chat-recall 0.5.5 → 0.5.6

package/dist/mcp.js

@@ -2110,7 +2110,7 @@ var require_thread_stream = __commonJS({
     var { version: version2 } = require_package();
     var { EventEmitter } = __require("events");
     var { Worker } = __require("worker_threads");
-    var { join: join47 } = __require("path");
+    var { join: join50 } = __require("path");
     var { pathToFileURL } = __require("url");
     var { wait } = require_wait();
     var {
@@ -2153,7 +2153,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join47(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join50(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -2556,7 +2556,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire: createRequire3 } = __require("module");
     var getCallers = require_caller();
-    var { join: join47, isAbsolute: isAbsolute2, sep: sep2 } = __require("node:path");
+    var { join: join50, isAbsolute: isAbsolute3, sep: sep3 } = __require("node:path");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -2619,7 +2619,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join47(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join50(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -2637,7 +2637,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline) {
-        target = bundlerOverrides["pino-worker"] || join47(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join50(__dirname, "worker.js");
         options.pipelines = [pipeline.map((dest) => {
           return {
             ...dest,
@@ -2655,16 +2655,16 @@ var require_transport = __commonJS({
       return buildStream(fixTarget(target), options, worker, sync);
       function fixTarget(origin) {
         origin = bundlerOverrides[origin] || origin;
-        if (isAbsolute2(origin) || origin.indexOf("file://") === 0) {
+        if (isAbsolute3(origin) || origin.indexOf("file://") === 0) {
           return origin;
         }
         if (origin === "pino/file") {
-          return join47(__dirname, "..", "file.js");
+          return join50(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
           try {
-            const context = filePath === "node:repl" ? process.cwd() + sep2 : filePath;
+            const context = filePath === "node:repl" ? process.cwd() + sep3 : filePath;
             fixTarget2 = createRequire3(context).resolve(origin);
             break;
           } catch (err) {
@@ -3648,7 +3648,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join47 = ",";
+            let join50 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -3662,7 +3662,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join47 = `,
+                join50 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3670,13 +3670,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join47;
+                res += join50;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join47}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join50}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3697,7 +3697,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join47 = `,
+              join50 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3711,13 +3711,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join47;
+                separator = join50;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join47;
+              separator = join50;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -3758,7 +3758,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join47 = ",";
+            let join50 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -3771,7 +3771,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join47 = `,
+                join50 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3779,13 +3779,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join47;
+                res += join50;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join47}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join50}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3798,7 +3798,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join47 = `,
+              join50 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3807,7 +3807,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join47;
+                separator = join50;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -3865,20 +3865,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join48 = `,
+              const join51 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join48;
+                res2 += join51;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join48}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join51}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -3894,16 +3894,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join47 = `,
+            const join50 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join47, maximumBreadth);
+              res += stringifyTypedArray(value, join50, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join47;
+              separator = join50;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -3914,13 +3914,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join47;
+                separator = join50;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join47;
+              separator = join50;
             }
             if (separator !== "") {
               res = `
@@ -4848,6 +4848,16 @@ function loadSecrets() {
   const p = secretsPath();
   if (!existsSync2(p))
     return out;
+  let mtimeMs = -1, size = -1;
+  try {
+    const st = statSync2(p);
+    mtimeMs = st.mtimeMs;
+    size = st.size;
+  } catch {
+  }
+  if (_secretsCache && _secretsCache.mtimeMs === mtimeMs && _secretsCache.size === size) {
+    return { ..._secretsCache.value };
+  }
   try {
     for (const line of readFileSync(p, "utf-8").split("\n")) {
       const t = line.trim();
@@ -4865,9 +4875,12 @@ function loadSecrets() {
     }
   } catch {
   }
+  if (mtimeMs >= 0)
+    _secretsCache = { mtimeMs, size, value: { ...out } };
   return out;
 }
 function writeSecrets(secrets) {
+  _secretsCache = null;
   const p = secretsPath();
   mkdirSync2(dirname2(p), { recursive: true });
   const body = "# chat-recall secrets \u2014 NOT committed/synced. Mode 0600.\n" + Object.entries(secrets).filter(([, v]) => v).map(([k, v]) => `${k}=${v}`).join("\n") + "\n";
@@ -4877,10 +4890,31 @@ function writeSecrets(secrets) {
   } catch {
   }
 }
+function applySecretOverlay(result) {
+  const secrets = loadSecrets();
+  for (const { block, field, env } of SECRET_FIELDS) {
+    const blk = result[block];
+    const value = process.env[env] || secrets[env] || blk[field];
+    if (value)
+      blk[field] = value;
+  }
+  return result;
+}
 function loadSettings() {
   const path = settingsPath();
   if (!existsSync2(path))
     return freshDefaults();
+  let mtimeMs = -1, size = -1;
+  try {
+    const st = statSync2(path);
+    mtimeMs = st.mtimeMs;
+    size = st.size;
+  } catch {
+  }
+  if (_settingsCache && _settingsCache.mtimeMs === mtimeMs && _settingsCache.size === size) {
+    const cached = structuredClone(_settingsCache.value);
+    return applySecretOverlay(cached);
+  }
   try {
     const parsed = JSON.parse(readFileSync(path, "utf-8"));
     const base = freshDefaults();
@@ -4893,19 +4927,15 @@ function loadSettings() {
       sync: mergeSync(base.sync, parsed.sync),
       team: mergeTeam(base.team, parsed.team)
     };
-    const secrets = loadSecrets();
-    for (const { block, field, env } of SECRET_FIELDS) {
-      const blk = result[block];
-      const value = process.env[env] || secrets[env] || blk[field];
-      if (value)
-        blk[field] = value;
-    }
-    return result;
+    if (mtimeMs >= 0)
+      _settingsCache = { mtimeMs, size, value: structuredClone(result) };
+    return applySecretOverlay(result);
   } catch {
     return freshDefaults();
   }
 }
 function saveSettings(settings2) {
+  _settingsCache = null;
   const secrets = loadSecrets();
   const stripped = {
     ...settings2,
@@ -4929,7 +4959,7 @@ function saveSettings(settings2) {
   } catch {
   }
 }
-var CLI_DETECTION_ORDER, SCHEMA_VERSION, _sourceSettingsCache, SECRET_FIELDS;
+var CLI_DETECTION_ORDER, SCHEMA_VERSION, PERSONAL_DIR_NAMES, PERSONAL_DIR_PATTERNS, _sourceSettingsCache, SECRET_FIELDS, _secretsCache, _settingsCache;
 var init_settings = __esm({
   "../engine/dist/core/settings.js"() {
     "use strict";
@@ -4943,6 +4973,18 @@ var init_settings = __esm({
       { preset: "aichat", bin: "aichat", cmd: "aichat --no-stream" }
     ];
     SCHEMA_VERSION = 3;
+    PERSONAL_DIR_NAMES = [
+      "Pictures",
+      "Music",
+      "Movies",
+      "Videos",
+      "Photos Library",
+      "Documents",
+      "Desktop",
+      "Downloads",
+      "Library"
+    ];
+    PERSONAL_DIR_PATTERNS = PERSONAL_DIR_NAMES.map((n) => `/${n}/`);
     _sourceSettingsCache = null;
     SECRET_FIELDS = [
       { block: "summary", field: "apiKey", env: "SUMMARY_API_KEY" },
@@ -4953,6 +4995,8 @@ var init_settings = __esm({
       { block: "embedding", field: "ollamaCloudApiKey", env: "OLLAMA_API_KEY" },
       { block: "embedding", field: "openaiCompatApiKey", env: "OPENAI_COMPAT_API_KEY" }
     ];
+    _secretsCache = null;
+    _settingsCache = null;
   }
 });
 
@@ -5042,14 +5086,14 @@ function primaryHomes() {
     s = void 0;
   }
   const opencodeDb = env.CHAT_RECALL_OPENCODE_DB || s?.opencodeDbPath || join3(home, ".local", "share", "opencode", "opencode.db");
-  const candidates = [
+  const candidates2 = [
     env.CHAT_RECALL_CLAUDE_HOME || s?.claudeHome || join3(home, ".claude"),
     env.CHAT_RECALL_GEMINI_HOME || s?.geminiHome || join3(home, ".gemini"),
     env.CHAT_RECALL_CODEX_HOME || s?.codexHome || join3(home, ".codex"),
     env.CHAT_RECALL_AGY_HOME || s?.agyHome || join3(home, ".gemini", "antigravity-cli"),
     dirOf(opencodeDb)
   ];
-  return candidates.map(normalizeHomePath);
+  return candidates2.map(normalizeHomePath);
 }
 function homeDecision(path) {
   const p = normalizeHomePath(path);
@@ -5416,28 +5460,55 @@ function maskSecret(s) {
     return "*".repeat(s.length);
   return "*".repeat(Math.min(s.length - 4, 60)) + s.slice(-4);
 }
+function globalRegexFor(pattern) {
+  const flags = pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g";
+  const key = pattern.source + "\0" + flags;
+  let re = globalRegexCache.get(key);
+  if (!re) {
+    re = new RegExp(pattern.source, flags);
+    globalRegexCache.set(key, re);
+  }
+  return re;
+}
+function makeLineResolver(text) {
+  const starts = [];
+  for (let i = text.indexOf("\n"); i !== -1; i = text.indexOf("\n", i + 1))
+    starts.push(i);
+  return (index) => {
+    let lo = 0, hi = starts.length;
+    while (lo < hi) {
+      const mid = lo + hi >> 1;
+      if (starts[mid] < index)
+        lo = mid + 1;
+      else
+        hi = mid;
+    }
+    return lo + 1;
+  };
+}
 function scanTextForFindings(text, opts = {}) {
   if (!text)
     return [];
   const rules = opts.rules || activeRules();
   const findings = [];
   const seenSpans = /* @__PURE__ */ new Set();
+  const lineAt = makeLineResolver(text);
   for (const r of rules) {
-    const re = new RegExp(r.pattern.source, r.pattern.flags.includes("g") ? r.pattern.flags : r.pattern.flags + "g");
+    const re = globalRegexFor(r.pattern);
+    re.lastIndex = 0;
     let m;
     while ((m = re.exec(text)) !== null) {
       const span = `${m.index}:${m[0].length}`;
       if (!seenSpans.has(span)) {
         seenSpans.add(span);
-        const line = text.slice(0, m.index).split("\n").length;
-        findings.push({ rule: r.label, line, preview: maskSecret(m[0]) });
+        findings.push({ rule: r.label, line: lineAt(m.index), preview: maskSecret(m[0]) });
       }
       if (re.lastIndex === m.index)
         re.lastIndex++;
     }
   }
   for (const { start, end } of findContextualSecrets(text)) {
-    const line = text.slice(0, start).split("\n").length;
+    const line = lineAt(start);
     findings.push({ rule: "secret-context", line, preview: maskSecret(text.slice(start, end)) });
   }
   return findings;
@@ -5468,7 +5539,7 @@ function redactToolResultBody(toolName, body) {
     return body;
   return `[redacted: ${toolName} output, ${body.length} chars]`;
 }
-var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, privacyCache;
+var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, globalRegexCache, privacyCache;
 var init_secret_redactor = __esm({
   "../engine/dist/core/secret-redactor.js"() {
     "use strict";
@@ -5606,6 +5677,7 @@ var init_secret_redactor = __esm({
     MAX_PACK_RULES = 200;
     MAX_PATTERN_LEN = 512;
     serverPack = null;
+    globalRegexCache = /* @__PURE__ */ new Map();
     privacyCache = null;
   }
 });
@@ -6365,8 +6437,8 @@ function decodeDirName(dirName) {
     }
     for (let len = 2; len <= segments.length - i; len++) {
       const joinedSegments = segments.slice(i, i + len);
-      for (const sep2 of ["-", "_", "."]) {
-        const candidate = join5(currentPath, joinedSegments.join(sep2));
+      for (const sep3 of ["-", "_", "."]) {
+        const candidate = join5(currentPath, joinedSegments.join(sep3));
         if (existsSync5(candidate)) {
           currentPath = candidate;
           i += len;
@@ -6657,8 +6729,8 @@ var init_claude = __esm({
 
 // ../engine/dist/transcript/gemini.js
 async function parseGeminiTranscript(sessionPath) {
-  const { readFileSync: readFileSync38 } = await import("fs");
-  return parseGeminiTranscriptText(readFileSync38(sessionPath, "utf-8"));
+  const { readFileSync: readFileSync39 } = await import("fs");
+  return parseGeminiTranscriptText(readFileSync39(sessionPath, "utf-8"));
 }
 function parseGeminiTranscriptText(text) {
   let content;
@@ -7114,11 +7186,11 @@ async function archiveRawSession(store, sessionId) {
   return await store.putRawSession(sessionId, exp.tool, Math.floor(exp.mtime), gz, size);
 }
 function detectForkPredecessor(sessionPath) {
-  const { readFileSync: readFileSync38, readdirSync: readdirSync32 } = requireFs();
-  const { dirname: dirname17, join: join47, basename: basename25 } = requirePath();
+  const { readFileSync: readFileSync39, readdirSync: readdirSync32 } = requireFs();
+  const { dirname: dirname18, join: join50, basename: basename25 } = requirePath();
   let text;
   try {
-    text = readFileSync38(sessionPath, "utf-8");
+    text = readFileSync39(sessionPath, "utf-8");
   } catch {
     return null;
   }
@@ -7140,7 +7212,7 @@ function detectForkPredecessor(sessionPath) {
     return null;
   if (text.includes(`"uuid":"${headParent}"`))
     return null;
-  const dir = dirname17(sessionPath);
+  const dir = dirname18(sessionPath);
   const self = basename25(sessionPath);
   let entries;
   try {
@@ -7152,7 +7224,7 @@ function detectForkPredecessor(sessionPath) {
     if (!f.endsWith(".jsonl") || f === self || f === "sessions-index.json")
       continue;
     try {
-      if (readFileSync38(join47(dir, f), "utf-8").includes(`"uuid":"${headParent}"`)) {
+      if (readFileSync39(join50(dir, f), "utf-8").includes(`"uuid":"${headParent}"`)) {
         return basename25(f, ".jsonl");
       }
     } catch {
@@ -7367,6 +7439,26 @@ var init_shadow = __esm({
   }
 });
 
+// ../engine/dist/core/project-dir-name.js
+function looksWindowsEncoded(dirName) {
+  return /^[A-Za-z]--/.test(dirName);
+}
+function decodeProjectDirName(dirName) {
+  if (!dirName)
+    return "";
+  if (looksWindowsEncoded(dirName)) {
+    const drive = dirName[0].toUpperCase();
+    const rest = dirName.slice(3).replace(/-/g, "\\");
+    return `${drive}:\\${rest}`;
+  }
+  return "/" + dirName.replace(/^-/, "").replace(/-/g, "/");
+}
+var init_project_dir_name = __esm({
+  "../engine/dist/core/project-dir-name.js"() {
+    "use strict";
+  }
+});
+
 // ../engine/dist/core/live-session-scan.js
 import { existsSync as existsSync7, readdirSync as readdirSync5, readFileSync as readFileSync4, statSync as statSync6, openSync as openSync2, readSync as readSync2, closeSync as closeSync2 } from "fs";
 import { join as join9, basename as basename5 } from "path";
@@ -7390,7 +7482,7 @@ function findSessionFile(sessionId) {
           path: candidate,
           projectDir: entry.name,
           // Project path is encoded by replacing slashes with dashes.
-          projectPath: entry.name.replace(/-/g, "/").replace(/^\//, "/")
+          projectPath: decodeProjectDirName(entry.name)
         };
       }
     }
@@ -7419,7 +7511,7 @@ function findSessionFiles(sessionId) {
       out.push({
         path: candidate,
         projectDir: entry.name,
-        projectPath: entry.name.replace(/-/g, "/").replace(/^\//, "/")
+        projectPath: decodeProjectDirName(entry.name)
       });
     }
   }
@@ -7443,7 +7535,31 @@ function resolveSessionContentGroups(sessionId) {
   const names = [...groups.keys()].sort((a, b) => a === "main" ? -1 : b === "main" ? 1 : a.localeCompare(b));
   return names.map((name) => ({ name, paths: groups.get(name) }));
 }
+function withSessionReadCache(fn) {
+  readScopeDepth++;
+  try {
+    return fn();
+  } finally {
+    if (--readScopeDepth === 0)
+      readScope = null;
+  }
+}
 function readSessionGroupText(group) {
+  let key = "";
+  if (readScopeDepth > 0) {
+    const parts = [];
+    for (const p of group.paths) {
+      try {
+        const st = statSync6(p);
+        parts.push(`${p}:${st.mtimeMs}:${st.size}`);
+      } catch {
+        parts.push(`${p}:missing`);
+      }
+    }
+    key = parts.join("|");
+    if (readScope && readScope.key === key)
+      return readScope.value;
+  }
   let text = "";
   let mtime = 0;
   for (const p of group.paths) {
@@ -7459,7 +7575,10 @@ function readSessionGroupText(group) {
     }
     text = text ? mergeLineText(text, raw).text : raw;
   }
-  return { text, mtime };
+  const out = { text, mtime };
+  if (readScopeDepth > 0 && key)
+    readScope = { key, value: out };
+  return out;
 }
 function resolveSessionContentPaths(sessionFile) {
   if (!hasSubagentsDir(sessionFile))
@@ -7682,7 +7801,7 @@ function findCodexSessionFileIn(root, sessionId) {
   }
   return scanDir(root);
 }
-var geminiProjectMapCache, MAX_EVENT_LINE_BYTES;
+var readScope, readScopeDepth, geminiProjectMapCache, MAX_EVENT_LINE_BYTES;
 var init_live_session_scan = __esm({
   "../engine/dist/core/live-session-scan.js"() {
     "use strict";
@@ -7691,6 +7810,9 @@ var init_live_session_scan = __esm({
     init_tool_backend();
     init_tool_paths();
     init_backends();
+    init_project_dir_name();
+    readScope = null;
+    readScopeDepth = 0;
     geminiProjectMapCache = null;
     MAX_EVENT_LINE_BYTES = 8 * 1024 * 1024;
   }
@@ -8151,74 +8273,123 @@ var init_session_outcome = __esm({
   }
 });
 
+// ../engine/dist/core/flat-string.js
+function flatString(s) {
+  if (!s)
+    return "";
+  if (s.length < 13)
+    return s;
+  return Buffer.from(s, "utf8").toString("utf8");
+}
+var init_flat_string = __esm({
+  "../engine/dist/core/flat-string.js"() {
+    "use strict";
+  }
+});
+
 // ../engine/dist/core/first-prompt.js
-import { createReadStream as createReadStream2, existsSync as existsSync9, readFileSync as readFileSync5 } from "fs";
+import { createReadStream as createReadStream2, existsSync as existsSync9, openSync as openSync3, readSync as readSync3, closeSync as closeSync3 } from "fs";
+import { StringDecoder } from "string_decoder";
 function stripBanners2(s) {
   let out = s;
   for (const re of BANNERS)
     out = out.replace(re, " ");
   return out.replace(/[ \t]{2,}/g, " ").trim();
 }
+function promptFromLine(raw, maxLength) {
+  if (!raw.trim())
+    return null;
+  let obj;
+  try {
+    obj = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (obj.type !== "user")
+    return null;
+  if (obj.isSidechain === true)
+    return null;
+  const message = obj.message;
+  if (!message)
+    return null;
+  const content = message.content;
+  let text = "";
+  if (typeof content === "string") {
+    text = content;
+  } else if (Array.isArray(content)) {
+    const parts = [];
+    for (const block of content) {
+      if (block && typeof block === "object" && block.type === "text" && typeof block.text === "string") {
+        parts.push(block.text);
+      }
+    }
+    text = parts.join("\n");
+  }
+  if (!text)
+    return null;
+  if (text.includes("<system-reminder>"))
+    return null;
+  if (text.trim() === "[Request interrupted by user]")
+    return null;
+  const cleaned = stripBanners2(text);
+  if (cleaned.length < 10)
+    return null;
+  return flatString(cleaned.slice(0, maxLength));
+}
 function extractFirstUserPromptSync(filePath, options = {}) {
   const maxLines = options.maxLines ?? 500;
   const maxLength = options.maxLength ?? 1e3;
-  if (!existsSync9(filePath))
-    return "";
-  let raw;
+  const maxBytes = options.maxBytes ?? 4 * 1024 * 1024;
+  let fd;
   try {
-    raw = readFileSync5(filePath, "utf-8");
+    fd = openSync3(filePath, "r");
   } catch {
     return "";
   }
-  const lines = raw.split("\n");
-  const upTo = Math.min(lines.length, maxLines);
-  for (let i = 0; i < upTo; i++) {
-    const line = lines[i];
-    if (!line.trim())
-      continue;
-    let obj;
+  try {
+    const CHUNK = 64 * 1024;
+    const buf = Buffer.allocUnsafe(CHUNK);
+    const decoder = new StringDecoder("utf-8");
+    let carry = "";
+    let pos = 0;
+    let lineNo = 0;
+    for (; ; ) {
+      const n = readSync3(fd, buf, 0, CHUNK, pos);
+      if (n <= 0)
+        break;
+      pos += n;
+      carry += decoder.write(buf.subarray(0, n));
+      const parts = carry.split("\n");
+      carry = parts.pop() ?? "";
+      for (const line of parts) {
+        if (++lineNo > maxLines)
+          return "";
+        const found = promptFromLine(line, maxLength);
+        if (found !== null)
+          return found;
+      }
+      if (pos >= maxBytes)
+        return "";
+    }
+    carry += decoder.end();
+    if (carry && lineNo < maxLines) {
+      const found = promptFromLine(carry, maxLength);
+      if (found !== null)
+        return found;
+    }
+    return "";
+  } finally {
     try {
-      obj = JSON.parse(line);
+      closeSync3(fd);
     } catch {
-      continue;
-    }
-    if (obj.type !== "user")
-      continue;
-    if (obj.isSidechain === true)
-      continue;
-    const message = obj.message;
-    if (!message)
-      continue;
-    const content = message.content;
-    let text = "";
-    if (typeof content === "string") {
-      text = content;
-    } else if (Array.isArray(content)) {
-      const parts = [];
-      for (const block of content) {
-        if (block && typeof block === "object" && block.type === "text" && typeof block.text === "string") {
-          parts.push(block.text);
-        }
-      }
-      text = parts.join("\n");
     }
-    if (!text)
-      continue;
-    if (text.includes("<system-reminder>"))
-      continue;
-    if (text.trim() === "[Request interrupted by user]")
-      continue;
-    const cleaned = stripBanners2(text);
-    if (cleaned.length < 10)
-      continue;
-    return cleaned.slice(0, maxLength);
   }
-  return "";
 }
 var BANNERS;
 var init_first_prompt = __esm({
   "../engine/dist/core/first-prompt.js"() {
     "use strict";
+    init_flat_string();
     BANNERS = [
       /MCP issues detected\. ?Run \/mcp list for status\.?/g,
       /Context low[^\n]*Run \/compact[^\n]*/g,
@@ -8228,7 +8399,7 @@ var init_first_prompt = __esm({
 });
 
 // ../engine/dist/core/backends/tail-read.js
-import { openSync as openSync3, readSync as readSync3, closeSync as closeSync3, statSync as statSync7 } from "node:fs";
+import { openSync as openSync4, readSync as readSync4, closeSync as closeSync4, statSync as statSync7 } from "node:fs";
 function readTailFromOffset(path, offset) {
   let size = 0;
   try {
@@ -8242,10 +8413,10 @@ function readTailFromOffset(path, offset) {
   const buf = Buffer.allocUnsafe(len);
   let fd = null;
   try {
-    fd = openSync3(path, "r");
+    fd = openSync4(path, "r");
     let got = 0;
     while (got < len) {
-      const n = readSync3(fd, buf, got, len - got, offset + got);
+      const n = readSync4(fd, buf, got, len - got, offset + got);
       if (n <= 0)
         break;
       got += n;
@@ -8264,7 +8435,7 @@ function readTailFromOffset(path, offset) {
   } finally {
     if (fd !== null) {
       try {
-        closeSync3(fd);
+        closeSync4(fd);
       } catch {
       }
     }
@@ -8549,7 +8720,7 @@ var init_generic_engine = __esm({
 });
 
 // ../engine/dist/core/backends/claude.js
-import { existsSync as existsSync10, readdirSync as readdirSync6, readFileSync as readFileSync6, statSync as statSync8, openSync as openSync4, readSync as readSync4, closeSync as closeSync4 } from "fs";
+import { existsSync as existsSync10, readdirSync as readdirSync6, readFileSync as readFileSync5, statSync as statSync8, openSync as openSync5, readSync as readSync5, closeSync as closeSync5 } from "fs";
 import { join as join10, basename as basename8 } from "path";
 function stripReminders(text) {
   return text.replace(/<system-reminder>[\s\S]*?<\/system-reminder>/g, "").trim();
@@ -8568,6 +8739,7 @@ var init_claude2 = __esm({
     init_session_git();
     init_first_prompt();
     init_tail_read();
+    init_project_dir_name();
     init_generic_engine();
     UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     ClaudeBackend = class {
@@ -8644,13 +8816,13 @@ var init_claude2 = __esm({
           return null;
         let head;
         try {
-          const fd = openSync4(located.path, "r");
+          const fd = openSync5(located.path, "r");
           try {
             const buf = Buffer.alloc(65536);
-            const n = readSync4(fd, buf, 0, buf.length, 0);
+            const n = readSync5(fd, buf, 0, buf.length, 0);
             head = buf.toString("utf-8", 0, n);
           } finally {
-            closeSync4(fd);
+            closeSync5(fd);
           }
         } catch {
           return null;
@@ -8709,11 +8881,11 @@ var init_claude2 = __esm({
           if (filter && !proj.name.toLowerCase().includes(filter))
             continue;
           const projPath = join10(root, proj.name);
-          const projectPath = proj.name.replace(/-/g, "/").replace(/^\//, "/");
+          const projectPath = decodeProjectDirName(proj.name);
           const indexPath = join10(projPath, "sessions-index.json");
           if (existsSync10(indexPath)) {
             try {
-              const indexData = JSON.parse(readFileSync6(indexPath, "utf-8"));
+              const indexData = JSON.parse(readFileSync5(indexPath, "utf-8"));
               const entries = indexData.entries || [];
               for (const entry of entries) {
                 if (!entry.fullPath || !existsSync10(entry.fullPath))
@@ -9005,7 +9177,7 @@ var init_claude2 = __esm({
        * with quiet main + active subagents still surfaces.
        */
       collectRecentEdits(opts) {
-        const candidates = [];
+        const candidates2 = [];
         for (const root of claudeProjectDirs()) {
           if (!existsSync10(root))
             continue;
@@ -9041,14 +9213,14 @@ var init_claude2 = __esm({
                 }
                 if (mtime < opts.sinceMs)
                   continue;
-                candidates.push({ rawId: basename8(f, ".jsonl"), mtime });
+                candidates2.push({ rawId: basename8(f, ".jsonl"), mtime });
               } catch {
               }
             }
           }
         }
-        candidates.sort((a, b) => b.mtime - a.mtime);
-        const limited = opts.limitSessions ? candidates.slice(0, opts.limitSessions) : candidates;
+        candidates2.sort((a, b) => b.mtime - a.mtime);
+        const limited = opts.limitSessions ? candidates2.slice(0, opts.limitSessions) : candidates2;
         const edits = [];
         for (const c of limited) {
           const scan = this.liveScanEdits(c.rawId);
@@ -9135,12 +9307,12 @@ var init_claude2 = __esm({
 
 // ../engine/dist/core/backends/gemini.js
 import { createHash as createHash4 } from "crypto";
-import { existsSync as existsSync11, readdirSync as readdirSync7, readFileSync as readFileSync7, statSync as statSync9 } from "fs";
+import { existsSync as existsSync11, readdirSync as readdirSync7, readFileSync as readFileSync6, statSync as statSync9 } from "fs";
 import { basename as basename9, join as join11 } from "path";
 function readSessionId(path, format) {
   try {
     if (format === "json") {
-      const json = JSON.parse(readFileSync7(path, "utf-8"));
+      const json = JSON.parse(readFileSync6(path, "utf-8"));
       return typeof json?.sessionId === "string" ? json.sessionId : null;
     }
     const head = readHeadSync(path).split("\n", 1)[0] || "";
@@ -9174,6 +9346,7 @@ var init_gemini2 = __esm({
     init_session_git();
     init_generic_engine();
     init_tail_read();
+    init_flat_string();
     PREFIX = "gemini_";
     FULL_PARSE_MAX = 4 * 1024 * 1024;
     GeminiBackend = class {
@@ -9283,7 +9456,7 @@ var init_gemini2 = __esm({
                 sessionId = readSessionId(fullPath, format);
                 const messages = readGeminiMessages(fullPath, format);
                 const firstUser = messages.find((m) => m.type === "user");
-                firstPrompt = (typeof firstUser?.text === "string" ? firstUser.text : flatten(firstUser?.content)).slice(0, 200);
+                firstPrompt = flatString((typeof firstUser?.text === "string" ? firstUser.text : flatten(firstUser?.content)).slice(0, 200));
                 messageCount = messages.length;
               } else if (format === "jsonl") {
                 const lines = readHeadSync(fullPath, 1048576).split("\n");
@@ -9305,7 +9478,7 @@ var init_gemini2 = __esm({
                   }
                   if (m?.type !== "user")
                     continue;
-                  firstPrompt = (typeof m.text === "string" ? m.text : flatten(m.content)).slice(0, 200);
+                  firstPrompt = flatString((typeof m.text === "string" ? m.text : flatten(m.content)).slice(0, 200));
                   break;
                 }
               }
@@ -9481,7 +9654,7 @@ var init_gemini2 = __esm({
         if (!existsSync11(tmpRoot))
           return [];
         const projMap = this.loadProjectMap();
-        const candidates = [];
+        const candidates2 = [];
         for (const proj of readdirSync7(tmpRoot, { withFileTypes: true })) {
           if (!proj.isDirectory())
             continue;
@@ -9512,13 +9685,13 @@ var init_gemini2 = __esm({
               if (st.mtimeMs < opts.sinceMs)
                 continue;
               const trimLen = isJsonl ? 6 : 5;
-              candidates.push({ rawIdHint: f.slice(0, -trimLen), mtime: st.mtimeMs });
+              candidates2.push({ rawIdHint: f.slice(0, -trimLen), mtime: st.mtimeMs });
             } catch {
             }
           }
         }
-        candidates.sort((a, b) => b.mtime - a.mtime);
-        const limited = opts.limitSessions ? candidates.slice(0, opts.limitSessions) : candidates;
+        candidates2.sort((a, b) => b.mtime - a.mtime);
+        const limited = opts.limitSessions ? candidates2.slice(0, opts.limitSessions) : candidates2;
         const edits = [];
         for (const c of limited) {
           const scan = this.liveScanEdits(c.rawIdHint);
@@ -9537,7 +9710,7 @@ var init_gemini2 = __esm({
         if (!existsSync11(path))
           return map;
         try {
-          const json = JSON.parse(readFileSync7(path, "utf-8"));
+          const json = JSON.parse(readFileSync6(path, "utf-8"));
           const projects = json?.projects ?? {};
           for (const projectPath of Object.keys(projects)) {
             const hash = createHash4("sha256").update(projectPath).digest("hex");
@@ -9555,7 +9728,7 @@ var init_gemini2 = __esm({
           return {
             tool: "gemini",
             mtime: statSync9(loc.path).mtimeMs,
-            files: [{ name: basename9(loc.path), bytes: readFileSync7(loc.path) }]
+            files: [{ name: basename9(loc.path), bytes: readFileSync6(loc.path) }]
           };
         } catch {
           return null;
@@ -9650,6 +9823,7 @@ var init_opencode = __esm({
     init_session_outcome();
     init_session_git();
     init_generic_engine();
+    init_flat_string();
     PREFIX2 = "opencode_";
     OpencodeBackend = class {
       id = "opencode";
@@ -9817,7 +9991,7 @@ var init_opencode = __esm({
             if (firstUser) {
               try {
                 const parsed = JSON.parse(firstUser.data);
-                firstPrompt = String(parsed?.text || "").slice(0, 200);
+                firstPrompt = flatString(String(parsed?.text || "").slice(0, 200));
               } catch {
               }
             }
@@ -10161,7 +10335,7 @@ var init_opencode = __esm({
 });
 
 // ../engine/dist/core/backends/codex.js
-import { readdirSync as readdirSync8, readFileSync as readFileSync8, statSync as statSync10, openSync as openSync5, readSync as readSync5, closeSync as closeSync5 } from "fs";
+import { readdirSync as readdirSync8, readFileSync as readFileSync7, statSync as statSync10, openSync as openSync6, readSync as readSync6, closeSync as closeSync6 } from "fs";
 import { basename as basename10, dirname as dirname10, join as join13 } from "path";
 function parseShellWrites(cmd) {
   const out = [];
@@ -10290,7 +10464,7 @@ function flattenContent(content) {
 }
 function readFirstLine(path) {
   try {
-    const head = readFileSync8(path, "utf-8").split("\n", 1)[0] || "";
+    const head = readFileSync7(path, "utf-8").split("\n", 1)[0] || "";
     if (!head)
       return null;
     return JSON.parse(head);
@@ -10308,6 +10482,7 @@ var init_codex2 = __esm({
     init_session_git();
     init_generic_engine();
     init_tail_read();
+    init_flat_string();
     PREFIX3 = "codex_";
     CodexBackend = class {
       id = "codex";
@@ -10407,7 +10582,7 @@ var init_codex2 = __esm({
             let firstPrompt = "";
             let messageCount = 0;
             try {
-              const lines = readFileSync8(filePath, "utf-8").split("\n");
+              const lines = readFileSync7(filePath, "utf-8").split("\n");
               for (const line of lines) {
                 if (!line.trim())
                   continue;
@@ -10420,7 +10595,7 @@ var init_codex2 = __esm({
                 if (ev.type === "event_msg" && ev.payload?.type === "user_message") {
                   messageCount++;
                   if (!firstPrompt && ev.payload.message) {
-                    firstPrompt = String(ev.payload.message).slice(0, 200);
+                    firstPrompt = flatString(String(ev.payload.message).slice(0, 200));
                   }
                 } else if (ev.type === "response_item" && ev.payload?.type === "message") {
                   messageCount++;
@@ -10559,7 +10734,7 @@ var init_codex2 = __esm({
             continue;
           let firstLine = "";
           try {
-            firstLine = readFileSync8(path, "utf-8").split("\n", 1)[0] || "";
+            firstLine = readFileSync7(path, "utf-8").split("\n", 1)[0] || "";
           } catch {
             continue;
           }
@@ -10583,7 +10758,7 @@ var init_codex2 = __esm({
         let raw = "";
         let mtime = 0;
         try {
-          raw = readFileSync8(path, "utf-8");
+          raw = readFileSync7(path, "utf-8");
           mtime = statSync10(path).mtimeMs;
         } catch {
           return [];
@@ -10760,7 +10935,7 @@ var init_codex2 = __esm({
             let parentId = null;
             let isSubagent = false;
             try {
-              const first = readFileSync8(p, "utf-8").split("\n")[0];
+              const first = readFileSync7(p, "utf-8").split("\n")[0];
               if (first) {
                 const meta = JSON.parse(first);
                 const payload = meta?.payload || {};
@@ -10816,7 +10991,7 @@ var init_codex2 = __esm({
         const push = (path, name) => {
           try {
             const st = statSync10(path);
-            files.push({ name, bytes: readFileSync8(path) });
+            files.push({ name, bytes: readFileSync7(path) });
             if (st.mtimeMs > mtime)
               mtime = st.mtimeMs;
           } catch {
@@ -10834,10 +11009,10 @@ var init_codex2 = __esm({
               if (p === loc.path)
                 continue;
               try {
-                const fd = openSync5(p, "r");
+                const fd = openSync6(p, "r");
                 const buf = Buffer.alloc(4096);
-                const n = readSync5(fd, buf, 0, 4096, 0);
-                closeSync5(fd);
+                const n = readSync6(fd, buf, 0, 4096, 0);
+                closeSync6(fd);
                 const head = buf.toString("utf-8", 0, n);
                 if (head.includes(parentId) && head.includes("parent_thread_id"))
                   push(p, `subagents/${f}`);
@@ -10874,13 +11049,13 @@ var init_codex2 = __esm({
 });
 
 // ../engine/dist/core/backends/agy.js
-import { existsSync as existsSync13, readdirSync as readdirSync9, readFileSync as readFileSync9, statSync as statSync11 } from "fs";
+import { existsSync as existsSync13, readdirSync as readdirSync9, readFileSync as readFileSync8, statSync as statSync11 } from "fs";
 import { basename as basename11, dirname as dirname11, join as join14 } from "path";
 function getFallbackProjectPath(homeDir) {
   try {
     const settingsPath2 = join14(homeDir, "settings.json");
     if (existsSync13(settingsPath2)) {
-      const json = JSON.parse(readFileSync9(settingsPath2, "utf-8"));
+      const json = JSON.parse(readFileSync8(settingsPath2, "utf-8"));
       if (Array.isArray(json?.trustedWorkspaces) && json.trustedWorkspaces[0]) {
         return json.trustedWorkspaces[0];
       }
@@ -10907,7 +11082,7 @@ function resolveAgyProject(logsDir, homeDir) {
 function extractProjectPathFromTranscript(path, homeDir) {
   let content;
   try {
-    content = readFileSync9(path, "utf-8");
+    content = readFileSync8(path, "utf-8");
   } catch {
     return "";
   }
@@ -10993,6 +11168,7 @@ var init_agy = __esm({
     init_session_outcome();
     init_session_git();
     init_generic_engine();
+    init_flat_string();
     PREFIX4 = "agy_";
     AgyBackend = class {
       id = "agy";
@@ -11085,7 +11261,7 @@ var init_agy = __esm({
             let firstPrompt = "";
             let messageCount = 0;
             try {
-              const lines = readFileSync9(filePath, "utf-8").split("\n").filter(Boolean);
+              const lines = readFileSync8(filePath, "utf-8").split("\n").filter(Boolean);
               messageCount = lines.length;
               for (const line of lines) {
                 const obj = JSON.parse(line);
@@ -11093,7 +11269,7 @@ var init_agy = __esm({
                   const content = obj.content;
                   const match = content.match(/<USER_REQUEST>([\s\S]*?)<\/USER_REQUEST>/);
                   const rawText = match ? match[1].trim() : content.trim();
-                  firstPrompt = rawText.slice(0, 200);
+                  firstPrompt = flatString(rawText.slice(0, 200));
                   break;
                 }
               }
@@ -11175,7 +11351,7 @@ var init_agy = __esm({
           return [];
         let rawText;
         try {
-          rawText = readFileSync9(located.path, "utf-8");
+          rawText = readFileSync8(located.path, "utf-8");
         } catch {
           return [];
         }
@@ -11327,7 +11503,7 @@ var init_agy = __esm({
         if (brainRoots.length === 0)
           return [];
         const brainDir = brainRoots[0];
-        const candidates = [];
+        const candidates2 = [];
         let sessionDirs;
         try {
           sessionDirs = readdirSync9(brainDir);
@@ -11349,12 +11525,12 @@ var init_agy = __esm({
             const st = statSync11(filePath);
             if (st.mtimeMs < opts.sinceMs)
               continue;
-            candidates.push({ rawId, mtime: st.mtimeMs });
+            candidates2.push({ rawId, mtime: st.mtimeMs });
           } catch {
           }
         }
-        candidates.sort((a, b) => b.mtime - a.mtime);
-        const limited = opts.limitSessions ? candidates.slice(0, opts.limitSessions) : candidates;
+        candidates2.sort((a, b) => b.mtime - a.mtime);
+        const limited = opts.limitSessions ? candidates2.slice(0, opts.limitSessions) : candidates2;
         const edits = [];
         for (const c of limited) {
           const scan = this.liveScanEdits(c.rawId);
@@ -11375,7 +11551,7 @@ var init_agy = __esm({
           return {
             tool: "agy",
             mtime: statSync11(loc.path).mtimeMs,
-            files: [{ name: basename11(loc.path), bytes: readFileSync9(loc.path) }]
+            files: [{ name: basename11(loc.path), bytes: readFileSync8(loc.path) }]
           };
         } catch {
           return null;
@@ -11427,6 +11603,24 @@ var init_backends = __esm({
   }
 });
 
+// ../engine/dist/core/credentials-env.js
+function envCredentials(env = process.env) {
+  const token = (env.CHAT_RECALL_TOKEN || "").trim();
+  const server2 = (env.CHAT_RECALL_SERVER || "").trim();
+  if (!token || !server2)
+    return null;
+  if (!/^https?:\/\//i.test(server2))
+    return null;
+  return { serverUrl: normalise(server2), token };
+}
+var normalise;
+var init_credentials_env = __esm({
+  "../engine/dist/core/credentials-env.js"() {
+    "use strict";
+    normalise = (u) => u.trim().replace(/\/+$/, "");
+  }
+});
+
 // ../engine/dist/core/source-discovery.js
 import { createHash as createHash5 } from "crypto";
 import { existsSync as existsSync15, readdirSync as readdirSync10, statSync as statSync12 } from "fs";
@@ -11533,7 +11727,7 @@ var init_source_discovery = __esm({
 
 // ../engine/dist/core/home-discovery.js
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync16, readdirSync as readdirSync11, readFileSync as readFileSync10, realpathSync as realpathSync2, statSync as statSync13 } from "fs";
+import { existsSync as existsSync16, readdirSync as readdirSync11, readFileSync as readFileSync9, realpathSync as realpathSync2, statSync as statSync13 } from "fs";
 import { homedir as homedir5, platform as osPlatform } from "os";
 import { join as join17 } from "path";
 function candidateRoots(plat = osPlatform(), env = process.env) {
@@ -11655,7 +11849,7 @@ function declaredHomes(env = process.env, plat = osPlatform()) {
   for (const rc of rcs) {
     let text;
     try {
-      text = readFileSync10(rc, "utf-8");
+      text = readFileSync9(rc, "utf-8");
     } catch {
       continue;
     }
@@ -11680,7 +11874,7 @@ function runningToolHomes(plat = osPlatform()) {
     for (const pid of pids) {
       let env;
       try {
-        env = readFileSync10(`/proc/${pid}/environ`, "utf-8");
+        env = readFileSync9(`/proc/${pid}/environ`, "utf-8");
       } catch {
         continue;
       }
@@ -11801,7 +11995,7 @@ var init_home_discovery = __esm({
 
 // ../engine/dist/core/detector-install.js
 import { createHash as createHash6 } from "crypto";
-import { existsSync as existsSync17, mkdirSync as mkdirSync5, mkdtempSync, chmodSync as chmodSync3, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync3, readFileSync as readFileSync11, statSync as statSync14, copyFileSync as copyFileSync2 } from "fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync5, mkdtempSync, chmodSync as chmodSync3, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync3, readFileSync as readFileSync10, statSync as statSync14, copyFileSync as copyFileSync2 } from "fs";
 import { join as join18 } from "path";
 function managedDetectorPath(name) {
   return join18(getDetectorBinDir(), name + exeSuffix());
@@ -11810,11 +12004,11 @@ function receiptPath(name) {
   return join18(getDetectorBinDir(), `${name}.receipt.json`);
 }
 function sha256File(path) {
-  return createHash6("sha256").update(readFileSync11(path)).digest("hex");
+  return createHash6("sha256").update(readFileSync10(path)).digest("hex");
 }
 function readReceipt(name) {
   try {
-    return JSON.parse(readFileSync11(receiptPath(name), "utf-8"));
+    return JSON.parse(readFileSync10(receiptPath(name), "utf-8"));
   } catch {
     return null;
   }
@@ -11905,7 +12099,7 @@ var init_detector_install = __esm({
 
 // ../engine/dist/core/secret-scanner.js
 import { spawnSync } from "child_process";
-import { existsSync as existsSync18, unlinkSync, readFileSync as readFileSync12, mkdtempSync as mkdtempSync2, rmSync as rmSync3 } from "fs";
+import { existsSync as existsSync18, unlinkSync, readFileSync as readFileSync11, mkdtempSync as mkdtempSync2, rmSync as rmSync3 } from "fs";
 import { tmpdir } from "os";
 import { join as join19 } from "path";
 function mask(s) {
@@ -11966,7 +12160,7 @@ function runGitleaks(binary, filePath) {
     return [];
   let parsed = [];
   try {
-    parsed = JSON.parse(readFileSync12(reportPath, "utf-8")) || [];
+    parsed = JSON.parse(readFileSync11(reportPath, "utf-8")) || [];
   } catch {
   }
   try {
@@ -12030,7 +12224,7 @@ function runGitleaksDir(binary, dir) {
   }
   let parsed = [];
   try {
-    parsed = JSON.parse(readFileSync12(reportPath, "utf-8")) || [];
+    parsed = JSON.parse(readFileSync11(reportPath, "utf-8")) || [];
   } catch {
   }
   try {
@@ -12121,7 +12315,7 @@ function scanFileForSecrets(filePath, opts = {}) {
       out.push({ detector: "trufflehog", ...f });
   if (opts.tenantRules && opts.tenantRules.length > 0) {
     try {
-      const text = readFileSync12(filePath, "utf-8");
+      const text = readFileSync11(filePath, "utf-8");
       out.push(...scanTenantRules(text, opts.tenantRules));
     } catch {
     }
@@ -12246,10 +12440,10 @@ var init_types = __esm({
 
 // ../engine/dist/transcript/opencode.js
 async function parseOpenCodeSubagents(parentSessionId) {
-  const { existsSync: existsSync44 } = await import("fs");
+  const { existsSync: existsSync45 } = await import("fs");
   const { opencodeBackend: opencodeBackend2 } = await Promise.resolve().then(() => (init_opencode(), opencode_exports));
   const dbPath = opencodeBackend2.dbPath();
-  if (!existsSync44(dbPath))
+  if (!existsSync45(dbPath))
     return [];
   const realParent = parentSessionId.replace("opencode_", "");
   const db = openSqliteReadonlyOrThrow(dbPath);
@@ -12290,10 +12484,10 @@ async function parseOpenCodeSubagents(parentSessionId) {
   }
 }
 async function parseOpenCodeTranscript(sessionId) {
-  const { existsSync: existsSync44 } = await import("fs");
+  const { existsSync: existsSync45 } = await import("fs");
   const { opencodeBackend: opencodeBackend2 } = await Promise.resolve().then(() => (init_opencode(), opencode_exports));
   const dbPath = opencodeBackend2.dbPath();
-  if (!existsSync44(dbPath))
+  if (!existsSync45(dbPath))
     return [];
   const realId = sessionId.replace("opencode_", "");
   const db = openSqliteReadonlyOrThrow(dbPath);
@@ -12486,7 +12680,7 @@ var init_transcript = __esm({
 // ../engine/dist/core/project-resolver.js
 import { execSync } from "child_process";
 import { createHash as createHash7 } from "crypto";
-import { existsSync as existsSync19, readFileSync as readFileSync13, realpathSync as realpathSync3, readdirSync as readdirSync12, statSync as statSync16 } from "fs";
+import { existsSync as existsSync19, readFileSync as readFileSync12, realpathSync as realpathSync3, readdirSync as readdirSync12, statSync as statSync16 } from "fs";
 import { basename as basename12, dirname as dirname12, isAbsolute, join as join20, resolve, sep } from "path";
 function getProjectsConfigPath() {
   return join20(getDataDir(), "projects.json");
@@ -12504,7 +12698,7 @@ function loadProjectsConfig() {
   if (cachedConfig && cachedConfig.mtime === mtime)
     return cachedConfig.cfg;
   try {
-    const raw = readFileSync13(path, "utf-8");
+    const raw = readFileSync12(path, "utf-8");
     const cfg = JSON.parse(raw);
     cachedConfig = { mtime, cfg };
     return cfg;
@@ -12572,8 +12766,8 @@ function resolveBotWorktree(realPath) {
   };
 }
 function matchDeclaredProject(realPath, projects) {
-  const candidates = [...projects].sort((a, b) => b.root.length - a.root.length);
-  for (const proj of candidates) {
+  const candidates2 = [...projects].sort((a, b) => b.root.length - a.root.length);
+  for (const proj of candidates2) {
     const root = safeRealpath(proj.root);
     if (!isInside(realPath, root))
       continue;
@@ -13607,7 +13801,7 @@ var init_utils = __esm({
 });
 
 // ../engine/dist/parsers/plan-source.js
-import { existsSync as existsSync21, readdirSync as readdirSync14, readFileSync as readFileSync14, statSync as statSync18 } from "fs";
+import { existsSync as existsSync21, readdirSync as readdirSync14, readFileSync as readFileSync13, statSync as statSync18 } from "fs";
 import { homedir as homedir7 } from "os";
 import { join as join22, basename as basename13 } from "path";
 import { createHash as createHash8 } from "crypto";
@@ -13649,6 +13843,7 @@ var init_plan_source = __esm({
     init_claude2();
     init_agy();
     init_settings();
+    init_project_dir_name();
     MAX_CHUNK_CHARS = 2e3;
     UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     PlanSource = class {
@@ -13673,7 +13868,7 @@ var init_plan_source = __esm({
           for (const entry of entries) {
             if (!entry.isDirectory() || entry.name.startsWith("."))
               continue;
-            const projectPath = entry.name.replace(/^-/, "/").replace(/-/g, "/");
+            const projectPath = decodeProjectDirName(entry.name);
             if (existsSync21(projectPath)) {
               this._knownProjectDirs.push(projectPath);
             }
@@ -13711,7 +13906,7 @@ var init_plan_source = __esm({
               const stat3 = statSync18(filePath);
               const planName = basename13(file, ".md");
               const isAgentPlan = planName.includes("-agent-");
-              const content = readFileSync14(filePath, "utf-8");
+              const content = readFileSync13(filePath, "utf-8");
               const fm = parseFrontmatter(content);
               const body = fm.body;
               const firstLine = body.split("\n").find((l) => l.trim())?.replace(/^#+\s*/, "").trim() || planName;
@@ -13753,7 +13948,7 @@ var init_plan_source = __esm({
           const filePath = join22(plansDir, file);
           try {
             const stat3 = statSync18(filePath);
-            const content = readFileSync14(filePath, "utf-8");
+            const content = readFileSync13(filePath, "utf-8");
             const firstLine = content.split("\n").find((l) => l.trim())?.replace(/^#+\s*/, "").trim() || file;
             const planName = `${opencodeBackend.idPrefix}plan_${basename13(file, ".md")}`;
             const projectPath = this.extractProjectPath(content);
@@ -13783,7 +13978,7 @@ var init_plan_source = __esm({
         const projectsPath = geminiBackend.projectsJson();
         if (existsSync21(projectsPath)) {
           try {
-            const data = JSON.parse(readFileSync14(projectsPath, "utf-8"));
+            const data = JSON.parse(readFileSync13(projectsPath, "utf-8"));
             for (const path of Object.keys(data.projects || {})) {
               projMap.set(createHash8("sha256").update(path).digest("hex"), path);
             }
@@ -13819,7 +14014,7 @@ var init_plan_source = __esm({
               const filePath = join22(plansDir, file);
               try {
                 const stat3 = statSync18(filePath);
-                const content = readFileSync14(filePath, "utf-8");
+                const content = readFileSync13(filePath, "utf-8");
                 const firstLine = content.split("\n").find((l) => l.trim())?.replace(/^#+\s*/, "").trim() || file;
                 const planName = `${geminiBackend.idPrefix}plan_${sess}_${basename13(file, ".md")}`;
                 yield {
@@ -13898,7 +14093,7 @@ var init_plan_source = __esm({
       async parse(item) {
         if (!existsSync21(item.filePath))
           return [];
-        const content = readFileSync14(item.filePath, "utf-8");
+        const content = readFileSync13(item.filePath, "utf-8");
         const chunks = [];
         const { body } = parseFrontmatter(content);
         const sections = splitByHeaders(body);
@@ -14042,7 +14237,7 @@ var init_plan_source = __esm({
             const filePath = join22(sessionPath, file);
             try {
               const stat3 = statSync18(filePath);
-              const content = readFileSync14(filePath, "utf-8");
+              const content = readFileSync13(filePath, "utf-8");
               const firstLine = content.split("\n").find((l) => l.trim())?.replace(/^#+\s*/, "").trim() || file;
               const sessionLoc = agyBackend.findSession(rawId);
               const projectPath = sessionLoc?.projectPath || this.extractProjectPath(content);
@@ -14071,7 +14266,7 @@ var init_plan_source = __esm({
 });
 
 // ../engine/dist/parsers/task-source.js
-import { existsSync as existsSync22, readdirSync as readdirSync15, readFileSync as readFileSync15, statSync as statSync19 } from "fs";
+import { existsSync as existsSync22, readdirSync as readdirSync15, readFileSync as readFileSync14, statSync as statSync19 } from "fs";
 import { join as join23 } from "path";
 var MAX_CHUNK_CHARS2, TaskSource;
 var init_task_source = __esm({
@@ -14121,7 +14316,7 @@ var init_task_source = __esm({
             continue;
           let parsed;
           try {
-            const raw = readFileSync15(filePath, "utf-8");
+            const raw = readFileSync14(filePath, "utf-8");
             parsed = JSON.parse(raw);
             if (!Array.isArray(parsed) || parsed.length === 0)
               continue;
@@ -14259,7 +14454,7 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
           return [];
         let parsed;
         try {
-          parsed = JSON.parse(readFileSync15(item.filePath, "utf-8"));
+          parsed = JSON.parse(readFileSync14(item.filePath, "utf-8"));
         } catch {
           return [];
         }
@@ -14291,7 +14486,7 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
         });
         for (const file of sorted) {
           try {
-            const content = readFileSync15(join23(taskDir, file), "utf-8");
+            const content = readFileSync14(join23(taskDir, file), "utf-8");
             const task = JSON.parse(content);
             if (task.subject) {
               tasks.push(task);
@@ -14307,7 +14502,7 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
 });
 
 // ../engine/dist/parsers/claude-md-source.js
-import { existsSync as existsSync23, readFileSync as readFileSync16, readdirSync as readdirSync16, statSync as statSync20 } from "fs";
+import { existsSync as existsSync23, readFileSync as readFileSync15, readdirSync as readdirSync16, statSync as statSync20 } from "fs";
 import { homedir as homedir8 } from "os";
 import { join as join24, basename as basename14, dirname as dirname13 } from "path";
 import { createHash as createHash9 } from "crypto";
@@ -14328,7 +14523,7 @@ function discoverProjectDirs(claudeDir) {
       for (const entry of entries) {
         if (!entry.isDirectory() || entry.name.startsWith("."))
           continue;
-        const projectPath = entry.name.replace(/^-/, "/").replace(/-/g, "/");
+        const projectPath = decodeProjectDirName(entry.name);
         addProject(projectPath);
       }
     } catch {
@@ -14351,7 +14546,7 @@ function discoverProjectDirs(claudeDir) {
   const gemProjects = geminiBackend.projectsJson();
   if (existsSync23(gemProjects)) {
     try {
-      const data = JSON.parse(readFileSync16(gemProjects, "utf-8"));
+      const data = JSON.parse(readFileSync15(gemProjects, "utf-8"));
       for (const path of Object.keys(data.projects || {}))
         addProject(path);
     } catch {
@@ -14385,6 +14580,7 @@ var init_claude_md_source = __esm({
     init_gemini2();
     init_settings();
     init_opencode();
+    init_project_dir_name();
     MAX_CHUNK_CHARS3 = 2e3;
     NOTE_FILES = [
       { filename: "CLAUDE.md", tool: "claude" },
@@ -14465,7 +14661,7 @@ var init_claude_md_source = __esm({
       async parse(item) {
         if (!existsSync23(item.filePath))
           return [];
-        const content = readFileSync16(item.filePath, "utf-8");
+        const content = readFileSync15(item.filePath, "utf-8");
         const chunks = [];
         const sections = splitByHeaders(content);
         for (let i = 0; i < sections.length; i++) {
@@ -14507,7 +14703,7 @@ var init_claude_md_source = __esm({
           const projectDir = dirname13(filePath);
           const projectName = basename14(projectDir);
           const projectPath = projectDir;
-          const content = readFileSync16(filePath, "utf-8");
+          const content = readFileSync15(filePath, "utf-8");
           const firstLine = content.split("\n").find((l) => l.trim() && !l.startsWith("#"))?.trim()?.slice(0, 200) || `${filename} for ${projectName}`;
           const id = tool === "claude" ? projectName : `${projectName}_${tool}`;
           return {
@@ -14532,7 +14728,7 @@ var init_claude_md_source = __esm({
 });
 
 // ../engine/dist/parsers/agent-memory-source.js
-import { existsSync as existsSync24, readFileSync as readFileSync17, readdirSync as readdirSync17, statSync as statSync21 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync16, readdirSync as readdirSync17, statSync as statSync21 } from "fs";
 import { homedir as homedir9 } from "os";
 import { join as join25, basename as basename15 } from "path";
 function parseFrontmatter2(content) {
@@ -14560,7 +14756,7 @@ function parseFrontmatter2(content) {
   return { fm, body };
 }
 function projectHashToPath(hashDir) {
-  return hashDir.replace(/^-/, "/").replace(/-/g, "/");
+  return decodeProjectDirName(hashDir);
 }
 function discoverMemoryDirs() {
   const out = [];
@@ -14602,6 +14798,7 @@ var init_agent_memory_source = __esm({
     init_utils();
     init_claude2();
     init_settings();
+    init_project_dir_name();
     MAX_CHUNK_CHARS4 = 2e3;
     MAX_CHUNKS = 12;
     AgentMemorySource = class {
@@ -14632,7 +14829,7 @@ var init_agent_memory_source = __esm({
       async parse(item) {
         if (!existsSync24(item.filePath))
           return [];
-        const content = readFileSync17(item.filePath, "utf-8");
+        const content = readFileSync16(item.filePath, "utf-8");
         const { body } = parseFrontmatter2(content);
         const chunks = [];
         const sections = splitByHeaders(body);
@@ -14685,7 +14882,7 @@ var init_agent_memory_source = __esm({
       fileToItem(filePath, filename, projectPath, _projectHash) {
         try {
           const stat3 = statSync21(filePath);
-          const content = readFileSync17(filePath, "utf-8");
+          const content = readFileSync16(filePath, "utf-8");
           const { fm } = parseFrontmatter2(content);
           const stem = filename.replace(/\.md$/, "");
           const idBase = fm.name || stem;
@@ -14900,7 +15097,7 @@ var init_history_source = __esm({
 });
 
 // ../engine/dist/parsers/paste-source.js
-import { existsSync as existsSync26, readdirSync as readdirSync19, readFileSync as readFileSync18, statSync as statSync23 } from "fs";
+import { existsSync as existsSync26, readdirSync as readdirSync19, readFileSync as readFileSync17, statSync as statSync23 } from "fs";
 import { homedir as homedir11 } from "os";
 import { join as join27, basename as basename16 } from "path";
 var MAX_CHUNK_CHARS6, MAX_FILE_SIZE, PasteSource;
@@ -14956,7 +15153,7 @@ var init_paste_source = __esm({
               if (stat3.size < 10)
                 continue;
               const hash = basename16(file, ".txt");
-              const content = readFileSync18(filePath, "utf-8");
+              const content = readFileSync17(filePath, "utf-8");
               const firstLine = content.split("\n").find((l) => l.trim().length > 5)?.trim()?.slice(0, 100) || `Paste ${hash.slice(0, 8)}`;
               yield {
                 id: hash,
@@ -14977,7 +15174,7 @@ var init_paste_source = __esm({
       async parse(item) {
         if (!existsSync26(item.filePath))
           return [];
-        const content = readFileSync18(item.filePath, "utf-8");
+        const content = readFileSync17(item.filePath, "utf-8");
         if (content.trim().length < 20)
           return [];
         return [{
@@ -15000,7 +15197,7 @@ var init_paste_source = __esm({
 });
 
 // ../engine/dist/parsers/gemini-source.js
-import { existsSync as existsSync27, readdirSync as readdirSync20, readFileSync as readFileSync19, statSync as statSync24 } from "fs";
+import { existsSync as existsSync27, readdirSync as readdirSync20, readFileSync as readFileSync18, statSync as statSync24 } from "fs";
 import { join as join28, basename as basename17 } from "path";
 import { createHash as createHash10 } from "crypto";
 function loadGeminiProjectMap2() {
@@ -15009,7 +15206,7 @@ function loadGeminiProjectMap2() {
   if (!existsSync27(projectsPath))
     return map;
   try {
-    const data = JSON.parse(readFileSync19(projectsPath, "utf-8"));
+    const data = JSON.parse(readFileSync18(projectsPath, "utf-8"));
     const projects = data.projects || {};
     for (const [path] of Object.entries(projects)) {
       const hash = createHash10("sha256").update(path).digest("hex");
@@ -15054,7 +15251,7 @@ var init_gemini_source = __esm({
               const filePath = join28(chatsDir, file);
               try {
                 const stat3 = statSync24(filePath);
-                const content = JSON.parse(readFileSync19(filePath, "utf-8"));
+                const content = JSON.parse(readFileSync18(filePath, "utf-8"));
                 const sessionId = content.sessionId || basename17(file, ".json");
                 if (seen.has(sessionId))
                   continue;
@@ -15135,7 +15332,7 @@ var init_gemini_source = __esm({
       async parse(item) {
         if (!existsSync27(item.filePath))
           return [];
-        const content = JSON.parse(readFileSync19(item.filePath, "utf-8"));
+        const content = JSON.parse(readFileSync18(item.filePath, "utf-8"));
         const messages = content.messages || [];
         const chunks = [];
         const getText = (m) => {
@@ -15183,7 +15380,7 @@ var init_gemini_source = __esm({
 });
 
 // ../engine/dist/parsers/gemini-brain-source.js
-import { existsSync as existsSync28, readdirSync as readdirSync21, readFileSync as readFileSync20, statSync as statSync25 } from "fs";
+import { existsSync as existsSync28, readdirSync as readdirSync21, readFileSync as readFileSync19, statSync as statSync25 } from "fs";
 import { join as join29 } from "path";
 var MAX_CHUNK_CHARS8, GeminiBrainSource;
 var init_gemini_brain_source = __esm({
@@ -15216,14 +15413,14 @@ var init_gemini_brain_source = __esm({
             const filePath = join29(sessionDir, file);
             try {
               const stat3 = statSync25(filePath);
-              const content = readFileSync20(filePath, "utf-8");
+              const content = readFileSync19(filePath, "utf-8");
               const firstLine = content.split("\n").find((l) => l.trim() && !l.startsWith("#"))?.trim() || "";
               const heading = content.split("\n").find((l) => l.startsWith("#"))?.replace(/^#+\s*/, "").trim() || file;
               const metaPath = `${filePath}.metadata.json`;
               let metaSummary = "";
               if (existsSync28(metaPath)) {
                 try {
-                  const meta = JSON.parse(readFileSync20(metaPath, "utf-8"));
+                  const meta = JSON.parse(readFileSync19(metaPath, "utf-8"));
                   metaSummary = meta.summary || "";
                 } catch {
                 }
@@ -15254,7 +15451,7 @@ var init_gemini_brain_source = __esm({
       async parse(item) {
         if (!existsSync28(item.filePath))
           return [];
-        const content = readFileSync20(item.filePath, "utf-8");
+        const content = readFileSync19(item.filePath, "utf-8");
         const chunks = [];
         const sections = splitByHeaders(content);
         for (let i = 0; i < sections.length; i++) {
@@ -15597,7 +15794,7 @@ var init_opencode_todo_source = __esm({
 });
 
 // ../engine/dist/parsers/codex-session-source.js
-import { existsSync as existsSync31, readdirSync as readdirSync22, readFileSync as readFileSync21, statSync as statSync26 } from "fs";
+import { existsSync as existsSync31, readdirSync as readdirSync22, readFileSync as readFileSync20, statSync as statSync26 } from "fs";
 import { join as join30, basename as basename18 } from "path";
 function getCodexSessionsDir() {
   return codexBackend.sessionsDir();
@@ -15625,7 +15822,7 @@ function extractReasoningText(event) {
   return "";
 }
 function readJsonlLines(filePath) {
-  const text = readFileSync21(filePath, "utf-8");
+  const text = readFileSync20(filePath, "utf-8");
   const lines = text.split("\n");
   const events = [];
   for (const line of lines) {
@@ -15660,7 +15857,7 @@ var init_codex_session_source = __esm({
         for (const filePath of jsonlFiles) {
           try {
             const stat3 = statSync26(filePath);
-            const lines = readFileSync21(filePath, "utf-8").split("\n");
+            const lines = readFileSync20(filePath, "utf-8").split("\n");
             const firstLine = lines.find((l) => l.trim());
             if (!firstLine)
               continue;
@@ -15833,7 +16030,7 @@ var init_codex_session_source = __esm({
 });
 
 // ../engine/dist/parsers/diary-source.js
-import { existsSync as existsSync32, mkdirSync as mkdirSync6, readdirSync as readdirSync23, readFileSync as readFileSync22, writeFileSync as writeFileSync4, statSync as statSync27 } from "fs";
+import { existsSync as existsSync32, mkdirSync as mkdirSync6, readdirSync as readdirSync23, readFileSync as readFileSync21, writeFileSync as writeFileSync4, statSync as statSync27 } from "fs";
 import { join as join31, basename as basename19 } from "path";
 var MAX_CHUNK_CHARS11, DiarySource;
 var init_diary_source = __esm({
@@ -15859,7 +16056,7 @@ var init_diary_source = __esm({
             const filePath = join31(agentPath, file);
             try {
               const stat3 = statSync27(filePath);
-              const raw = readFileSync22(filePath, "utf-8");
+              const raw = readFileSync21(filePath, "utf-8");
               const entry = JSON.parse(raw);
               const entryId = basename19(file, ".json");
               const title = `[${entry.agent}] ${entry.topic}: ${entry.content.slice(0, 80)}`;
@@ -15886,7 +16083,7 @@ var init_diary_source = __esm({
       async parse(item) {
         if (!existsSync32(item.filePath))
           return [];
-        const raw = readFileSync22(item.filePath, "utf-8");
+        const raw = readFileSync21(item.filePath, "utf-8");
         const entry = JSON.parse(raw);
         if (!entry.content || entry.content.trim().length < 10)
           return [];
@@ -15949,7 +16146,7 @@ var init_diary_source = __esm({
         const entries = [];
         for (const file of files) {
           try {
-            const raw = readFileSync22(join31(agentDir, file), "utf-8");
+            const raw = readFileSync21(join31(agentDir, file), "utf-8");
             entries.push(JSON.parse(raw));
           } catch {
             continue;
@@ -15962,7 +16159,7 @@ var init_diary_source = __esm({
 });
 
 // ../engine/dist/parsers/skills-source.js
-import { existsSync as existsSync33, readdirSync as readdirSync24, readFileSync as readFileSync23, statSync as statSync28 } from "fs";
+import { existsSync as existsSync33, readdirSync as readdirSync24, readFileSync as readFileSync22, statSync as statSync28 } from "fs";
 import { homedir as homedir12 } from "os";
 import { join as join32 } from "path";
 function resolveRoots() {
@@ -16055,7 +16252,7 @@ var init_skills_source = __esm({
             continue;
           let content;
           try {
-            content = readFileSync23(skillMd, "utf-8");
+            content = readFileSync22(skillMd, "utf-8");
           } catch {
             continue;
           }
@@ -16115,7 +16312,7 @@ var init_skills_source = __esm({
       async parse(item) {
         if (!existsSync33(item.filePath))
           return [];
-        const content = readFileSync23(item.filePath, "utf-8");
+        const content = readFileSync22(item.filePath, "utf-8");
         if (!content.trim())
           return [];
         return [{
@@ -16138,14 +16335,14 @@ var init_skills_source = __esm({
 });
 
 // ../engine/dist/parsers/mcps-source.js
-import { existsSync as existsSync34, readdirSync as readdirSync25, readFileSync as readFileSync24, statSync as statSync29 } from "fs";
+import { existsSync as existsSync34, readdirSync as readdirSync25, readFileSync as readFileSync23, statSync as statSync29 } from "fs";
 import { homedir as homedir13 } from "os";
 import { join as join33 } from "path";
 function readJson(path) {
   if (!existsSync34(path))
     return null;
   try {
-    const raw = readFileSync24(path, "utf-8");
+    const raw = readFileSync23(path, "utf-8");
     const stripped = path.endsWith(".jsonc") ? raw.replace(/\/\*[\s\S]*?\*\//g, "").replace(/(^|[^:])\/\/.*$/gm, "$1").replace(/,(\s*[}\]])/g, "$1") : raw;
     return JSON.parse(stripped);
   } catch {
@@ -16258,7 +16455,7 @@ var init_mcps_source = __esm({
           return;
         let content;
         try {
-          content = readFileSync24(path, "utf-8");
+          content = readFileSync23(path, "utf-8");
         } catch {
           return;
         }
@@ -16410,7 +16607,7 @@ var init_toolkit_format = __esm({
 });
 
 // ../engine/dist/parsers/slash-commands-source.js
-import { existsSync as existsSync35, readdirSync as readdirSync26, readFileSync as readFileSync25, statSync as statSync30 } from "fs";
+import { existsSync as existsSync35, readdirSync as readdirSync26, readFileSync as readFileSync24, statSync as statSync30 } from "fs";
 import { join as join34, basename as basename20 } from "path";
 function parseCommand(content, fallbackName, format) {
   if (format === "toml") {
@@ -16438,6 +16635,7 @@ var init_slash_commands_source = __esm({
     init_codex2();
     init_settings();
     init_toolkit_format();
+    init_project_dir_name();
     MAX_CHUNK_CHARS13 = 2e3;
     SlashCommandsSource = class {
       sourceType = "command";
@@ -16451,7 +16649,7 @@ var init_slash_commands_source = __esm({
               for (const entry of readdirSync26(projectsRoot, { withFileTypes: true })) {
                 if (!entry.isDirectory() || entry.name.startsWith("."))
                   continue;
-                const projectPath = entry.name.replace(/^-/, "/").replace(/-/g, "/");
+                const projectPath = decodeProjectDirName(entry.name);
                 const cmdDir = join34(projectPath, ".claude", "commands");
                 if (existsSync35(cmdDir))
                   roots.push({ path: cmdDir, tool: "claude", scope: "project", projectPath, format: "md" });
@@ -16484,7 +16682,7 @@ var init_slash_commands_source = __esm({
             const filePath = join34(root.path, file);
             try {
               const stat3 = statSync30(filePath);
-              const content = readFileSync25(filePath, "utf-8");
+              const content = readFileSync24(filePath, "utf-8");
               const parsed = parseCommand(content, basename20(file, ext), root.format);
               yield {
                 id: `${root.tool}_cmd_${root.scope}_${parsed.name}`,
@@ -16510,7 +16708,7 @@ var init_slash_commands_source = __esm({
       async parse(item) {
         if (!existsSync35(item.filePath))
           return [];
-        const content = readFileSync25(item.filePath, "utf-8");
+        const content = readFileSync24(item.filePath, "utf-8");
         if (!content.trim())
           return [];
         return [{
@@ -16533,7 +16731,7 @@ var init_slash_commands_source = __esm({
 });
 
 // ../engine/dist/parsers/subagents-source.js
-import { existsSync as existsSync36, readdirSync as readdirSync27, readFileSync as readFileSync26, statSync as statSync31 } from "fs";
+import { existsSync as existsSync36, readdirSync as readdirSync27, readFileSync as readFileSync25, statSync as statSync31 } from "fs";
 import { join as join35, basename as basename21 } from "path";
 function parseAgent(content, fallbackName, format) {
   if (format === "toml") {
@@ -16563,6 +16761,7 @@ var init_subagents_source = __esm({
     init_codex2();
     init_settings();
     init_toolkit_format();
+    init_project_dir_name();
     MAX_CHUNK_CHARS14 = 2e3;
     SubagentsSource = class {
       sourceType = "agent";
@@ -16576,7 +16775,7 @@ var init_subagents_source = __esm({
               for (const entry of readdirSync27(projectsRoot, { withFileTypes: true })) {
                 if (!entry.isDirectory() || entry.name.startsWith("."))
                   continue;
-                const projectPath = entry.name.replace(/^-/, "/").replace(/-/g, "/");
+                const projectPath = decodeProjectDirName(entry.name);
                 const agentDir = join35(projectPath, ".claude", "agents");
                 if (existsSync36(agentDir))
                   roots.push({ path: agentDir, tool: "claude", scope: "project", projectPath, format: "md" });
@@ -16609,7 +16808,7 @@ var init_subagents_source = __esm({
             const filePath = join35(root.path, file);
             try {
               const stat3 = statSync31(filePath);
-              const content = readFileSync26(filePath, "utf-8");
+              const content = readFileSync25(filePath, "utf-8");
               const parsed = parseAgent(content, basename21(file, ext), root.format);
               yield {
                 id: `${root.tool}_agent_${root.scope}_${parsed.name}`,
@@ -16636,7 +16835,7 @@ var init_subagents_source = __esm({
       async parse(item) {
         if (!existsSync36(item.filePath))
           return [];
-        const content = readFileSync26(item.filePath, "utf-8");
+        const content = readFileSync25(item.filePath, "utf-8");
         if (!content.trim())
           return [];
         return [{
@@ -16659,13 +16858,13 @@ var init_subagents_source = __esm({
 });
 
 // ../engine/dist/parsers/hooks-source.js
-import { existsSync as existsSync37, readFileSync as readFileSync27, readdirSync as readdirSync28, statSync as statSync32 } from "fs";
+import { existsSync as existsSync37, readFileSync as readFileSync26, readdirSync as readdirSync28, statSync as statSync32 } from "fs";
 import { join as join36 } from "path";
 function readJson2(path) {
   if (!existsSync37(path))
     return null;
   try {
-    return JSON.parse(readFileSync27(path, "utf-8"));
+    return JSON.parse(readFileSync26(path, "utf-8"));
   } catch {
     return null;
   }
@@ -16676,6 +16875,7 @@ var init_hooks_source = __esm({
     "use strict";
     init_claude2();
     init_settings();
+    init_project_dir_name();
     HooksSource = class {
       sourceType = "hook";
       async *discover() {
@@ -16688,7 +16888,7 @@ var init_hooks_source = __esm({
             for (const entry of readdirSync28(projectsRoot, { withFileTypes: true })) {
               if (!entry.isDirectory() || entry.name.startsWith("."))
                 continue;
-              const projectPath = entry.name.replace(/^-/, "/").replace(/-/g, "/");
+              const projectPath = decodeProjectDirName(entry.name);
               const settingsPath2 = join36(projectPath, ".claude", "settings.json");
               if (existsSync37(settingsPath2)) {
                 yield* this.fromSettings(settingsPath2, "project", projectPath);
@@ -16781,14 +16981,14 @@ var init_hooks_source = __esm({
 });
 
 // ../engine/dist/parsers/plugins-source.js
-import { existsSync as existsSync38, readFileSync as readFileSync28, readdirSync as readdirSync29, statSync as statSync33 } from "fs";
+import { existsSync as existsSync38, readFileSync as readFileSync27, readdirSync as readdirSync29, statSync as statSync33 } from "fs";
 import { homedir as homedir14 } from "os";
 import { join as join37 } from "path";
 function readJson3(path) {
   if (!existsSync38(path))
     return null;
   try {
-    return JSON.parse(readFileSync28(path, "utf-8"));
+    return JSON.parse(readFileSync27(path, "utf-8"));
   } catch {
     return null;
   }
@@ -17045,7 +17245,7 @@ var init_extractor_version = __esm({
 });
 
 // src/sync-ledger.ts
-import { readFileSync as readFileSync29, writeFileSync as writeFileSync5, renameSync as renameSync4, mkdirSync as mkdirSync7 } from "node:fs";
+import { readFileSync as readFileSync28, writeFileSync as writeFileSync5, renameSync as renameSync4, mkdirSync as mkdirSync7 } from "node:fs";
 import { join as join38, dirname as dirname14 } from "node:path";
 function toRow(entry) {
   if (entry === void 0) return void 0;
@@ -17054,24 +17254,77 @@ function toRow(entry) {
 function load() {
   if (cache3) return cache3;
   try {
-    const parsed = JSON.parse(readFileSync29(ledgerPath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync28(ledgerPath(), "utf-8"));
     cache3 = parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     cache3 = {};
   }
   return cache3;
 }
-function persist(data) {
+function persistNow(data) {
   const path = ledgerPath();
   mkdirSync7(dirname14(path), { recursive: true });
   const tmp = `${path}.tmp`;
   writeFileSync5(tmp, JSON.stringify(data));
   renameSync4(tmp, path);
+  pendingWrite = false;
+}
+function persist(data) {
+  pendingWrite = true;
+  if (flushTimer) return;
+  flushTimer = setTimeout(() => {
+    flushTimer = null;
+    if (pendingWrite) {
+      try {
+        persistNow(data);
+      } catch {
+      }
+    }
+  }, LEDGER_FLUSH_MS);
+  flushTimer.unref?.();
+}
+function pruneLedgerTargets(configuredServers) {
+  const data = load();
+  const keep = new Set(configuredServers);
+  const orphans = {};
+  for (const server2 of Object.keys(data)) {
+    if (!keep.has(server2)) {
+      orphans[server2] = data[server2];
+      delete data[server2];
+    }
+  }
+  const names = Object.keys(orphans);
+  if (names.length === 0) return 0;
+  const path = ledgerPath();
+  const side = `${path}.orphans.json`;
+  try {
+    let prior = {};
+    try {
+      prior = JSON.parse(readFileSync28(side, "utf-8"));
+    } catch {
+    }
+    writeFileSync5(side, JSON.stringify({ ...prior, ...orphans }));
+  } catch {
+    for (const n of names) data[n] = orphans[n];
+    return 0;
+  }
+  const rows = names.reduce((n, s) => n + Object.keys(orphans[s]).length, 0);
+  console.error(`[sync] ledger: parked ${rows} row(s) for ${names.length} server(s) no longer configured (${names.join(", ")}) in ${side}`);
+  persistNow(data);
+  return names.length;
+}
+function flushLedger() {
+  if (flushTimer) {
+    clearTimeout(flushTimer);
+    flushTimer = null;
+  }
+  if (!pendingWrite || !cache3) return;
+  persistNow(cache3);
 }
 function loadItemVersionsAll() {
   if (itemVersionsCache) return itemVersionsCache;
   try {
-    const parsed = JSON.parse(readFileSync29(itemVersionsPath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync28(itemVersionsPath(), "utf-8"));
     itemVersionsCache = parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     itemVersionsCache = {};
@@ -17153,7 +17406,7 @@ function markFieldCoverage(server2, field, rows) {
 function loadReconcile() {
   if (reconcileCache) return reconcileCache;
   try {
-    const parsed = JSON.parse(readFileSync29(reconcilePath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync28(reconcilePath(), "utf-8"));
     reconcileCache = parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     reconcileCache = {};
@@ -17201,7 +17454,7 @@ function syncMode(row, mtime, fileSize, extractorVersion, isAppendOnly) {
   if (row.m >= Math.floor(mtime)) return "skip";
   return "full";
 }
-var ledgerPath, cache3, itemVersionsPath, itemVersionsCache, unackedCursorAttempts, reconcilePath, reconcileCache;
+var ledgerPath, cache3, LEDGER_FLUSH_MS, pendingWrite, flushTimer, itemVersionsPath, itemVersionsCache, unackedCursorAttempts, reconcilePath, reconcileCache;
 var init_sync_ledger = __esm({
   "src/sync-ledger.ts"() {
     "use strict";
@@ -17209,6 +17462,9 @@ var init_sync_ledger = __esm({
     init_extractor_version();
     ledgerPath = () => join38(getDataDir(), "sync-ledger.json");
     cache3 = null;
+    LEDGER_FLUSH_MS = 2e3;
+    pendingWrite = false;
+    flushTimer = null;
     itemVersionsPath = () => join38(getDataDir(), "item-versions.json");
     itemVersionsCache = null;
     unackedCursorAttempts = 0;
@@ -17243,7 +17499,7 @@ var init_sync_fields = __esm({
 });
 
 // ../engine/dist/core/index-lock.js
-import { existsSync as existsSync39, mkdirSync as mkdirSync8, openSync as openSync7, writeFileSync as writeFileSync6, readFileSync as readFileSync30, rmSync as rmSync4, statSync as statSync34, closeSync as closeSync7 } from "fs";
+import { existsSync as existsSync39, mkdirSync as mkdirSync8, openSync as openSync8, writeFileSync as writeFileSync6, readFileSync as readFileSync29, rmSync as rmSync4, statSync as statSync34, closeSync as closeSync8 } from "fs";
 import { dirname as dirname15, join as join39 } from "path";
 function acquireIndexLock(opts) {
   const lockPath = lockFilePath();
@@ -17255,7 +17511,7 @@ function acquireIndexLock(opts) {
   }
   let fd;
   try {
-    fd = openSync7(lockPath, "wx", 384);
+    fd = openSync8(lockPath, "wx", 384);
   } catch (err) {
     if (err.code === "EEXIST")
       return null;
@@ -17265,7 +17521,7 @@ function acquireIndexLock(opts) {
   try {
     writeFileSync6(fd, JSON.stringify(holder));
   } finally {
-    closeSync7(fd);
+    closeSync8(fd);
   }
   let released = false;
   return {
@@ -17275,7 +17531,7 @@ function acquireIndexLock(opts) {
         return;
       released = true;
       try {
-        const current = JSON.parse(readFileSync30(lockPath, "utf-8"));
+        const current = JSON.parse(readFileSync29(lockPath, "utf-8"));
         if (current.pid !== holder.pid || current.startedAt !== holder.startedAt)
           return;
       } catch {
@@ -17297,7 +17553,7 @@ function stealStaleLock(lockPath, staleAfterMs) {
     const age = Date.now() - s.mtimeMs;
     let payload;
     try {
-      payload = JSON.parse(readFileSync30(lockPath, "utf-8"));
+      payload = JSON.parse(readFileSync29(lockPath, "utf-8"));
     } catch {
       rmSync4(lockPath, { force: true });
       return true;
@@ -17335,7 +17591,10 @@ var init_index_lock = __esm({
 });
 
 // src/http.ts
-import { readFileSync as readFileSync31 } from "node:fs";
+import { readFileSync as readFileSync30 } from "node:fs";
+function cliVersion() {
+  return CLI_VERSION;
+}
 function clientHeaders() {
   return {
     "x-chat-recall-cli": CLI_VERSION,
@@ -17353,10 +17612,10 @@ var init_http = __esm({
     "use strict";
     CLI_VERSION = "0.0.0";
     try {
-      CLI_VERSION = JSON.parse(readFileSync31(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
+      CLI_VERSION = JSON.parse(readFileSync30(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.5.5";
+        if (true) CLI_VERSION = "0.5.6";
       } catch {
       }
     }
@@ -17480,6 +17739,7 @@ var sync_client_exports = {};
 __export(sync_client_exports, {
   BATCH_SCAN_MAX_BYTES: () => BATCH_SCAN_MAX_BYTES,
   FULL_BUILD_MAX_BYTES: () => FULL_BUILD_MAX_BYTES,
+  _resetCapsCacheForTests: () => _resetCapsCacheForTests,
   _resetTenantSecurityConfigCache: () => _resetTenantSecurityConfigCache,
   _resetTenantSyncConfigCache: () => _resetTenantSyncConfigCache,
   batchScanExternal: () => batchScanExternal,
@@ -17497,7 +17757,7 @@ __export(sync_client_exports, {
   syncSessions: () => syncSessions
 });
 import { join as join41, dirname as dirname16, basename as basename22 } from "node:path";
-import { readFileSync as readFileSync32, writeFileSync as writeFileSync8, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync4, rmSync as rmSync5, chmodSync as chmodSync4, unlinkSync as unlinkSync2, readdirSync as readdirSync30, statSync as statSync35 } from "node:fs";
+import { readFileSync as readFileSync31, writeFileSync as writeFileSync8, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync4, rmSync as rmSync5, chmodSync as chmodSync4, unlinkSync as unlinkSync2, readdirSync as readdirSync30, statSync as statSync35 } from "node:fs";
 import { tmpdir as tmpdir3, hostname } from "node:os";
 import { createHash as createHash12 } from "node:crypto";
 import { fileURLToPath } from "node:url";
@@ -17519,8 +17779,10 @@ function saveCredentials(c) {
   }
 }
 function loadAllCredentials() {
+  const fromEnv = envCredentials();
+  if (fromEnv) return [{ serverUrl: fromEnv.serverUrl, token: fromEnv.token }];
   try {
-    const parsed = JSON.parse(readFileSync32(credPath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync31(credPath(), "utf-8"));
     if (Array.isArray(parsed?.targets)) return parsed.targets.filter((t) => t?.serverUrl).map((t) => ({ serverUrl: t.serverUrl, token: t.token || "" }));
     if (parsed?.serverUrl) return [{ serverUrl: parsed.serverUrl, token: parsed.token || "" }];
   } catch {
@@ -17679,6 +17941,10 @@ function isLocalHost(serverUrl) {
 async function syncSessions(opts = {}) {
   const targets = loadAllCredentials();
   if (targets.length === 0) throw new Error("Not logged in \u2014 run `chat-recall login <server-url> --token <token>`");
+  try {
+    pruneLedgerTargets(targets.map((t) => t.serverUrl));
+  } catch {
+  }
   let agg = null;
   const errors = [];
   for (const cred of targets) {
@@ -17701,6 +17967,7 @@ async function syncSessions(opts = {}) {
       errors.push(`${cred.serverUrl}: ${e instanceof Error ? e.message : e}`);
     }
   }
+  flushLedger();
   if (!agg) throw new Error(`sync failed for all targets:
   ${errors.join("\n  ")}`);
   if (errors.length > 0) console.error(`[sync] ${errors.length} target(s) failed (others succeeded):
@@ -17726,11 +17993,11 @@ async function reconcileFieldsForTarget(cred, fullRefs, opts = {}) {
   let pushed = 0, absent = 0, scanned = 0;
   for (const field of SYNC_FIELDS) {
     const needFull = !!opts.force || fieldNeedsFullPass(base, field);
-    const candidates = needFull ? fullRefs() : opts.convRefs ?? fullRefs();
+    const candidates2 = needFull ? fullRefs() : opts.convRefs ?? fullRefs();
     const send = [];
     const mtimeById = /* @__PURE__ */ new Map();
     const absentIds = [];
-    for (const ref of candidates) {
+    for (const ref of candidates2) {
       if (!fieldNeedsScan(ledger.get(ref.prefixedId), field, ref.mtime, opts.force)) continue;
       scanned++;
       mtimeById.set(ref.prefixedId, ref.mtime);
@@ -17851,6 +18118,20 @@ function batchScanExternal(items, opts = {}) {
   }
   return { findings, scanned, slices, scanMs };
 }
+function _resetCapsCacheForTests() {
+  capsOk.clear();
+}
+async function verifyServerApi(serverUrl, minApi) {
+  const base = serverUrl.replace(/\/$/, "");
+  const seen = capsOk.get(base);
+  if (seen !== void 0 && Date.now() - seen < CAPS_TTL_MS) return true;
+  const caps = await fetchWithTimeout(`${base}/api/capabilities`).then((r) => r.json());
+  if ((caps.apiVersion ?? 0) < minApi) {
+    throw new Error(`server too old: apiVersion ${caps.apiVersion ?? "none"} < required ${minApi} \u2014 update the server image before syncing`);
+  }
+  capsOk.set(base, Date.now());
+  return true;
+}
 async function syncToTarget(cred, opts = {}) {
   const sync = loadSettings().sync;
   const serverCfg = await fetchTenantSyncConfig(cred);
@@ -17871,14 +18152,9 @@ async function syncToTarget(cred, opts = {}) {
     return isProjectSyncable(r.source === "ignored" ? "" : r.id, projectPath, { syncMode: "only", syncOnly });
   };
   const MIN_SERVER_API = 2;
-  try {
-    const caps = await fetchWithTimeout(`${cred.serverUrl.replace(/\/$/, "")}/api/capabilities`).then((r) => r.json());
-    if ((caps.apiVersion ?? 0) < MIN_SERVER_API) {
-      throw new Error(`server too old: apiVersion ${caps.apiVersion ?? "none"} < required ${MIN_SERVER_API} \u2014 update the server image before syncing`);
-    }
-  } catch (e) {
-    if (e instanceof Error && e.message.startsWith("server too old")) throw e;
-    throw new Error(`cannot verify server version (${e instanceof Error ? e.message : e}) \u2014 refusing to sync blind`);
+  {
+    const ok = await verifyServerApi(cred.serverUrl, MIN_SERVER_API);
+    if (!ok) throw new Error(`cannot verify server version \u2014 refusing to sync blind`);
   }
   const { tenantRules, verifySecrets } = await fetchTenantSecurityConfig(cred);
   const CHANGED_WALK_OVERLAP_MS = 15 * 6e4;
@@ -17935,8 +18211,11 @@ async function syncToTarget(cred, opts = {}) {
           try {
             const body2 = JSON.parse(text);
             detail = body2.error ?? text;
+            if (body2.detail) detail += `
+  ${body2.detail}`;
             if (body2.resetsAt) detail += ` (resets ${new Date(body2.resetsAt).toISOString().slice(0, 10)})`;
-            if (body2.upgradeUrl) detail += ` \u2014 ${body2.upgradeUrl}`;
+            if (body2.upgradeUrl) detail += `
+  ${body2.upgradeUrl}`;
           } catch {
           }
           throw new Error(`sync paused by the server: ${detail}`);
@@ -18083,16 +18362,21 @@ async function syncToTarget(cred, opts = {}) {
   const findingsBatch = makeBatcher("findings", 200, true);
   const scanSecrets = isSecretScannerAvailable() && upload.findings && process.env.CHAT_RECALL_SCAN_SECRETS !== "0";
   const verifySecretsScan = verifySecrets;
+  let skipped = 0, redactions = 0, walked = 0;
   const kgSeen = /* @__PURE__ */ new Set();
   const kgEntityType = /* @__PURE__ */ new Map();
-  const kgRows = [];
-  const accumulateKg = (triples, sourceSession) => {
+  const kgEntityNames = /* @__PURE__ */ new Set();
+  const kgKey = (subject, predicate, object, validFrom) => createHash12("sha1").update(`${subject}|${predicate}|${object}|${validFrom}`).digest("hex").slice(0, 16);
+  const accumulateKg = async (triples, sourceSession) => {
     for (const t of triples) {
-      const key = `${t.subject}|${t.predicate}|${t.object}|${t.validFrom ?? ""}`;
+      const key = kgKey(t.subject, t.predicate, t.object, t.validFrom ?? "");
       if (kgSeen.has(key)) continue;
       kgSeen.add(key);
       if (t.predicate === "is_a" && !kgEntityType.has(t.subject)) kgEntityType.set(t.subject, t.object);
-      kgRows.push({
+      kgEntityNames.add(t.subject);
+      kgEntityNames.add(t.object);
+      const count = { redactions: 0 };
+      await kgTripleBatch.add(redactDeep({
         subject: t.subject,
         predicate: t.predicate,
         object: t.object,
@@ -18100,10 +18384,10 @@ async function syncToTarget(cred, opts = {}) {
         valid_to: null,
         confidence: t.confidence ?? 1,
         source_session: sourceSession
-      });
+      }, count));
+      redactions += count.redactions;
     }
   };
-  let skipped = 0, redactions = 0, walked = 0;
   let scanMs = 0, scanned = 0;
   const slice = refs.slice(0, opts.limit ?? refs.length);
   const trace = process.env.CHAT_RECALL_SYNC_TRACE === "1" ? (msg) => {
@@ -18236,7 +18520,7 @@ async function syncToTarget(cred, opts = {}) {
     await convBatch.add(built.conv);
     if (built.findings.length > 0) await findingsBatch.add(built.findings);
     if (upload.sessionMeta) {
-      accumulateKg(extractEntities(built.kgText, { projectPath: built.projectPath, sourceType: "session", sessionId: ref.prefixedId, validFrom: ref.mtime ? new Date(ref.mtime).toISOString().slice(0, 10) : void 0 }), ref.prefixedId);
+      await accumulateKg(extractEntities(built.kgText, { projectPath: built.projectPath, sourceType: "session", sessionId: ref.prefixedId, validFrom: ref.mtime ? new Date(ref.mtime).toISOString().slice(0, 10) : void 0 }), ref.prefixedId);
     }
     if (upload.sessionMeta && sessionFileBytes(ref) <= FULL_BUILD_MAX_BYTES) {
       try {
@@ -18315,7 +18599,7 @@ async function syncToTarget(cred, opts = {}) {
             chunks: redactedChunks
           });
           if (upload.sessionMeta && redactedChunks.length > 0) {
-            accumulateKg(
+            await accumulateKg(
               extractEntities(redactedChunks.map((c) => c.text).join("\n"), { projectPath: item.projectPath || "", sourceType: item.sourceType, validFrom: item.mtime ? new Date(Number(item.mtime)).toISOString().slice(0, 10) : void 0 }),
               null
             );
@@ -18340,16 +18624,8 @@ async function syncToTarget(cred, opts = {}) {
       }
     }
   }
-  if (upload.sessionMeta && kgRows.length > 0) {
-    const entityNames = /* @__PURE__ */ new Set();
-    for (const t of kgRows) {
-      const count = { redactions: 0 };
-      await kgTripleBatch.add(redactDeep(t, count));
-      redactions += count.redactions;
-      entityNames.add(t.subject);
-      entityNames.add(t.object);
-    }
-    for (const name of entityNames) {
+  if (upload.sessionMeta && kgEntityNames.size > 0) {
+    for (const name of kgEntityNames) {
       const count = { redactions: 0 };
       await kgEntityBatch.add(redactDeep({ name, type: kgEntityType.get(name) ?? "unknown", properties: {} }, count));
       redactions += count.redactions;
@@ -18709,56 +18985,58 @@ function collectDerived(ref, mtime, count) {
   const id = ref.prefixedId;
   const compute = [];
   let fullOutcome = null;
-  for (const kind of COMPUTE_KINDS) {
-    let data = null;
-    try {
-      if (kind === "diff") {
-        const replay = replaySessionAny(id);
-        if (replay.found) data = replay;
-      } else if (kind === "outcome") {
-        fullOutcome = computeOutcome(id);
-        if (fullOutcome.found) data = fullOutcome;
-      } else if (kind === "commits") {
-        if (!fullOutcome) fullOutcome = computeOutcome(id);
-        if (fullOutcome.found) data = fullOutcome.commits;
-      } else if (kind === "markers") {
-        const turns = extractTurnsAny(id, { maxTurns: 5e4 });
-        const prompts = turns.turns.filter((t) => t.kind === "user" && t.text).map((t) => ({ line: t.line, ts: t.ts, tsIso: t.tsIso, ...markPrompt(t.text) }));
-        data = { sessionId: id, prompts, summary: summarizeMarkers(prompts) };
-      }
-    } catch {
-      data = null;
+  return withSessionReadCache(() => {
+    for (const kind of COMPUTE_KINDS) {
+      let data = null;
+      try {
+        if (kind === "diff") {
+          const replay = replaySessionAny(id);
+          if (replay.found) data = replay;
+        } else if (kind === "outcome") {
+          fullOutcome = computeOutcome(id);
+          if (fullOutcome.found) data = fullOutcome;
+        } else if (kind === "commits") {
+          if (!fullOutcome) fullOutcome = computeOutcome(id);
+          if (fullOutcome.found) data = fullOutcome.commits;
+        } else if (kind === "markers") {
+          const turns = extractTurnsAny(id, { maxTurns: 5e4 });
+          const prompts = turns.turns.filter((t) => t.kind === "user" && t.text).map((t) => ({ line: t.line, ts: t.ts, tsIso: t.tsIso, ...markPrompt(t.text) }));
+          data = { sessionId: id, prompts, summary: summarizeMarkers(prompts) };
+        }
+      } catch {
+        data = null;
+      }
+      if (data === null) continue;
+      const redacted = redactDeep(data, count);
+      if (JSON.stringify(redacted).length > MAX_DERIVED_ROW_BYTES) continue;
+      compute.push({ kind, mtime, data: redacted });
+    }
+    let outcomeRow = null;
+    if (fullOutcome?.found) {
+      outcomeRow = {
+        sessionId: id,
+        tool: ref.toolId,
+        status: fullOutcome.status,
+        reason: fullOutcome.reason,
+        fileMtime: mtime,
+        fileSize: 0,
+        contentHash: "",
+        fileCount: fullOutcome.fileCount,
+        linesAdded: fullOutcome.totalLinesAdded,
+        linesRemoved: fullOutcome.totalLinesRemoved,
+        commits: fullOutcome.commits?.totalCommits ?? 0,
+        isFull: true,
+        classifiedAt: Date.now(),
+        lastScannedOffset: 0
+      };
     }
-    if (data === null) continue;
-    const redacted = redactDeep(data, count);
-    if (JSON.stringify(redacted).length > MAX_DERIVED_ROW_BYTES) continue;
-    compute.push({ kind, mtime, data: redacted });
-  }
-  let outcomeRow = null;
-  if (fullOutcome?.found) {
-    outcomeRow = {
-      sessionId: id,
-      tool: ref.toolId,
-      status: fullOutcome.status,
-      reason: fullOutcome.reason,
-      fileMtime: mtime,
-      fileSize: 0,
-      contentHash: "",
-      fileCount: fullOutcome.fileCount,
-      linesAdded: fullOutcome.totalLinesAdded,
-      linesRemoved: fullOutcome.totalLinesRemoved,
-      commits: fullOutcome.commits?.totalCommits ?? 0,
-      isFull: true,
-      classifiedAt: Date.now(),
-      lastScannedOffset: 0
+    return {
+      session_id: id,
+      mtime,
+      compute,
+      outcome_row: outcomeRow ? redactDeep({ ...outcomeRow, sessionId: void 0 }, count) : null
     };
-  }
-  return {
-    session_id: id,
-    mtime,
-    compute,
-    outcome_row: outcomeRow ? redactDeep({ ...outcomeRow, sessionId: void 0 }, count) : null
-  };
+  });
 }
 function isSyncSkip(r) {
   return typeof r.skipped === "string";
@@ -18787,10 +19065,11 @@ async function syncIncremental(opts = {}) {
     lock.release();
   }
 }
-var ownVersion, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, hashPath, COMPUTE_KINDS, MAX_DERIVED_ROW_BYTES, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
+var ownVersion, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, hashPath, COMPUTE_KINDS, MAX_DERIVED_ROW_BYTES, CAPS_TTL_MS, capsOk, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
 var init_sync_client = __esm({
   "src/sync-client.ts"() {
     "use strict";
+    init_credentials_env();
     init_secret_redactor();
     init_source_discovery();
     init_home_discovery();
@@ -18818,14 +19097,15 @@ var init_sync_client = __esm({
     init_sync_fields();
     init_index_lock();
     init_http();
+    init_live_session_scan();
     init_backends();
     ownVersion = "0.0.0";
     try {
       const dir = dirname16(fileURLToPath(import.meta.url));
-      ownVersion = JSON.parse(readFileSync32(join41(dir, "../package.json"), "utf-8")).version || ownVersion;
+      ownVersion = JSON.parse(readFileSync31(join41(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.5.5";
+        if (true) ownVersion = "0.5.6";
       } catch {
       }
     }
@@ -18836,6 +19116,8 @@ var init_sync_client = __esm({
     hashPath = (p) => p ? "p_" + createHash12("sha256").update(p).digest("hex").slice(0, 12) : "";
     COMPUTE_KINDS = ["diff", "outcome", "commits", "markers"];
     MAX_DERIVED_ROW_BYTES = 2 * 1024 * 1024;
+    CAPS_TTL_MS = 60 * 6e4;
+    capsOk = /* @__PURE__ */ new Map();
     FULL_BUILD_MAX_BYTES = Math.max(8, parseInt(process.env.CHAT_RECALL_FULL_BUILD_MAX_MB || "64", 10)) * 1024 * 1024;
     FULL_BUILD_TAIL_BYTES = 16 * 1024 * 1024;
     BATCH_SCAN_MAX_BYTES = Math.max(1, parseInt(process.env.CHAT_RECALL_BATCHSCAN_MAX_MB || "64", 10)) * 1024 * 1024;
@@ -18848,7 +19130,7 @@ __export(client_events_exports, {
   isTelemetryEnabled: () => isTelemetryEnabled,
   reportClientEvent: () => reportClientEvent
 });
-import { readFileSync as readFileSync33 } from "node:fs";
+import { readFileSync as readFileSync32 } from "node:fs";
 function scrub(msg) {
   if (!msg) return "";
   const noHome = msg.replace(/\/(?:home|Users)\/[^/\s]+/g, "~");
@@ -18901,29 +19183,186 @@ var init_client_events = __esm({
     init_secret_redactor();
     CLI_VERSION2 = "0.0.0";
     try {
-      CLI_VERSION2 = JSON.parse(readFileSync33(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION2;
+      CLI_VERSION2 = JSON.parse(readFileSync32(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION2;
     } catch {
     }
   }
 });
 
+// ../engine/dist/core/which.js
+import { existsSync as existsSync40, statSync as statSync36, accessSync, constants } from "node:fs";
+import { join as join42, isAbsolute as isAbsolute2, delimiter as delimiter2, sep as sep2 } from "node:path";
+function executable(p) {
+  try {
+    if (!statSync36(p).isFile())
+      return false;
+  } catch {
+    return false;
+  }
+  if (isWindows)
+    return true;
+  try {
+    accessSync(p, constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function candidates(name) {
+  if (!isWindows)
+    return [name];
+  const exts = (process.env.PATHEXT || ".COM;.EXE;.BAT;.CMD").split(";").map((e) => e.trim()).filter(Boolean);
+  if (exts.some((e) => name.toLowerCase().endsWith(e.toLowerCase())))
+    return [name];
+  return exts.map((e) => name + e);
+}
+function resolveOnPath(name) {
+  if (!name)
+    return null;
+  if (name.includes("/") || isWindows && name.includes(sep2) || isAbsolute2(name)) {
+    for (const c of candidates(name))
+      if (executable(c))
+        return c;
+    return null;
+  }
+  for (const raw of (process.env.PATH || "").split(delimiter2)) {
+    const dir = raw.replace(/^"(.*)"$/, "$1");
+    if (!dir)
+      continue;
+    for (const c of candidates(name)) {
+      const full = join42(dir, c);
+      if (existsSync40(full) && executable(full))
+        return full;
+    }
+  }
+  return null;
+}
+function isOnPath(name) {
+  return resolveOnPath(name) !== null;
+}
+var isWindows;
+var init_which = __esm({
+  "../engine/dist/core/which.js"() {
+    "use strict";
+    isWindows = process.platform === "win32";
+  }
+});
+
+// src/update-notice.ts
+var update_notice_exports = {};
+__export(update_notice_exports, {
+  printUpdateNotice: () => printUpdateNotice,
+  refreshUpdateCheck: () => refreshUpdateCheck,
+  updateNotice: () => updateNotice
+});
+import { readFileSync as readFileSync34, writeFileSync as writeFileSync10 } from "node:fs";
+import { join as join44 } from "node:path";
+function readCheck() {
+  try {
+    const c = JSON.parse(readFileSync34(checkPath(), "utf-8"));
+    return c && typeof c.serverVersion === "string" ? c : null;
+  } catch {
+    return null;
+  }
+}
+function writeCheck(c) {
+  try {
+    writeFileSync10(checkPath(), JSON.stringify(c));
+  } catch {
+  }
+}
+function updateNotice() {
+  const c = readCheck();
+  if (!c) return null;
+  const own = cliVersion();
+  if (compareVersions(c.serverVersion, own) <= 0) return null;
+  return `chat-recall ${c.serverVersion} is available (you have ${own}). Auto-update should apply it; force it now with: chat-recall update`;
+}
+async function refreshUpdateCheck(force = false) {
+  const prev = readCheck();
+  if (!force && prev && Date.now() - prev.checkedAt < CHECK_TTL_MS) return prev;
+  let newest = "0.0.0";
+  try {
+    const { loadAllCredentials: loadAllCredentials2 } = await Promise.resolve().then(() => (init_sync_client(), sync_client_exports));
+    for (const cred of loadAllCredentials2()) {
+      if (!cred.serverUrl) continue;
+      const base = cred.serverUrl.replace(/\/+$/, "");
+      try {
+        const res = await fetchWithTimeout(`${base}/api/capabilities`, {
+          headers: cred.token ? { authorization: `Bearer ${cred.token}` } : {}
+        }, 5e3);
+        if (!res.ok) continue;
+        const caps = await res.json();
+        const v = caps?.cli?.version;
+        if (v && compareVersions(v, newest) > 0) newest = v;
+      } catch {
+      }
+    }
+  } catch {
+    return prev;
+  }
+  if (newest === "0.0.0") return prev;
+  const next = { serverVersion: newest, checkedAt: Date.now() };
+  writeCheck(next);
+  return next;
+}
+function printUpdateNotice() {
+  if (printed) return;
+  printed = true;
+  try {
+    const msg = updateNotice();
+    if (msg) console.error(`
+  \u26A0  ${msg}
+`);
+    const t = setTimeout(() => {
+      void refreshUpdateCheck().catch(() => {
+      });
+    }, 0);
+    if (typeof t.unref === "function") t.unref();
+  } catch {
+  }
+}
+var CHECK_TTL_MS, checkPath, printed;
+var init_update_notice = __esm({
+  "src/update-notice.ts"() {
+    "use strict";
+    init_paths();
+    init_auto_update();
+    init_http();
+    CHECK_TTL_MS = 6 * 3600 * 1e3;
+    checkPath = () => join44(getDataDir(), "update-check.json");
+    printed = false;
+  }
+});
+
 // ../engine/dist/core/companions.js
-import { existsSync as existsSync40, mkdirSync as mkdirSync10, statSync as statSync36, chmodSync as chmodSync5, unlinkSync as unlinkSync3, renameSync as renameSync5, createWriteStream, readFileSync as readFileSync34, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync41, mkdirSync as mkdirSync11, statSync as statSync37, chmodSync as chmodSync5, unlinkSync as unlinkSync3, renameSync as renameSync5, createWriteStream, readFileSync as readFileSync35, writeFileSync as writeFileSync11 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
-import { join as join42 } from "node:path";
+import { join as join45 } from "node:path";
 import { execSync as execSync3 } from "node:child_process";
+import { createHash as createHash13 } from "node:crypto";
+function expectedCodeindexSha256(artifact) {
+  return CODEINDEX_SHA256[artifact.replace(/^codeindex-/, "").replace(/\.exe$/, "")] ?? null;
+}
 function detectPlatform() {
   const arch = process.arch;
   const platform = process.platform;
   const archMap = { x64: "x86_64", arm64: "aarch64" };
-  const platformMap = { linux: "linux", darwin: "darwin", win32: "windows" };
+  const platformMap = { linux: "linux", darwin: "macos", win32: "windows" };
   const a = archMap[arch];
   const p = platformMap[platform];
   if (!a || !p) {
     return { reason: `Unsupported platform: ${arch}-${platform}` };
   }
-  const prebuiltCombos = /* @__PURE__ */ new Set(["x86_64-linux"]);
-  const artifact = `codeindex-${a}-${p}`;
+  const prebuiltCombos = /* @__PURE__ */ new Set([
+    "x86_64-linux",
+    "aarch64-linux",
+    "x86_64-macos",
+    "aarch64-macos",
+    "x86_64-windows",
+    "aarch64-windows"
+  ]);
+  const artifact = `codeindex-${a}-${p}${p === "windows" ? ".exe" : ""}`;
   if (!prebuiltCombos.has(`${a}-${p}`)) {
     return {
       artifact,
@@ -18940,20 +19379,15 @@ function checkCodeindexStatus() {
     artifactName: platform.artifact,
     unsupportedReason: platform.reason
   };
-  let foundPath = null;
-  try {
-    const out = execSync3("command -v codeindex", { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    if (out)
-      foundPath = out;
-  } catch {
+  let foundPath = resolveOnPath(CODEINDEX_BIN_NAME);
+  if (!foundPath) {
+    foundPath = resolveOnPath(CODEINDEX_BIN_PATH);
   }
-  if (!foundPath && existsSync40(CODEINDEX_BIN_PATH))
-    foundPath = CODEINDEX_BIN_PATH;
   if (foundPath) {
     status.installed = true;
     status.path = foundPath;
     try {
-      status.size = statSync36(foundPath).size;
+      status.size = statSync37(foundPath).size;
     } catch {
     }
     try {
@@ -18965,16 +19399,9 @@ function checkCodeindexStatus() {
   return status;
 }
 async function downloadArtifact(artifact, dest) {
-  const hasGh = (() => {
-    try {
-      execSync3("command -v gh", { stdio: "ignore" });
-      return true;
-    } catch {
-      return false;
-    }
-  })();
+  const hasGh = isOnPath("gh");
   if (hasGh) {
-    execSync3(`gh release download ${CODEINDEX_VERSION} --repo ${CODEINDEX_REPO} -p ${artifact} -O ${dest}`, {
+    execSync3(`gh release download ${CODEINDEX_VERSION} --repo ${CODEINDEX_REPO} -p ${artifact} -O "${dest}"`, {
       stdio: ["ignore", "pipe", "pipe"],
       timeout: 6e4
     });
@@ -19013,15 +19440,26 @@ async function installCodeindex(opts = {}) {
     return status;
   if (!status.prebuiltAvailable)
     return status;
-  mkdirSync10(CODEINDEX_INSTALL_DIR, { recursive: true });
+  mkdirSync11(CODEINDEX_INSTALL_DIR, { recursive: true });
   const tmpPath = `${CODEINDEX_BIN_PATH}.partial`;
   try {
     await downloadArtifact(status.artifactName, tmpPath);
+    const expected = expectedCodeindexSha256(status.artifactName);
+    if (!expected) {
+      throw new Error(`No pinned checksum for ${status.artifactName} \u2014 refusing to install an unverified binary. Add its sha256 to CODEINDEX_SHA256 in companions.ts.`);
+    }
+    const actual = createHash13("sha256").update(readFileSync35(tmpPath)).digest("hex");
+    if (actual !== expected) {
+      throw new Error(`Checksum mismatch for ${status.artifactName}.
+  expected ${expected}
+  actual   ${actual}
+Refusing to install. The release may have been re-uploaded, or something is serving different bytes.`);
+    }
     chmodSync5(tmpPath, 493);
     renameSync5(tmpPath, CODEINDEX_BIN_PATH);
   } catch (err) {
     try {
-      if (existsSync40(tmpPath))
+      if (existsSync41(tmpPath))
         unlinkSync3(tmpPath);
     } catch {
     }
@@ -19029,15 +19467,24 @@ async function installCodeindex(opts = {}) {
   }
   return checkCodeindexStatus();
 }
-var CODEINDEX_REPO, CODEINDEX_VERSION, CODEINDEX_INSTALL_DIR, CODEINDEX_BIN_NAME, CODEINDEX_BIN_PATH;
+var CODEINDEX_REPO, CODEINDEX_VERSION, CODEINDEX_SHA256, CODEINDEX_INSTALL_DIR, CODEINDEX_BIN_NAME, CODEINDEX_BIN_PATH;
 var init_companions = __esm({
   "../engine/dist/core/companions.js"() {
     "use strict";
+    init_which();
     CODEINDEX_REPO = "munhq/codeindex";
-    CODEINDEX_VERSION = "v0.1.0";
-    CODEINDEX_INSTALL_DIR = join42(homedir15(), ".local", "bin");
-    CODEINDEX_BIN_NAME = "codeindex";
-    CODEINDEX_BIN_PATH = join42(CODEINDEX_INSTALL_DIR, CODEINDEX_BIN_NAME);
+    CODEINDEX_VERSION = "v0.3.1";
+    CODEINDEX_SHA256 = {
+      "x86_64-linux": "4378f12e7c80fa8bb53e41c02db4b95955f2f878369abfb28b5edd94b4adbb85",
+      "aarch64-linux": "5a1d6c9c2592a3721547c42cd9b6b11f460e903bfc46407ae27d5879e7259587",
+      "x86_64-macos": "6ad2a2b40faa4ec72ac35fee84f35ea7c848cddc4f6382b4cafedb644f30389f",
+      "aarch64-macos": "f366d00918f79a4a0acc09c6091d97c6c378c79edbdbe3cb22e4014ea57f08d2",
+      "x86_64-windows": "a96fc8c8949bb399a44cc0615b12e458460a529c69f01e8829cc39a20f45ab29",
+      "aarch64-windows": "42620d56272cd9ba9d785569d8d754d6b4a3e80f36f28db3e0c483fd600ed117"
+    };
+    CODEINDEX_INSTALL_DIR = join45(homedir15(), ".local", "bin");
+    CODEINDEX_BIN_NAME = process.platform === "win32" ? "codeindex.exe" : "codeindex";
+    CODEINDEX_BIN_PATH = join45(CODEINDEX_INSTALL_DIR, CODEINDEX_BIN_NAME);
   }
 });
 
@@ -19143,15 +19590,17 @@ var init_prompts = __esm({
 var collector_exports = {};
 __export(collector_exports, {
   COLLECTOR_VERSION: () => COLLECTOR_VERSION,
+  GENERATED_PATTERNS: () => GENERATED_PATTERNS,
   collectCode: () => collectCode,
+  isGenerated: () => isGenerated,
   isJunkWorkspacePath: () => isJunkWorkspacePath,
   isSecretRule: () => isSecretRule,
   resolveCodeindexBin: () => resolveCodeindexBin
 });
 import { spawn } from "node:child_process";
 import { execSync as execSync4 } from "node:child_process";
-import { readFileSync as readFileSync35 } from "node:fs";
-import { join as join43, basename as basename23 } from "node:path";
+import { readFileSync as readFileSync36 } from "node:fs";
+import { join as join46, basename as basename23 } from "node:path";
 async function resolveCodeindexBin(autoInstall = true) {
   let st = checkCodeindexStatus();
   if (!st.installed && autoInstall)
@@ -19238,10 +19687,11 @@ function isSecretRule(rule) {
   return /secret|password|credential|key|token|auth/i.test(rule);
 }
 function isJunkWorkspacePath(ws) {
-  return /(^|\/)(scratchpad|\.cache|node_modules|\.git|tmp)(\/|$)|claude-1000/i.test(ws);
+  const norm = ws.replace(/\\/g, "/");
+  return /(^|\/)(scratchpad|\.cache|node_modules|\.git|tmp)(\/|$)|claude-1000/i.test(norm);
 }
 async function collectCode(opts) {
-  const ws = opts.workspace.replace(/\/+$/, "");
+  const ws = opts.workspace.replace(/[/\\]+$/, "");
   const log6 = opts.log ?? (() => {
   });
   if (isJunkWorkspacePath(ws)) {
@@ -19249,9 +19699,11 @@ async function collectCode(opts) {
   }
   const bin = opts.binPath ?? await resolveCodeindexBin(opts.autoInstall ?? true);
   const projectId = resolveProjectId(ws).id || `path:${ws}`;
-  const wsPrefix = ws + "/";
+  const wsNorm = ws.replace(/\\/g, "/");
+  const wsPrefix = wsNorm + "/";
   const rel = (p) => {
-    let r = p.startsWith(wsPrefix) ? p.slice(wsPrefix.length) : p;
+    const n = p.replace(/\\/g, "/");
+    let r = n.startsWith(wsPrefix) ? n.slice(wsPrefix.length) : n;
     if (r.startsWith("./"))
       r = r.slice(2);
     return r;
@@ -19312,7 +19764,7 @@ async function collectCode(opts) {
   }
   const complexity = (r) => {
     try {
-      const txt = readFileSync35(join43(ws, r), "utf8");
+      const txt = readFileSync36(join46(ws, r), "utf8");
       if (txt.length > 2e6)
         return 1;
       const m = txt.match(CF_RE);
@@ -19896,7 +20348,7 @@ async function collectCode(opts) {
   void health;
   return { project, findings, hotspots, actions };
 }
-var COLLECTOR_VERSION, ANALYSES, GENERATED, CF_RE, DEPTH, MCP_OUT_MAX_BYTES, call, COMMON_SYMBOL_NAMES;
+var COLLECTOR_VERSION, ANALYSES, GENERATED, CF_RE, DEPTH, MCP_OUT_MAX_BYTES, call, GENERATED_PATTERNS, COMMON_SYMBOL_NAMES;
 var init_collector = __esm({
   "../engine/dist/core/code/collector.js"() {
     "use strict";
@@ -19938,7 +20390,13 @@ var init_collector = __esm({
       "/vendor/",
       "/third_party/",
       "/site-packages/",
+      // Lockfiles. '.lock' alone catches yarn.lock, Cargo.lock, poetry.lock and
+      // composer.lock, and MISSES the two biggest ones in a JS repo —
+      // package-lock.json and pnpm-lock.yaml are named '-lock.<ext>'. Found by
+      // replacing this file's mirror test with one that calls the real predicate.
       ".lock",
+      "-lock.json",
+      "-lock.yaml",
       "/dist/",
       "/build/",
       "/out/",
@@ -19955,6 +20413,7 @@ var init_collector = __esm({
     DEPTH = 2;
     MCP_OUT_MAX_BYTES = 64 * 1024 * 1024;
     call = (id, name, args = {}) => ({ jsonrpc: "2.0", id, method: "tools/call", params: { name, arguments: args } });
+    GENERATED_PATTERNS = GENERATED;
     COMMON_SYMBOL_NAMES = /* @__PURE__ */ new Set([
       "error",
       "err",
@@ -20030,26 +20489,26 @@ __export(install_skills_exports, {
   skillsSourceDir: () => skillsSourceDir,
   uninstallSkills: () => uninstallSkills
 });
-import { readdirSync as readdirSync31, existsSync as existsSync41, mkdirSync as mkdirSync11, rmSync as rmSync6, cpSync, writeFileSync as writeFileSync10, readFileSync as readFileSync36, statSync as statSync37, realpathSync as realpathSync4 } from "fs";
-import { createHash as createHash13 } from "crypto";
-import { join as join44, basename as basename24 } from "path";
+import { readdirSync as readdirSync31, existsSync as existsSync42, mkdirSync as mkdirSync12, rmSync as rmSync6, cpSync, writeFileSync as writeFileSync12, readFileSync as readFileSync37, statSync as statSync38, realpathSync as realpathSync4 } from "fs";
+import { createHash as createHash14 } from "crypto";
+import { join as join47, basename as basename24 } from "path";
 function skillsSourceDir() {
-  return join44(import.meta.dirname, "..", "skills");
+  return join47(import.meta.dirname, "..", "skills");
 }
 function version() {
   try {
-    return JSON.parse(readFileSync36(new URL("../package.json", import.meta.url), "utf-8")).version || "0.0.0";
+    return JSON.parse(readFileSync37(new URL("../package.json", import.meta.url), "utf-8")).version || "0.0.0";
   } catch {
     return "0.0.0";
   }
 }
 function skillsFingerprint() {
   const src = skillsSourceDir();
-  const h = createHash13("sha256");
+  const h = createHash14("sha256");
   for (const name of bundledSkillNames()) {
-    for (const rel of filesUnder(join44(src, name)).sort()) {
+    for (const rel of filesUnder(join47(src, name)).sort()) {
       h.update(name + "/" + rel);
-      h.update(readFileSync36(join44(src, name, rel)));
+      h.update(readFileSync37(join47(src, name, rel)));
     }
   }
   return h.digest("hex").slice(0, 12);
@@ -20059,7 +20518,7 @@ function filesUnder(dir, prefix = "") {
   for (const e of readdirSync31(dir, { withFileTypes: true })) {
     if (e.name === MARKER) continue;
     const rel = prefix ? `${prefix}/${e.name}` : e.name;
-    if (e.isDirectory()) out.push(...filesUnder(join44(dir, e.name), rel));
+    if (e.isDirectory()) out.push(...filesUnder(join47(dir, e.name), rel));
     else out.push(rel);
   }
   return out;
@@ -20069,8 +20528,8 @@ function skillStamp() {
 }
 function bundledSkillNames() {
   const src = skillsSourceDir();
-  if (!existsSync41(src)) return [];
-  return readdirSync31(src, { withFileTypes: true }).filter((e) => e.isDirectory() && existsSync41(join44(src, e.name, "SKILL.md"))).map((e) => e.name).sort();
+  if (!existsSync42(src)) return [];
+  return readdirSync31(src, { withFileTypes: true }).filter((e) => e.isDirectory() && existsSync42(join47(src, e.name, "SKILL.md"))).map((e) => e.name).sort();
 }
 function realPathOrSelf(p) {
   try {
@@ -20083,7 +20542,7 @@ function claudeSkillTargets() {
   const targets = [];
   const seen = /* @__PURE__ */ new Set();
   for (const home of claudeHomeDirs()) {
-    const dir = join44(home, "skills");
+    const dir = join47(home, "skills");
     const key = realPathOrSelf(dir);
     if (seen.has(key)) continue;
     seen.add(key);
@@ -20094,7 +20553,7 @@ function claudeSkillTargets() {
       dir,
       // Judge each profile on ITS OWN transcripts, not the primary's: a home
       // with no projects/ is a directory someone made, not a Claude install.
-      available: existsSync41(join44(home, "projects"))
+      available: existsSync42(join47(home, "projects"))
     });
   }
   if (targets.length === 0) {
@@ -20117,7 +20576,7 @@ function skillTargets() {
   ];
 }
 function isManaged(dir) {
-  return existsSync41(join44(dir, MARKER));
+  return existsSync42(join47(dir, MARKER));
 }
 function installSkills(opts = {}) {
   const onlyAvailable = opts.onlyAvailable ?? true;
@@ -20134,15 +20593,15 @@ function installSkills(opts = {}) {
       continue;
     }
     for (const name of names) {
-      const dest = join44(t.dir, name);
-      if (existsSync41(dest) && !isManaged(dest)) {
+      const dest = join47(t.dir, name);
+      if (existsSync42(dest) && !isManaged(dest)) {
         skippedUserOwned.push(name);
         continue;
       }
-      mkdirSync11(t.dir, { recursive: true });
+      mkdirSync12(t.dir, { recursive: true });
       rmSync6(dest, { recursive: true, force: true });
-      cpSync(join44(src, name), dest, { recursive: true });
-      writeFileSync10(join44(dest, MARKER), `${stamp}
+      cpSync(join47(src, name), dest, { recursive: true });
+      writeFileSync12(join47(dest, MARKER), `${stamp}
 `);
       installed.push(name);
     }
@@ -20155,13 +20614,13 @@ function uninstallSkills() {
   const perTarget = [];
   for (const t of skillTargets()) {
     const removed = [];
-    if (!existsSync41(t.dir)) {
+    if (!existsSync42(t.dir)) {
       perTarget.push({ id: t.id, label: t.label, removed });
       continue;
     }
     for (const entry of readdirSync31(t.dir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
-      const dir = join44(t.dir, entry.name);
+      const dir = join47(t.dir, entry.name);
       if (isManaged(dir) && (names.has(entry.name) || entry.name.startsWith("chat-recall"))) {
         rmSync6(dir, { recursive: true, force: true });
         removed.push(entry.name);
@@ -20178,10 +20637,10 @@ function skillsNeedRefresh() {
   for (const t of skillTargets()) {
     if (!t.available) continue;
     for (const name of names) {
-      const marker = join44(t.dir, name, MARKER);
-      if (!existsSync41(marker)) return true;
+      const marker = join47(t.dir, name, MARKER);
+      if (!existsSync42(marker)) return true;
       try {
-        if (readFileSync36(marker, "utf-8").trim() !== cur) return true;
+        if (readFileSync37(marker, "utf-8").trim() !== cur) return true;
       } catch {
         return true;
       }
@@ -20196,11 +20655,11 @@ function skillStatus() {
     let installed = 0;
     let ver = null;
     for (const name of names) {
-      const marker = join44(t.dir, name, MARKER);
-      if (existsSync41(marker)) {
+      const marker = join47(t.dir, name, MARKER);
+      if (existsSync42(marker)) {
         installed++;
         try {
-          ver = readFileSync36(marker, "utf-8").trim();
+          ver = readFileSync37(marker, "utf-8").trim();
         } catch {
         }
       }
@@ -20235,15 +20694,15 @@ __export(service_installer_exports, {
   uninstallService: () => uninstallService
 });
 import { execSync as execSync5 } from "child_process";
-import { existsSync as existsSync42, mkdirSync as mkdirSync12, rmSync as rmSync7, writeFileSync as writeFileSync11 } from "fs";
+import { existsSync as existsSync43, mkdirSync as mkdirSync13, rmSync as rmSync7, writeFileSync as writeFileSync13 } from "fs";
 import { homedir as homedir16 } from "os";
-import { join as join45 } from "path";
+import { join as join48 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function resolveDaemonPaths() {
   const watchJs = fileURLToPath2(new URL("./watch.js", import.meta.url));
   const node = process.execPath;
-  const dataDir = join45(homedir16(), ".chat-recall");
-  const logFile = join45(dataDir, "watch.log");
+  const dataDir = join48(homedir16(), ".chat-recall");
+  const logFile = join48(dataDir, "watch.log");
   return { watchJs, node, logFile, dataDir };
 }
 function tryCmd(cmd) {
@@ -20268,7 +20727,7 @@ function isServiceRunning() {
 }
 function installService() {
   const { watchJs, node, logFile, dataDir } = resolveDaemonPaths();
-  mkdirSync12(dataDir, { recursive: true });
+  mkdirSync13(dataDir, { recursive: true });
   if (process.platform === "linux") {
     return installSystemd(watchJs, node, logFile);
   }
@@ -20284,11 +20743,11 @@ function installService() {
   );
 }
 function installSystemd(watchJs, node, logFile) {
-  const unitDir = join45(homedir16(), ".config", "systemd", "user");
-  const unitPath = join45(unitDir, "chat-recall-watch.service");
+  const unitDir = join48(homedir16(), ".config", "systemd", "user");
+  const unitPath = join48(unitDir, "chat-recall-watch.service");
   const unit = renderSystemdUnit(watchJs, node, logFile);
-  mkdirSync12(unitDir, { recursive: true });
-  writeFileSync11(unitPath, unit);
+  mkdirSync13(unitDir, { recursive: true });
+  writeFileSync13(unitPath, unit);
   try {
     execSync5("systemctl --user daemon-reload && systemctl --user enable chat-recall-watch.service && systemctl --user restart chat-recall-watch.service", { stdio: "inherit" });
     try {
@@ -20316,10 +20775,14 @@ function renderSystemdUnit(watchJs, node, logFile) {
     "Restart=on-failure",
     "RestartSec=10",
     "Nice=10",
-    // Keep the service's own stdout/stderr out of the journal noise but
-    // available for `chat-recall service status` without paging journald.
-    `StandardOutput=append:${logFile}`,
-    `StandardError=append:${logFile}`,
+    // JOURNAL, not append:. The file version had no rotation and nothing to
+    // give it any: systemd holds the fd open, so the daemon cannot rename or
+    // truncate its own log without leaving systemd writing into a hole. It
+    // reached 45 MB on this developer's machine and would have grown forever.
+    // journald already rotates and applies disk limits. Read it with
+    //   journalctl --user -u chat-recall-watch -f
+    "StandardOutput=journal",
+    "StandardError=journal",
     "",
     "[Install]",
     "WantedBy=default.target",
@@ -20328,11 +20791,11 @@ function renderSystemdUnit(watchJs, node, logFile) {
 }
 function installLaunchd(watchJs, node, logFile) {
   const label = "com.chat-recall.watch";
-  const plistDir = join45(homedir16(), "Library", "LaunchAgents");
-  const plistPath = join45(plistDir, `${label}.plist`);
+  const plistDir = join48(homedir16(), "Library", "LaunchAgents");
+  const plistPath = join48(plistDir, `${label}.plist`);
   const plist = renderLaunchdPlist(watchJs, node, logFile, label);
-  mkdirSync12(plistDir, { recursive: true });
-  writeFileSync11(plistPath, plist);
+  mkdirSync13(plistDir, { recursive: true });
+  writeFileSync13(plistPath, plist);
   try {
     try {
       execSync5(`launchctl unload "${plistPath}"`, { stdio: "ignore" });
@@ -20361,7 +20824,7 @@ function renderLaunchdPlist(watchJs, node, logFile, label = "com.chat-recall.wat
 }
 function installWindowsTask(watchJs, node, logFile) {
   const taskName = "chat-recall-watch";
-  const tr = `\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\"`;
+  const tr = `cmd /c \\"\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\" >> \\"${logFile}\\" 2>&1\\"`;
   try {
     execSync5(`schtasks /create /tn "${taskName}" /tr "${tr}" /sc onlogon /rl LIMITED /f`, { stdio: "inherit" });
     try {
@@ -20373,8 +20836,8 @@ function installWindowsTask(watchJs, node, logFile) {
   }
   return { definitionPath: null, logFile };
 }
-function renderWindowsTaskCommand(watchJs, node, taskName = "chat-recall-watch") {
-  const tr = `\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\"`;
+function renderWindowsTaskCommand(watchJs, node, taskName = "chat-recall-watch", logFile) {
+  const tr = logFile ? `cmd /c \\"\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\" >> \\"${logFile}\\" 2>&1\\"` : `\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\"`;
   return `schtasks /create /tn "${taskName}" /tr "${tr}" /sc onlogon /rl LIMITED /f`;
 }
 function uninstallService() {
@@ -20385,8 +20848,8 @@ function uninstallService() {
       removed = true;
     } catch {
     }
-    const unitPath = join45(homedir16(), ".config", "systemd", "user", "chat-recall-watch.service");
-    if (existsSync42(unitPath)) {
+    const unitPath = join48(homedir16(), ".config", "systemd", "user", "chat-recall-watch.service");
+    if (existsSync43(unitPath)) {
       rmSync7(unitPath, { force: true });
       removed = true;
     }
@@ -20397,13 +20860,13 @@ function uninstallService() {
     return removed;
   }
   if (process.platform === "darwin") {
-    const plistPath = join45(homedir16(), "Library", "LaunchAgents", "com.chat-recall.watch.plist");
+    const plistPath = join48(homedir16(), "Library", "LaunchAgents", "com.chat-recall.watch.plist");
     try {
       execSync5(`launchctl unload "${plistPath}" 2>/dev/null`, { stdio: "ignore" });
     } catch {
     }
     let removed = false;
-    if (existsSync42(plistPath)) {
+    if (existsSync43(plistPath)) {
       rmSync7(plistPath, { force: true });
       removed = true;
     }
@@ -20472,11 +20935,11 @@ function stalenessBanner(state) {
   const days = state.periodEnd ? Math.max(0, Math.floor((Date.now() - state.periodEnd) / 864e5)) : null;
   const reason = state.status === "trialing" ? "the trial has ended" : state.status === "past_due" ? "a payment has not gone through" : "the subscription has lapsed";
   return [
-    `\u26A0 FREE PLAN \u2014 ${reason}.`,
-    "Search and lists cover only the recent window (default 7 days); older history is stored but locked.",
+    `\u26A0 SYNCING IS OFF \u2014 ${reason}.`,
+    "Search and lists cover the WHOLE synced history; nothing is windowed or locked.",
     since ? `The plan lapsed ${since}${days !== null ? ` (${days} days ago)` : ""}.` : "",
-    "Do not tell the user their older work does not exist; say it is locked behind the free plan and unlocks on upgrade.",
-    "Sync continues under a monthly quota, export always works, and nothing has been deleted."
+    "What is missing is only work done SINCE the lapse, because new sessions stopped uploading.",
+    "Do not tell the user their history is gone or locked. Say new sessions are not syncing, and that subscribing plus one `chat-recall sync --full` brings everything current. Export always works."
   ].filter(Boolean).join(" ");
 }
 
@@ -20488,9 +20951,9 @@ import {
   ListToolsRequestSchema
 } from "@modelcontextprotocol/sdk/types.js";
 import { z } from "zod";
-import { existsSync as existsSync43, readFileSync as readFileSync37 } from "fs";
-import { join as join46 } from "path";
-import { execSync as _execSync, spawn as spawn2 } from "child_process";
+import { existsSync as existsSync44, readFileSync as readFileSync38 } from "fs";
+import { join as join49 } from "path";
+import { spawn as spawn2 } from "child_process";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // ../engine/dist/core/context.js
@@ -20544,6 +21007,7 @@ function formatContext(context) {
 
 // src/mcp.ts
 init_paths();
+init_credentials_env();
 init_backends();
 init_tool_backend();
 
@@ -20635,7 +21099,7 @@ function sanitizeQuery(query) {
 
 // ../engine/dist/core/write-ahead-log.js
 init_paths();
-import { existsSync as existsSync14, mkdirSync as mkdirSync4, appendFileSync, openSync as openSync6, closeSync as closeSync6, chmodSync as chmodSync2 } from "fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync4, appendFileSync, openSync as openSync7, closeSync as closeSync7, chmodSync as chmodSync2 } from "fs";
 import { join as join15 } from "path";
 var REDACT_KEYS = /* @__PURE__ */ new Set([
   "content",
@@ -20661,8 +21125,8 @@ var WriteAheadLog = class {
     }
     this.walPath = join15(dir, "write_log.jsonl");
     if (!existsSync14(this.walPath)) {
-      const fd = openSync6(this.walPath, "w", 384);
-      closeSync6(fd);
+      const fd = openSync7(this.walPath, "w", 384);
+      closeSync7(fd);
     }
   }
   /**
@@ -20716,6 +21180,63 @@ function getWAL() {
 
 // src/mcp.ts
 init_client_events();
+init_which();
+
+// ../engine/dist/core/collector-health.js
+init_paths();
+import { readFileSync as readFileSync33, writeFileSync as writeFileSync9, mkdirSync as mkdirSync10 } from "node:fs";
+import { join as join43, dirname as dirname17 } from "node:path";
+var healthPath = () => join43(getDataDir(), "collector-health.json");
+function readCollectorHealth() {
+  try {
+    const h = JSON.parse(readFileSync33(healthPath(), "utf-8"));
+    return h && h.v === 1 && typeof h.updatedAt === "number" ? h : null;
+  } catch {
+    return null;
+  }
+}
+var STALE_AFTER_MS = 30 * 6e4;
+var CRASHLOOP_RESTARTS = 3;
+var ago = (ms) => {
+  const m = Math.floor(ms / 6e4);
+  if (m < 60)
+    return `${m}m`;
+  const h = Math.floor(m / 60);
+  return h < 48 ? `${h}h` : `${Math.floor(h / 24)}d`;
+};
+function judgeHealth(h, now = Date.now()) {
+  if (!h)
+    return { ok: true, summary: null, reasons: [] };
+  const reasons = [];
+  const silent = now - h.updatedAt;
+  if (silent > STALE_AFTER_MS) {
+    reasons.push(`the collector has not reported for ${ago(silent)} \u2014 it may not be running`);
+  }
+  if (h.restartsLastHour >= CRASHLOOP_RESTARTS) {
+    reasons.push(`it restarted ${h.restartsLastHour} times in the last hour`);
+  }
+  const targets = Object.entries(h.targets ?? {});
+  const stale = targets.filter(([, t]) => t.lastOkAt === null || now - t.lastOkAt > STALE_AFTER_MS);
+  if (targets.length > 0 && stale.length === targets.length) {
+    const ranked = stale.map(([url, t]) => ({ url, t })).sort((a, b) => {
+      const err = Number(!!b.t.lastError) - Number(!!a.t.lastError);
+      if (err !== 0)
+        return err;
+      return (a.t.lastOkAt ?? 0) - (b.t.lastOkAt ?? 0);
+    });
+    const worst = ranked[0];
+    const when = worst.t.lastOkAt ? `${ago(now - worst.t.lastOkAt)} ago` : "never";
+    const why = worst.t.lastError ? ` (${worst.t.lastError})` : "";
+    reasons.push(`nothing has synced since ${when}${why}`);
+  }
+  if (reasons.length === 0)
+    return { ok: true, summary: null, reasons: [] };
+  return {
+    ok: false,
+    summary: `chat-recall is not syncing: ${reasons.join("; ")}.`,
+    reasons
+  };
+}
 
 // src/recommendation-merge.ts
 var INSTRUCTION_KINDS = ["rule", "skill"];
@@ -20783,7 +21304,7 @@ var _codeindexAvailable = null;
 function codeindexAvailable() {
   if (_codeindexAvailable !== null) return _codeindexAvailable;
   try {
-    _execSync("command -v codeindex", { stdio: "ignore" });
+    if (!isOnPath("codeindex")) throw new Error("codeindex not on PATH");
     _codeindexAvailable = true;
   } catch {
     _codeindexAvailable = false;
@@ -20799,8 +21320,10 @@ function withCodeindexHint(body, kind) {
   return body + hints[kind];
 }
 function remoteCredentials() {
+  const fromEnv = envCredentials();
+  if (fromEnv) return { base: fromEnv.serverUrl, token: fromEnv.token };
   try {
-    const raw = readFileSync37(join46(getDataDir(), "credentials.json"), "utf-8");
+    const raw = readFileSync38(join49(getDataDir(), "credentials.json"), "utf-8");
     const parsed = JSON.parse(raw);
     if (Array.isArray(parsed.targets) && parsed.targets.length) {
       const valid = parsed.targets.filter((t) => t?.serverUrl);
@@ -21013,21 +21536,25 @@ var RecallTeamActivitySchema = z.object({
   member: z.string().optional().describe("Filter to one teammate by their user id (sub)"),
   since_days: z.number().optional().describe("Only activity in the last N days")
 });
-var TASK_STATUSES = ["todo", "in_progress", "blocked", "done"];
+var TASK_STATUS_FILTER = ["todo", "in_progress", "done", "rejected"];
+var TASK_STATUS_SETTABLE = ["todo", "in_progress", "done"];
 var RecallTasksSchema = z.object({
   mine: z.boolean().optional().describe("Only tasks assigned to me"),
   project: z.string().optional().describe("Filter to one project_id"),
-  status: z.enum(TASK_STATUSES).optional().describe("Filter by status")
+  status: z.enum(TASK_STATUS_FILTER).optional().describe("Filter by status"),
+  detail: z.boolean().optional().describe("Return the full brief per task \u2014 the fix, the file locations and the agent prompt \u2014 plus how to claim and close one. Use this when you intend to DO the tasks, not just list them.")
 });
 var RecallTaskCreateSchema = z.object({
   title: z.string().describe("Task title"),
   description: z.string().optional(),
   project: z.string().optional().describe("project_id this task belongs to"),
-  assignee: z.string().optional().describe("Teammate user id (sub) to assign; omit to leave unassigned")
+  assignee: z.string().optional().describe("Teammate user id (sub) to assign; omit to leave unassigned"),
+  due: z.number().optional().describe("Due date, epoch milliseconds. Set one when the work is time-bound; omit otherwise."),
+  linked_finding_id: z.string().optional().describe("The code finding this task comes from (ca_\u2026) \u2014 lets the card auto-close and dedupe.")
 });
 var RecallTaskUpdateSchema = z.object({
   id: z.string().describe("Task id (t_\u2026)"),
-  status: z.enum(TASK_STATUSES).optional(),
+  status: z.enum(TASK_STATUS_SETTABLE).optional(),
   assignee: z.string().optional().describe("Reassign to this user id (sub); empty string unassigns"),
   title: z.string().optional(),
   comment: z.string().optional().describe("Add a comment to the task"),
@@ -21126,7 +21653,13 @@ var RecallWakeUpSchema = z.object({
   max_facts: z.number().optional().default(10).describe("How many high-importance classifier hits to include"),
   max_kg_facts: z.number().optional().default(15).describe("How many current knowledge-graph facts to include"),
   identity: z.string().optional().describe('Optional override for the identity blurb. Defaults to <data dir>/identity.txt or "AI coding assistant"'),
-  project_filter: z.string().optional().describe("Scope facts and KG entities to a project (substring match against project_path / entity name). Without this, facts are global and bleed across unrelated projects.")
+  project_filter: z.string().optional().describe("Scope facts, KG entities and the task count to a project (substring match against project_path / entity name). Without this, facts are global and bleed across unrelated projects."),
+  // Alias. Its sibling tools (recall_tasks, recall_project_context) all take
+  // `project`, and passing that here used to be silently ignored: no error, and
+  // a WHOLE-TENANT answer that looks exactly like a scoped one. That is the
+  // failure this tool exists to prevent — being told about another project's
+  // backlog — so accepting both names is worth more than naming purity.
+  project: z.string().optional().describe("Alias for project_filter.")
 });
 var RecallSetSchema = z.object({
   key: z.string().describe('Key name (e.g. "current-pr", "default-test-runner")'),
@@ -21164,7 +21697,7 @@ var server = new Server(
     name: "chat-recall",
     // Resolves to packages/cli/package.json from both src/ and the bundled dist/
     version: JSON.parse(
-      readFileSync37(new URL("../package.json", import.meta.url), "utf-8")
+      readFileSync38(new URL("../package.json", import.meta.url), "utf-8")
     ).version
   },
   {
@@ -21209,6 +21742,59 @@ var LEAN_TOOLS = /* @__PURE__ */ new Set([
 function toolProfile() {
   return (process.env.CHAT_RECALL_MCP_PROFILE || "").toLowerCase() === "full" ? "full" : "lean";
 }
+var WRITE_TOOLS = /* @__PURE__ */ new Set([
+  "recall_index",
+  // indexes and ships new rows
+  "recall_code_index",
+  // runs the analyzer, then syncs findings
+  "recall_kg_add",
+  "recall_kg_invalidate",
+  "recall_diary_write",
+  "recall_decision_record",
+  "recall_set",
+  "recall_task_create",
+  "recall_task_update",
+  "recall_task_comment",
+  "recall_security_dismiss",
+  "recall_reclassify",
+  // rewrites classifier tags on indexed chunks
+  "recall_regenerate_summary",
+  // overwrites a stored summary
+  "recall_rename_session"
+  // overwrites the session name
+]);
+var DESTRUCTIVE_TOOLS = /* @__PURE__ */ new Set([
+  "recall_kg_invalidate",
+  "recall_reclassify",
+  "recall_regenerate_summary",
+  "recall_rename_session",
+  "recall_security_dismiss"
+]);
+var IDEMPOTENT_TOOLS = /* @__PURE__ */ new Set([
+  "recall_set",
+  "recall_kg_invalidate",
+  "recall_rename_session",
+  "recall_security_dismiss",
+  "recall_reclassify",
+  "recall_task_update"
+]);
+function toolTitle(name) {
+  const words = name.replace(/^recall_/, "").replace(/_/g, " ");
+  return words.charAt(0).toUpperCase() + words.slice(1);
+}
+function annotate(t) {
+  const writes = WRITE_TOOLS.has(t.name);
+  return {
+    ...t,
+    annotations: {
+      title: toolTitle(t.name),
+      readOnlyHint: !writes,
+      destructiveHint: DESTRUCTIVE_TOOLS.has(t.name),
+      idempotentHint: writes ? IDEMPOTENT_TOOLS.has(t.name) : true,
+      openWorldHint: true
+    }
+  };
+}
 server.setRequestHandler(ListToolsRequestSchema, async () => {
   const all = [
     {
@@ -21575,17 +22161,28 @@ or standup/status. Filter by project, by member, or by recency (since_days).`,
     },
     {
       name: "recall_tasks",
-      description: `List collaborative team tasks (the shared task board).
+      description: `List the task board \u2014 and, with detail, the work itself.
+
+Without \`detail\`: one line per card (title, id, assignee). Use for "what's on
+the team's plate", "my tasks", or to find a task id to update.
+
+With \`detail: true\`: the full brief per open card \u2014 the fix, the file
+locations and the agent prompt that the auto-filer already wrote \u2014 plus how to
+claim a card and how it gets closed. Use that whenever you intend to DO the
+work rather than report on it.
 
-Team-visible tasks with status, assignee, and project. Use for "what's on the
-team's plate", "my tasks", or to find a task id to update. Filter by mine /
-project / status.`,
+Closing is earned: 'done' is refused without a linked session. Rejecting is the
+user's call, never yours.`,
       inputSchema: {
         type: "object",
         properties: {
           mine: { type: "boolean", description: "Only tasks assigned to me" },
           project: { type: "string", description: "Filter to one project_id" },
-          status: { type: "string", enum: [...TASK_STATUSES], description: "Filter by status" }
+          status: { type: "string", enum: [...TASK_STATUS_FILTER], description: "Filter by status" },
+          detail: {
+            type: "boolean",
+            description: "Return the full brief per task \u2014 the fix, the file locations and the agent prompt \u2014 plus how to claim and close one. Use this when you intend to DO the tasks, not just list them."
+          }
         }
       }
     },
@@ -21603,7 +22200,9 @@ lets the board verify the work actually shipped.`,
           title: { type: "string", description: "Task title" },
           description: { type: "string" },
           project: { type: "string", description: "project_id this task belongs to" },
-          assignee: { type: "string", description: "Teammate user id (sub) to assign" }
+          assignee: { type: "string", description: "Teammate user id (sub) to assign" },
+          due: { type: "number", description: "Due date, epoch milliseconds. Set one when the work is time-bound; omit otherwise." },
+          linked_finding_id: { type: "string", description: "The code finding this task comes from (ca_\u2026). Setting it lets the card close itself when a re-index stops reporting the finding, and dedupes against an existing card for the same finding." }
         },
         required: ["title"]
       }
@@ -21623,7 +22222,7 @@ WORKFLOW \u2014 do this whenever the user asks you to work on a task from the bo
         type: "object",
         properties: {
           id: { type: "string", description: "Task id (t_\u2026)" },
-          status: { type: "string", enum: [...TASK_STATUSES] },
+          status: { type: "string", enum: [...TASK_STATUS_SETTABLE], description: "Set the card's state. There is no 'rejected' here on purpose: rejecting is the user's verdict, not yours." },
           assignee: { type: "string", description: "Reassign to this user id (sub)" },
           title: { type: "string" },
           comment: { type: "string", description: "Add a comment" },
@@ -21922,7 +22521,8 @@ the start of a session to "remember who you are and what's true right now".`,
           max_facts: { type: "number", default: 10 },
           max_kg_facts: { type: "number", default: 15 },
           identity: { type: "string" },
-          project_filter: { type: "string", description: "Scope facts and KG entities to a project (substring match). Without it, facts are global." }
+          project_filter: { type: "string", description: "Scope facts, KG entities and the task count to a project (substring match). Without it, facts are global." },
+          project: { type: "string", description: "Alias for project_filter \u2014 the name every sibling tool uses." }
         }
       }
     },
@@ -22115,7 +22715,7 @@ Complements recall_memory_search: search finds candidates, this reads the specif
       inputSchema: { type: "object", properties: {} }
     }
   ];
-  if (toolProfile() === "full") return { tools: all };
+  if (toolProfile() === "full") return { tools: all.map(annotate) };
   const lean = all.filter((t) => LEAN_TOOLS.has(t.name));
   const hidden = all.length - lean.length;
   if (hidden > 0) {
@@ -22125,7 +22725,7 @@ Complements recall_memory_search: search finds candidates, this reads the specif
       inputSchema: { type: "object", properties: {} }
     });
   }
-  return { tools: lean };
+  return { tools: lean.map(annotate) };
 });
 var syncStateCache = null;
 var SYNC_STATE_TTL_MS = 5 * 60 * 1e3;
@@ -22157,8 +22757,13 @@ async function syncState() {
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
   const result = await dispatchTool(request);
   try {
-    const banner = stalenessBanner(await syncState());
-    if (!banner) return result;
+    const health = judgeHealth(readCollectorHealth());
+    const banners = [
+      health.ok ? null : `\u26A0 ${health.summary} Recent work may be missing from these answers. Tell the user, and suggest \`chat-recall doctor\`.`,
+      stalenessBanner(await syncState())
+    ].filter(Boolean);
+    if (banners.length === 0) return result;
+    const banner = banners.join("\n\n");
     const content = result.content;
     if (!Array.isArray(content) || !content.length) return result;
     return { ...result, content: [{ type: "text", text: banner }, ...content] };
@@ -22288,6 +22893,11 @@ async function dispatchTool(request) {
           `FTS5 chunks: ${status.totalChunks}`,
           `Raw archives: ${sync.rawArchived}`
         ];
+        {
+          const { updateNotice: updateNotice2 } = await Promise.resolve().then(() => (init_update_notice(), update_notice_exports));
+          const notice = updateNotice2();
+          if (notice) lines.push("", `\u26A0 ${notice}`);
+        }
         if (sync.newestSessionAgeMs !== null) {
           const mins = Math.round(sync.newestSessionAgeMs / 6e4);
           lines.push(`Freshness: newest synced session ${mins} min ago`);
@@ -23016,21 +23626,67 @@ _Edits stayed local or window was off \u2014 try increasing buffer_minutes._` }]
         if (params.status) qs.status = params.status;
         const { tasks } = await remoteGetQS("/api/tasks", qs);
         if (!tasks || tasks.length === 0) return { content: [{ type: "text", text: "No team tasks match." }] };
-        const lines = tasks.map((t) => `- [${t.status}] ${t.title}  \`${t.id}\`${t.projectId ? ` \xB7 ${t.projectId}` : ""}${t.assigneeSub ? ` \xB7 @${t.assigneeSub.slice(0, 8)}` : " \xB7 unassigned"}`);
-        return { content: [{ type: "text", text: `# Team tasks (${tasks.length})
+        if (!params.detail) {
+          const lines = tasks.map((t) => `- [${t.status}] ${t.title}  \`${t.id}\`${t.projectId ? ` \xB7 ${t.projectId}` : ""}${t.assigneeSub ? ` \xB7 @${t.assigneeSub.slice(0, 8)}` : " \xB7 unassigned"}`);
+          return { content: [{ type: "text", text: `# Team tasks (${tasks.length})
+
+${lines.join("\n")}
 
-${lines.join("\n")}` }] };
+_Call again with \`detail: true\` for the full brief (fix, locations, agent prompt) so you can start work._` }] };
+        }
+        const open3 = tasks.filter((t) => t.status !== "done" && t.status !== "rejected");
+        const claimed = open3.filter((t) => t.status === "in_progress");
+        const blocks = open3.map((t, i) => {
+          const head = `## ${i + 1}. ${t.title}
+
+- id: \`${t.id}\`  \xB7  status: ${t.status}${t.projectId ? `  \xB7  project: ${t.projectId}` : ""}${t.linkedSessionId ? `  \xB7  already claimed by session ${t.linkedSessionId.slice(0, 8)}` : ""}`;
+          const body = (t.description || "").trim();
+          return body ? `${head}
+
+${body}` : head;
+        });
+        const howTo = [
+          "---",
+          "",
+          "### Working these tasks",
+          "",
+          '1. Claim one before you touch code: `recall_task_update` with `id`, `status: "in_progress"`',
+          "   and `linked_session_id` set to YOUR current session id.",
+          "2. Do the work. Each brief above carries the fix and, where the task came from a code finding,",
+          "   an agent prompt written for exactly this.",
+          '3. Close it with `recall_task_update` `status: "done"` and a `comment` saying what you changed.',
+          "",
+          "The session link is not bookkeeping: **done is refused without it**. A card asserts a problem",
+          "exists in the code, so closing one asserts the code changed, and the board shows the files,",
+          "lines and commits from your session as the evidence. A person cannot mark these done by hand.",
+          "",
+          "If a task is wrong \u2014 not a real problem, or not worth doing \u2014 do NOT close it. Tell the user;",
+          "rejecting is their call, and it dismisses the finding so it stops being re-filed.",
+          "",
+          "Auto-filed cards also close themselves once a re-index no longer reports their finding, so a",
+          "real fix ends the task either way."
+        ].join("\n");
+        const header = `# Tasks ready to work (${open3.length}${tasks.length !== open3.length ? ` of ${tasks.length}` : ""})${params.project ? ` \xB7 ${params.project}` : ""}${claimed.length ? `
+
+_${claimed.length} already in progress \u2014 check the session link before starting one of those._` : ""}`;
+        return { content: [{ type: "text", text: `${header}
+
+${blocks.join("\n\n")}
+
+${howTo}` }] };
       }
       case "recall_task_create": {
         const params = RecallTaskCreateSchema.parse(args);
         requireRemote();
-        const { task } = await remotePost("/api/tasks", {
+        const { task, deduped } = await remotePost("/api/tasks", {
           title: params.title,
           description: params.description,
           projectId: params.project,
-          assigneeSub: params.assignee ?? null
+          assigneeSub: params.assignee ?? null,
+          due: params.due,
+          linkedFindingId: params.linked_finding_id
         });
-        return { content: [{ type: "text", text: `Created task \`${task.id}\`: ${task.title}` }] };
+        return { content: [{ type: "text", text: deduped ? `A task for that finding already exists: \`${task.id}\`: ${task.title}` : `Created task \`${task.id}\`: ${task.title}` }] };
       }
       case "recall_task_update": {
         const params = RecallTaskUpdateSchema.parse(args);
@@ -23713,8 +24369,8 @@ Subject: ${params.subject}`;
 `];
           for (const r of rows) {
             const preview = r.value.length > 80 ? r.value.slice(0, 80) + "\u2026" : r.value;
-            const ago2 = Math.floor((Date.now() - r.updated_at) / 1e3);
-            lines.push(`- **${r.scope}:${r.key}** \u2014 ${preview}  _(${ago2}s ago)_`);
+            const ago3 = Math.floor((Date.now() - r.updated_at) / 1e3);
+            lines.push(`- **${r.scope}:${r.key}** \u2014 ${preview}  _(${ago3}s ago)_`);
           }
           return { content: [{ type: "text", text: lines.join("\n") }] };
         }
@@ -23724,11 +24380,11 @@ Subject: ${params.subject}`;
           { scope, key: params.key }
         );
         if (!row) return { content: [{ type: "text", text: `(no value at ${scope}:${params.key})` }] };
-        const ago = Math.floor((Date.now() - row.updated_at) / 1e3);
+        const ago2 = Math.floor((Date.now() - row.updated_at) / 1e3);
         return {
           content: [{
             type: "text",
-            text: `${scope}:${params.key} (set ${ago}s ago)
+            text: `${scope}:${params.key} (set ${ago2}s ago)
 
 ${row.value}`
           }]
@@ -23736,13 +24392,14 @@ ${row.value}`
       }
       // ── Wake-up context ────────────────────────────────────────
       case "recall_wake_up": {
-        const params = RecallWakeUpSchema.parse(args);
+        const parsedWake = RecallWakeUpSchema.parse(args);
+        const params = { ...parsedWake, project_filter: parsedWake.project_filter ?? parsedWake.project };
         let identity = params.identity ?? "AI coding assistant";
         if (!params.identity) {
           const idFile = getIdentityFilePath();
-          if (existsSync43(idFile)) {
+          if (existsSync44(idFile)) {
             try {
-              identity = readFileSync37(idFile, "utf-8").trim() || identity;
+              identity = readFileSync38(idFile, "utf-8").trim() || identity;
             } catch {
             }
           }
@@ -23766,8 +24423,12 @@ ${row.value}`
         });
         const ot = wake.openTasks;
         if (ot && ot.total > 0) {
+          const scope = ot.scope;
           lines.push("## Task board");
-          lines.push(`  ${ot.total} open task(s)${ot.auto ? ` \u2014 ${ot.auto} auto-filed from code findings` : ""}. List them with recall_tasks; when you start one, set it in_progress and pass your session id as linked_session_id.`);
+          lines.push(`  ${ot.total} open task(s)${scope ? ` in \`${scope}\`` : ""}${ot.auto ? ` \u2014 ${ot.auto} auto-filed from code findings` : ""}.`);
+          lines.push(`  Offer to work them: \`recall_tasks\` with \`detail: true\`${scope ? ` and \`project\`` : ""} returns each task's fix, file locations and agent prompt.`);
+          lines.push('  Claim one before editing: `recall_task_update` with `status: "in_progress"` and your session id as `linked_session_id`.');
+          lines.push("  You close them, not the user: `done` is refused without a linked session, because the board shows the diff behind it.");
           lines.push("");
         }
         if (wake.highFacts.length > 0) {
@@ -24151,6 +24812,21 @@ function startBackgroundSync() {
   setTimeout(() => {
     void tick("full");
   }, 15e3).unref();
+  const updateTick = async () => {
+    try {
+      const { refreshUpdateCheck: refreshUpdateCheck2, updateNotice: updateNotice2 } = await Promise.resolve().then(() => (init_update_notice(), update_notice_exports));
+      await refreshUpdateCheck2();
+      const notice = updateNotice2();
+      if (notice) console.error(`[mcp] ${notice}`);
+    } catch {
+    }
+  };
+  setTimeout(() => {
+    void updateTick();
+  }, 2e4).unref();
+  setInterval(() => {
+    void updateTick();
+  }, 6 * 60 * 60 * 1e3).unref();
 }
 function installCrashGuards() {
   process.on("unhandledRejection", (reason) => {