source = __esm({
     init_utils();
     init_claude2();
     init_settings();
+    init_project_dir_name();
     MAX_CHUNK_CHARS4 = 2e3;
     MAX_CHUNKS = 12;
     AgentMemorySource = class {
@@ -15248,7 +15470,7 @@ var init_agent_memory_source = __esm({
       async parse(item) {
         if (!existsSync23(item.filePath))
           return [];
-        const content = readFileSync17(item.filePath, "utf-8");
+        const content = readFileSync16(item.filePath, "utf-8");
         const { body } = parseFrontmatter2(content);
         const chunks = [];
         const sections = splitByHeaders(body);
@@ -15301,7 +15523,7 @@ var init_agent_memory_source = __esm({
       fileToItem(filePath, filename, projectPath, _projectHash) {
         try {
           const stat3 = statSync21(filePath);
-          const content = readFileSync17(filePath, "utf-8");
+          const content = readFileSync16(filePath, "utf-8");
           const { fm } = parseFrontmatter2(content);
           const stem = filename.replace(/\.md$/, "");
           const idBase = fm.name || stem;
@@ -15516,7 +15738,7 @@ var init_history_source = __esm({
 });
 
 // ../engine/dist/parsers/paste-source.js
-import { existsSync as existsSync25, readdirSync as readdirSync19, readFileSync as readFileSync18, statSync as statSync23 } from "fs";
+import { existsSync as existsSync25, readdirSync as readdirSync19, readFileSync as readFileSync17, statSync as statSync23 } from "fs";
 import { homedir as homedir11 } from "os";
 import { join as join26, basename as basename16 } from "path";
 var MAX_CHUNK_CHARS6, MAX_FILE_SIZE, PasteSource;
@@ -15572,7 +15794,7 @@ var init_paste_source = __esm({
               if (stat3.size < 10)
                 continue;
               const hash = basename16(file, ".txt");
-              const content = readFileSync18(filePath, "utf-8");
+              const content = readFileSync17(filePath, "utf-8");
               const firstLine = content.split("\n").find((l) => l.trim().length > 5)?.trim()?.slice(0, 100) || `Paste ${hash.slice(0, 8)}`;
               yield {
                 id: hash,
@@ -15593,7 +15815,7 @@ var init_paste_source = __esm({
       async parse(item) {
         if (!existsSync25(item.filePath))
           return [];
-        const content = readFileSync18(item.filePath, "utf-8");
+        const content = readFileSync17(item.filePath, "utf-8");
         if (content.trim().length < 20)
           return [];
         return [{
@@ -15616,7 +15838,7 @@ var init_paste_source = __esm({
 });
 
 // ../engine/dist/parsers/gemini-source.js
-import { existsSync as existsSync26, readdirSync as readdirSync20, readFileSync as readFileSync19, statSync as statSync24 } from "fs";
+import { existsSync as existsSync26, readdirSync as readdirSync20, readFileSync as readFileSync18, statSync as statSync24 } from "fs";
 import { join as join27, basename as basename17 } from "path";
 import { createHash as createHash11 } from "crypto";
 function loadGeminiProjectMap2() {
@@ -15625,7 +15847,7 @@ function loadGeminiProjectMap2() {
   if (!existsSync26(projectsPath))
     return map;
   try {
-    const data = JSON.parse(readFileSync19(projectsPath, "utf-8"));
+    const data = JSON.parse(readFileSync18(projectsPath, "utf-8"));
     const projects = data.projects || {};
     for (const [path] of Object.entries(projects)) {
       const hash = createHash11("sha256").update(path).digest("hex");
@@ -15670,7 +15892,7 @@ var init_gemini_source = __esm({
               const filePath = join27(chatsDir, file);
               try {
                 const stat3 = statSync24(filePath);
-                const content = JSON.parse(readFileSync19(filePath, "utf-8"));
+                const content = JSON.parse(readFileSync18(filePath, "utf-8"));
                 const sessionId = content.sessionId || basename17(file, ".json");
                 if (seen.has(sessionId))
                   continue;
@@ -15751,7 +15973,7 @@ var init_gemini_source = __esm({
       async parse(item) {
         if (!existsSync26(item.filePath))
           return [];
-        const content = JSON.parse(readFileSync19(item.filePath, "utf-8"));
+        const content = JSON.parse(readFileSync18(item.filePath, "utf-8"));
         const messages = content.messages || [];
         const chunks = [];
         const getText = (m) => {
@@ -15799,7 +16021,7 @@ var init_gemini_source = __esm({
 });
 
 // ../engine/dist/parsers/gemini-brain-source.js
-import { existsSync as existsSync27, readdirSync as readdirSync21, readFileSync as readFileSync20, statSync as statSync25 } from "fs";
+import { existsSync as existsSync27, readdirSync as readdirSync21, readFileSync as readFileSync19, statSync as statSync25 } from "fs";
 import { join as join28 } from "path";
 var MAX_CHUNK_CHARS8, GeminiBrainSource;
 var init_gemini_brain_source = __esm({
@@ -15832,14 +16054,14 @@ var init_gemini_brain_source = __esm({
             const filePath = join28(sessionDir, file);
             try {
               const stat3 = statSync25(filePath);
-              const content = readFileSync20(filePath, "utf-8");
+              const content = readFileSync19(filePath, "utf-8");
               const firstLine = content.split("\n").find((l) => l.trim() && !l.startsWith("#"))?.trim() || "";
               const heading = content.split("\n").find((l) => l.startsWith("#"))?.replace(/^#+\s*/, "").trim() || file;
               const metaPath = `${filePath}.metadata.json`;
               let metaSummary = "";
               if (existsSync27(metaPath)) {
                 try {
-                  const meta = JSON.parse(readFileSync20(metaPath, "utf-8"));
+                  const meta = JSON.parse(readFileSync19(metaPath, "utf-8"));
                   metaSummary = meta.summary || "";
                 } catch {
                 }
@@ -15870,7 +16092,7 @@ var init_gemini_brain_source = __esm({
       async parse(item) {
         if (!existsSync27(item.filePath))
           return [];
-        const content = readFileSync20(item.filePath, "utf-8");
+        const content = readFileSync19(item.filePath, "utf-8");
         const chunks = [];
         const sections = splitByHeaders(content);
         for (let i = 0; i < sections.length; i++) {
@@ -16213,7 +16435,7 @@ var init_opencode_todo_source = __esm({
 });
 
 // ../engine/dist/parsers/codex-session-source.js
-import { existsSync as existsSync30, readdirSync as readdirSync22, readFileSync as readFileSync21, statSync as statSync26 } from "fs";
+import { existsSync as existsSync30, readdirSync as readdirSync22, readFileSync as readFileSync20, statSync as statSync26 } from "fs";
 import { join as join29, basename as basename18 } from "path";
 function getCodexSessionsDir() {
   return codexBackend.sessionsDir();
@@ -16241,7 +16463,7 @@ function extractReasoningText(event) {
   return "";
 }
 function readJsonlLines(filePath) {
-  const text = readFileSync21(filePath, "utf-8");
+  const text = readFileSync20(filePath, "utf-8");
   const lines = text.split("\n");
   const events = [];
   for (const line of lines) {
@@ -16276,7 +16498,7 @@ var init_codex_session_source = __esm({
         for (const filePath of jsonlFiles) {
           try {
             const stat3 = statSync26(filePath);
-            const lines = readFileSync21(filePath, "utf-8").split("\n");
+            const lines = readFileSync20(filePath, "utf-8").split("\n");
             const firstLine = lines.find((l) => l.trim());
             if (!firstLine)
               continue;
@@ -16449,7 +16671,7 @@ var init_codex_session_source = __esm({
 });
 
 // ../engine/dist/parsers/diary-source.js
-import { existsSync as existsSync31, mkdirSync as mkdirSync5, readdirSync as readdirSync23, readFileSync as readFileSync22, writeFileSync as writeFileSync4, statSync as statSync27 } from "fs";
+import { existsSync as existsSync31, mkdirSync as mkdirSync5, readdirSync as readdirSync23, readFileSync as readFileSync21, writeFileSync as writeFileSync4, statSync as statSync27 } from "fs";
 import { join as join30, basename as basename19 } from "path";
 var MAX_CHUNK_CHARS11, DiarySource;
 var init_diary_source = __esm({
@@ -16475,7 +16697,7 @@ var init_diary_source = __esm({
             const filePath = join30(agentPath2, file);
             try {
               const stat3 = statSync27(filePath);
-              const raw = readFileSync22(filePath, "utf-8");
+              const raw = readFileSync21(filePath, "utf-8");
               const entry = JSON.parse(raw);
               const entryId = basename19(file, ".json");
               const title = `[${entry.agent}] ${entry.topic}: ${entry.content.slice(0, 80)}`;
@@ -16502,7 +16724,7 @@ var init_diary_source = __esm({
       async parse(item) {
         if (!existsSync31(item.filePath))
           return [];
-        const raw = readFileSync22(item.filePath, "utf-8");
+        const raw = readFileSync21(item.filePath, "utf-8");
         const entry = JSON.parse(raw);
         if (!entry.content || entry.content.trim().length < 10)
           return [];
@@ -16565,7 +16787,7 @@ var init_diary_source = __esm({
         const entries = [];
         for (const file of files) {
           try {
-            const raw = readFileSync22(join30(agentDir, file), "utf-8");
+            const raw = readFileSync21(join30(agentDir, file), "utf-8");
             entries.push(JSON.parse(raw));
           } catch {
             continue;
@@ -16578,7 +16800,7 @@ var init_diary_source = __esm({
 });
 
 // ../engine/dist/parsers/skills-source.js
-import { existsSync as existsSync32, readdirSync as readdirSync24, readFileSync as readFileSync23, statSync as statSync28 } from "fs";
+import { existsSync as existsSync32, readdirSync as readdirSync24, readFileSync as readFileSync22, statSync as statSync28 } from "fs";
 import { homedir as homedir12 } from "os";
 import { join as join31 } from "path";
 function resolveRoots() {
@@ -16671,7 +16893,7 @@ var init_skills_source = __esm({
             continue;
           let content;
           try {
-            content = readFileSync23(skillMd, "utf-8");
+            content = readFileSync22(skillMd, "utf-8");
           } catch {
             continue;
           }
@@ -16731,7 +16953,7 @@ var init_skills_source = __esm({
       async parse(item) {
         if (!existsSync32(item.filePath))
           return [];
-        const content = readFileSync23(item.filePath, "utf-8");
+        const content = readFileSync22(item.filePath, "utf-8");
         if (!content.trim())
           return [];
         return [{
@@ -16754,14 +16976,14 @@ var init_skills_source = __esm({
 });
 
 // ../engine/dist/parsers/mcps-source.js
-import { existsSync as existsSync33, readdirSync as readdirSync25, readFileSync as readFileSync24, statSync as statSync29 } from "fs";
+import { existsSync as existsSync33, readdirSync as readdirSync25, readFileSync as readFileSync23, statSync as statSync29 } from "fs";
 import { homedir as homedir13 } from "os";
 import { join as join32 } from "path";
 function readJson(path) {
   if (!existsSync33(path))
     return null;
   try {
-    const raw = readFileSync24(path, "utf-8");
+    const raw = readFileSync23(path, "utf-8");
     const stripped = path.endsWith(".jsonc") ? raw.replace(/\/\*[\s\S]*?\*\//g, "").replace(/(^|[^:])\/\/.*$/gm, "$1").replace(/,(\s*[}\]])/g, "$1") : raw;
     return JSON.parse(stripped);
   } catch {
@@ -16874,7 +17096,7 @@ var init_mcps_source = __esm({
           return;
         let content;
         try {
-          content = readFileSync24(path, "utf-8");
+          content = readFileSync23(path, "utf-8");
         } catch {
           return;
         }
@@ -17043,7 +17265,7 @@ var init_toolkit_format = __esm({
 });
 
 // ../engine/dist/parsers/slash-commands-source.js
-import { existsSync as existsSync34, readdirSync as readdirSync26, readFileSync as readFileSync25, statSync as statSync30 } from "fs";
+import { existsSync as existsSync34, readdirSync as readdirSync26, readFileSync as readFileSync24, statSync as statSync30 } from "fs";
 import { join as join33, basename as basename20 } from "path";
 function parseCommand(content, fallbackName, format) {
   if (format === "toml") {
@@ -17071,6 +17293,7 @@ var init_slash_commands_source = __esm({
     init_codex2();
     init_settings();
     init_toolkit_format();
+    init_project_dir_name();
     MAX_CHUNK_CHARS13 = 2e3;
     SlashCommandsSource = class {
       sourceType = "command";
@@ -17084,7 +17307,7 @@ var init_slash_commands_source = __esm({
               for (const entry of readdirSync26(projectsRoot, { withFileTypes: true })) {
                 if (!entry.isDirectory() || entry.name.startsWith("."))
                   continue;
-                const projectPath = entry.name.replace(/^-/, "/").replace(/-/g, "/");
+                const projectPath = decodeProjectDirName(entry.name);
                 const cmdDir = join33(projectPath, ".claude", "commands");
                 if (existsSync34(cmdDir))
                   roots.push({ path: cmdDir, tool: "claude", scope: "project", projectPath, format: "md" });
@@ -17117,7 +17340,7 @@ var init_slash_commands_source = __esm({
             const filePath = join33(root.path, file);
             try {
               const stat3 = statSync30(filePath);
-              const content = readFileSync25(filePath, "utf-8");
+              const content = readFileSync24(filePath, "utf-8");
               const parsed = parseCommand(content, basename20(file, ext), root.format);
               yield {
                 id: `${root.tool}_cmd_${root.scope}_${parsed.name}`,
@@ -17143,7 +17366,7 @@ var init_slash_commands_source = __esm({
       async parse(item) {
         if (!existsSync34(item.filePath))
           return [];
-        const content = readFileSync25(item.filePath, "utf-8");
+        const content = readFileSync24(item.filePath, "utf-8");
         if (!content.trim())
           return [];
         return [{
@@ -17166,7 +17389,7 @@ var init_slash_commands_source = __esm({
 });
 
 // ../engine/dist/parsers/subagents-source.js
-import { existsSync as existsSync35, readdirSync as readdirSync27, readFileSync as readFileSync26, statSync as statSync31 } from "fs";
+import { existsSync as existsSync35, readdirSync as readdirSync27, readFileSync as readFileSync25, statSync as statSync31 } from "fs";
 import { join as join34, basename as basename21 } from "path";
 function parseAgent(content, fallbackName, format) {
   if (format === "toml") {
@@ -17196,6 +17419,7 @@ var init_subagents_source = __esm({
     init_codex2();
     init_settings();
     init_toolkit_format();
+    init_project_dir_name();
     MAX_CHUNK_CHARS14 = 2e3;
     SubagentsSource = class {
       sourceType = "agent";
@@ -17209,7 +17433,7 @@ var init_subagents_source = __esm({
               for (const entry of readdirSync27(projectsRoot, { withFileTypes: true })) {
                 if (!entry.isDirectory() || entry.name.startsWith("."))
                   continue;
-                const projectPath = entry.name.replace(/^-/, "/").replace(/-/g, "/");
+                const projectPath = decodeProjectDirName(entry.name);
                 const agentDir = join34(projectPath, ".claude", "agents");
                 if (existsSync35(agentDir))
                   roots.push({ path: agentDir, tool: "claude", scope: "project", projectPath, format: "md" });
@@ -17242,7 +17466,7 @@ var init_subagents_source = __esm({
             const filePath = join34(root.path, file);
             try {
               const stat3 = statSync31(filePath);
-              const content = readFileSync26(filePath, "utf-8");
+              const content = readFileSync25(filePath, "utf-8");
               const parsed = parseAgent(content, basename21(file, ext), root.format);
               yield {
                 id: `${root.tool}_agent_${root.scope}_${parsed.name}`,
@@ -17269,7 +17493,7 @@ var init_subagents_source = __esm({
       async parse(item) {
         if (!existsSync35(item.filePath))
           return [];
-        const content = readFileSync26(item.filePath, "utf-8");
+        const content = readFileSync25(item.filePath, "utf-8");
         if (!content.trim())
           return [];
         return [{
@@ -17292,13 +17516,13 @@ var init_subagents_source = __esm({
 });
 
 // ../engine/dist/parsers/hooks-source.js
-import { existsSync as existsSync36, readFileSync as readFileSync27, readdirSync as readdirSync28, statSync as statSync32 } from "fs";
+import { existsSync as existsSync36, readFileSync as readFileSync26, readdirSync as readdirSync28, statSync as statSync32 } from "fs";
 import { join as join35 } from "path";
 function readJson2(path) {
   if (!existsSync36(path))
     return null;
   try {
-    return JSON.parse(readFileSync27(path, "utf-8"));
+    return JSON.parse(readFileSync26(path, "utf-8"));
   } catch {
     return null;
   }
@@ -17309,6 +17533,7 @@ var init_hooks_source = __esm({
     "use strict";
     init_claude2();
     init_settings();
+    init_project_dir_name();
     HooksSource = class {
       sourceType = "hook";
       async *discover() {
@@ -17321,7 +17546,7 @@ var init_hooks_source = __esm({
             for (const entry of readdirSync28(projectsRoot, { withFileTypes: true })) {
               if (!entry.isDirectory() || entry.name.startsWith("."))
                 continue;
-              const projectPath = entry.name.replace(/^-/, "/").replace(/-/g, "/");
+              const projectPath = decodeProjectDirName(entry.name);
               const settingsPath2 = join35(projectPath, ".claude", "settings.json");
               if (existsSync36(settingsPath2)) {
                 yield* this.fromSettings(settingsPath2, "project", projectPath);
@@ -17414,14 +17639,14 @@ var init_hooks_source = __esm({
 });
 
 // ../engine/dist/parsers/plugins-source.js
-import { existsSync as existsSync37, readFileSync as readFileSync28, readdirSync as readdirSync29, statSync as statSync33 } from "fs";
+import { existsSync as existsSync37, readFileSync as readFileSync27, readdirSync as readdirSync29, statSync as statSync33 } from "fs";
 import { homedir as homedir14 } from "os";
 import { join as join36 } from "path";
 function readJson3(path) {
   if (!existsSync37(path))
     return null;
   try {
-    return JSON.parse(readFileSync28(path, "utf-8"));
+    return JSON.parse(readFileSync27(path, "utf-8"));
   } catch {
     return null;
   }
@@ -17678,7 +17903,7 @@ var init_extractor_version = __esm({
 });
 
 // src/sync-ledger.ts
-import { readFileSync as readFileSync29, writeFileSync as writeFileSync5, renameSync as renameSync4, mkdirSync as mkdirSync6 } from "node:fs";
+import { readFileSync as readFileSync28, writeFileSync as writeFileSync5, renameSync as renameSync4, mkdirSync as mkdirSync6 } from "node:fs";
 import { join as join37, dirname as dirname14 } from "node:path";
 function toRow(entry) {
   if (entry === void 0) return void 0;
@@ -17690,24 +17915,77 @@ function ledgerFilePath() {
 function load() {
   if (cache3) return cache3;
   try {
-    const parsed = JSON.parse(readFileSync29(ledgerPath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync28(ledgerPath(), "utf-8"));
     cache3 = parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     cache3 = {};
   }
   return cache3;
 }
-function persist(data) {
+function persistNow(data) {
   const path = ledgerPath();
   mkdirSync6(dirname14(path), { recursive: true });
   const tmp = `${path}.tmp`;
   writeFileSync5(tmp, JSON.stringify(data));
   renameSync4(tmp, path);
+  pendingWrite = false;
+}
+function persist(data) {
+  pendingWrite = true;
+  if (flushTimer) return;
+  flushTimer = setTimeout(() => {
+    flushTimer = null;
+    if (pendingWrite) {
+      try {
+        persistNow(data);
+      } catch {
+      }
+    }
+  }, LEDGER_FLUSH_MS);
+  flushTimer.unref?.();
+}
+function pruneLedgerTargets(configuredServers) {
+  const data = load();
+  const keep = new Set(configuredServers);
+  const orphans = {};
+  for (const server of Object.keys(data)) {
+    if (!keep.has(server)) {
+      orphans[server] = data[server];
+      delete data[server];
+    }
+  }
+  const names = Object.keys(orphans);
+  if (names.length === 0) return 0;
+  const path = ledgerPath();
+  const side = `${path}.orphans.json`;
+  try {
+    let prior = {};
+    try {
+      prior = JSON.parse(readFileSync28(side, "utf-8"));
+    } catch {
+    }
+    writeFileSync5(side, JSON.stringify({ ...prior, ...orphans }));
+  } catch {
+    for (const n of names) data[n] = orphans[n];
+    return 0;
+  }
+  const rows = names.reduce((n, s) => n + Object.keys(orphans[s]).length, 0);
+  console.error(`[sync] ledger: parked ${rows} row(s) for ${names.length} server(s) no longer configured (${names.join(", ")}) in ${side}`);
+  persistNow(data);
+  return names.length;
+}
+function flushLedger() {
+  if (flushTimer) {
+    clearTimeout(flushTimer);
+    flushTimer = null;
+  }
+  if (!pendingWrite || !cache3) return;
+  persistNow(cache3);
 }
 function loadItemVersionsAll() {
   if (itemVersionsCache) return itemVersionsCache;
   try {
-    const parsed = JSON.parse(readFileSync29(itemVersionsPath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync28(itemVersionsPath(), "utf-8"));
     itemVersionsCache = parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     itemVersionsCache = {};
@@ -17789,7 +18067,7 @@ function markFieldCoverage(server, field, rows) {
 function loadReconcile() {
   if (reconcileCache) return reconcileCache;
   try {
-    const parsed = JSON.parse(readFileSync29(reconcilePath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync28(reconcilePath(), "utf-8"));
     reconcileCache = parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     reconcileCache = {};
@@ -17837,7 +18115,7 @@ function syncMode(row, mtime, fileSize, extractorVersion, isAppendOnly) {
   if (row.m >= Math.floor(mtime)) return "skip";
   return "full";
 }
-var ledgerPath, cache3, itemVersionsPath, itemVersionsCache, unackedCursorAttempts, reconcilePath, reconcileCache;
+var ledgerPath, cache3, LEDGER_FLUSH_MS, pendingWrite, flushTimer, itemVersionsPath, itemVersionsCache, unackedCursorAttempts, reconcilePath, reconcileCache;
 var init_sync_ledger = __esm({
   "src/sync-ledger.ts"() {
     "use strict";
@@ -17845,6 +18123,9 @@ var init_sync_ledger = __esm({
     init_extractor_version();
     ledgerPath = () => join37(getDataDir(), "sync-ledger.json");
     cache3 = null;
+    LEDGER_FLUSH_MS = 2e3;
+    pendingWrite = false;
+    flushTimer = null;
     itemVersionsPath = () => join37(getDataDir(), "item-versions.json");
     itemVersionsCache = null;
     unackedCursorAttempts = 0;
@@ -17879,7 +18160,7 @@ var init_sync_fields = __esm({
 });
 
 // ../engine/dist/core/index-lock.js
-import { existsSync as existsSync38, mkdirSync as mkdirSync7, openSync as openSync6, writeFileSync as writeFileSync6, readFileSync as readFileSync30, rmSync as rmSync4, statSync as statSync34, closeSync as closeSync6 } from "fs";
+import { existsSync as existsSync38, mkdirSync as mkdirSync7, openSync as openSync7, writeFileSync as writeFileSync6, readFileSync as readFileSync29, rmSync as rmSync4, statSync as statSync34, closeSync as closeSync7 } from "fs";
 import { dirname as dirname15, join as join38 } from "path";
 function acquireIndexLock(opts) {
   const lockPath = lockFilePath();
@@ -17891,7 +18172,7 @@ function acquireIndexLock(opts) {
   }
   let fd;
   try {
-    fd = openSync6(lockPath, "wx", 384);
+    fd = openSync7(lockPath, "wx", 384);
   } catch (err) {
     if (err.code === "EEXIST")
       return null;
@@ -17901,7 +18182,7 @@ function acquireIndexLock(opts) {
   try {
     writeFileSync6(fd, JSON.stringify(holder));
   } finally {
-    closeSync6(fd);
+    closeSync7(fd);
   }
   let released = false;
   return {
@@ -17911,7 +18192,7 @@ function acquireIndexLock(opts) {
         return;
       released = true;
       try {
-        const current = JSON.parse(readFileSync30(lockPath, "utf-8"));
+        const current = JSON.parse(readFileSync29(lockPath, "utf-8"));
         if (current.pid !== holder.pid || current.startedAt !== holder.startedAt)
           return;
       } catch {
@@ -17933,7 +18214,7 @@ function stealStaleLock(lockPath, staleAfterMs) {
     const age = Date.now() - s.mtimeMs;
     let payload;
     try {
-      payload = JSON.parse(readFileSync30(lockPath, "utf-8"));
+      payload = JSON.parse(readFileSync29(lockPath, "utf-8"));
     } catch {
       rmSync4(lockPath, { force: true });
       return true;
@@ -17977,7 +18258,7 @@ __export(http_exports, {
   clientHeaders: () => clientHeaders,
   fetchWithTimeout: () => fetchWithTimeout
 });
-import { readFileSync as readFileSync31 } from "node:fs";
+import { readFileSync as readFileSync30 } from "node:fs";
 function cliVersion() {
   return CLI_VERSION;
 }
@@ -17998,10 +18279,10 @@ var init_http = __esm({
     "use strict";
     CLI_VERSION = "0.0.0";
     try {
-      CLI_VERSION = JSON.parse(readFileSync31(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
+      CLI_VERSION = JSON.parse(readFileSync30(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.5.5";
+        if (true) CLI_VERSION = "0.5.6";
       } catch {
       }
     }
@@ -18014,7 +18295,7 @@ __export(client_events_exports, {
   isTelemetryEnabled: () => isTelemetryEnabled,
   reportClientEvent: () => reportClientEvent
 });
-import { readFileSync as readFileSync32 } from "node:fs";
+import { readFileSync as readFileSync31 } from "node:fs";
 function scrub(msg) {
   if (!msg) return "";
   const noHome = msg.replace(/\/(?:home|Users)\/[^/\s]+/g, "~");
@@ -18067,7 +18348,7 @@ var init_client_events = __esm({
     init_secret_redactor();
     CLI_VERSION2 = "0.0.0";
     try {
-      CLI_VERSION2 = JSON.parse(readFileSync32(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION2;
+      CLI_VERSION2 = JSON.parse(readFileSync31(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION2;
     } catch {
     }
   }
@@ -18190,6 +18471,7 @@ var sync_client_exports = {};
 __export(sync_client_exports, {
   BATCH_SCAN_MAX_BYTES: () => BATCH_SCAN_MAX_BYTES,
   FULL_BUILD_MAX_BYTES: () => FULL_BUILD_MAX_BYTES,
+  _resetCapsCacheForTests: () => _resetCapsCacheForTests,
   _resetTenantSecurityConfigCache: () => _resetTenantSecurityConfigCache,
   _resetTenantSyncConfigCache: () => _resetTenantSyncConfigCache,
   batchScanExternal: () => batchScanExternal,
@@ -18207,7 +18489,7 @@ __export(sync_client_exports, {
   syncSessions: () => syncSessions
 });
 import { join as join40, dirname as dirname16, basename as basename22 } from "node:path";
-import { readFileSync as readFileSync33, writeFileSync as writeFileSync8, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync4, rmSync as rmSync5, chmodSync as chmodSync3, unlinkSync as unlinkSync2, readdirSync as readdirSync30, statSync as statSync35 } from "node:fs";
+import { readFileSync as readFileSync32, writeFileSync as writeFileSync8, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync4, rmSync as rmSync5, chmodSync as chmodSync3, unlinkSync as unlinkSync2, readdirSync as readdirSync30, statSync as statSync35 } from "node:fs";
 import { tmpdir as tmpdir3, hostname } from "node:os";
 import { createHash as createHash13 } from "node:crypto";
 import { fileURLToPath } from "node:url";
@@ -18229,8 +18511,10 @@ function saveCredentials(c) {
   }
 }
 function loadAllCredentials() {
+  const fromEnv = envCredentials();
+  if (fromEnv) return [{ serverUrl: fromEnv.serverUrl, token: fromEnv.token }];
   try {
-    const parsed = JSON.parse(readFileSync33(credPath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync32(credPath(), "utf-8"));
     if (Array.isArray(parsed?.targets)) return parsed.targets.filter((t) => t?.serverUrl).map((t) => ({ serverUrl: t.serverUrl, token: t.token || "" }));
     if (parsed?.serverUrl) return [{ serverUrl: parsed.serverUrl, token: parsed.token || "" }];
   } catch {
@@ -18389,6 +18673,10 @@ function isLocalHost(serverUrl) {
 async function syncSessions(opts = {}) {
   const targets = loadAllCredentials();
   if (targets.length === 0) throw new Error("Not logged in \u2014 run `chat-recall login <server-url> --token <token>`");
+  try {
+    pruneLedgerTargets(targets.map((t) => t.serverUrl));
+  } catch {
+  }
   let agg = null;
   const errors = [];
   for (const cred of targets) {
@@ -18411,6 +18699,7 @@ async function syncSessions(opts = {}) {
       errors.push(`${cred.serverUrl}: ${e instanceof Error ? e.message : e}`);
     }
   }
+  flushLedger();
   if (!agg) throw new Error(`sync failed for all targets:
   ${errors.join("\n  ")}`);
   if (errors.length > 0) console.error(`[sync] ${errors.length} target(s) failed (others succeeded):
@@ -18436,11 +18725,11 @@ async function reconcileFieldsForTarget(cred, fullRefs, opts = {}) {
   let pushed = 0, absent = 0, scanned = 0;
   for (const field of SYNC_FIELDS) {
     const needFull = !!opts.force || fieldNeedsFullPass(base2, field);
-    const candidates = needFull ? fullRefs() : opts.convRefs ?? fullRefs();
+    const candidates2 = needFull ? fullRefs() : opts.convRefs ?? fullRefs();
     const send = [];
     const mtimeById = /* @__PURE__ */ new Map();
     const absentIds = [];
-    for (const ref of candidates) {
+    for (const ref of candidates2) {
       if (!fieldNeedsScan(ledger.get(ref.prefixedId), field, ref.mtime, opts.force)) continue;
       scanned++;
       mtimeById.set(ref.prefixedId, ref.mtime);
@@ -18561,6 +18850,20 @@ function batchScanExternal(items, opts = {}) {
   }
   return { findings, scanned, slices, scanMs };
 }
+function _resetCapsCacheForTests() {
+  capsOk.clear();
+}
+async function verifyServerApi(serverUrl, minApi) {
+  const base2 = serverUrl.replace(/\/$/, "");
+  const seen = capsOk.get(base2);
+  if (seen !== void 0 && Date.now() - seen < CAPS_TTL_MS) return true;
+  const caps = await fetchWithTimeout(`${base2}/api/capabilities`).then((r) => r.json());
+  if ((caps.apiVersion ?? 0) < minApi) {
+    throw new Error(`server too old: apiVersion ${caps.apiVersion ?? "none"} < required ${minApi} \u2014 update the server image before syncing`);
+  }
+  capsOk.set(base2, Date.now());
+  return true;
+}
 async function syncToTarget(cred, opts = {}) {
   const sync = loadSettings().sync;
   const serverCfg = await fetchTenantSyncConfig(cred);
@@ -18581,14 +18884,9 @@ async function syncToTarget(cred, opts = {}) {
     return isProjectSyncable(r.source === "ignored" ? "" : r.id, projectPath, { syncMode: "only", syncOnly: syncOnly2 });
   };
   const MIN_SERVER_API = 2;
-  try {
-    const caps = await fetchWithTimeout(`${cred.serverUrl.replace(/\/$/, "")}/api/capabilities`).then((r) => r.json());
-    if ((caps.apiVersion ?? 0) < MIN_SERVER_API) {
-      throw new Error(`server too old: apiVersion ${caps.apiVersion ?? "none"} < required ${MIN_SERVER_API} \u2014 update the server image before syncing`);
-    }
-  } catch (e) {
-    if (e instanceof Error && e.message.startsWith("server too old")) throw e;
-    throw new Error(`cannot verify server version (${e instanceof Error ? e.message : e}) \u2014 refusing to sync blind`);
+  {
+    const ok = await verifyServerApi(cred.serverUrl, MIN_SERVER_API);
+    if (!ok) throw new Error(`cannot verify server version \u2014 refusing to sync blind`);
   }
   const { tenantRules, verifySecrets } = await fetchTenantSecurityConfig(cred);
   const CHANGED_WALK_OVERLAP_MS = 15 * 6e4;
@@ -18645,8 +18943,11 @@ async function syncToTarget(cred, opts = {}) {
           try {
             const body2 = JSON.parse(text);
             detail = body2.error ?? text;
+            if (body2.detail) detail += `
+  ${body2.detail}`;
             if (body2.resetsAt) detail += ` (resets ${new Date(body2.resetsAt).toISOString().slice(0, 10)})`;
-            if (body2.upgradeUrl) detail += ` \u2014 ${body2.upgradeUrl}`;
+            if (body2.upgradeUrl) detail += `
+  ${body2.upgradeUrl}`;
           } catch {
           }
           throw new Error(`sync paused by the server: ${detail}`);
@@ -18793,16 +19094,21 @@ async function syncToTarget(cred, opts = {}) {
   const findingsBatch = makeBatcher("findings", 200, true);
   const scanSecrets = isSecretScannerAvailable() && upload.findings && process.env.CHAT_RECALL_SCAN_SECRETS !== "0";
   const verifySecretsScan = verifySecrets;
+  let skipped = 0, redactions = 0, walked = 0;
   const kgSeen = /* @__PURE__ */ new Set();
   const kgEntityType = /* @__PURE__ */ new Map();
-  const kgRows = [];
-  const accumulateKg = (triples, sourceSession) => {
+  const kgEntityNames = /* @__PURE__ */ new Set();
+  const kgKey = (subject, predicate, object, validFrom) => createHash13("sha1").update(`${subject}|${predicate}|${object}|${validFrom}`).digest("hex").slice(0, 16);
+  const accumulateKg = async (triples, sourceSession) => {
     for (const t of triples) {
-      const key = `${t.subject}|${t.predicate}|${t.object}|${t.validFrom ?? ""}`;
+      const key = kgKey(t.subject, t.predicate, t.object, t.validFrom ?? "");
       if (kgSeen.has(key)) continue;
       kgSeen.add(key);
       if (t.predicate === "is_a" && !kgEntityType.has(t.subject)) kgEntityType.set(t.subject, t.object);
-      kgRows.push({
+      kgEntityNames.add(t.subject);
+      kgEntityNames.add(t.object);
+      const count = { redactions: 0 };
+      await kgTripleBatch.add(redactDeep({
         subject: t.subject,
         predicate: t.predicate,
         object: t.object,
@@ -18810,10 +19116,10 @@ async function syncToTarget(cred, opts = {}) {
         valid_to: null,
         confidence: t.confidence ?? 1,
         source_session: sourceSession
-      });
+      }, count));
+      redactions += count.redactions;
     }
   };
-  let skipped = 0, redactions = 0, walked = 0;
   let scanMs = 0, scanned = 0;
   const slice = refs.slice(0, opts.limit ?? refs.length);
   const trace = process.env.CHAT_RECALL_SYNC_TRACE === "1" ? (msg) => {
@@ -18946,7 +19252,7 @@ async function syncToTarget(cred, opts = {}) {
     await convBatch.add(built.conv);
     if (built.findings.length > 0) await findingsBatch.add(built.findings);
     if (upload.sessionMeta) {
-      accumulateKg(extractEntities(built.kgText, { projectPath: built.projectPath, sourceType: "session", sessionId: ref.prefixedId, validFrom: ref.mtime ? new Date(ref.mtime).toISOString().slice(0, 10) : void 0 }), ref.prefixedId);
+      await accumulateKg(extractEntities(built.kgText, { projectPath: built.projectPath, sourceType: "session", sessionId: ref.prefixedId, validFrom: ref.mtime ? new Date(ref.mtime).toISOString().slice(0, 10) : void 0 }), ref.prefixedId);
     }
     if (upload.sessionMeta && sessionFileBytes(ref) <= FULL_BUILD_MAX_BYTES) {
       try {
@@ -19025,7 +19331,7 @@ async function syncToTarget(cred, opts = {}) {
             chunks: redactedChunks
           });
           if (upload.sessionMeta && redactedChunks.length > 0) {
-            accumulateKg(
+            await accumulateKg(
               extractEntities(redactedChunks.map((c) => c.text).join("\n"), { projectPath: item.projectPath || "", sourceType: item.sourceType, validFrom: item.mtime ? new Date(Number(item.mtime)).toISOString().slice(0, 10) : void 0 }),
               null
             );
@@ -19050,16 +19356,8 @@ async function syncToTarget(cred, opts = {}) {
       }
     }
   }
-  if (upload.sessionMeta && kgRows.length > 0) {
-    const entityNames = /* @__PURE__ */ new Set();
-    for (const t of kgRows) {
-      const count = { redactions: 0 };
-      await kgTripleBatch.add(redactDeep(t, count));
-      redactions += count.redactions;
-      entityNames.add(t.subject);
-      entityNames.add(t.object);
-    }
-    for (const name of entityNames) {
+  if (upload.sessionMeta && kgEntityNames.size > 0) {
+    for (const name of kgEntityNames) {
       const count = { redactions: 0 };
       await kgEntityBatch.add(redactDeep({ name, type: kgEntityType.get(name) ?? "unknown", properties: {} }, count));
       redactions += count.redactions;
@@ -19419,56 +19717,58 @@ function collectDerived(ref, mtime, count) {
   const id = ref.prefixedId;
   const compute = [];
   let fullOutcome = null;
-  for (const kind of COMPUTE_KINDS) {
-    let data = null;
-    try {
-      if (kind === "diff") {
-        const replay = replaySessionAny(id);
-        if (replay.found) data = replay;
-      } else if (kind === "outcome") {
-        fullOutcome = computeOutcome(id);
-        if (fullOutcome.found) data = fullOutcome;
-      } else if (kind === "commits") {
-        if (!fullOutcome) fullOutcome = computeOutcome(id);
-        if (fullOutcome.found) data = fullOutcome.commits;
-      } else if (kind === "markers") {
-        const turns = extractTurnsAny(id, { maxTurns: 5e4 });
-        const prompts = turns.turns.filter((t) => t.kind === "user" && t.text).map((t) => ({ line: t.line, ts: t.ts, tsIso: t.tsIso, ...markPrompt(t.text) }));
-        data = { sessionId: id, prompts, summary: summarizeMarkers(prompts) };
-      }
-    } catch {
-      data = null;
+  return withSessionReadCache(() => {
+    for (const kind of COMPUTE_KINDS) {
+      let data = null;
+      try {
+        if (kind === "diff") {
+          const replay = replaySessionAny(id);
+          if (replay.found) data = replay;
+        } else if (kind === "outcome") {
+          fullOutcome = computeOutcome(id);
+          if (fullOutcome.found) data = fullOutcome;
+        } else if (kind === "commits") {
+          if (!fullOutcome) fullOutcome = computeOutcome(id);
+          if (fullOutcome.found) data = fullOutcome.commits;
+        } else if (kind === "markers") {
+          const turns = extractTurnsAny(id, { maxTurns: 5e4 });
+          const prompts = turns.turns.filter((t) => t.kind === "user" && t.text).map((t) => ({ line: t.line, ts: t.ts, tsIso: t.tsIso, ...markPrompt(t.text) }));
+          data = { sessionId: id, prompts, summary: summarizeMarkers(prompts) };
+        }
+      } catch {
+        data = null;
+      }
+      if (data === null) continue;
+      const redacted = redactDeep(data, count);
+      if (JSON.stringify(redacted).length > MAX_DERIVED_ROW_BYTES) continue;
+      compute.push({ kind, mtime, data: redacted });
+    }
+    let outcomeRow = null;
+    if (fullOutcome?.found) {
+      outcomeRow = {
+        sessionId: id,
+        tool: ref.toolId,
+        status: fullOutcome.status,
+        reason: fullOutcome.reason,
+        fileMtime: mtime,
+        fileSize: 0,
+        contentHash: "",
+        fileCount: fullOutcome.fileCount,
+        linesAdded: fullOutcome.totalLinesAdded,
+        linesRemoved: fullOutcome.totalLinesRemoved,
+        commits: fullOutcome.commits?.totalCommits ?? 0,
+        isFull: true,
+        classifiedAt: Date.now(),
+        lastScannedOffset: 0
+      };
     }
-    if (data === null) continue;
-    const redacted = redactDeep(data, count);
-    if (JSON.stringify(redacted).length > MAX_DERIVED_ROW_BYTES) continue;
-    compute.push({ kind, mtime, data: redacted });
-  }
-  let outcomeRow = null;
-  if (fullOutcome?.found) {
-    outcomeRow = {
-      sessionId: id,
-      tool: ref.toolId,
-      status: fullOutcome.status,
-      reason: fullOutcome.reason,
-      fileMtime: mtime,
-      fileSize: 0,
-      contentHash: "",
-      fileCount: fullOutcome.fileCount,
-      linesAdded: fullOutcome.totalLinesAdded,
-      linesRemoved: fullOutcome.totalLinesRemoved,
-      commits: fullOutcome.commits?.totalCommits ?? 0,
-      isFull: true,
-      classifiedAt: Date.now(),
-      lastScannedOffset: 0
+    return {
+      session_id: id,
+      mtime,
+      compute,
+      outcome_row: outcomeRow ? redactDeep({ ...outcomeRow, sessionId: void 0 }, count) : null
     };
-  }
-  return {
-    session_id: id,
-    mtime,
-    compute,
-    outcome_row: outcomeRow ? redactDeep({ ...outcomeRow, sessionId: void 0 }, count) : null
-  };
+  });
 }
 function isSyncSkip(r) {
   return typeof r.skipped === "string";
@@ -19497,10 +19797,11 @@ async function syncIncremental(opts = {}) {
     lock.release();
   }
 }
-var ownVersion, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, hashPath, COMPUTE_KINDS, MAX_DERIVED_ROW_BYTES, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
+var ownVersion, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, hashPath, COMPUTE_KINDS, MAX_DERIVED_ROW_BYTES, CAPS_TTL_MS, capsOk, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
 var init_sync_client = __esm({
   "src/sync-client.ts"() {
     "use strict";
+    init_credentials_env();
     init_secret_redactor();
     init_source_discovery();
     init_home_discovery();
@@ -19528,14 +19829,15 @@ var init_sync_client = __esm({
     init_sync_fields();
     init_index_lock();
     init_http();
+    init_live_session_scan();
     init_backends();
     ownVersion = "0.0.0";
     try {
       const dir = dirname16(fileURLToPath(import.meta.url));
-      ownVersion = JSON.parse(readFileSync33(join40(dir, "../package.json"), "utf-8")).version || ownVersion;
+      ownVersion = JSON.parse(readFileSync32(join40(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.5.5";
+        if (true) ownVersion = "0.5.6";
       } catch {
       }
     }
@@ -19546,6 +19848,8 @@ var init_sync_client = __esm({
     hashPath = (p) => p ? "p_" + createHash13("sha256").update(p).digest("hex").slice(0, 12) : "";
     COMPUTE_KINDS = ["diff", "outcome", "commits", "markers"];
     MAX_DERIVED_ROW_BYTES = 2 * 1024 * 1024;
+    CAPS_TTL_MS = 60 * 6e4;
+    capsOk = /* @__PURE__ */ new Map();
     FULL_BUILD_MAX_BYTES = Math.max(8, parseInt(process.env.CHAT_RECALL_FULL_BUILD_MAX_MB || "64", 10)) * 1024 * 1024;
     FULL_BUILD_TAIL_BYTES = 16 * 1024 * 1024;
     BATCH_SCAN_MAX_BYTES = Math.max(1, parseInt(process.env.CHAT_RECALL_BATCHSCAN_MAX_MB || "64", 10)) * 1024 * 1024;
@@ -19559,11 +19863,11 @@ __export(update_notice_exports, {
   refreshUpdateCheck: () => refreshUpdateCheck,
   updateNotice: () => updateNotice
 });
-import { readFileSync as readFileSync34, writeFileSync as writeFileSync9 } from "node:fs";
+import { readFileSync as readFileSync33, writeFileSync as writeFileSync9 } from "node:fs";
 import { join as join41 } from "node:path";
 function readCheck() {
   try {
-    const c = JSON.parse(readFileSync34(checkPath(), "utf-8"));
+    const c = JSON.parse(readFileSync33(checkPath(), "utf-8"));
     return c && typeof c.serverVersion === "string" ? c : null;
   } catch {
     return null;
@@ -19639,6 +19943,282 @@ var init_update_notice = __esm({
   }
 });
 
+// ../engine/dist/core/which.js
+import { existsSync as existsSync39, statSync as statSync36, accessSync, constants } from "node:fs";
+import { join as join42, isAbsolute as isAbsolute2, delimiter as delimiter2, sep as sep2 } from "node:path";
+function executable(p) {
+  try {
+    if (!statSync36(p).isFile())
+      return false;
+  } catch {
+    return false;
+  }
+  if (isWindows)
+    return true;
+  try {
+    accessSync(p, constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function candidates(name) {
+  if (!isWindows)
+    return [name];
+  const exts = (process.env.PATHEXT || ".COM;.EXE;.BAT;.CMD").split(";").map((e) => e.trim()).filter(Boolean);
+  if (exts.some((e) => name.toLowerCase().endsWith(e.toLowerCase())))
+    return [name];
+  return exts.map((e) => name + e);
+}
+function resolveOnPath(name) {
+  if (!name)
+    return null;
+  if (name.includes("/") || isWindows && name.includes(sep2) || isAbsolute2(name)) {
+    for (const c of candidates(name))
+      if (executable(c))
+        return c;
+    return null;
+  }
+  for (const raw of (process.env.PATH || "").split(delimiter2)) {
+    const dir = raw.replace(/^"(.*)"$/, "$1");
+    if (!dir)
+      continue;
+    for (const c of candidates(name)) {
+      const full = join42(dir, c);
+      if (existsSync39(full) && executable(full))
+        return full;
+    }
+  }
+  return null;
+}
+function isOnPath(name) {
+  return resolveOnPath(name) !== null;
+}
+var isWindows;
+var init_which = __esm({
+  "../engine/dist/core/which.js"() {
+    "use strict";
+    isWindows = process.platform === "win32";
+  }
+});
+
+// ../engine/dist/core/mcp-clients.js
+var mcp_clients_exports = {};
+__export(mcp_clients_exports, {
+  MCP_CLIENTS: () => MCP_CLIENTS,
+  MCP_SERVER_NAME: () => MCP_SERVER_NAME,
+  getMcpClient: () => getMcpClient,
+  inspectMcpClients: () => inspectMcpClients,
+  registerMcpEverywhere: () => registerMcpEverywhere
+});
+import { existsSync as existsSync40, mkdirSync as mkdirSync10, readFileSync as readFileSync35, writeFileSync as writeFileSync11 } from "fs";
+import { homedir as homedir15 } from "os";
+import { dirname as dirname18, join as join44 } from "path";
+function envHome(varName, fallback) {
+  const v = process.env[varName];
+  return v && v.trim() ? v.trim() : fallback;
+}
+function writeFileMkdir(path, body) {
+  mkdirSync10(dirname18(path), { recursive: true });
+  writeFileSync11(path, body);
+}
+function registerMcpServersJson(target, path, spec) {
+  let cfg = {};
+  if (existsSync40(path)) {
+    try {
+      cfg = JSON.parse(readFileSync35(path, "utf-8"));
+    } catch (err) {
+      return { id: target.id, label: target.label, path, state: "unparseable", error: String(err) };
+    }
+  }
+  const servers = cfg.mcpServers || {};
+  const existing = servers[MCP_SERVER_NAME];
+  const entry = {
+    command: spec.command,
+    ...spec.args ? { args: spec.args } : {}
+  };
+  if (spec.alwaysAllow)
+    entry.alwaysAllow = existing?.alwaysAllow ?? spec.alwaysAllow;
+  if (spec.env)
+    entry.env = { ...existing?.env, ...spec.env };
+  const isCurrent = !!existing && existing.command === spec.command && JSON.stringify(existing.args ?? null) === JSON.stringify(spec.args ?? null) && Object.entries(spec.env ?? {}).every(([k, v]) => existing.env?.[k] === v);
+  if (isCurrent)
+    return { id: target.id, label: target.label, path, state: "current" };
+  servers[MCP_SERVER_NAME] = entry;
+  cfg.mcpServers = servers;
+  writeFileMkdir(path, JSON.stringify(cfg, null, 2) + "\n");
+  return { id: target.id, label: target.label, path, state: existing ? "repaired" : "created" };
+}
+function registerOpencodeJson(path, spec) {
+  const id = "opencode";
+  const label = "OpenCode";
+  let cfg = {};
+  if (existsSync40(path)) {
+    try {
+      cfg = JSON.parse(readFileSync35(path, "utf-8"));
+    } catch (err) {
+      return { id, label, path, state: "unparseable", error: String(err) };
+    }
+  }
+  if (!cfg.$schema)
+    cfg.$schema = "https://opencode.ai/config.json";
+  const mcp = cfg.mcp || {};
+  const existing = mcp[MCP_SERVER_NAME];
+  const argv = [spec.command, ...spec.args ?? []];
+  const entry = { type: "local", command: argv, enabled: true };
+  if (spec.env)
+    entry.environment = { ...existing?.environment, ...spec.env };
+  const isCurrent = !!existing && JSON.stringify(existing.command ?? null) === JSON.stringify(argv) && existing.enabled !== false && Object.entries(spec.env ?? {}).every(([k, v]) => existing.environment?.[k] === v);
+  if (isCurrent)
+    return { id, label, path, state: "current" };
+  mcp[MCP_SERVER_NAME] = entry;
+  cfg.mcp = mcp;
+  writeFileMkdir(path, JSON.stringify(cfg, null, 2) + "\n");
+  return { id, label, path, state: existing ? "repaired" : "created" };
+}
+function codexBlock(spec) {
+  const lines = [CODEX_HEADER, `command = ${JSON.stringify(spec.command)}`];
+  if (spec.args?.length)
+    lines.push(`args = [${spec.args.map((a) => JSON.stringify(a)).join(", ")}]`);
+  const env = Object.entries(spec.env ?? {});
+  if (env.length) {
+    lines.push(`[mcp_servers.${MCP_SERVER_NAME}.env]`);
+    for (const [k, v] of env)
+      lines.push(`${k} = ${JSON.stringify(v)}`);
+  }
+  return lines.join("\n") + "\n";
+}
+function registerCodexToml(path, spec) {
+  const id = "codex";
+  const label = "Codex";
+  const block = codexBlock(spec);
+  const prev = existsSync40(path) ? readFileSync35(path, "utf-8") : "";
+  const lines = prev.length ? prev.split("\n") : [];
+  const start = lines.findIndex((l) => l.trim() === CODEX_HEADER);
+  if (start === -1) {
+    const body = prev.length ? prev.replace(/\n*$/, "\n") + "\n" + block : block;
+    writeFileMkdir(path, body);
+    return { id, label, path, state: "created" };
+  }
+  let end = lines.length;
+  for (let i = start + 1; i < lines.length; i++) {
+    const t = lines[i].trim();
+    if (!t.startsWith("["))
+      continue;
+    if (t.startsWith(`[mcp_servers.${MCP_SERVER_NAME}.`))
+      continue;
+    end = i;
+    break;
+  }
+  const current = lines.slice(start, end).join("\n").replace(/\n*$/, "\n");
+  if (current === block)
+    return { id, label, path, state: "current" };
+  const next = [...lines.slice(0, start), ...block.replace(/\n$/, "").split("\n"), ...lines.slice(end)];
+  writeFileMkdir(path, next.join("\n").replace(/\n*$/, "\n"));
+  return { id, label, path, state: "repaired" };
+}
+function getMcpClient(id) {
+  const t = MCP_CLIENTS.find((c) => c.id === id);
+  if (!t)
+    throw new Error(`unknown MCP client: ${id}`);
+  return t;
+}
+function registerMcpEverywhere(spec, opts = {}) {
+  const home = opts.home ?? homedir15();
+  const forced = new Set(opts.extraIds ?? []);
+  return MCP_CLIENTS.filter((c) => c.isPresent(home) || forced.has(c.id)).map((c) => c.register(spec, home));
+}
+function inspectMcpClients(opts = {}) {
+  const home = opts.home ?? homedir15();
+  return MCP_CLIENTS.map((c) => {
+    const path = c.configPath(home);
+    let registered = false;
+    if (existsSync40(path)) {
+      try {
+        const raw = readFileSync35(path, "utf-8");
+        registered = c.id === "codex" ? raw.includes(CODEX_HEADER) : !!(JSON.parse(raw).mcpServers?.[MCP_SERVER_NAME] ?? JSON.parse(raw).mcp?.[MCP_SERVER_NAME]);
+      } catch {
+        registered = false;
+      }
+    }
+    return { id: c.id, label: c.label, path, present: c.isPresent(home), registered };
+  });
+}
+var MCP_SERVER_NAME, CODEX_HEADER, MCP_CLIENTS;
+var init_mcp_clients = __esm({
+  "../engine/dist/core/mcp-clients.js"() {
+    "use strict";
+    MCP_SERVER_NAME = "chat-recall";
+    CODEX_HEADER = `[mcp_servers.${MCP_SERVER_NAME}]`;
+    MCP_CLIENTS = [
+      {
+        id: "claude",
+        label: "Claude Code",
+        bin: "claude",
+        configPath: (home) => join44(home, ".mcp.json"),
+        // Claude Code is the reference client and `init`'s historical target, so we
+        // always write it — a fresh machine has no ~/.claude yet on first install.
+        isPresent: () => true,
+        register(spec, home) {
+          return registerMcpServersJson(this, this.configPath(home), spec);
+        }
+      },
+      {
+        id: "codex",
+        label: "Codex",
+        bin: "codex",
+        configPath: (home) => join44(envHome("CHAT_RECALL_CODEX_HOME", join44(home, ".codex")), "config.toml"),
+        isPresent(home) {
+          const p = this.configPath(home);
+          return existsSync40(p) || existsSync40(dirname18(p));
+        },
+        register(spec, home) {
+          return registerCodexToml(this.configPath(home), spec);
+        }
+      },
+      {
+        id: "gemini",
+        label: "Gemini CLI",
+        bin: "gemini",
+        configPath: (home) => join44(envHome("CHAT_RECALL_GEMINI_HOME", join44(home, ".gemini")), "settings.json"),
+        isPresent(home) {
+          const p = this.configPath(home);
+          return existsSync40(p) || existsSync40(dirname18(p));
+        },
+        register(spec, home) {
+          return registerMcpServersJson(this, this.configPath(home), spec);
+        }
+      },
+      {
+        id: "opencode",
+        label: "OpenCode",
+        bin: "opencode",
+        configPath: (home) => join44(envHome("XDG_CONFIG_HOME", join44(home, ".config")), "opencode", "opencode.json"),
+        isPresent(home) {
+          const p = this.configPath(home);
+          return existsSync40(p) || existsSync40(dirname18(p));
+        },
+        register(spec, home) {
+          return registerOpencodeJson(this.configPath(home), spec);
+        }
+      },
+      {
+        id: "cursor",
+        label: "Cursor",
+        bin: "cursor",
+        configPath: (home) => join44(home, ".cursor", "mcp.json"),
+        isPresent(home) {
+          const p = this.configPath(home);
+          return existsSync40(p) || existsSync40(dirname18(p));
+        },
+        register(spec, home) {
+          return registerMcpServersJson(this, this.configPath(home), spec);
+        }
+      }
+    ];
+  }
+});
+
 // ../engine/dist/core/companions.js
 var companions_exports = {};
 __export(companions_exports, {
@@ -19647,27 +20227,39 @@ __export(companions_exports, {
   CODEINDEX_INSTALL_DIR: () => CODEINDEX_INSTALL_DIR,
   checkCodeindexStatus: () => checkCodeindexStatus,
   detectPlatform: () => detectPlatform,
+  expectedCodeindexSha256: () => expectedCodeindexSha256,
   installCodeindex: () => installCodeindex,
   registerCodeindexMcp: () => registerCodeindexMcp,
   uninstallCodeindex: () => uninstallCodeindex,
   unregisterCodeindexMcp: () => unregisterCodeindexMcp
 });
-import { existsSync as existsSync39, mkdirSync as mkdirSync9, statSync as statSync36, chmodSync as chmodSync4, unlinkSync as unlinkSync3, renameSync as renameSync5, createWriteStream, readFileSync as readFileSync35, writeFileSync as writeFileSync10 } from "node:fs";
-import { homedir as homedir15 } from "node:os";
-import { join as join42 } from "node:path";
+import { existsSync as existsSync41, mkdirSync as mkdirSync11, statSync as statSync37, chmodSync as chmodSync4, unlinkSync as unlinkSync3, renameSync as renameSync5, createWriteStream, readFileSync as readFileSync36, writeFileSync as writeFileSync12 } from "node:fs";
+import { homedir as homedir16 } from "node:os";
+import { join as join45 } from "node:path";
 import { execSync as execSync3 } from "node:child_process";
+import { createHash as createHash14 } from "node:crypto";
+function expectedCodeindexSha256(artifact) {
+  return CODEINDEX_SHA256[artifact.replace(/^codeindex-/, "").replace(/\.exe$/, "")] ?? null;
+}
 function detectPlatform() {
   const arch = process.arch;
   const platform = process.platform;
   const archMap = { x64: "x86_64", arm64: "aarch64" };
-  const platformMap = { linux: "linux", darwin: "darwin", win32: "windows" };
+  const platformMap = { linux: "linux", darwin: "macos", win32: "windows" };
   const a = archMap[arch];
   const p = platformMap[platform];
   if (!a || !p) {
     return { reason: `Unsupported platform: ${arch}-${platform}` };
   }
-  const prebuiltCombos = /* @__PURE__ */ new Set(["x86_64-linux"]);
-  const artifact = `codeindex-${a}-${p}`;
+  const prebuiltCombos = /* @__PURE__ */ new Set([
+    "x86_64-linux",
+    "aarch64-linux",
+    "x86_64-macos",
+    "aarch64-macos",
+    "x86_64-windows",
+    "aarch64-windows"
+  ]);
+  const artifact = `codeindex-${a}-${p}${p === "windows" ? ".exe" : ""}`;
   if (!prebuiltCombos.has(`${a}-${p}`)) {
     return {
       artifact,
@@ -19684,20 +20276,15 @@ function checkCodeindexStatus() {
     artifactName: platform.artifact,
     unsupportedReason: platform.reason
   };
-  let foundPath = null;
-  try {
-    const out = execSync3("command -v codeindex", { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    if (out)
-      foundPath = out;
-  } catch {
+  let foundPath = resolveOnPath(CODEINDEX_BIN_NAME);
+  if (!foundPath) {
+    foundPath = resolveOnPath(CODEINDEX_BIN_PATH);
   }
-  if (!foundPath && existsSync39(CODEINDEX_BIN_PATH))
-    foundPath = CODEINDEX_BIN_PATH;
   if (foundPath) {
     status.installed = true;
     status.path = foundPath;
     try {
-      status.size = statSync36(foundPath).size;
+      status.size = statSync37(foundPath).size;
     } catch {
     }
     try {
@@ -19709,16 +20296,9 @@ function checkCodeindexStatus() {
   return status;
 }
 async function downloadArtifact(artifact, dest) {
-  const hasGh = (() => {
-    try {
-      execSync3("command -v gh", { stdio: "ignore" });
-      return true;
-    } catch {
-      return false;
-    }
-  })();
+  const hasGh = isOnPath("gh");
   if (hasGh) {
-    execSync3(`gh release download ${CODEINDEX_VERSION} --repo ${CODEINDEX_REPO} -p ${artifact} -O ${dest}`, {
+    execSync3(`gh release download ${CODEINDEX_VERSION} --repo ${CODEINDEX_REPO} -p ${artifact} -O "${dest}"`, {
       stdio: ["ignore", "pipe", "pipe"],
       timeout: 6e4
     });
@@ -19757,15 +20337,26 @@ async function installCodeindex(opts = {}) {
     return status;
   if (!status.prebuiltAvailable)
     return status;
-  mkdirSync9(CODEINDEX_INSTALL_DIR, { recursive: true });
+  mkdirSync11(CODEINDEX_INSTALL_DIR, { recursive: true });
   const tmpPath = `${CODEINDEX_BIN_PATH}.partial`;
   try {
     await downloadArtifact(status.artifactName, tmpPath);
+    const expected = expectedCodeindexSha256(status.artifactName);
+    if (!expected) {
+      throw new Error(`No pinned checksum for ${status.artifactName} \u2014 refusing to install an unverified binary. Add its sha256 to CODEINDEX_SHA256 in companions.ts.`);
+    }
+    const actual = createHash14("sha256").update(readFileSync36(tmpPath)).digest("hex");
+    if (actual !== expected) {
+      throw new Error(`Checksum mismatch for ${status.artifactName}.
+  expected ${expected}
+  actual   ${actual}
+Refusing to install. The release may have been re-uploaded, or something is serving different bytes.`);
+    }
     chmodSync4(tmpPath, 493);
     renameSync5(tmpPath, CODEINDEX_BIN_PATH);
   } catch (err) {
     try {
-      if (existsSync39(tmpPath))
+      if (existsSync41(tmpPath))
         unlinkSync3(tmpPath);
     } catch {
     }
@@ -19774,7 +20365,7 @@ async function installCodeindex(opts = {}) {
   return checkCodeindexStatus();
 }
 function uninstallCodeindex() {
-  if (existsSync39(CODEINDEX_BIN_PATH)) {
+  if (existsSync41(CODEINDEX_BIN_PATH)) {
     unlinkSync3(CODEINDEX_BIN_PATH);
     return { removed: true, path: CODEINDEX_BIN_PATH };
   }
@@ -19782,9 +20373,9 @@ function uninstallCodeindex() {
 }
 function registerCodeindexMcp(mcpJsonPath, binaryPath) {
   let cfg = {};
-  if (existsSync39(mcpJsonPath)) {
+  if (existsSync41(mcpJsonPath)) {
     try {
-      cfg = JSON.parse(readFileSync35(mcpJsonPath, "utf-8"));
+      cfg = JSON.parse(readFileSync36(mcpJsonPath, "utf-8"));
     } catch {
       cfg = {};
     }
@@ -19793,33 +20384,42 @@ function registerCodeindexMcp(mcpJsonPath, binaryPath) {
   if (cfg.mcpServers["codeindex"])
     return { added: false };
   cfg.mcpServers["codeindex"] = { command: binaryPath, args: ["--mcp"] };
-  writeFileSync10(mcpJsonPath, JSON.stringify(cfg, null, 2));
+  writeFileSync12(mcpJsonPath, JSON.stringify(cfg, null, 2));
   return { added: true };
 }
 function unregisterCodeindexMcp(mcpJsonPath) {
-  if (!existsSync39(mcpJsonPath))
+  if (!existsSync41(mcpJsonPath))
     return { removed: false };
   let cfg;
   try {
-    cfg = JSON.parse(readFileSync35(mcpJsonPath, "utf-8"));
+    cfg = JSON.parse(readFileSync36(mcpJsonPath, "utf-8"));
   } catch {
     return { removed: false };
   }
   if (!cfg.mcpServers?.["codeindex"])
     return { removed: false };
   delete cfg.mcpServers["codeindex"];
-  writeFileSync10(mcpJsonPath, JSON.stringify(cfg, null, 2));
+  writeFileSync12(mcpJsonPath, JSON.stringify(cfg, null, 2));
   return { removed: true };
 }
-var CODEINDEX_REPO, CODEINDEX_VERSION, CODEINDEX_INSTALL_DIR, CODEINDEX_BIN_NAME, CODEINDEX_BIN_PATH;
+var CODEINDEX_REPO, CODEINDEX_VERSION, CODEINDEX_SHA256, CODEINDEX_INSTALL_DIR, CODEINDEX_BIN_NAME, CODEINDEX_BIN_PATH;
 var init_companions = __esm({
   "../engine/dist/core/companions.js"() {
     "use strict";
+    init_which();
     CODEINDEX_REPO = "munhq/codeindex";
-    CODEINDEX_VERSION = "v0.1.0";
-    CODEINDEX_INSTALL_DIR = join42(homedir15(), ".local", "bin");
-    CODEINDEX_BIN_NAME = "codeindex";
-    CODEINDEX_BIN_PATH = join42(CODEINDEX_INSTALL_DIR, CODEINDEX_BIN_NAME);
+    CODEINDEX_VERSION = "v0.3.1";
+    CODEINDEX_SHA256 = {
+      "x86_64-linux": "4378f12e7c80fa8bb53e41c02db4b95955f2f878369abfb28b5edd94b4adbb85",
+      "aarch64-linux": "5a1d6c9c2592a3721547c42cd9b6b11f460e903bfc46407ae27d5879e7259587",
+      "x86_64-macos": "6ad2a2b40faa4ec72ac35fee84f35ea7c848cddc4f6382b4cafedb644f30389f",
+      "aarch64-macos": "f366d00918f79a4a0acc09c6091d97c6c378c79edbdbe3cb22e4014ea57f08d2",
+      "x86_64-windows": "a96fc8c8949bb399a44cc0615b12e458460a529c69f01e8829cc39a20f45ab29",
+      "aarch64-windows": "42620d56272cd9ba9d785569d8d754d6b4a3e80f36f28db3e0c483fd600ed117"
+    };
+    CODEINDEX_INSTALL_DIR = join45(homedir16(), ".local", "bin");
+    CODEINDEX_BIN_NAME = process.platform === "win32" ? "codeindex.exe" : "codeindex";
+    CODEINDEX_BIN_PATH = join45(CODEINDEX_INSTALL_DIR, CODEINDEX_BIN_NAME);
   }
 });
 
@@ -19834,26 +20434,26 @@ __export(install_skills_exports, {
   skillsSourceDir: () => skillsSourceDir,
   uninstallSkills: () => uninstallSkills
 });
-import { readdirSync as readdirSync31, existsSync as existsSync40, mkdirSync as mkdirSync10, rmSync as rmSync6, cpSync, writeFileSync as writeFileSync11, readFileSync as readFileSync36, statSync as statSync37, realpathSync as realpathSync4 } from "fs";
-import { createHash as createHash14 } from "crypto";
-import { join as join43, basename as basename23 } from "path";
+import { readdirSync as readdirSync31, existsSync as existsSync42, mkdirSync as mkdirSync12, rmSync as rmSync6, cpSync, writeFileSync as writeFileSync13, readFileSync as readFileSync37, statSync as statSync38, realpathSync as realpathSync4 } from "fs";
+import { createHash as createHash15 } from "crypto";
+import { join as join46, basename as basename23 } from "path";
 function skillsSourceDir() {
-  return join43(import.meta.dirname, "..", "skills");
+  return join46(import.meta.dirname, "..", "skills");
 }
 function version() {
   try {
-    return JSON.parse(readFileSync36(new URL("../package.json", import.meta.url), "utf-8")).version || "0.0.0";
+    return JSON.parse(readFileSync37(new URL("../package.json", import.meta.url), "utf-8")).version || "0.0.0";
   } catch {
     return "0.0.0";
   }
 }
 function skillsFingerprint() {
   const src = skillsSourceDir();
-  const h = createHash14("sha256");
+  const h = createHash15("sha256");
   for (const name of bundledSkillNames()) {
-    for (const rel of filesUnder(join43(src, name)).sort()) {
+    for (const rel of filesUnder(join46(src, name)).sort()) {
       h.update(name + "/" + rel);
-      h.update(readFileSync36(join43(src, name, rel)));
+      h.update(readFileSync37(join46(src, name, rel)));
     }
   }
   return h.digest("hex").slice(0, 12);
@@ -19863,7 +20463,7 @@ function filesUnder(dir, prefix = "") {
   for (const e of readdirSync31(dir, { withFileTypes: true })) {
     if (e.name === MARKER) continue;
     const rel = prefix ? `${prefix}/${e.name}` : e.name;
-    if (e.isDirectory()) out.push(...filesUnder(join43(dir, e.name), rel));
+    if (e.isDirectory()) out.push(...filesUnder(join46(dir, e.name), rel));
     else out.push(rel);
   }
   return out;
@@ -19873,8 +20473,8 @@ function skillStamp() {
 }
 function bundledSkillNames() {
   const src = skillsSourceDir();
-  if (!existsSync40(src)) return [];
-  return readdirSync31(src, { withFileTypes: true }).filter((e) => e.isDirectory() && existsSync40(join43(src, e.name, "SKILL.md"))).map((e) => e.name).sort();
+  if (!existsSync42(src)) return [];
+  return readdirSync31(src, { withFileTypes: true }).filter((e) => e.isDirectory() && existsSync42(join46(src, e.name, "SKILL.md"))).map((e) => e.name).sort();
 }
 function realPathOrSelf(p) {
   try {
@@ -19887,7 +20487,7 @@ function claudeSkillTargets() {
   const targets = [];
   const seen = /* @__PURE__ */ new Set();
   for (const home of claudeHomeDirs()) {
-    const dir = join43(home, "skills");
+    const dir = join46(home, "skills");
     const key = realPathOrSelf(dir);
     if (seen.has(key)) continue;
     seen.add(key);
@@ -19898,7 +20498,7 @@ function claudeSkillTargets() {
       dir,
       // Judge each profile on ITS OWN transcripts, not the primary's: a home
       // with no projects/ is a directory someone made, not a Claude install.
-      available: existsSync40(join43(home, "projects"))
+      available: existsSync42(join46(home, "projects"))
     });
   }
   if (targets.length === 0) {
@@ -19921,7 +20521,7 @@ function skillTargets() {
   ];
 }
 function isManaged(dir) {
-  return existsSync40(join43(dir, MARKER));
+  return existsSync42(join46(dir, MARKER));
 }
 function installSkills(opts = {}) {
   const onlyAvailable = opts.onlyAvailable ?? true;
@@ -19938,15 +20538,15 @@ function installSkills(opts = {}) {
       continue;
     }
     for (const name of names) {
-      const dest = join43(t.dir, name);
-      if (existsSync40(dest) && !isManaged(dest)) {
+      const dest = join46(t.dir, name);
+      if (existsSync42(dest) && !isManaged(dest)) {
         skippedUserOwned.push(name);
         continue;
       }
-      mkdirSync10(t.dir, { recursive: true });
+      mkdirSync12(t.dir, { recursive: true });
       rmSync6(dest, { recursive: true, force: true });
-      cpSync(join43(src, name), dest, { recursive: true });
-      writeFileSync11(join43(dest, MARKER), `${stamp}
+      cpSync(join46(src, name), dest, { recursive: true });
+      writeFileSync13(join46(dest, MARKER), `${stamp}
 `);
       installed.push(name);
     }
@@ -19959,13 +20559,13 @@ function uninstallSkills() {
   const perTarget = [];
   for (const t of skillTargets()) {
     const removed = [];
-    if (!existsSync40(t.dir)) {
+    if (!existsSync42(t.dir)) {
       perTarget.push({ id: t.id, label: t.label, removed });
       continue;
     }
     for (const entry of readdirSync31(t.dir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
-      const dir = join43(t.dir, entry.name);
+      const dir = join46(t.dir, entry.name);
       if (isManaged(dir) && (names.has(entry.name) || entry.name.startsWith("chat-recall"))) {
         rmSync6(dir, { recursive: true, force: true });
         removed.push(entry.name);
@@ -19982,10 +20582,10 @@ function skillsNeedRefresh() {
   for (const t of skillTargets()) {
     if (!t.available) continue;
     for (const name of names) {
-      const marker = join43(t.dir, name, MARKER);
-      if (!existsSync40(marker)) return true;
+      const marker = join46(t.dir, name, MARKER);
+      if (!existsSync42(marker)) return true;
       try {
-        if (readFileSync36(marker, "utf-8").trim() !== cur) return true;
+        if (readFileSync37(marker, "utf-8").trim() !== cur) return true;
       } catch {
         return true;
       }
@@ -20000,11 +20600,11 @@ function skillStatus() {
     let installed = 0;
     let ver = null;
     for (const name of names) {
-      const marker = join43(t.dir, name, MARKER);
-      if (existsSync40(marker)) {
+      const marker = join46(t.dir, name, MARKER);
+      if (existsSync42(marker)) {
         installed++;
         try {
-          ver = readFileSync36(marker, "utf-8").trim();
+          ver = readFileSync37(marker, "utf-8").trim();
         } catch {
         }
       }
@@ -20033,7 +20633,7 @@ __export(repair_exports, {
   repairSession: () => repairSession,
   repairSessions: () => repairSessions
 });
-import { createHash as createHash15 } from "node:crypto";
+import { createHash as createHash16 } from "node:crypto";
 function resolveEndpoints(only) {
   const settings2 = loadSettings();
   const creds = loadAllCredentials();
@@ -20076,11 +20676,11 @@ async function repairSession(id, opts = {}) {
   const log6 = (m) => {
     if (opts.verbose) console.error(`  [repair ${id}] ${m}`);
   };
-  const candidates = [];
+  const candidates2 = [];
   const localShadow = readShadowContainer(tool, rawId);
   if (localShadow) {
     try {
-      candidates.push({ container: localShadow, messages: parseTranscriptFromContainer(localShadow).messages.length, source: "local-shadow" });
+      candidates2.push({ container: localShadow, messages: parseTranscriptFromContainer(localShadow).messages.length, source: "local-shadow" });
     } catch {
     }
   }
@@ -20092,15 +20692,15 @@ async function repairSession(id, opts = {}) {
     if (arch?.gzB64) {
       try {
         const container = gunzipContainer(Buffer.from(arch.gzB64, "base64"));
-        if (container) candidates.push({ container, messages: parseTranscriptFromContainer(container).messages.length, source: ep.url });
+        if (container) candidates2.push({ container, messages: parseTranscriptFromContainer(container).messages.length, source: ep.url });
       } catch {
       }
     }
   }
-  if (candidates.length === 0) {
+  if (candidates2.length === 0) {
     return { sessionId: id, status: "no-archive", fullestMessages: 0, fullestSource: "", pushed: [], note: "no shadow or server archive found" };
   }
-  const fullest = candidates.reduce((a, b) => b.messages > a.messages ? b : a);
+  const fullest = candidates2.reduce((a, b) => b.messages > a.messages ? b : a);
   log6(`fullest archive = ${fullest.messages} msg(s) from ${fullest.source}`);
   if (opts.dryRun) {
     const needy2 = endpoints.filter((ep) => (currentOnServer.get(ep.url) ?? 0) < fullest.messages || opts.force);
@@ -20202,7 +20802,7 @@ async function repairAll(opts = {}) {
     if (!page?.hasMore || sessions.length === 0) break;
   }
   log6(`window=${sinceHours}h \u2192 ${ids.length} session(s) to check on ${primary.url}`);
-  const candidates = [];
+  const candidates2 = [];
   let scanned = 0;
   for (const id of ids) {
     scanned++;
@@ -20215,9 +20815,9 @@ async function repairAll(opts = {}) {
     if (archiveMsgs <= current) continue;
     const r = await repairSession(id, { dryRun: !opts.apply, verbose: opts.verbose, server: opts.server });
     if (r.status === "already-full") continue;
-    candidates.push(r);
+    candidates2.push(r);
   }
-  return { scanned, candidates, discoveryServer: primary.url };
+  return { scanned, candidates: candidates2, discoveryServer: primary.url };
 }
 var hashPath2;
 var init_repair = __esm({
@@ -20229,7 +20829,7 @@ var init_repair = __esm({
     init_http();
     init_sync_client();
     init_sync_client();
-    hashPath2 = (p) => p ? "p_" + createHash15("sha256").update(p).digest("hex").slice(0, 12) : "";
+    hashPath2 = (p) => p ? "p_" + createHash16("sha256").update(p).digest("hex").slice(0, 12) : "";
   }
 });
 
@@ -20449,11 +21049,11 @@ var verify_repair_exports = {};
 __export(verify_repair_exports, {
   forceFullResync: () => forceFullResync
 });
-import { copyFileSync as copyFileSync3, existsSync as existsSync41 } from "fs";
+import { copyFileSync as copyFileSync3, existsSync as existsSync43 } from "fs";
 function forceFullResync(server, sessionIds) {
   if (sessionIds.length === 0) return 0;
   const path = ledgerFilePath();
-  if (existsSync41(path)) {
+  if (existsSync43(path)) {
     const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "").replace(/-/g, "");
     try {
       copyFileSync3(path, `${path}.bak-${stamp}`);
@@ -20591,15 +21191,17 @@ var init_prompts = __esm({
 var collector_exports = {};
 __export(collector_exports, {
   COLLECTOR_VERSION: () => COLLECTOR_VERSION,
+  GENERATED_PATTERNS: () => GENERATED_PATTERNS,
   collectCode: () => collectCode,
+  isGenerated: () => isGenerated,
   isJunkWorkspacePath: () => isJunkWorkspacePath,
   isSecretRule: () => isSecretRule,
   resolveCodeindexBin: () => resolveCodeindexBin
 });
 import { spawn } from "node:child_process";
 import { execSync as execSync4 } from "node:child_process";
-import { readFileSync as readFileSync37 } from "node:fs";
-import { join as join44, basename as basename25 } from "node:path";
+import { readFileSync as readFileSync38 } from "node:fs";
+import { join as join47, basename as basename25 } from "node:path";
 async function resolveCodeindexBin(autoInstall = true) {
   let st = checkCodeindexStatus();
   if (!st.installed && autoInstall)
@@ -20686,10 +21288,11 @@ function isSecretRule(rule) {
   return /secret|password|credential|key|token|auth/i.test(rule);
 }
 function isJunkWorkspacePath(ws) {
-  return /(^|\/)(scratchpad|\.cache|node_modules|\.git|tmp)(\/|$)|claude-1000/i.test(ws);
+  const norm = ws.replace(/\\/g, "/");
+  return /(^|\/)(scratchpad|\.cache|node_modules|\.git|tmp)(\/|$)|claude-1000/i.test(norm);
 }
 async function collectCode(opts) {
-  const ws = opts.workspace.replace(/\/+$/, "");
+  const ws = opts.workspace.replace(/[/\\]+$/, "");
   const log6 = opts.log ?? (() => {
   });
   if (isJunkWorkspacePath(ws)) {
@@ -20697,9 +21300,11 @@ async function collectCode(opts) {
   }
   const bin = opts.binPath ?? await resolveCodeindexBin(opts.autoInstall ?? true);
   const projectId = resolveProjectId(ws).id || `path:${ws}`;
-  const wsPrefix = ws + "/";
+  const wsNorm = ws.replace(/\\/g, "/");
+  const wsPrefix = wsNorm + "/";
   const rel = (p) => {
-    let r = p.startsWith(wsPrefix) ? p.slice(wsPrefix.length) : p;
+    const n = p.replace(/\\/g, "/");
+    let r = n.startsWith(wsPrefix) ? n.slice(wsPrefix.length) : n;
     if (r.startsWith("./"))
       r = r.slice(2);
     return r;
@@ -20760,7 +21365,7 @@ async function collectCode(opts) {
   }
   const complexity = (r) => {
     try {
-      const txt = readFileSync37(join44(ws, r), "utf8");
+      const txt = readFileSync38(join47(ws, r), "utf8");
       if (txt.length > 2e6)
         return 1;
       const m = txt.match(CF_RE);
@@ -21344,7 +21949,7 @@ async function collectCode(opts) {
   void health;
   return { project, findings, hotspots, actions };
 }
-var COLLECTOR_VERSION, ANALYSES, GENERATED, CF_RE, DEPTH, MCP_OUT_MAX_BYTES, call, COMMON_SYMBOL_NAMES;
+var COLLECTOR_VERSION, ANALYSES, GENERATED, CF_RE, DEPTH, MCP_OUT_MAX_BYTES, call, GENERATED_PATTERNS, COMMON_SYMBOL_NAMES;
 var init_collector = __esm({
   "../engine/dist/core/code/collector.js"() {
     "use strict";
@@ -21386,7 +21991,13 @@ var init_collector = __esm({
       "/vendor/",
       "/third_party/",
       "/site-packages/",
+      // Lockfiles. '.lock' alone catches yarn.lock, Cargo.lock, poetry.lock and
+      // composer.lock, and MISSES the two biggest ones in a JS repo —
+      // package-lock.json and pnpm-lock.yaml are named '-lock.<ext>'. Found by
+      // replacing this file's mirror test with one that calls the real predicate.
       ".lock",
+      "-lock.json",
+      "-lock.yaml",
       "/dist/",
       "/build/",
       "/out/",
@@ -21403,6 +22014,7 @@ var init_collector = __esm({
     DEPTH = 2;
     MCP_OUT_MAX_BYTES = 64 * 1024 * 1024;
     call = (id, name, args = {}) => ({ jsonrpc: "2.0", id, method: "tools/call", params: { name, arguments: args } });
+    GENERATED_PATTERNS = GENERATED;
     COMMON_SYMBOL_NAMES = /* @__PURE__ */ new Set([
       "error",
       "err",
@@ -21468,11 +22080,11 @@ var init_collector = __esm({
 });
 
 // ../engine/dist/core/artifact-codec.js
-import { readFileSync as readFileSync38 } from "fs";
-import { join as join45 } from "path";
-import { homedir as homedir16 } from "os";
+import { readFileSync as readFileSync39 } from "fs";
+import { join as join48 } from "path";
+import { homedir as homedir17 } from "os";
 function readCommand(filePath, format) {
-  const content = readFileSync38(filePath, "utf-8");
+  const content = readFileSync39(filePath, "utf-8");
   if (format === "toml") {
     const t = parseScalarToml(content);
     return { name: t.name || base(filePath), description: t.description || "", body: t.prompt || "" };
@@ -21481,7 +22093,7 @@ function readCommand(filePath, format) {
   return { name: fm.name || base(filePath), description: fm.description || "", body: body.trim() };
 }
 function readAgent(filePath, format) {
-  const content = readFileSync38(filePath, "utf-8");
+  const content = readFileSync39(filePath, "utf-8");
   if (format === "toml") {
     const t = parseScalarToml(content);
     return {
@@ -21494,35 +22106,35 @@ function readAgent(filePath, format) {
   return { name: fm.name || base(filePath), description: fm.description || "", tools: fm.tools, body: body.trim() };
 }
 function readInstructions(filePath, name) {
-  const content = readFileSync38(filePath, "utf-8");
+  const content = readFileSync39(filePath, "utf-8");
   return { name, description: "", body: content };
 }
 function commandPath(tool, name) {
   switch (tool) {
     case "claude":
-      return join45(claudeBackend.commandsDir(), `${name}.md`);
+      return join48(claudeBackend.commandsDir(), `${name}.md`);
     case "agy":
-      return join45(join45(agyBackend.homeDir(), "commands"), `${name}.toml`);
+      return join48(join48(agyBackend.homeDir(), "commands"), `${name}.toml`);
     case "gemini":
-      return join45(geminiBackend.commandsDir(), `${name}.toml`);
+      return join48(geminiBackend.commandsDir(), `${name}.toml`);
     case "opencode":
-      return join45(opencodeBackend.commandsDir(), `${name}.md`);
+      return join48(opencodeBackend.commandsDir(), `${name}.md`);
     case "codex":
-      return join45(codexBackend.promptsDir(), `${name}.md`);
+      return join48(codexBackend.promptsDir(), `${name}.md`);
   }
 }
 function agentPath(tool, name) {
   switch (tool) {
     case "claude":
-      return join45(claudeBackend.agentsDir(), `${name}.md`);
+      return join48(claudeBackend.agentsDir(), `${name}.md`);
     case "agy":
-      return join45(join45(agyBackend.homeDir(), "agents"), `${name}.md`);
+      return join48(join48(agyBackend.homeDir(), "agents"), `${name}.md`);
     case "gemini":
-      return join45(geminiBackend.agentsDir(), `${name}.md`);
+      return join48(geminiBackend.agentsDir(), `${name}.md`);
     case "opencode":
-      return join45(opencodeBackend.agentsDir(), `${name}.md`);
+      return join48(opencodeBackend.agentsDir(), `${name}.md`);
     case "codex":
-      return join45(codexBackend.agentsDir(), `${name}.toml`);
+      return join48(codexBackend.agentsDir(), `${name}.toml`);
   }
 }
 function instructionsFilename(tool) {
@@ -21540,18 +22152,18 @@ function instructionsFilename(tool) {
 function instructionsPath(tool, projectPath) {
   const file = instructionsFilename(tool);
   if (projectPath)
-    return join45(projectPath, file);
+    return join48(projectPath, file);
   switch (tool) {
     case "claude":
-      return join45(claudeBackend.homeDir(), file);
+      return join48(claudeBackend.homeDir(), file);
     case "agy":
-      return join45(agyBackend.homeDir(), file);
+      return join48(agyBackend.homeDir(), file);
     case "gemini":
-      return join45(geminiBackend.homeDir(), file);
+      return join48(geminiBackend.homeDir(), file);
     case "codex":
-      return join45(codexBackend.homeDir(), file);
+      return join48(codexBackend.homeDir(), file);
     case "opencode":
-      return join45(homedir16(), ".config", "opencode", file);
+      return join48(homedir17(), ".config", "opencode", file);
   }
 }
 function emit(type, art, toTool, projectPath) {
@@ -21614,9 +22226,9 @@ __export(toolkit_sync_exports, {
   supportedTargetsFor: () => supportedTargetsFor,
   writeMcpEntry: () => writeMcpEntry
 });
-import { existsSync as existsSync42, mkdirSync as mkdirSync11, readFileSync as readFileSync39, writeFileSync as writeFileSync12, cpSync as cpSync2 } from "fs";
-import { dirname as dirname17, join as join46, basename as basename26 } from "path";
-import { homedir as homedir17 } from "os";
+import { existsSync as existsSync44, mkdirSync as mkdirSync13, readFileSync as readFileSync40, writeFileSync as writeFileSync14, cpSync as cpSync2 } from "fs";
+import { dirname as dirname19, join as join49, basename as basename26 } from "path";
+import { homedir as homedir18 } from "os";
 function supportedTargetsFor(type) {
   return SUPPORTED_TARGETS[type];
 }
@@ -21657,7 +22269,7 @@ function skillsDirFor(tool) {
     case "claude":
       return claudeBackend.skillsDir();
     case "agy":
-      return join46(agyBackend.homeDir(), "skills");
+      return join49(agyBackend.homeDir(), "skills");
     case "gemini":
       return geminiBackend.skillsDir();
     case "opencode":
@@ -21667,15 +22279,15 @@ function skillsDirFor(tool) {
   }
 }
 function copySkill(row, toTool) {
-  const skillDir = row.extra.skillDir || dirname17(row.filePath);
-  if (!existsSync42(skillDir))
+  const skillDir = row.extra.skillDir || dirname19(row.filePath);
+  if (!existsSync44(skillDir))
     return { ok: false, status: 404, error: `Source dir missing: ${skillDir}` };
   const name = row.extra.skillName || basename26(skillDir);
-  const targetDir = join46(skillsDirFor(toTool), name);
-  if (existsSync42(targetDir))
+  const targetDir = join49(skillsDirFor(toTool), name);
+  if (existsSync44(targetDir))
     return { ok: false, status: 409, error: `Already exists: ${targetDir}` };
   try {
-    mkdirSync11(dirname17(targetDir), { recursive: true });
+    mkdirSync13(dirname19(targetDir), { recursive: true });
     cpSync2(skillDir, targetDir, { recursive: true });
     return { ok: true, targetPath: targetDir };
   } catch (e) {
@@ -21683,29 +22295,29 @@ function copySkill(row, toTool) {
   }
 }
 function readMcpEntry(tool, name) {
-  const home = homedir17();
+  const home = homedir18();
   const tries = [];
   if (tool === "claude") {
-    tries.push({ path: join46(home, ".mcp.json"), key: "mcpServers" });
-    tries.push({ path: join46(home, ".claude.json"), key: "mcpServers" });
+    tries.push({ path: join49(home, ".mcp.json"), key: "mcpServers" });
+    tries.push({ path: join49(home, ".claude.json"), key: "mcpServers" });
   } else if (tool === "gemini") {
-    tries.push({ path: join46(home, ".gemini", "settings.json"), key: "mcpServers" });
+    tries.push({ path: join49(home, ".gemini", "settings.json"), key: "mcpServers" });
   } else if (tool === "agy") {
-    tries.push({ path: join46(home, ".gemini", "config", "mcp_config.json"), key: "mcpServers" });
+    tries.push({ path: join49(home, ".gemini", "config", "mcp_config.json"), key: "mcpServers" });
   } else if (tool === "opencode") {
-    tries.push({ path: join46(home, ".config", "opencode", "opencode.json"), key: "mcp" });
-    tries.push({ path: join46(home, ".config", "opencode", "config.json"), key: "mcp" });
-    tries.push({ path: join46(home, ".opencode", "config.json"), key: "mcp" });
+    tries.push({ path: join49(home, ".config", "opencode", "opencode.json"), key: "mcp" });
+    tries.push({ path: join49(home, ".config", "opencode", "config.json"), key: "mcp" });
+    tries.push({ path: join49(home, ".opencode", "config.json"), key: "mcp" });
   } else if (tool === "codex") {
-    const entry = readCodexMcpEntry(join46(home, ".codex", "config.toml"), name);
+    const entry = readCodexMcpEntry(join49(home, ".codex", "config.toml"), name);
     if (entry)
       return entry;
   }
   for (const t of tries) {
-    if (!existsSync42(t.path))
+    if (!existsSync44(t.path))
       continue;
     try {
-      const cfg = JSON.parse(readFileSync39(t.path, "utf-8"));
+      const cfg = JSON.parse(readFileSync40(t.path, "utf-8"));
       const block = cfg[t.key] || {};
       if (block[name])
         return block[name];
@@ -21715,11 +22327,11 @@ function readMcpEntry(tool, name) {
   return null;
 }
 function readCodexMcpEntry(path, target) {
-  if (!existsSync42(path))
+  if (!existsSync44(path))
     return null;
   let content;
   try {
-    content = readFileSync39(path, "utf-8");
+    content = readFileSync40(path, "utf-8");
   } catch {
     return null;
   }
@@ -21769,8 +22381,8 @@ function readCodexMcpEntry(path, target) {
 }
 function writeCodexMcpEntry(path, name, entry) {
   let content = "";
-  if (existsSync42(path))
-    content = readFileSync39(path, "utf-8");
+  if (existsSync44(path))
+    content = readFileSync40(path, "utf-8");
   const header = `[mcp_servers.${name}]`;
   if (content.includes(header))
     return false;
@@ -21799,14 +22411,14 @@ function writeCodexMcpEntry(path, name, entry) {
     for (const [k, v] of Object.entries(entry.env))
       lines.push(`${k} = ${escape(String(v))}`);
   }
-  mkdirSync11(dirname17(path), { recursive: true });
-  writeFileSync12(path, content + lines.join("\n") + "\n");
+  mkdirSync13(dirname19(path), { recursive: true });
+  writeFileSync14(path, content + lines.join("\n") + "\n");
   return true;
 }
 function writeMcpEntry(toTool, name, entry) {
-  const home = homedir17();
+  const home = homedir18();
   if (toTool === "codex") {
-    const path2 = join46(home, ".codex", "config.toml");
+    const path2 = join49(home, ".codex", "config.toml");
     if (!writeCodexMcpEntry(path2, name, entry))
       return { ok: false, status: 409, error: `MCP "${name}" already exists in ${path2}.` };
     return { ok: true, targetPath: path2 };
@@ -21814,27 +22426,27 @@ function writeMcpEntry(toTool, name, entry) {
   let path;
   let key;
   if (toTool === "claude") {
-    path = join46(home, ".mcp.json");
+    path = join49(home, ".mcp.json");
     key = "mcpServers";
   } else if (toTool === "gemini") {
-    path = join46(home, ".gemini", "settings.json");
+    path = join49(home, ".gemini", "settings.json");
     key = "mcpServers";
   } else if (toTool === "agy") {
-    path = join46(home, ".gemini", "config", "mcp_config.json");
+    path = join49(home, ".gemini", "config", "mcp_config.json");
     key = "mcpServers";
   } else {
-    path = join46(home, ".config", "opencode", "opencode.json");
+    path = join49(home, ".config", "opencode", "opencode.json");
     key = "mcp";
   }
   let cfg = {};
-  if (existsSync42(path)) {
+  if (existsSync44(path)) {
     try {
-      cfg = JSON.parse(readFileSync39(path, "utf-8"));
+      cfg = JSON.parse(readFileSync40(path, "utf-8"));
     } catch {
       return { ok: false, status: 500, error: `Target config is malformed: ${path}` };
     }
   } else {
-    mkdirSync11(dirname17(path), { recursive: true });
+    mkdirSync13(dirname19(path), { recursive: true });
   }
   cfg[key] = cfg[key] || {};
   if (cfg[key][name])
@@ -21861,7 +22473,7 @@ function writeMcpEntry(toTool, name, entry) {
   }
   cfg[key][name] = normalized;
   try {
-    writeFileSync12(path, JSON.stringify(cfg, null, 2));
+    writeFileSync14(path, JSON.stringify(cfg, null, 2));
     return { ok: true, targetPath: path };
   } catch (e) {
     return { ok: false, status: 500, error: e instanceof Error ? e.message : "write failed" };
@@ -21891,11 +22503,11 @@ function copyCommandOrAgent(type, row, toTool) {
     return { ok: false, status: 404, error: `Source unreadable: ${e instanceof Error ? e.message : "failed"}` };
   }
   const out = emit(type, art, toTool);
-  if (existsSync42(out.path))
+  if (existsSync44(out.path))
     return { ok: false, status: 409, error: `Already exists: ${out.path}` };
   try {
-    mkdirSync11(dirname17(out.path), { recursive: true });
-    writeFileSync12(out.path, out.content);
+    mkdirSync13(dirname19(out.path), { recursive: true });
+    writeFileSync14(out.path, out.content);
     return { ok: true, targetPath: out.path };
   } catch (e) {
     return { ok: false, status: 500, error: e instanceof Error ? e.message : "write failed" };
@@ -21911,11 +22523,11 @@ function copyInstructions(row, toTool) {
     return { ok: false, status: 404, error: `Source unreadable: ${e instanceof Error ? e.message : "failed"}` };
   }
   const out = emit("instructions", art, toTool, row.projectPath || void 0);
-  if (existsSync42(out.path))
+  if (existsSync44(out.path))
     return { ok: false, status: 409, error: `Already exists: ${out.path}` };
   try {
-    mkdirSync11(dirname17(out.path), { recursive: true });
-    writeFileSync12(out.path, out.content);
+    mkdirSync13(dirname19(out.path), { recursive: true });
+    writeFileSync14(out.path, out.content);
     return { ok: true, targetPath: out.path };
   } catch (e) {
     return { ok: false, status: 500, error: e instanceof Error ? e.message : "write failed" };
@@ -22087,9 +22699,9 @@ __export(project_tasks_exports, {
   pushProjectTaskStatuses: () => pushProjectTaskStatuses,
   renderTeamTasksMd: () => renderTeamTasksMd
 });
-import { existsSync as existsSync43, readFileSync as readFileSync40, writeFileSync as writeFileSync13, mkdirSync as mkdirSync12, statSync as statSync38 } from "node:fs";
-import { join as join47, dirname as dirname18 } from "node:path";
-import { homedir as homedir18 } from "node:os";
+import { existsSync as existsSync45, readFileSync as readFileSync41, writeFileSync as writeFileSync15, mkdirSync as mkdirSync14, statSync as statSync39 } from "node:fs";
+import { join as join50, dirname as dirname20 } from "node:path";
+import { homedir as homedir19 } from "node:os";
 function isTeamTaskStatus(v) {
   return !!v && TEAM_STATUSES.has(v);
 }
@@ -22104,7 +22716,7 @@ function reconcile(kind, was, token, checked) {
   const done = kind === "secret" ? "rotated" : "done";
   if (token && token !== was) return token;
   if (kind === "team") {
-    if (checked && was !== "done") return "done";
+    if (checked && was === "todo") return "in_progress";
     if (!checked && was === "done") return "todo";
     return token ?? was;
   }
@@ -22139,22 +22751,22 @@ function parseTaskFile(content) {
   return out;
 }
 function ledgerPath2() {
-  return join47(homedir18(), ".chat-recall", "project-tasks-ledger.json");
+  return join50(homedir19(), ".chat-recall", "project-tasks-ledger.json");
 }
 function readLedger() {
   try {
-    return JSON.parse(readFileSync40(ledgerPath2(), "utf8"));
+    return JSON.parse(readFileSync41(ledgerPath2(), "utf8"));
   } catch {
     return {};
   }
 }
 function writeLedger(l) {
   try {
-    mkdirSync12(dirname18(ledgerPath2()), { recursive: true });
+    mkdirSync14(dirname20(ledgerPath2()), { recursive: true });
   } catch {
   }
   try {
-    writeFileSync13(ledgerPath2(), JSON.stringify(l));
+    writeFileSync15(ledgerPath2(), JSON.stringify(l));
   } catch {
   }
 }
@@ -22172,18 +22784,18 @@ async function pushProjectTaskStatuses(base2, authHeaders, opts = {}) {
       continue;
     }
     for (const project of projects) {
-      const file = join47(project, fk.filename);
-      if (!existsSync43(file)) continue;
+      const file = join50(project, fk.filename);
+      if (!existsSync45(file)) continue;
       let mtime;
       try {
-        mtime = statSync38(file).mtimeMs;
+        mtime = statSync39(file).mtimeMs;
       } catch {
         continue;
       }
       if (ledger[file] === mtime) continue;
       let changed;
       try {
-        changed = parseTaskFile(readFileSync40(file, "utf8")).filter((t) => t.kind === fk.kind);
+        changed = parseTaskFile(readFileSync41(file, "utf8")).filter((t) => t.kind === fk.kind);
       } catch {
         continue;
       }
@@ -22216,7 +22828,8 @@ function renderTeamTasksMd(tasks2) {
     "# Team tasks",
     "",
     "<!-- Managed by chat-recall. Tick a box or edit the `status:` token, then run",
-    "     `chat-recall tasks push`. Statuses: todo \xB7 in_progress \xB7 blocked \xB7 done. -->",
+    "     `chat-recall tasks push`. Statuses: todo \xB7 in_progress \xB7 done \xB7 rejected.",
+    "     A tick claims a task; only the session that does the work can close it. -->",
     ""
   ];
   if (tasks2.length === 0) lines.push("_No tasks assigned to you here._");
@@ -22236,7 +22849,7 @@ var init_project_tasks = __esm({
     init_http();
     init_secret_task_status();
     init_code_task_status();
-    TEAM_STATUSES = /* @__PURE__ */ new Set(["todo", "in_progress", "blocked", "done"]);
+    TEAM_STATUSES = /* @__PURE__ */ new Set(["todo", "in_progress", "done", "rejected"]);
     ANCHOR_RE = /<!--\s*cr-(secret|task)\b(?:\s+kind=([a-z]+))?\s+id=([A-Za-z0-9_-]+)(?:\s+was=([a-z_-]+))?\s*-->/;
     CHECKBOX_RE = /^\s*-\s*\[([ xX])\]/;
     STATUS_TOKEN_RE = /status:\s*`?([a-z_-]+)`?/i;
@@ -22252,18 +22865,18 @@ var intent_drain_exports = {};
 __export(intent_drain_exports, {
   drainSyncIntents: () => drainSyncIntents
 });
-import { existsSync as existsSync44, readFileSync as readFileSync41, writeFileSync as writeFileSync14, appendFileSync, mkdirSync as mkdirSync13 } from "node:fs";
-import { join as join48 } from "node:path";
-import { homedir as homedir19 } from "node:os";
+import { existsSync as existsSync46, readFileSync as readFileSync42, writeFileSync as writeFileSync16, appendFileSync, mkdirSync as mkdirSync15 } from "node:fs";
+import { join as join51 } from "node:path";
+import { homedir as homedir20 } from "node:os";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-import { dirname as dirname19 } from "node:path";
+import { dirname as dirname21 } from "node:path";
 function applyCodeRecommendation(intent) {
   try {
     const meta = JSON.parse(intent.name || "{}");
     if (intent.artifact_type === "write_tasks_file") {
       if (!meta.rootPath || !meta.content) return { status: "error", result: JSON.stringify({ error: "missing rootPath or content" }) };
-      const file = join48(meta.rootPath, meta.filename || "CODE_TASKS.md");
-      writeFileSync14(file, meta.content);
+      const file = join51(meta.rootPath, meta.filename || "CODE_TASKS.md");
+      writeFileSync16(file, meta.content);
       return { status: "done", result: JSON.stringify({ wrote: file }) };
     }
     if (intent.artifact_type === "append_claude_md") {
@@ -22272,24 +22885,24 @@ function applyCodeRecommendation(intent) {
       if (!text) return { status: "error", result: JSON.stringify({ error: "missing text" }) };
       let file;
       if (isGlobal) {
-        const dir = join48(homedir19(), ".claude");
+        const dir = join51(homedir20(), ".claude");
         try {
-          mkdirSync13(dir, { recursive: true });
+          mkdirSync15(dir, { recursive: true });
         } catch {
         }
-        file = join48(dir, "CLAUDE.md");
+        file = join51(dir, "CLAUDE.md");
       } else {
         if (!meta.rootPath) return { status: "error", result: JSON.stringify({ error: "missing rootPath" }) };
-        file = join48(meta.rootPath, "CLAUDE.md");
+        file = join51(meta.rootPath, "CLAUDE.md");
       }
-      const existing = existsSync44(file) ? readFileSync41(file, "utf8") : "";
+      const existing = existsSync46(file) ? readFileSync42(file, "utf8") : "";
       if (existing.includes(text)) return { status: "done", result: JSON.stringify({ skipped: "rule already present", file }) };
       const block = `${existing && !existing.endsWith("\n") ? "\n" : ""}
 ## Rule (added by chat-recall recommendation)
 ${text}
 `;
       if (existing) appendFileSync(file, block);
-      else writeFileSync14(file, `# ${meta.rootPath?.split("/").pop() || "Global"} instructions
+      else writeFileSync16(file, `# ${meta.rootPath?.split("/").pop() || "Global"} instructions
 ${block}`);
       return { status: "done", result: JSON.stringify({ appended: file }) };
     }
@@ -22388,11 +23001,11 @@ var init_intent_drain = __esm({
     init_project_tasks();
     ownVersion2 = "0.0.0";
     try {
-      const dir = dirname19(fileURLToPath2(import.meta.url));
-      ownVersion2 = JSON.parse(readFileSync41(join48(dir, "../package.json"), "utf-8")).version || ownVersion2;
+      const dir = dirname21(fileURLToPath2(import.meta.url));
+      ownVersion2 = JSON.parse(readFileSync42(join51(dir, "../package.json"), "utf-8")).version || ownVersion2;
     } catch {
       try {
-        if (true) ownVersion2 = "0.5.5";
+        if (true) ownVersion2 = "0.5.6";
       } catch {
       }
     }
@@ -22593,43 +23206,43 @@ var team_merge_exports = {};
 __export(team_merge_exports, {
   mergePullResult: () => mergePullResult
 });
-import { existsSync as existsSync45, mkdirSync as mkdirSync14, readFileSync as readFileSync42, rmSync as rmSync7, writeFileSync as writeFileSync15, statSync as statSync39 } from "fs";
-import { dirname as dirname20, join as join49 } from "path";
-import { createHash as createHash16 } from "crypto";
+import { existsSync as existsSync47, mkdirSync as mkdirSync16, readFileSync as readFileSync43, rmSync as rmSync7, writeFileSync as writeFileSync17, statSync as statSync40 } from "fs";
+import { dirname as dirname22, join as join52 } from "path";
+import { createHash as createHash17 } from "crypto";
 function installPathFor(art, tool) {
   switch (art.type) {
     case "skill":
       switch (tool) {
         case "claude":
-          return join49(claudeBackend.skillsDir(), art.name, "SKILL.md");
+          return join52(claudeBackend.skillsDir(), art.name, "SKILL.md");
         case "agy":
         case "gemini":
-          return join49(geminiBackend.skillsDir(), art.name, "SKILL.md");
+          return join52(geminiBackend.skillsDir(), art.name, "SKILL.md");
         case "opencode":
-          return join49(opencodeBackend.skillsDir(), art.name, "SKILL.md");
+          return join52(opencodeBackend.skillsDir(), art.name, "SKILL.md");
         // User skills go to ~/.codex/skills (NOT .system, which is OpenAI's bundle).
         case "codex":
-          return join49(codexBackend.skillsDir(), art.name, "SKILL.md");
+          return join52(codexBackend.skillsDir(), art.name, "SKILL.md");
       }
       break;
     case "agent":
       if (tool === "claude")
-        return join49(claudeBackend.agentsDir(), `${art.name}.md`);
+        return join52(claudeBackend.agentsDir(), `${art.name}.md`);
       return null;
     case "command":
       if (tool === "claude")
-        return join49(claudeBackend.commandsDir(), `${art.name}.md`);
+        return join52(claudeBackend.commandsDir(), `${art.name}.md`);
       return null;
     case "hook":
       if (tool === "claude")
-        return join49(claudeBackend.homeDir(), "chat-recall-hooks", `${art.name}.json`);
+        return join52(claudeBackend.homeDir(), "chat-recall-hooks", `${art.name}.json`);
       return null;
     case "plan":
       switch (tool) {
         case "claude":
-          return join49(claudeBackend.plansDir(), `${art.name}.md`);
+          return join52(claudeBackend.plansDir(), `${art.name}.md`);
         case "opencode":
-          return join49(opencodeBackend.plansDir(), `${art.name}.md`);
+          return join52(opencodeBackend.plansDir(), `${art.name}.md`);
         case "agy":
         case "gemini":
           return null;
@@ -22639,11 +23252,11 @@ function installPathFor(art, tool) {
       }
       break;
     case "instructions":
-      return join49(getDataDir(), "team-instructions", tool, `${art.name}.md`);
+      return join52(getDataDir(), "team-instructions", tool, `${art.name}.md`);
     case "mcp":
-      return join49(getDataDir(), "team-mcps", `${art.name}.json`);
+      return join52(getDataDir(), "team-mcps", `${art.name}.json`);
     case "plugin":
-      return join49(getDataDir(), "team-plugins", tool, art.name, "manifest.json");
+      return join52(getDataDir(), "team-plugins", tool, art.name, "manifest.json");
   }
   return null;
 }
@@ -22669,20 +23282,20 @@ async function mergePullResult(opts) {
       continue;
     }
     const body = Buffer.from(a.bodyB64, "base64");
-    const sha = createHash16("sha256").update(body).digest("hex");
+    const sha = createHash17("sha256").update(body).digest("hex");
     for (const tool of targets) {
       const path = installPathFor(a, tool);
       if (!path)
         continue;
       try {
         const existing = readFileIfExists(path);
-        if (existing && createHash16("sha256").update(existing).digest("hex") === sha) {
+        if (existing && createHash17("sha256").update(existing).digest("hex") === sha) {
           report.skipped.push({ artifactId: a.id, path, reason: "unchanged" });
           pending.push({ artifactId: a.id, tool, artifactType: a.type, artifactName: a.name, sha256: sha, installedAt: Date.now() });
           continue;
         }
-        mkdirSync14(dirname20(path), { recursive: true });
-        writeFileSync15(path, body);
+        mkdirSync16(dirname22(path), { recursive: true });
+        writeFileSync17(path, body);
         pending.push({ artifactId: a.id, tool, artifactType: a.type, artifactName: a.name, sha256: sha, installedAt: Date.now() });
         report.written.push({ artifactId: a.id, path });
       } catch (err) {
@@ -22703,7 +23316,7 @@ async function mergePullResult(opts) {
       if (!path)
         continue;
       try {
-        if (existsSync45(path))
+        if (existsSync47(path))
           rmSync7(path, { force: true });
         await teamInstallsForget(id, row.tool);
         report.removed.push({ artifactId: id, path });
@@ -22721,12 +23334,12 @@ async function mergePullResult(opts) {
 }
 function readFileIfExists(path) {
   try {
-    if (!existsSync45(path))
+    if (!existsSync47(path))
       return null;
-    const s = statSync39(path);
+    const s = statSync40(path);
     if (!s.isFile())
       return null;
-    return readFileSync42(path);
+    return readFileSync43(path);
   } catch {
     return null;
   }
@@ -22805,8 +23418,8 @@ var init_vault_crypto = __esm({
 });
 
 // ../engine/dist/core/vault-source.js
-import { existsSync as existsSync46, readdirSync as readdirSync32, statSync as statSync40 } from "fs";
-import { extname, join as join50 } from "path";
+import { existsSync as existsSync48, readdirSync as readdirSync32, statSync as statSync41 } from "fs";
+import { extname, join as join53 } from "path";
 function* walkVaultSources() {
   const t = loadSettings().team.vault;
   const include2 = new Set(t.syncTools);
@@ -22821,7 +23434,7 @@ function* walkVaultSources() {
 }
 function safeStat(path) {
   try {
-    const s = statSync40(path);
+    const s = statSync41(path);
     if (!s.isFile())
       return null;
     return { mtimeMs: s.mtimeMs, size: s.size };
@@ -22831,7 +23444,7 @@ function safeStat(path) {
 }
 function* walkClaude() {
   const root = claudeBackend.projectsDir();
-  if (!existsSync46(root))
+  if (!existsSync48(root))
     return;
   let projectDirs = [];
   try {
@@ -22842,8 +23455,8 @@ function* walkClaude() {
   for (const proj of projectDirs) {
     if (proj.startsWith("."))
       continue;
-    const projectPath = "/" + proj.replace(/^-/, "").replace(/-/g, "/");
-    const projDir = join50(root, proj);
+    const projectPath = decodeProjectDirName(proj);
+    const projDir = join53(root, proj);
     let entries = [];
     try {
       entries = readdirSync32(projDir);
@@ -22853,7 +23466,7 @@ function* walkClaude() {
     for (const f of entries) {
       if (extname(f) !== ".jsonl")
         continue;
-      const path = join50(projDir, f);
+      const path = join53(projDir, f);
       const s = safeStat(path);
       if (!s)
         continue;
@@ -22864,7 +23477,7 @@ function* walkClaude() {
 }
 function* walkGemini() {
   const tmp = geminiBackend.tmpDir();
-  if (!existsSync46(tmp))
+  if (!existsSync48(tmp))
     return;
   let hashDirs = [];
   try {
@@ -22873,8 +23486,8 @@ function* walkGemini() {
     return;
   }
   for (const hash of hashDirs) {
-    const chatsDir = join50(tmp, hash, "chats");
-    if (!existsSync46(chatsDir))
+    const chatsDir = join53(tmp, hash, "chats");
+    if (!existsSync48(chatsDir))
       continue;
     let entries = [];
     try {
@@ -22886,7 +23499,7 @@ function* walkGemini() {
       const ext = extname(f);
       if (ext !== ".json" && ext !== ".jsonl")
         continue;
-      const path = join50(chatsDir, f);
+      const path = join53(chatsDir, f);
       const s = safeStat(path);
       if (!s)
         continue;
@@ -22896,8 +23509,8 @@ function* walkGemini() {
   }
 }
 function* walkCodex() {
-  const sessionsRoot = join50(codexBackend.homeDir(), "sessions");
-  if (!existsSync46(sessionsRoot))
+  const sessionsRoot = join53(codexBackend.homeDir(), "sessions");
+  if (!existsSync48(sessionsRoot))
     return;
   const stack = [sessionsRoot];
   while (stack.length) {
@@ -22909,7 +23522,7 @@ function* walkCodex() {
       continue;
     }
     for (const e of entries) {
-      const path = join50(dir, e.name);
+      const path = join53(dir, e.name);
       if (e.isDirectory()) {
         stack.push(path);
         continue;
@@ -22925,8 +23538,8 @@ function* walkCodex() {
   }
 }
 function* walkAgy() {
-  const brainDir = join50(agyBackend.homeDir(), "brain");
-  if (!existsSync46(brainDir))
+  const brainDir = join53(agyBackend.homeDir(), "brain");
+  if (!existsSync48(brainDir))
     return;
   let sessionDirs = [];
   try {
@@ -22935,18 +23548,18 @@ function* walkAgy() {
     return;
   }
   for (const rawId of sessionDirs) {
-    const sessionPath = join50(brainDir, rawId);
+    const sessionPath = join53(brainDir, rawId);
     try {
-      if (!statSync40(sessionPath).isDirectory())
+      if (!statSync41(sessionPath).isDirectory())
         continue;
     } catch {
       continue;
     }
-    let filePath = join50(sessionPath, ".system_generated", "logs", "transcript.jsonl");
-    if (!existsSync46(filePath)) {
-      filePath = join50(sessionPath, ".system_generated", "logs", "transcript_full.jsonl");
+    let filePath = join53(sessionPath, ".system_generated", "logs", "transcript.jsonl");
+    if (!existsSync48(filePath)) {
+      filePath = join53(sessionPath, ".system_generated", "logs", "transcript_full.jsonl");
     }
-    if (!existsSync46(filePath))
+    if (!existsSync48(filePath))
       continue;
     const s = safeStat(filePath);
     if (!s)
@@ -22963,6 +23576,7 @@ var init_vault_source = __esm({
     init_codex2();
     init_agy();
     init_settings();
+    init_project_dir_name();
   }
 });
 
@@ -22979,8 +23593,8 @@ __export(vault_client_exports, {
   vaultStatus: () => vaultStatus,
   vaultSync: () => vaultSync
 });
-import { mkdirSync as mkdirSync15, readFileSync as readFileSync43, writeFileSync as writeFileSync16, existsSync as existsSync47 } from "fs";
-import { dirname as dirname21, join as join51 } from "path";
+import { mkdirSync as mkdirSync17, readFileSync as readFileSync44, writeFileSync as writeFileSync18, existsSync as existsSync49 } from "fs";
+import { dirname as dirname23, join as join54 } from "path";
 function context2() {
   const s = loadSettings().team;
   if (!s.enabled)
@@ -23119,7 +23733,7 @@ async function vaultSync(passphrase) {
       continue;
     }
     try {
-      const plaintext = readFileSync43(src.path);
+      const plaintext = readFileSync44(src.path);
       const sourceSha = sha256Hex(plaintext);
       const priorSha = uploaded.get(uploadKey(src.sessionId, src.tool));
       if (priorSha === sourceSha) {
@@ -23171,7 +23785,7 @@ async function vaultSync(passphrase) {
 }
 function importedPathFor(tool, sessionId) {
   const base2 = sessionId.replace(/^gemini_/, "").replace(/^codex_/, "").replace(/^opencode_/, "");
-  return join51(IMPORTED_ROOT(), tool, `${base2}.jsonl`);
+  return join54(IMPORTED_ROOT(), tool, `${base2}.jsonl`);
 }
 async function vaultRestore(passphrase, opts = {}) {
   const ctx = context2();
@@ -23192,7 +23806,7 @@ async function vaultRestore(passphrase, opts = {}) {
     }
     try {
       const path = importedPathFor(blob.tool, blob.sessionId);
-      if (existsSync47(path)) {
+      if (existsSync49(path)) {
         const localStat = await import("fs").then((m) => m.statSync(path));
         if (Math.abs(localStat.mtimeMs - blob.mtimeSourceMs) < 1) {
           report.skipped.push({ sessionId: blob.sessionId, tool: blob.tool, reason: "unchanged" });
@@ -23208,8 +23822,8 @@ async function vaultRestore(passphrase, opts = {}) {
         throw new Error("cipher integrity check failed");
       }
       const plaintext = decryptBlob(key, cipher);
-      mkdirSync15(dirname21(path), { recursive: true });
-      writeFileSync16(path, Buffer.from(plaintext));
+      mkdirSync17(dirname23(path), { recursive: true });
+      writeFileSync18(path, Buffer.from(plaintext));
       const { utimesSync } = await import("fs");
       const t = blob.mtimeSourceMs / 1e3;
       utimesSync(path, t, t);
@@ -23260,7 +23874,7 @@ var init_vault_client = __esm({
     uploadKey = (sessionId, tool) => `${sessionId}\0${tool}`;
     VaultPassphraseMismatchError = class extends Error {
     };
-    IMPORTED_ROOT = () => join51(getDataDir(), "imported");
+    IMPORTED_ROOT = () => join54(getDataDir(), "imported");
   }
 });
 
@@ -23414,15 +24028,15 @@ __export(service_installer_exports, {
   uninstallService: () => uninstallService
 });
 import { execSync as execSync5 } from "child_process";
-import { existsSync as existsSync48, mkdirSync as mkdirSync16, rmSync as rmSync8, writeFileSync as writeFileSync17 } from "fs";
-import { homedir as homedir20 } from "os";
-import { join as join52 } from "path";
+import { existsSync as existsSync50, mkdirSync as mkdirSync18, rmSync as rmSync8, writeFileSync as writeFileSync19 } from "fs";
+import { homedir as homedir21 } from "os";
+import { join as join55 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 function resolveDaemonPaths() {
   const watchJs = fileURLToPath3(new URL("./watch.js", import.meta.url));
   const node = process.execPath;
-  const dataDir = join52(homedir20(), ".chat-recall");
-  const logFile = join52(dataDir, "watch.log");
+  const dataDir = join55(homedir21(), ".chat-recall");
+  const logFile = join55(dataDir, "watch.log");
   return { watchJs, node, logFile, dataDir };
 }
 function tryCmd(cmd) {
@@ -23447,7 +24061,7 @@ function isServiceRunning() {
 }
 function installService() {
   const { watchJs, node, logFile, dataDir } = resolveDaemonPaths();
-  mkdirSync16(dataDir, { recursive: true });
+  mkdirSync18(dataDir, { recursive: true });
   if (process.platform === "linux") {
     return installSystemd(watchJs, node, logFile);
   }
@@ -23463,11 +24077,11 @@ function installService() {
   );
 }
 function installSystemd(watchJs, node, logFile) {
-  const unitDir = join52(homedir20(), ".config", "systemd", "user");
-  const unitPath = join52(unitDir, "chat-recall-watch.service");
+  const unitDir = join55(homedir21(), ".config", "systemd", "user");
+  const unitPath = join55(unitDir, "chat-recall-watch.service");
   const unit = renderSystemdUnit(watchJs, node, logFile);
-  mkdirSync16(unitDir, { recursive: true });
-  writeFileSync17(unitPath, unit);
+  mkdirSync18(unitDir, { recursive: true });
+  writeFileSync19(unitPath, unit);
   try {
     execSync5("systemctl --user daemon-reload && systemctl --user enable chat-recall-watch.service && systemctl --user restart chat-recall-watch.service", { stdio: "inherit" });
     try {
@@ -23495,10 +24109,14 @@ function renderSystemdUnit(watchJs, node, logFile) {
     "Restart=on-failure",
     "RestartSec=10",
     "Nice=10",
-    // Keep the service's own stdout/stderr out of the journal noise but
-    // available for `chat-recall service status` without paging journald.
-    `StandardOutput=append:${logFile}`,
-    `StandardError=append:${logFile}`,
+    // JOURNAL, not append:. The file version had no rotation and nothing to
+    // give it any: systemd holds the fd open, so the daemon cannot rename or
+    // truncate its own log without leaving systemd writing into a hole. It
+    // reached 45 MB on this developer's machine and would have grown forever.
+    // journald already rotates and applies disk limits. Read it with
+    //   journalctl --user -u chat-recall-watch -f
+    "StandardOutput=journal",
+    "StandardError=journal",
     "",
     "[Install]",
     "WantedBy=default.target",
@@ -23507,11 +24125,11 @@ function renderSystemdUnit(watchJs, node, logFile) {
 }
 function installLaunchd(watchJs, node, logFile) {
   const label = "com.chat-recall.watch";
-  const plistDir = join52(homedir20(), "Library", "LaunchAgents");
-  const plistPath = join52(plistDir, `${label}.plist`);
+  const plistDir = join55(homedir21(), "Library", "LaunchAgents");
+  const plistPath = join55(plistDir, `${label}.plist`);
   const plist = renderLaunchdPlist(watchJs, node, logFile, label);
-  mkdirSync16(plistDir, { recursive: true });
-  writeFileSync17(plistPath, plist);
+  mkdirSync18(plistDir, { recursive: true });
+  writeFileSync19(plistPath, plist);
   try {
     try {
       execSync5(`launchctl unload "${plistPath}"`, { stdio: "ignore" });
@@ -23540,7 +24158,7 @@ function renderLaunchdPlist(watchJs, node, logFile, label = "com.chat-recall.wat
 }
 function installWindowsTask(watchJs, node, logFile) {
   const taskName = "chat-recall-watch";
-  const tr = `\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\"`;
+  const tr = `cmd /c \\"\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\" >> \\"${logFile}\\" 2>&1\\"`;
   try {
     execSync5(`schtasks /create /tn "${taskName}" /tr "${tr}" /sc onlogon /rl LIMITED /f`, { stdio: "inherit" });
     try {
@@ -23552,8 +24170,8 @@ function installWindowsTask(watchJs, node, logFile) {
   }
   return { definitionPath: null, logFile };
 }
-function renderWindowsTaskCommand(watchJs, node, taskName = "chat-recall-watch") {
-  const tr = `\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\"`;
+function renderWindowsTaskCommand(watchJs, node, taskName = "chat-recall-watch", logFile) {
+  const tr = logFile ? `cmd /c \\"\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\" >> \\"${logFile}\\" 2>&1\\"` : `\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\"`;
   return `schtasks /create /tn "${taskName}" /tr "${tr}" /sc onlogon /rl LIMITED /f`;
 }
 function uninstallService() {
@@ -23564,8 +24182,8 @@ function uninstallService() {
       removed = true;
     } catch {
     }
-    const unitPath = join52(homedir20(), ".config", "systemd", "user", "chat-recall-watch.service");
-    if (existsSync48(unitPath)) {
+    const unitPath = join55(homedir21(), ".config", "systemd", "user", "chat-recall-watch.service");
+    if (existsSync50(unitPath)) {
       rmSync8(unitPath, { force: true });
       removed = true;
     }
@@ -23576,13 +24194,13 @@ function uninstallService() {
     return removed;
   }
   if (process.platform === "darwin") {
-    const plistPath = join52(homedir20(), "Library", "LaunchAgents", "com.chat-recall.watch.plist");
+    const plistPath = join55(homedir21(), "Library", "LaunchAgents", "com.chat-recall.watch.plist");
     try {
       execSync5(`launchctl unload "${plistPath}" 2>/dev/null`, { stdio: "ignore" });
     } catch {
     }
     let removed = false;
-    if (existsSync48(plistPath)) {
+    if (existsSync50(plistPath)) {
       rmSync8(plistPath, { force: true });
       removed = true;
     }
@@ -23627,7 +24245,7 @@ __export(device_auth_exports, {
   betterAuthDeviceLogin: () => betterAuthDeviceLogin,
   deviceLogin: () => deviceLogin
 });
-import { createHash as createHash17, randomBytes } from "node:crypto";
+import { createHash as createHash18, randomBytes } from "node:crypto";
 async function deviceLogin(opts, onPrompt) {
   const issuer = (opts.issuer || DEFAULT_ISSUER).replace(/\/+$/, "");
   if (!issuer) {
@@ -23638,7 +24256,7 @@ async function deviceLogin(opts, onPrompt) {
   const clientId = opts.clientId || DEFAULT_CLIENT_ID;
   const scope = opts.scope || "openid email profile";
   const codeVerifier = b64url(randomBytes(32));
-  const codeChallenge = b64url(createHash17("sha256").update(codeVerifier).digest());
+  const codeChallenge = b64url(createHash18("sha256").update(codeVerifier).digest());
   const startRes = await fetch(`${issuer}/protocol/openid-connect/auth/device`, {
     method: "POST",
     headers: { "content-type": "application/x-www-form-urlencoded" },
@@ -23760,10 +24378,9 @@ init_project_resolver();
 import { config } from "dotenv";
 import { Command } from "commander";
 import chalk from "chalk";
-import { existsSync as existsSync49, readFileSync as readFileSync44, writeFileSync as writeFileSync18, realpathSync as realpathSync5 } from "fs";
-import { homedir as homedir21 } from "os";
-import { join as join53, resolve as resolve2, dirname as dirname22, basename as basename27 } from "path";
-import { execSync as execSync6 } from "child_process";
+import { existsSync as existsSync51, readFileSync as readFileSync45, writeFileSync as writeFileSync20, realpathSync as realpathSync5 } from "fs";
+import { homedir as homedir22 } from "os";
+import { join as join56, resolve as resolve2, dirname as dirname24, basename as basename27 } from "path";
 
 // ../engine/dist/core/score-tier.js
 var STRONG_RATIO = 0.85;
@@ -23790,6 +24407,68 @@ function tierAll(results) {
 // src/cli.ts
 init_sync_client();
 init_update_notice();
+init_which();
+
+// ../engine/dist/core/collector-health.js
+init_paths();
+import { readFileSync as readFileSync34, writeFileSync as writeFileSync10, mkdirSync as mkdirSync9 } from "node:fs";
+import { join as join43, dirname as dirname17 } from "node:path";
+var healthPath = () => join43(getDataDir(), "collector-health.json");
+function collectorHealthPath() {
+  return healthPath();
+}
+function readCollectorHealth() {
+  try {
+    const h = JSON.parse(readFileSync34(healthPath(), "utf-8"));
+    return h && h.v === 1 && typeof h.updatedAt === "number" ? h : null;
+  } catch {
+    return null;
+  }
+}
+var STALE_AFTER_MS = 30 * 6e4;
+var CRASHLOOP_RESTARTS = 3;
+var ago = (ms) => {
+  const m = Math.floor(ms / 6e4);
+  if (m < 60)
+    return `${m}m`;
+  const h = Math.floor(m / 60);
+  return h < 48 ? `${h}h` : `${Math.floor(h / 24)}d`;
+};
+function judgeHealth(h, now = Date.now()) {
+  if (!h)
+    return { ok: true, summary: null, reasons: [] };
+  const reasons = [];
+  const silent = now - h.updatedAt;
+  if (silent > STALE_AFTER_MS) {
+    reasons.push(`the collector has not reported for ${ago(silent)} \u2014 it may not be running`);
+  }
+  if (h.restartsLastHour >= CRASHLOOP_RESTARTS) {
+    reasons.push(`it restarted ${h.restartsLastHour} times in the last hour`);
+  }
+  const targets = Object.entries(h.targets ?? {});
+  const stale = targets.filter(([, t]) => t.lastOkAt === null || now - t.lastOkAt > STALE_AFTER_MS);
+  if (targets.length > 0 && stale.length === targets.length) {
+    const ranked = stale.map(([url, t]) => ({ url, t })).sort((a, b) => {
+      const err = Number(!!b.t.lastError) - Number(!!a.t.lastError);
+      if (err !== 0)
+        return err;
+      return (a.t.lastOkAt ?? 0) - (b.t.lastOkAt ?? 0);
+    });
+    const worst = ranked[0];
+    const when = worst.t.lastOkAt ? `${ago(now - worst.t.lastOkAt)} ago` : "never";
+    const why = worst.t.lastError ? ` (${worst.t.lastError})` : "";
+    reasons.push(`nothing has synced since ${when}${why}`);
+  }
+  if (reasons.length === 0)
+    return { ok: true, summary: null, reasons: [] };
+  return {
+    ok: false,
+    summary: `chat-recall is not syncing: ${reasons.join("; ")}.`,
+    reasons
+  };
+}
+
+// src/cli.ts
 function matchLabel(tier) {
   switch (tier) {
     case "strong":
@@ -23807,8 +24486,8 @@ function claudeHookConfigFiles() {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   for (const home of claudeHomeDirs()) {
-    if (!existsSync49(join53(home, "projects"))) continue;
-    const file = join53(home, "hooks.json");
+    if (!existsSync51(join56(home, "projects"))) continue;
+    const file = join56(home, "hooks.json");
     let key;
     try {
       key = realpathSync5(file);
@@ -23882,7 +24561,7 @@ async function serverDelete(path, body) {
   return res.json();
 }
 var pkgVersion = JSON.parse(
-  readFileSync44(new URL("../package.json", import.meta.url), "utf-8")
+  readFileSync45(new URL("../package.json", import.meta.url), "utf-8")
 ).version;
 var DEFAULT_SERVER = "https://chatrecall.dev";
 var DEFAULT_ALLOW = [
@@ -23964,7 +24643,7 @@ program.command("init").description("Set up chat-recall: connect to your server,
     ];
     for (const cli of clis) {
       try {
-        execSync6(`which ${cli.cmd}`, { stdio: "pipe" });
+        if (!isOnPath(cli.cmd)) throw new Error("not on PATH");
         cli.available = true;
       } catch {
       }
@@ -23996,37 +24675,22 @@ program.command("init").description("Set up chat-recall: connect to your server,
     console.log();
     if (!options.skipMcp) {
       console.log(chalk.bold("4. Configuring MCP server..."));
-      const mcpJsonPath = join53(homedir21(), ".mcp.json");
-      let mcpConfig = {};
-      if (existsSync49(mcpJsonPath)) {
-        try {
-          mcpConfig = JSON.parse(readFileSync44(mcpJsonPath, "utf-8"));
-        } catch {
-          mcpConfig = {};
-        }
-      }
-      const mcpServers = mcpConfig.mcpServers || {};
-      const projectRoot = join53(import.meta.dirname, "..");
+      const projectRoot = join56(import.meta.dirname, "..");
       let mcpBinOnPath = false;
-      try {
-        execSync6("command -v chat-recall-mcp", { stdio: "ignore" });
-        mcpBinOnPath = true;
-      } catch {
-      }
-      const launch = mcpBinOnPath ? { command: "chat-recall-mcp" } : { command: "node", args: [join53(projectRoot, "dist", "mcp.js")] };
+      mcpBinOnPath = isOnPath("chat-recall-mcp");
+      const launch = mcpBinOnPath ? { command: "chat-recall-mcp" } : { command: "node", args: [join56(projectRoot, "dist", "mcp.js")] };
       const MCP_ENV = { NODE_OPTIONS: "--max-old-space-size=1024" };
-      const existing = mcpServers["chat-recall"];
-      const isCurrent = !!existing && existing.command === launch.command && JSON.stringify(existing.args ?? null) === JSON.stringify(launch.args ?? null) && existing.env?.NODE_OPTIONS === MCP_ENV.NODE_OPTIONS;
-      if (isCurrent) {
-        console.log(`   MCP server: ${chalk.green("already configured")} in ${mcpJsonPath}`);
-      } else {
-        const entry = { command: launch.command, alwaysAllow: existing?.alwaysAllow ?? DEFAULT_ALLOW, env: { ...existing?.env, ...MCP_ENV } };
-        if (launch.args) entry.args = launch.args;
-        mcpServers["chat-recall"] = entry;
-        mcpConfig.mcpServers = mcpServers;
-        writeFileSync18(mcpJsonPath, JSON.stringify(mcpConfig, null, 2));
-        console.log(`   MCP server: ${chalk.green(existing ? "repaired" : "configured")} (\u2192 ${launch.command}) in ${mcpJsonPath}`);
+      const { registerMcpEverywhere: registerMcpEverywhere2 } = await Promise.resolve().then(() => (init_mcp_clients(), mcp_clients_exports));
+      const detectedClients = clis.filter((c) => c.available).map((c) => c.cmd).filter((c) => c === "gemini" || c === "opencode" || c === "codex");
+      const results = registerMcpEverywhere2(
+        { ...launch, env: MCP_ENV, alwaysAllow: DEFAULT_ALLOW },
+        { extraIds: detectedClients }
+      );
+      for (const r of results) {
+        const word = r.state === "current" ? chalk.green("already configured") : r.state === "created" ? chalk.green("configured") : r.state === "repaired" ? chalk.green("repaired") : chalk.yellow("left alone \u2014 file does not parse");
+        console.log(`   ${r.label}: ${word} \u2192 ${r.path}`);
       }
+      console.log(chalk.dim(`   Launch: ${launch.command}${launch.args ? " " + launch.args.join(" ") : ""}`));
     } else {
       console.log(chalk.bold("4. Skipping MCP configuration (--skip-mcp)"));
     }
@@ -24047,7 +24711,7 @@ program.command("init").description("Set up chat-recall: connect to your server,
         console.log(chalk.bold("5. Detected codeindex companion"));
         console.log(`   ${chalk.green("codeindex")}: ${detected.path}`);
         if (!options.skipMcp) {
-          const mcpJsonPath = join53(homedir21(), ".mcp.json");
+          const mcpJsonPath = join56(homedir22(), ".mcp.json");
           const reg = registerCodeindexMcp2(mcpJsonPath, detected.path);
           if (reg.added) console.log(`   ${chalk.green("codeindex MCP server registered")} in ${mcpJsonPath}`);
           else console.log(`   codeindex MCP server: ${chalk.green("already registered")}`);
@@ -24060,7 +24724,7 @@ program.command("init").description("Set up chat-recall: connect to your server,
             const sizeMb = result.size ? `${(result.size / 1024 / 1024).toFixed(1)} MB` : "?";
             console.log(`   ${chalk.green("codeindex installed")} (${sizeMb}) \u2192 ${result.path}`);
             if (!options.skipMcp) {
-              const mcpJsonPath = join53(homedir21(), ".mcp.json");
+              const mcpJsonPath = join56(homedir22(), ".mcp.json");
               const reg = registerCodeindexMcp2(mcpJsonPath, CODEINDEX_BIN_PATH2);
               if (reg.added) console.log(`   ${chalk.green("codeindex MCP server registered")} in ${mcpJsonPath}`);
             }
@@ -24458,8 +25122,8 @@ memory.command("wake-up").description("Generate wake-up context (high-importance
   try {
     const identityFile = getIdentityFilePath();
     let identity = "AI coding assistant";
-    if (existsSync49(identityFile)) {
-      identity = readFileSync44(identityFile, "utf-8").trim();
+    if (existsSync51(identityFile)) {
+      identity = readFileSync45(identityFile, "utf-8").trim();
     }
     const lines = [
       chalk.bold("# Wake-Up Context"),
@@ -24516,8 +25180,8 @@ program.command("escalate [sessionId]").description("Escalate a finished session
   }
 });
 program.command("doctor").description("Quick health check across login, server, credentials, hooks, MCP server, and codeindex").option("--purge-local", "Remove the legacy local index (cache.db + vector/KG files) left by pre-thin-collector versions \u2014 storage is server-side now. Requires login; keeps credentials, sync ledger, identity, and the audit log.").action(async (opts) => {
-  const { existsSync: existsSync50, readFileSync: readFileSync45, statSync: statSync41 } = await import("fs");
-  const { execSync: execSync7 } = await import("child_process");
+  const { existsSync: existsSync52, readFileSync: readFileSync46, statSync: statSync42 } = await import("fs");
+  const { execSync: execSync6 } = await import("child_process");
   const rows = [];
   const note = (ok, label, detail) => rows.push({ ok, label, detail });
   const targets = loadAllCredentials();
@@ -24541,36 +25205,50 @@ program.command("doctor").description("Quick health check across login, server,
   } else {
     note(false, "Server reachable", "N/A (not logged in)");
   }
-  const credFile = join53(getDataDir(), "credentials.json");
-  if (!existsSync50(credFile)) {
+  {
+    const h = readCollectorHealth();
+    if (!h) {
+      note(false, "Collector reporting", `no health report at ${collectorHealthPath()} \u2014 the watch daemon may never have run (\`chat-recall watch --install-service\`)`);
+    } else {
+      const v = judgeHealth(h);
+      note(v.ok, "Collector healthy", v.ok ? `last reported ${Math.max(0, Math.round((Date.now() - h.updatedAt) / 1e3))}s ago, ${Object.keys(h.targets).length} target(s)` : v.reasons.join("; "));
+      for (const [url, t] of Object.entries(h.targets)) {
+        const okRecently = t.lastOkAt !== null && Date.now() - t.lastOkAt < STALE_AFTER_MS;
+        note(okRecently, `Synced to ${url}`, t.lastOkAt === null ? `never \u2014 ${t.failures} consecutive failure(s)${t.lastError ? `: ${t.lastError}` : ""}` : `${Math.round((Date.now() - t.lastOkAt) / 6e4)}m ago${t.failures ? ` (${t.failures} failure(s) since)` : ""}`);
+      }
+    }
+  }
+  const credFile = join56(getDataDir(), "credentials.json");
+  if (!existsSync52(credFile)) {
     note(false, "Credentials file", `missing \u2014 run \`chat-recall login <server-url>\``);
   } else {
     try {
-      const mode = statSync41(credFile).mode & 511;
-      const safe = (mode & 63) === 0;
-      note(safe, "Credentials file", `${credFile} (mode ${mode.toString(8).padStart(3, "0")}${safe ? "" : " \u2014 should be 600"})`);
+      const mode = statSync42(credFile).mode & 511;
+      const isWin = process.platform === "win32";
+      const safe = isWin || (mode & 63) === 0;
+      note(safe, "Credentials file", isWin ? `${credFile} (Windows ACL \u2014 POSIX mode does not apply)` : `${credFile} (mode ${mode.toString(8).padStart(3, "0")}${safe ? "" : " \u2014 should be 600"})`);
     } catch (err) {
       note(false, "Credentials file", `error: ${err}`);
     }
   }
   for (const hooksJson of claudeHookConfigFiles()) {
-    const profile = basename27(dirname22(hooksJson));
+    const profile = basename27(dirname24(hooksJson));
     const label = `Claude hooks (${profile})`;
-    if (!existsSync50(hooksJson)) {
+    if (!existsSync52(hooksJson)) {
       note(false, label, `no ${hooksJson} \u2014 run \`chat-recall install-hooks\``);
       continue;
     }
     try {
       const readHooks = (file) => {
-        if (!existsSync50(file)) return {};
+        if (!existsSync52(file)) return {};
         try {
-          return JSON.parse(readFileSync45(file, "utf-8")).hooks || {};
+          return JSON.parse(readFileSync46(file, "utf-8")).hooks || {};
         } catch {
           return {};
         }
       };
       const cfg = readHooks(hooksJson);
-      const settings2 = readHooks(join53(dirname22(hooksJson), "settings.json"));
+      const settings2 = readHooks(join56(dirname24(hooksJson), "settings.json"));
       const all = ["SessionStart", "UserPromptSubmit", "Stop", "PreCompact", "SessionEnd"];
       const hits = [];
       for (const ev of all) {
@@ -24594,7 +25272,7 @@ program.command("doctor").description("Quick health check across login, server,
     const want = bundledSkillNames2().length;
     for (const t of skillTargets2()) {
       if (!t.available) continue;
-      const have = want === 0 ? 0 : bundledSkillNames2().filter((n) => existsSync50(join53(t.dir, n, ".chat-recall-managed"))).length;
+      const have = want === 0 ? 0 : bundledSkillNames2().filter((n) => existsSync52(join56(t.dir, n, ".chat-recall-managed"))).length;
       note(
         have === want,
         `Skills \u2014 ${t.label}`,
@@ -24604,17 +25282,18 @@ program.command("doctor").description("Quick health check across login, server,
   } catch (err) {
     note(false, "Skills", `check failed: ${err}`);
   }
-  const mcpJsonPath = join53(homedir21(), ".mcp.json");
-  if (!existsSync50(mcpJsonPath)) {
-    note(false, "MCP server registration", `no ${mcpJsonPath} \u2014 run \`chat-recall init\``);
-  } else {
-    try {
-      const cfg = JSON.parse(readFileSync45(mcpJsonPath, "utf-8"));
-      const has = !!cfg.mcpServers?.["chat-recall"];
-      note(has, "chat-recall MCP server", has ? `registered in ${mcpJsonPath}` : "not registered \u2014 run `chat-recall init`");
-    } catch {
-      note(false, "chat-recall MCP server", `${mcpJsonPath} unparseable`);
+  try {
+    const { inspectMcpClients: inspectMcpClients2 } = await Promise.resolve().then(() => (init_mcp_clients(), mcp_clients_exports));
+    for (const c of inspectMcpClients2()) {
+      if (!c.present && !c.registered) continue;
+      note(
+        c.registered,
+        `MCP server \u2014 ${c.label}`,
+        c.registered ? `registered in ${c.path}` : `missing from ${c.path} \u2014 run \`chat-recall init\``
+      );
     }
+  } catch (err) {
+    note(false, "MCP server registration", `check failed: ${err}`);
   }
   try {
     const { checkCodeindexStatus: checkCodeindexStatus2 } = await Promise.resolve().then(() => (init_companions(), companions_exports));
@@ -24652,7 +25331,7 @@ program.command("doctor").description("Quick health check across login, server,
   let watchRunning = false;
   const tryCmd2 = (cmd) => {
     try {
-      return execSync7(cmd, { stdio: ["ignore", "pipe", "ignore"] }).toString();
+      return execSync6(cmd, { stdio: ["ignore", "pipe", "ignore"] }).toString();
     } catch {
       return "";
     }
@@ -24668,14 +25347,14 @@ program.command("doctor").description("Quick health check across login, server,
   note(watchRunning, "Watch daemon", watchRunning ? "running" : "not running (run `chat-recall watch --install-service` to keep collection running)");
   const dataDir = getDataDir();
   const legacyPaths = [
-    join53(dataDir, "cache.db"),
-    join53(dataDir, "cache.db-wal"),
-    join53(dataDir, "cache.db-shm"),
-    join53(dataDir, "index", "lancedb"),
-    join53(dataDir, "index", "knowledge_graph.db"),
-    join53(dataDir, "index", "metadata.db")
+    join56(dataDir, "cache.db"),
+    join56(dataDir, "cache.db-wal"),
+    join56(dataDir, "cache.db-shm"),
+    join56(dataDir, "index", "lancedb"),
+    join56(dataDir, "index", "knowledge_graph.db"),
+    join56(dataDir, "index", "metadata.db")
   ];
-  const legacyPresent = legacyPaths.filter((p) => existsSync50(p));
+  const legacyPresent = legacyPaths.filter((p) => existsSync52(p));
   if (opts.purgeLocal) {
     if (!target) {
       note(false, "Purge legacy index", "refused \u2014 log in and `chat-recall sync` first, so your history is on the server before removing local copies");
@@ -24746,7 +25425,7 @@ companions.command("install").description("Install codeindex (downloads from mun
     if (result.installed) {
       const sizeMb = result.size ? `${(result.size / 1024 / 1024).toFixed(1)} MB` : "?";
       console.log(chalk.green(`\u2713 codeindex installed (${sizeMb}) \u2192 ${result.path}`));
-      const mcpJsonPath = join53(homedir21(), ".mcp.json");
+      const mcpJsonPath = join56(homedir22(), ".mcp.json");
       const reg = registerCodeindexMcp2(mcpJsonPath, CODEINDEX_BIN_PATH2);
       if (reg.added) console.log(chalk.dim(`  Registered as MCP server in ${mcpJsonPath}`));
       else console.log(chalk.dim(`  Already registered as MCP server`));
@@ -24768,7 +25447,7 @@ companions.command("uninstall").description("Remove the codeindex binary chat-re
   const r = uninstallCodeindex2();
   if (r.removed) console.log(chalk.green(`\u2713 Removed ${r.path}`));
   else console.log(chalk.dim(`  Nothing to remove at ${r.path}`));
-  const mcpJsonPath = join53(homedir21(), ".mcp.json");
+  const mcpJsonPath = join56(homedir22(), ".mcp.json");
   const u = unregisterCodeindexMcp2(mcpJsonPath);
   if (u.removed) console.log(chalk.dim(`  Unregistered MCP server from ${mcpJsonPath}`));
 });
@@ -25263,10 +25942,10 @@ tasks.command("pull [dir]").description("Write TEAM_TASKS.md for your tasks in t
   try {
     const { resolveProjectId: resolveProjectId2 } = await Promise.resolve().then(() => (init_project_resolver(), project_resolver_exports));
     const { renderTeamTasksMd: renderTeamTasksMd2, parseTeamTasksFile: parseTeamTasksFile2 } = await Promise.resolve().then(() => (init_project_tasks(), project_tasks_exports));
-    const { writeFileSync: writeFileSync19, readFileSync: readFileSync45, existsSync: existsSync50 } = await import("node:fs");
-    const { join: join54 } = await import("node:path");
-    const file = join54(cwd, "TEAM_TASKS.md");
-    if (!opts.force && existsSync50(file) && parseTeamTasksFile2(readFileSync45(file, "utf8")).length > 0) {
+    const { writeFileSync: writeFileSync21, readFileSync: readFileSync46, existsSync: existsSync52 } = await import("node:fs");
+    const { join: join57 } = await import("node:path");
+    const file = join57(cwd, "TEAM_TASKS.md");
+    if (!opts.force && existsSync52(file) && parseTeamTasksFile2(readFileSync46(file, "utf8")).length > 0) {
       console.error(chalk.red("TEAM_TASKS.md has unpushed edits."), "Run", chalk.bold("chat-recall tasks push"), "first, or", chalk.bold("tasks pull --force"), "to discard.");
       process.exit(1);
     }
@@ -25274,7 +25953,7 @@ tasks.command("pull [dir]").description("Write TEAM_TASKS.md for your tasks in t
     const pid = resolved && resolved.source !== "ignored" ? resolved.id : "";
     const { tasks: tasks2 } = await serverGet("/api/tasks?assignee=@me");
     const mine = tasks2.filter((t) => !pid || !t.projectId || t.projectId === pid);
-    writeFileSync19(file, renderTeamTasksMd2(mine));
+    writeFileSync21(file, renderTeamTasksMd2(mine));
     console.log(chalk.green("\u2713 wrote"), "TEAM_TASKS.md", chalk.gray(`(${mine.length} task(s))`), "\u2014 edit, then", chalk.bold("chat-recall tasks push"));
   } catch (e) {
     console.error(chalk.red(e instanceof Error ? e.message : String(e)));
@@ -25285,14 +25964,14 @@ tasks.command("push [dir]").description("Push TEAM_TASKS.md status edits back to
   const cwd = dir || process.cwd();
   try {
     const { parseTeamTasksFile: parseTeamTasksFile2 } = await Promise.resolve().then(() => (init_project_tasks(), project_tasks_exports));
-    const { readFileSync: readFileSync45, existsSync: existsSync50 } = await import("node:fs");
-    const { join: join54 } = await import("node:path");
-    const file = join54(cwd, "TEAM_TASKS.md");
-    if (!existsSync50(file)) {
+    const { readFileSync: readFileSync46, existsSync: existsSync52 } = await import("node:fs");
+    const { join: join57 } = await import("node:path");
+    const file = join57(cwd, "TEAM_TASKS.md");
+    if (!existsSync52(file)) {
       console.error(chalk.red("no TEAM_TASKS.md here \u2014"), "run", chalk.bold("chat-recall tasks pull"), "first");
       process.exit(1);
     }
-    const edits = parseTeamTasksFile2(readFileSync45(file, "utf8"));
+    const edits = parseTeamTasksFile2(readFileSync46(file, "utf8"));
     let n = 0;
     for (const e of edits) {
       await serverPatch(`/api/tasks/${encodeURIComponent(e.id)}`, { status: e.intent });
@@ -25398,8 +26077,8 @@ team.command("publish <type> <name> <file>").description("Publish a local file a
     console.error(chalk.red(`Invalid tool: ${opts.tool}. Must be one of: ${validTools.join(", ")}`));
     process.exit(1);
   }
-  const { readFileSync: readFileSync45 } = await import("fs");
-  const body = readFileSync45(file);
+  const { readFileSync: readFileSync46 } = await import("fs");
+  const body = readFileSync46(file);
   const { teamPublish: teamPublish2 } = await Promise.resolve().then(() => (init_team_client(), team_client_exports));
   const a = await teamPublish2({
     type,
@@ -25586,15 +26265,15 @@ vault.command("forget").description("Remove the stored passphrase from this mach
   console.log(keyringDelete2() ? chalk.green("\u2713 Passphrase removed from the OS keyring.") : chalk.dim("Nothing stored in the OS keyring."));
 }));
 program.command("install-hooks").description("Install Claude Code hooks (Stop + PreCompact + UserPromptSubmit + SessionEnd + SessionStart) into every Claude profile").option("--uninstall", "Remove hooks instead of installing them").option("--no-resume-hint", "Don't install the UserPromptSubmit resume-hint hook").option("--no-escalate", "Don't install the SessionEnd learnings-escalation hook").option("--no-wakeup", "Don't install the SessionStart wake-up hook").action(async (opts) => {
-  const { mkdirSync: mkdirSync17, copyFileSync: copyFileSync4, chmodSync: chmodSync5, existsSync: existsSync50, readFileSync: readFileSync45, writeFileSync: writeFileSync19, statSync: statSync41 } = await import("fs");
+  const { mkdirSync: mkdirSync19, copyFileSync: copyFileSync4, chmodSync: chmodSync5, existsSync: existsSync52, readFileSync: readFileSync46, writeFileSync: writeFileSync21, statSync: statSync42 } = await import("fs");
   const { fileURLToPath: fileURLToPath4 } = await import("url");
   const here = fileURLToPath4(new URL(".", import.meta.url));
   const findHook = (name) => {
-    const candidates = [
-      join53(here, "..", "hooks", name),
-      join53(here, "..", "..", "hooks", name)
+    const candidates2 = [
+      join56(here, "..", "hooks", name),
+      join56(here, "..", "..", "hooks", name)
     ];
-    return candidates.find((p) => existsSync50(p));
+    return candidates2.find((p) => existsSync52(p));
   };
   const sourceSaveHook = findHook("chat_recall_save_hook.sh");
   const sourceResumeHook = findHook("chat_recall_resume_hook.sh");
@@ -25605,15 +26284,15 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
     process.exit(1);
   }
   const hooksDir = getHooksDir();
-  const installedSaveHook = join53(hooksDir, "chat_recall_save_hook.sh");
-  const installedResumeHook = join53(hooksDir, "chat_recall_resume_hook.sh");
-  const installedEscalateHook = join53(hooksDir, "chat_recall_escalate_hook.sh");
-  const installedWakeupHook = join53(hooksDir, "chat_recall_wakeup_hook.sh");
+  const installedSaveHook = join56(hooksDir, "chat_recall_save_hook.sh");
+  const installedResumeHook = join56(hooksDir, "chat_recall_resume_hook.sh");
+  const installedEscalateHook = join56(hooksDir, "chat_recall_escalate_hook.sh");
+  const installedWakeupHook = join56(hooksDir, "chat_recall_wakeup_hook.sh");
   const wakeupWiredInSettings = (home) => {
-    const settings2 = join53(home, "settings.json");
-    if (!existsSync50(settings2)) return false;
+    const settings2 = join56(home, "settings.json");
+    if (!existsSync52(settings2)) return false;
     try {
-      const cfg = JSON.parse(readFileSync45(settings2, "utf-8"));
+      const cfg = JSON.parse(readFileSync46(settings2, "utf-8"));
       const arr = Array.isArray(cfg.hooks?.SessionStart) ? cfg.hooks.SessionStart : [];
       return arr.some((h) => (h?.hooks?.[0]?.command || "").includes("chat_recall_wakeup_hook"));
     } catch {
@@ -25622,9 +26301,9 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
   };
   const hookConfigFiles = claudeHookConfigFiles();
   const readHookConfig = (file) => {
-    if (!existsSync50(file)) return { hooks: {} };
+    if (!existsSync52(file)) return { hooks: {} };
     try {
-      const c = JSON.parse(readFileSync45(file, "utf-8"));
+      const c = JSON.parse(readFileSync46(file, "utf-8"));
       if (!c.hooks || typeof c.hooks !== "object") c.hooks = {};
       return c;
     } catch (err) {
@@ -25650,8 +26329,8 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
         if (filtered.length) config2.hooks[event] = filtered;
         else delete config2.hooks[event];
       }
-      if (removed === 0 && !existsSync50(hooksJson)) continue;
-      writeFileSync19(hooksJson, JSON.stringify(config2, null, 2) + "\n");
+      if (removed === 0 && !existsSync52(hooksJson)) continue;
+      writeFileSync21(hooksJson, JSON.stringify(config2, null, 2) + "\n");
       total += removed;
       console.log(chalk.green(`\u2713 Removed ${removed} chat-recall hook entr${removed === 1 ? "y" : "ies"} from ${hooksJson}`));
     }
@@ -25659,7 +26338,20 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
     console.log(chalk.dim(`  (Hook scripts left in ${hooksDir} \u2014 delete manually if you want.)`));
     return;
   }
-  mkdirSync17(hooksDir, { recursive: true });
+  if (process.platform === "win32") {
+    console.log(chalk.yellow("Hooks are not installed on Windows."));
+    console.log(chalk.dim("  They are POSIX shell scripts, and Claude Code runs hook commands through"));
+    console.log(chalk.dim("  cmd.exe, which cannot execute them. Registering them would put an error on"));
+    console.log(chalk.dim("  every turn instead of saving anything."));
+    console.log(chalk.dim(""));
+    console.log(chalk.dim("  Everything else works: indexing, sync, search and the MCP server are"));
+    console.log(chalk.dim("  unaffected. Hooks only add automatic fact-saving and the wake-up bundle,"));
+    console.log(chalk.dim("  and you can get the same context by calling recall_wake_up from the agent."));
+    console.log(chalk.dim(""));
+    console.log(chalk.dim("  Under WSL, run this from inside the WSL shell and it installs normally."));
+    return;
+  }
+  mkdirSync19(hooksDir, { recursive: true });
   copyFileSync4(sourceSaveHook, installedSaveHook);
   chmodSync5(installedSaveHook, 493);
   const installResume = opts.resumeHint !== false && !!sourceResumeHook;
@@ -25678,7 +26370,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
     chmodSync5(installedWakeupHook, 493);
   }
   const stopEntry = { matcher: "", hooks: [{ type: "command", command: installedSaveHook }] };
-  const precompactEntry = { matcher: "", hooks: [{ type: "command", command: `${installedSaveHook} --precompact` }] };
+  const precompactEntry = { matcher: "", hooks: [{ type: "command", command: `"${installedSaveHook}" --precompact` }] };
   const resumeEntry = { matcher: "", hooks: [{ type: "command", command: installedResumeHook }] };
   const escalateEntry = { matcher: "", hooks: [{ type: "command", command: installedEscalateHook }] };
   const wakeupEntry = { matcher: "startup|clear", hooks: [{ type: "command", command: installedWakeupHook }] };
@@ -25691,9 +26383,9 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
   const wakeupSkipped = [];
   for (const hooksJson of hookConfigFiles) {
     const config2 = readHookConfig(hooksJson);
-    const home = dirname22(hooksJson);
+    const home = dirname24(hooksJson);
     const alreadyWired = wakeupWiredInSettings(home);
-    if (alreadyWired) wakeupSkipped.push(join53(home, "settings.json"));
+    if (alreadyWired) wakeupSkipped.push(join56(home, "settings.json"));
     const perProfile = installWakeup && !alreadyWired ? [...events, ["SessionStart", wakeupEntry]] : events;
     for (const event of HOOK_EVENTS) {
       const arr = Array.isArray(config2.hooks[event]) ? config2.hooks[event] : [];
@@ -25703,21 +26395,21 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
       if (without.length) config2.hooks[event] = without;
       else delete config2.hooks[event];
     }
-    mkdirSync17(dirname22(hooksJson), { recursive: true });
-    writeFileSync19(hooksJson, JSON.stringify(config2, null, 2) + "\n");
+    mkdirSync19(dirname24(hooksJson), { recursive: true });
+    writeFileSync21(hooksJson, JSON.stringify(config2, null, 2) + "\n");
   }
-  const saveSz = statSync41(installedSaveHook).size;
+  const saveSz = statSync42(installedSaveHook).size;
   console.log(chalk.green(`\u2713 Installed chat-recall save hook (${saveSz} bytes)`));
   if (installResume) {
-    const resumeSz = statSync41(installedResumeHook).size;
+    const resumeSz = statSync42(installedResumeHook).size;
     console.log(chalk.green(`\u2713 Installed chat-recall resume-hint hook (${resumeSz} bytes)`));
   }
   if (installEscalate) {
-    const escalateSz = statSync41(installedEscalateHook).size;
+    const escalateSz = statSync42(installedEscalateHook).size;
     console.log(chalk.green(`\u2713 Installed chat-recall learnings-escalation hook (${escalateSz} bytes)`));
   }
   if (installWakeup) {
-    const wakeupSz = statSync41(installedWakeupHook).size;
+    const wakeupSz = statSync42(installedWakeupHook).size;
     console.log(chalk.green(`\u2713 Installed chat-recall wake-up hook (${wakeupSz} bytes)`));
     for (const f of wakeupSkipped) {
       console.log(chalk.dim(`  (SessionStart already wired in ${f} \u2014 left as is, not duplicated)`));
@@ -25749,7 +26441,7 @@ program.command("dossier <project>").description("Generate a project dossier (ov
     );
     const md = dossier.markdown;
     if (options.out) {
-      writeFileSync18(options.out, md);
+      writeFileSync20(options.out, md);
       console.log(chalk.green(`Wrote dossier to ${options.out} (${md.length} chars)`));
     } else {
       console.log(md);
@@ -25783,12 +26475,12 @@ program.command("watch").description("Run the live indexer daemon (watches all A
     }
     return;
   }
-  const candidates = [
+  const candidates2 = [
     new URL("./watch.js", import.meta.url).href,
     new URL("../auto-indexer/indexer.js", import.meta.url).href
   ];
   let lastErr;
-  for (const spec of candidates) {
+  for (const spec of candidates2) {
     try {
       await import(spec);
       return;
@@ -25965,8 +26657,8 @@ include.command("list", { isDefault: true }).description("Show paths opted back
 include.command("project <path>").description("Re-permit a path under a personal folder (substring match; e.g. ~/Documents/code)").action(async (path) => {
   const { loadSettings: loadSettings2, saveSettings: saveSettings2 } = await Promise.resolve().then(() => (init_settings(), settings_exports));
   const { resolve: resolve3 } = await import("node:path");
-  const { homedir: homedir22 } = await import("node:os");
-  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir22()));
+  const { homedir: homedir23 } = await import("node:os");
+  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir23()));
   const s = loadSettings2();
   s.sync.includeProjects = s.sync.includeProjects || [];
   if (s.sync.includeProjects.includes(abs)) {
@@ -25980,8 +26672,8 @@ include.command("project <path>").description("Re-permit a path under a personal
 include.command("remove <path>").description("Undo an opt-in (personal folder goes back to skipped)").action(async (path) => {
   const { loadSettings: loadSettings2, saveSettings: saveSettings2 } = await Promise.resolve().then(() => (init_settings(), settings_exports));
   const { resolve: resolve3 } = await import("node:path");
-  const { homedir: homedir22 } = await import("node:os");
-  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir22()));
+  const { homedir: homedir23 } = await import("node:os");
+  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir23()));
   const s = loadSettings2();
   const before = (s.sync.includeProjects || []).length;
   s.sync.includeProjects = (s.sync.includeProjects || []).filter((p) => p !== path && p !== abs);
@@ -26060,8 +26752,8 @@ program.command("projects").description("List distinct project ids discovered on
 exclude.command("project <path>").description("Exclude a project path from syncing (substring match on the project path; e.g. ~/.claude-pr-bot)").action(async (path) => {
   const { loadSettings: loadSettings2, saveSettings: saveSettings2 } = await Promise.resolve().then(() => (init_settings(), settings_exports));
   const { resolve: resolve3 } = await import("node:path");
-  const { homedir: homedir22 } = await import("node:os");
-  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir22()));
+  const { homedir: homedir23 } = await import("node:os");
+  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir23()));
   const s = loadSettings2();
   if (s.sync.excludeProjects.includes(abs)) {
     console.log(chalk.dim(`Already excluded: ${abs}`));
@@ -26090,8 +26782,8 @@ exclude.command("tool <tool>").description("Exclude an AI tool entirely (claude
 exclude.command("remove <value>").description("Remove an exclusion (tool name or project path)").action(async (value) => {
   const { loadSettings: loadSettings2, saveSettings: saveSettings2 } = await Promise.resolve().then(() => (init_settings(), settings_exports));
   const { resolve: resolve3 } = await import("node:path");
-  const { homedir: homedir22 } = await import("node:os");
-  const abs = resolve3(value.replace(/^~(?=\/|$)/, homedir22()));
+  const { homedir: homedir23 } = await import("node:os");
+  const abs = resolve3(value.replace(/^~(?=\/|$)/, homedir23()));
   const s = loadSettings2();
   const beforeTools = s.sync.excludeTools.length;
   const beforeProjects = s.sync.excludeProjects.length;