chat-recall 0.5.7 → 0.5.9

package/dist/cli.js

@@ -7456,7 +7456,7 @@ async function archiveRawSession(store, sessionId) {
 }
 function detectForkPredecessor(sessionPath) {
   const { readFileSync: readFileSync49, readdirSync: readdirSync35 } = requireFs();
-  const { dirname: dirname26, join: join61, basename: basename29 } = requirePath();
+  const { dirname: dirname27, join: join61, basename: basename29 } = requirePath();
   let text;
   try {
     text = readFileSync49(sessionPath, "utf-8");
@@ -7481,7 +7481,7 @@ function detectForkPredecessor(sessionPath) {
     return null;
   if (text.includes(`"uuid":"${headParent}"`))
     return null;
-  const dir = dirname26(sessionPath);
+  const dir = dirname27(sessionPath);
   const self = basename29(sessionPath);
   let entries;
   try {
@@ -14608,10 +14608,10 @@ var init_types = __esm({
 
 // ../engine/dist/transcript/opencode.js
 async function parseOpenCodeSubagents(parentSessionId) {
-  const { existsSync: existsSync56 } = await import("fs");
+  const { existsSync: existsSync57 } = await import("fs");
   const { opencodeBackend: opencodeBackend2 } = await Promise.resolve().then(() => (init_opencode(), opencode_exports));
   const dbPath = opencodeBackend2.dbPath();
-  if (!existsSync56(dbPath))
+  if (!existsSync57(dbPath))
     return [];
   const realParent = parentSessionId.replace("opencode_", "");
   const db = openSqliteReadonlyOrThrow(dbPath);
@@ -14652,10 +14652,10 @@ async function parseOpenCodeSubagents(parentSessionId) {
   }
 }
 async function parseOpenCodeTranscript(sessionId) {
-  const { existsSync: existsSync56 } = await import("fs");
+  const { existsSync: existsSync57 } = await import("fs");
   const { opencodeBackend: opencodeBackend2 } = await Promise.resolve().then(() => (init_opencode(), opencode_exports));
   const dbPath = opencodeBackend2.dbPath();
-  if (!existsSync56(dbPath))
+  if (!existsSync57(dbPath))
     return [];
   const realId = sessionId.replace("opencode_", "");
   const db = openSqliteReadonlyOrThrow(dbPath);
@@ -18052,10 +18052,55 @@ var init_diary_source = __esm({
   }
 });
 
+// ../engine/dist/core/redact-inline.js
+function redactInlineSecrets(value) {
+  let redacted = false;
+  let out = value;
+  out = out.replace(/(\w+:\/\/[^:/@\s]+:)([^@\s]{1,512})(@)/g, (_m, head, _pw, tail) => {
+    redacted = true;
+    return `${head}__SECRET_NOT_SYNCED__${tail}`;
+  });
+  const tokenShapes = [
+    /\bsk-[A-Za-z0-9_-]{16,}\b/g,
+    // OpenAI-style
+    /\bgh[pousr]_[A-Za-z0-9]{16,}\b/g,
+    // GitHub
+    /\bAIza[0-9A-Za-z_-]{20,}\b/g,
+    // Google
+    /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g
+    // Slack
+  ];
+  for (const re of tokenShapes) {
+    out = out.replace(re, () => {
+      redacted = true;
+      return "__SECRET_NOT_SYNCED__";
+    });
+  }
+  return { text: out, redacted };
+}
+var init_redact_inline = __esm({
+  "../engine/dist/core/redact-inline.js"() {
+    "use strict";
+  }
+});
+
 // ../engine/dist/parsers/skills-source.js
 import { existsSync as existsSync35, readdirSync as readdirSync26, readFileSync as readFileSync25, statSync as statSync31 } from "fs";
 import { homedir as homedir12 } from "os";
 import { join as join34 } from "path";
+function rebuildBody(content) {
+  const { text, redacted } = redactInlineSecrets(content);
+  const out = {};
+  if (text.length > MAX_BODY_CHARS) {
+    out.body = text.slice(0, MAX_BODY_CHARS);
+    out.bodyTruncated = true;
+  } else {
+    out.body = text;
+  }
+  if (redacted)
+    out.bodySecretsRedacted = true;
+  return out;
+}
 function resolveRoots() {
   const home = homedir12();
   const all = [];
@@ -18099,7 +18144,7 @@ function parseFrontmatter3(text) {
   }
   return out;
 }
-var MAX_CHUNK_CHARS12, SkillsSource;
+var MAX_CHUNK_CHARS12, MAX_BODY_CHARS, SkillsSource;
 var init_skills_source = __esm({
   "../engine/dist/parsers/skills-source.js"() {
     "use strict";
@@ -18108,7 +18153,9 @@ var init_skills_source = __esm({
     init_codex2();
     init_tool_paths();
     init_settings();
+    init_redact_inline();
     MAX_CHUNK_CHARS12 = 2e3;
+    MAX_BODY_CHARS = 512 * 1024;
     SkillsSource = class {
       sourceType = "skill";
       async *discover() {
@@ -18186,7 +18233,10 @@ var init_skills_source = __esm({
             skillName,
             description: fm.description || "",
             skillDir,
-            subdirs
+            subdirs,
+            // The whole file, so another machine can rebuild this skill. The
+            // search chunk below stays capped at 2000 chars; this does not.
+            ...rebuildBody(content)
           };
           if (root.readonly || pluginName !== void 0)
             extra.readonly = true;
@@ -18264,18 +18314,27 @@ function reconstructionSpec(cfg) {
     type: cfg.type || (cfg.url ? "remote" : "local"),
     enabled: cfg.enabled !== false
   };
+  let hidSecret = false;
+  const clean = (v) => {
+    const r = redactInlineSecrets(v);
+    if (r.redacted)
+      hidSecret = true;
+    return r.text;
+  };
   if (typeof cfg.url === "string" && cfg.url)
-    out.url = cfg.url;
+    out.url = clean(cfg.url);
   if (Array.isArray(cfg.command))
-    out.command = cfg.command;
+    out.command = cfg.command.map(clean);
   else if (typeof cfg.command === "string")
-    out.command = cfg.command;
+    out.command = clean(cfg.command);
   if (Array.isArray(cfg.args))
-    out.args = cfg.args;
+    out.args = cfg.args.map((a) => clean(String(a)));
   if (Array.isArray(cfg.alwaysAllow))
     out.alwaysAllow = cfg.alwaysAllow;
   if (cfg.env && typeof cfg.env === "object")
     out.envKeys = Object.keys(cfg.env).sort();
+  if (hidSecret)
+    out.secretsRedacted = true;
   return out;
 }
 var McpsSource;
@@ -18286,6 +18345,7 @@ var init_mcps_source = __esm({
     init_codex2();
     init_settings();
     init_tool_paths();
+    init_redact_inline();
     McpsSource = class {
       sourceType = "mcp";
       async *discover() {
@@ -18358,7 +18418,7 @@ var init_mcps_source = __esm({
         }
         for (const [name, cfgRaw] of Object.entries(obj)) {
           const cfg = cfgRaw || {};
-          const cmd = commandPreview(cfg);
+          const cmd = redactInlineSecrets(commandPreview(cfg)).text;
           const allow = Array.isArray(cfg.alwaysAllow) ? cfg.alwaysAllow.slice(0, 8) : [];
           const spec = reconstructionSpec(cfg);
           yield {
@@ -18564,6 +18624,19 @@ var init_toolkit_format = __esm({
 // ../engine/dist/parsers/slash-commands-source.js
 import { existsSync as existsSync37, readdirSync as readdirSync28, readFileSync as readFileSync27, statSync as statSync33 } from "fs";
 import { join as join36, basename as basename20 } from "path";
+function rebuildBody2(content) {
+  const { text, redacted } = redactInlineSecrets(content);
+  const out = {};
+  if (text.length > MAX_BODY_CHARS2) {
+    out.body = text.slice(0, MAX_BODY_CHARS2);
+    out.bodyTruncated = true;
+  } else {
+    out.body = text;
+  }
+  if (redacted)
+    out.bodySecretsRedacted = true;
+  return out;
+}
 function parseCommand(content, fallbackName, format) {
   if (format === "toml") {
     const t = parseScalarToml(content);
@@ -18580,7 +18653,7 @@ function parseCommand(content, fallbackName, format) {
     body: body.trim()
   };
 }
-var MAX_CHUNK_CHARS13, SlashCommandsSource;
+var MAX_CHUNK_CHARS13, MAX_BODY_CHARS2, SlashCommandsSource;
 var init_slash_commands_source = __esm({
   "../engine/dist/parsers/slash-commands-source.js"() {
     "use strict";
@@ -18592,7 +18665,9 @@ var init_slash_commands_source = __esm({
     init_tool_paths();
     init_toolkit_format();
     init_project_dir_name();
+    init_redact_inline();
     MAX_CHUNK_CHARS13 = 2e3;
+    MAX_BODY_CHARS2 = 512 * 1024;
     SlashCommandsSource = class {
       sourceType = "command";
       roots() {
@@ -18656,7 +18731,10 @@ var init_slash_commands_source = __esm({
                   commandName: parsed.name,
                   description: parsed.description,
                   scope: root.scope,
-                  format: root.format
+                  format: root.format,
+                  // The whole file, so another machine can rebuild it. The search
+                  // chunk stays capped at 2000 chars; this does not.
+                  ...rebuildBody2(content)
                 }
               };
             } catch {
@@ -18692,6 +18770,19 @@ var init_slash_commands_source = __esm({
 // ../engine/dist/parsers/subagents-source.js
 import { existsSync as existsSync38, readdirSync as readdirSync29, readFileSync as readFileSync28, statSync as statSync34 } from "fs";
 import { join as join37, basename as basename21 } from "path";
+function rebuildBody3(content) {
+  const { text, redacted } = redactInlineSecrets(content);
+  const out = {};
+  if (text.length > MAX_BODY_CHARS3) {
+    out.body = text.slice(0, MAX_BODY_CHARS3);
+    out.bodyTruncated = true;
+  } else {
+    out.body = text;
+  }
+  if (redacted)
+    out.bodySecretsRedacted = true;
+  return out;
+}
 function parseAgent(content, fallbackName, format) {
   if (format === "toml") {
     const t = parseScalarToml(content);
@@ -18710,7 +18801,7 @@ function parseAgent(content, fallbackName, format) {
     body: body.trim()
   };
 }
-var MAX_CHUNK_CHARS14, SubagentsSource;
+var MAX_CHUNK_CHARS14, MAX_BODY_CHARS3, SubagentsSource;
 var init_subagents_source = __esm({
   "../engine/dist/parsers/subagents-source.js"() {
     "use strict";
@@ -18722,7 +18813,9 @@ var init_subagents_source = __esm({
     init_tool_paths();
     init_toolkit_format();
     init_project_dir_name();
+    init_redact_inline();
     MAX_CHUNK_CHARS14 = 2e3;
+    MAX_BODY_CHARS3 = 512 * 1024;
     SubagentsSource = class {
       sourceType = "agent";
       roots() {
@@ -18787,7 +18880,10 @@ var init_subagents_source = __esm({
                   description: parsed.description,
                   tools: parsed.tools,
                   scope: root.scope,
-                  format: root.format
+                  format: root.format,
+                  // The whole file, so another machine can rebuild it. The search
+                  // chunk stays capped at 2000 chars; this does not.
+                  ...rebuildBody3(content)
                 }
               };
             } catch {
@@ -19176,6 +19272,9 @@ var init_all_sources = __esm({
 });
 
 // ../engine/dist/core/extractor-version.js
+function extractorVersionForItem(id, sourceType) {
+  return extractorVersionForTool(toolOfId(id)) + (ITEM_SOURCE_BUMP[sourceType] ?? 0);
+}
 function toolOfId(id) {
   if (id.startsWith("agy_"))
     return "agy";
@@ -19195,11 +19294,17 @@ function extractorVersionForTool(tool) {
 function extractorVersionForId(id) {
   return extractorVersionForTool(toolOfId(id));
 }
-var BASE_EXTRACTOR_VERSION, TOOL_EXTRACTOR_BUMP, EXTRACTOR_VERSION;
+var BASE_EXTRACTOR_VERSION, ITEM_SOURCE_BUMP, TOOL_EXTRACTOR_BUMP, EXTRACTOR_VERSION;
 var init_extractor_version = __esm({
   "../engine/dist/core/extractor-version.js"() {
     "use strict";
     BASE_EXTRACTOR_VERSION = 2;
+    ITEM_SOURCE_BUMP = {
+      mcp: 1,
+      skill: 1,
+      agent: 1,
+      command: 1
+    };
     TOOL_EXTRACTOR_BUMP = {
       agy: 2,
       claude: 1,
@@ -19589,7 +19694,7 @@ var init_http = __esm({
       CLI_VERSION = JSON.parse(readFileSync33(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.5.7";
+        if (true) CLI_VERSION = "0.5.9";
       } catch {
       }
     }
@@ -20101,7 +20206,7 @@ var init_telemetry = __esm({
     init_sync_client();
     cliVersion2 = () => {
       try {
-        return true ? "0.5.7" : "dev";
+        return true ? "0.5.9" : "dev";
       } catch {
         return "dev";
       }
@@ -21333,6 +21438,7 @@ async function syncToTargetInScope(cred, opts = {}) {
   }
   const itemVersions = loadItemVersions(base2);
   const seenTools = /* @__PURE__ */ new Set();
+  const seenItemKeys = /* @__PURE__ */ new Map();
   const registry = buildSourceRegistry();
   for (const sourceType of registry.getRegisteredTypes()) {
     if (sourceType === "session") continue;
@@ -21347,7 +21453,9 @@ async function syncToTargetInScope(cred, opts = {}) {
         for await (const item of discovered) {
           const itemTool = toolOfId(item.id);
           seenTools.add(itemTool);
-          const versionStale = (itemVersions[itemTool] ?? EXTRACTOR_VERSION) < extractorVersionForId(item.id);
+          const itemKey = `${itemTool}:${item.sourceType}`;
+          seenItemKeys.set(itemKey, extractorVersionForItem(item.id, item.sourceType));
+          const versionStale = (itemVersions[itemKey] ?? EXTRACTOR_VERSION) < extractorVersionForItem(item.id, item.sourceType);
           if ((item.mtime || 0) < (opts.sinceMs ?? 0) && !versionStale) continue;
           if (excluded(item.projectPath || "")) continue;
           if (!includedProject(item.projectPath || "")) continue;
@@ -21430,6 +21538,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     try {
       const rec = {};
       for (const t of seenTools) rec[t] = extractorVersionForTool(t);
+      for (const [k, v] of seenItemKeys) rec[k] = v;
       saveItemVersions(base2, rec);
     } catch {
     }
@@ -21869,7 +21978,7 @@ var init_sync_client = __esm({
       ownVersion = JSON.parse(readFileSync36(join44(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.5.7";
+        if (true) ownVersion = "0.5.9";
       } catch {
       }
     }
@@ -22685,27 +22794,31 @@ var init_install_skills = __esm({
 import { readFileSync as readFileSync41 } from "fs";
 import { join as join50 } from "path";
 import { homedir as homedir17 } from "os";
-function readCommand(filePath, format) {
-  const content = readFileSync41(filePath, "utf-8");
+function parseCommandText(content, format, fallbackName) {
   if (format === "toml") {
     const t = parseScalarToml(content);
-    return { name: t.name || base(filePath), description: t.description || "", body: t.prompt || "" };
+    return { name: t.name || fallbackName, description: t.description || "", body: t.prompt || "" };
   }
   const { fm, body } = parseFrontmatter4(content);
-  return { name: fm.name || base(filePath), description: fm.description || "", body: body.trim() };
+  return { name: fm.name || fallbackName, description: fm.description || "", body: body.trim() };
 }
-function readAgent(filePath, format) {
-  const content = readFileSync41(filePath, "utf-8");
+function parseAgentText(content, format, fallbackName) {
   if (format === "toml") {
     const t = parseScalarToml(content);
     return {
-      name: t.name || base(filePath),
+      name: t.name || fallbackName,
       description: t.description || "",
       body: t.developer_instructions || t.instructions || ""
     };
   }
   const { fm, body } = parseFrontmatter4(content);
-  return { name: fm.name || base(filePath), description: fm.description || "", tools: fm.tools, body: body.trim() };
+  return { name: fm.name || fallbackName, description: fm.description || "", tools: fm.tools, body: body.trim() };
+}
+function readCommand(filePath, format) {
+  return parseCommandText(readFileSync41(filePath, "utf-8"), format, base(filePath));
+}
+function readAgent(filePath, format) {
+  return parseAgentText(readFileSync41(filePath, "utf-8"), format, base(filePath));
 }
 function readInstructions(filePath, name) {
   const content = readFileSync41(filePath, "utf-8");
@@ -23298,8 +23411,8 @@ __export(toolkit_pull_exports, {
   planPull: () => planPull,
   portableCommand: () => portableCommand
 });
-import { statSync as statSync42 } from "node:fs";
-import { delimiter as delimiter3, join as join52, basename as basename25, isAbsolute as isAbsolute3 } from "node:path";
+import { existsSync as existsSync48, mkdirSync as mkdirSync14, statSync as statSync42, writeFileSync as writeFileSync15 } from "node:fs";
+import { delimiter as delimiter3, dirname as dirname21, join as join52, basename as basename25, isAbsolute as isAbsolute3 } from "node:path";
 function isExecutableFile(p) {
   try {
     return statSync42(p).isFile();
@@ -23359,8 +23472,58 @@ function planPull(rows, opts = {}) {
   const wanted = opts.types;
   const seenUnsupported = /* @__PURE__ */ new Map();
   const byName = /* @__PURE__ */ new Map();
+  const skillsByName = /* @__PURE__ */ new Map();
+  const agentsByName = /* @__PURE__ */ new Map();
+  const commandsByName = /* @__PURE__ */ new Map();
   for (const row of rows) {
     const type = row.source_type;
+    if (type === "skill") {
+      if (wanted && !wanted.includes("skill"))
+        continue;
+      const extra2 = parseExtra(row);
+      const name2 = extra2.skillName || row.title;
+      const body = extra2.body;
+      if (!name2 || typeof body !== "string" || !body.trim()) {
+        seenUnsupported.set("skill", (seenUnsupported.get("skill") || 0) + 1);
+        continue;
+      }
+      const tool = String(extra2.tool || "");
+      const rank = SOURCE_PRECEDENCE.skill.indexOf(tool);
+      const prev2 = skillsByName.get(name2);
+      if (!prev2 || rank >= 0 && (prev2.rank < 0 || rank < prev2.rank)) {
+        skillsByName.set(name2, {
+          body,
+          rank,
+          truncated: extra2.bodyTruncated === true,
+          redacted: extra2.bodySecretsRedacted === true
+        });
+      }
+      continue;
+    }
+    if (type === "agent" || type === "command") {
+      if (wanted && !wanted.includes(type))
+        continue;
+      const extra2 = parseExtra(row);
+      const name2 = extra2[type === "agent" ? "agentName" : "commandName"] || row.title;
+      const body = extra2.body;
+      if (!name2 || typeof body !== "string" || !body.trim() || extra2.bodyTruncated === true) {
+        seenUnsupported.set(type, (seenUnsupported.get(type) || 0) + 1);
+        continue;
+      }
+      const tool = String(extra2.tool || "");
+      const rank = SOURCE_PRECEDENCE[type].indexOf(tool);
+      const bucket = type === "agent" ? agentsByName : commandsByName;
+      const prev2 = bucket.get(name2);
+      if (!prev2 || rank >= 0 && (prev2.rank < 0 || rank < prev2.rank)) {
+        bucket.set(name2, {
+          body,
+          rank,
+          format: extra2.format === "toml" ? "toml" : "md",
+          redacted: extra2.bodySecretsRedacted === true
+        });
+      }
+      continue;
+    }
     if (type !== "mcp") {
       if (NOT_REBUILDABLE[type])
         seenUnsupported.set(type, (seenUnsupported.get(type) || 0) + 1);
@@ -23382,16 +23545,93 @@ function planPull(rows, opts = {}) {
   }
   const targets = SUPPORTED_TARGETS.mcp;
   const mcps = [...byName.entries()].map(([name, spec]) => ({ name, spec, tools: targets }));
+  const skills = [...skillsByName.entries()].map(([name, v]) => ({
+    name,
+    body: v.body,
+    truncated: v.truncated,
+    redacted: v.redacted,
+    tools: SUPPORTED_TARGETS.skill
+  }));
   const unsupported = [...seenUnsupported.entries()].map(([type, count]) => ({
     type,
     rows: count,
-    reason: NOT_REBUILDABLE[type]
+    reason: NOT_REBUILDABLE[type] ?? "the stored rows carry no full body \u2014 re-index on the device that has them"
   }));
-  return { mcps, unsupported };
+  const codecs = [
+    ...[...agentsByName.entries()].map(([name, v]) => ({ type: "agent", name, body: v.body, format: v.format, redacted: v.redacted, tools: SUPPORTED_TARGETS.agent })),
+    ...[...commandsByName.entries()].map(([name, v]) => ({ type: "command", name, body: v.body, format: v.format, redacted: v.redacted, tools: SUPPORTED_TARGETS.command }))
+  ];
+  return { mcps, skills, codecs, unsupported };
 }
 function executePull(rows, opts = {}) {
-  const { mcps, unsupported } = planPull(rows, opts);
+  const { mcps, skills, codecs, unsupported } = planPull(rows, opts);
   const outcomes = [];
+  for (const { name, body, truncated, redacted, tools } of skills) {
+    for (const tool of tools) {
+      const dir = join52(skillsDirFor(tool), name);
+      const file = join52(dir, "SKILL.md");
+      if (existsSync48(file)) {
+        outcomes.push({ type: "skill", name, tool, status: "present" });
+        continue;
+      }
+      if (truncated) {
+        outcomes.push({ type: "skill", name, tool, status: "skipped", reason: "the stored body was truncated \u2014 installing it would write a corrupted skill" });
+        continue;
+      }
+      if (opts.dryRun) {
+        outcomes.push({ type: "skill", name, tool, status: "written", reason: "dry run", redactedContent: redacted });
+        continue;
+      }
+      try {
+        mkdirSync14(dir, { recursive: true });
+        writeFileSync15(file, body);
+        outcomes.push({ type: "skill", name, tool, status: "written", path: file, redactedContent: redacted });
+      } catch (e) {
+        outcomes.push({ type: "skill", name, tool, status: "failed", reason: e instanceof Error ? e.message : "write failed" });
+      }
+    }
+  }
+  for (const { type, name, body, format, redacted, tools } of codecs) {
+    let art;
+    try {
+      art = type === "agent" ? parseAgentText(body, format, name) : parseCommandText(body, format, name);
+    } catch (e) {
+      for (const tool of tools) {
+        outcomes.push({ type, name, tool, status: "failed", reason: `could not parse the stored body: ${e instanceof Error ? e.message : "failed"}` });
+      }
+      continue;
+    }
+    if (!art.body.trim()) {
+      for (const tool of tools) {
+        outcomes.push({ type, name, tool, status: "skipped", reason: `the stored body did not parse as ${format}` });
+      }
+      continue;
+    }
+    for (const tool of tools) {
+      let out;
+      try {
+        out = emit(type, art, tool);
+      } catch (e) {
+        outcomes.push({ type, name, tool, status: "failed", reason: e instanceof Error ? e.message : "emit failed" });
+        continue;
+      }
+      if (existsSync48(out.path)) {
+        outcomes.push({ type, name, tool, status: "present" });
+        continue;
+      }
+      if (opts.dryRun) {
+        outcomes.push({ type, name, tool, status: "written", reason: "dry run", redactedContent: redacted });
+        continue;
+      }
+      try {
+        mkdirSync14(dirname21(out.path), { recursive: true });
+        writeFileSync15(out.path, out.content);
+        outcomes.push({ type, name, tool, status: "written", path: out.path, redactedContent: redacted });
+      } catch (e) {
+        outcomes.push({ type, name, tool, status: "failed", reason: e instanceof Error ? e.message : "write failed" });
+      }
+    }
+  }
   for (const { name, spec, tools } of mcps) {
     const built = entryFromSpec(spec);
     for (const tool of tools) {
@@ -23403,6 +23643,16 @@ function executePull(rows, opts = {}) {
         outcomes.push({ type: "mcp", name, tool, status: "present" });
         continue;
       }
+      if (spec.secretsRedacted) {
+        outcomes.push({
+          type: "mcp",
+          name,
+          tool,
+          status: "skipped",
+          reason: "its command contains a secret, which is never uploaded \u2014 register this one by hand"
+        });
+        continue;
+      }
       const entry = { ...built.entry };
       let rewrittenCommand;
       if (!entry.url) {
@@ -23440,11 +23690,12 @@ var init_toolkit_pull = __esm({
   "../engine/dist/core/toolkit-pull.js"() {
     "use strict";
     init_toolkit_sync();
+    init_artifact_codec();
     NOT_REBUILDABLE = {
-      skill: "a skill is a directory of files, and file content is not uploaded",
-      agent: "only a short body preview is uploaded, not the agent body",
-      command: "command bodies are not uploaded",
-      instructions: "project-scoped, and file content is not uploaded"
+      // Instructions are the one type that SHOULD not travel by device: a CLAUDE.md
+      // belongs to a repository, so installing one per machine would put a
+      // project's rules somewhere they do not apply.
+      instructions: "project-scoped \u2014 it belongs to a repo, not to a machine"
     };
   }
 });
@@ -23940,11 +24191,11 @@ var verify_repair_exports = {};
 __export(verify_repair_exports, {
   forceFullResync: () => forceFullResync
 });
-import { copyFileSync as copyFileSync3, existsSync as existsSync48 } from "fs";
+import { copyFileSync as copyFileSync3, existsSync as existsSync49 } from "fs";
 function forceFullResync(server, sessionIds) {
   if (sessionIds.length === 0) return 0;
   const path = ledgerFilePath();
-  if (existsSync48(path)) {
+  if (existsSync49(path)) {
     const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "").replace(/-/g, "");
     try {
       copyFileSync3(path, `${path}.bak-${stamp}`);
@@ -25019,8 +25270,8 @@ __export(project_tasks_exports, {
   pushProjectTaskStatuses: () => pushProjectTaskStatuses,
   renderTeamTasksMd: () => renderTeamTasksMd
 });
-import { existsSync as existsSync49, readFileSync as readFileSync44, writeFileSync as writeFileSync15, mkdirSync as mkdirSync14, statSync as statSync43 } from "node:fs";
-import { join as join54, dirname as dirname21 } from "node:path";
+import { existsSync as existsSync50, readFileSync as readFileSync44, writeFileSync as writeFileSync16, mkdirSync as mkdirSync15, statSync as statSync43 } from "node:fs";
+import { join as join54, dirname as dirname22 } from "node:path";
 import { homedir as homedir19 } from "node:os";
 function isTeamTaskStatus(v) {
   return !!v && TEAM_STATUSES.has(v);
@@ -25082,11 +25333,11 @@ function readLedger() {
 }
 function writeLedger(l) {
   try {
-    mkdirSync14(dirname21(ledgerPath2()), { recursive: true });
+    mkdirSync15(dirname22(ledgerPath2()), { recursive: true });
   } catch {
   }
   try {
-    writeFileSync15(ledgerPath2(), JSON.stringify(l));
+    writeFileSync16(ledgerPath2(), JSON.stringify(l));
   } catch {
   }
 }
@@ -25105,7 +25356,7 @@ async function pushProjectTaskStatuses(base2, authHeaders, opts = {}) {
     }
     for (const project of projects) {
       const file = join54(project, fk.filename);
-      if (!existsSync49(file)) continue;
+      if (!existsSync50(file)) continue;
       let mtime;
       try {
         mtime = statSync43(file).mtimeMs;
@@ -25185,18 +25436,18 @@ var intent_drain_exports = {};
 __export(intent_drain_exports, {
   drainSyncIntents: () => drainSyncIntents
 });
-import { existsSync as existsSync50, readFileSync as readFileSync45, writeFileSync as writeFileSync16, appendFileSync, mkdirSync as mkdirSync15 } from "node:fs";
+import { existsSync as existsSync51, readFileSync as readFileSync45, writeFileSync as writeFileSync17, appendFileSync, mkdirSync as mkdirSync16 } from "node:fs";
 import { join as join55 } from "node:path";
 import { homedir as homedir20 } from "node:os";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
-import { dirname as dirname22 } from "node:path";
+import { dirname as dirname23 } from "node:path";
 function applyCodeRecommendation(intent) {
   try {
     const meta = JSON.parse(intent.name || "{}");
     if (intent.artifact_type === "write_tasks_file") {
       if (!meta.rootPath || !meta.content) return { status: "error", result: JSON.stringify({ error: "missing rootPath or content" }) };
       const file = join55(meta.rootPath, meta.filename || "CODE_TASKS.md");
-      writeFileSync16(file, meta.content);
+      writeFileSync17(file, meta.content);
       return { status: "done", result: JSON.stringify({ wrote: file }) };
     }
     if (intent.artifact_type === "append_claude_md") {
@@ -25207,7 +25458,7 @@ function applyCodeRecommendation(intent) {
       if (isGlobal) {
         const dir = join55(homedir20(), ".claude");
         try {
-          mkdirSync15(dir, { recursive: true });
+          mkdirSync16(dir, { recursive: true });
         } catch {
         }
         file = join55(dir, "CLAUDE.md");
@@ -25215,14 +25466,14 @@ function applyCodeRecommendation(intent) {
         if (!meta.rootPath) return { status: "error", result: JSON.stringify({ error: "missing rootPath" }) };
         file = join55(meta.rootPath, "CLAUDE.md");
       }
-      const existing = existsSync50(file) ? readFileSync45(file, "utf8") : "";
+      const existing = existsSync51(file) ? readFileSync45(file, "utf8") : "";
       if (existing.includes(text)) return { status: "done", result: JSON.stringify({ skipped: "rule already present", file }) };
       const block = `${existing && !existing.endsWith("\n") ? "\n" : ""}
 ## Rule (added by chat-recall recommendation)
 ${text}
 `;
       if (existing) appendFileSync(file, block);
-      else writeFileSync16(file, `# ${meta.rootPath?.split("/").pop() || "Global"} instructions
+      else writeFileSync17(file, `# ${meta.rootPath?.split("/").pop() || "Global"} instructions
 ${block}`);
       return { status: "done", result: JSON.stringify({ appended: file }) };
     }
@@ -25231,6 +25482,46 @@ ${block}`);
     return { status: "error", result: JSON.stringify({ error: e instanceof Error ? e.message : "failed" }) };
   }
 }
+async function runPull(base2, opts) {
+  const { executePull: executePull2 } = await Promise.resolve().then(() => (init_toolkit_pull(), toolkit_pull_exports));
+  const { hostname: hostname3 } = await import("node:os");
+  const creds = loadAllCredentials().find((c) => c.serverUrl.replace(/\/+$/, "") === base2.replace(/\/+$/, ""));
+  const headers = creds?.token ? { authorization: `Bearer ${creds.token}` } : {};
+  const wanted = opts.types?.length ? opts.types : ["mcp", "skill", "command", "agent", "instructions"];
+  const rows = [];
+  for (const type of wanted) {
+    try {
+      const res = await fetchWithTimeout(`${base2}/api/toolkit/browse/${type}?limit=1000`, { headers });
+      if (!res.ok) continue;
+      const body = await res.json();
+      for (const it of body.items || []) rows.push(it);
+    } catch {
+    }
+  }
+  const filtered = opts.name ? rows.filter((r) => {
+    try {
+      return (JSON.parse(r.extra_json || "{}").mcpName || r.title) === opts.name;
+    } catch {
+      return r.title === opts.name;
+    }
+  }) : rows;
+  const report = executePull2(filtered, { thisDeviceId: hostname3(), types: wanted });
+  const written = report.outcomes.filter((o) => o.status === "written");
+  const failed = report.outcomes.filter((o) => o.status === "failed");
+  return {
+    // A skip is a reported outcome, not a failure — the artifact genuinely
+    // cannot be installed here and the reason travels back with the ack.
+    status: failed.length > 0 ? "error" : "done",
+    result: JSON.stringify({
+      installed: written.length,
+      present: report.outcomes.filter((o) => o.status === "present").length,
+      skipped: report.outcomes.filter((o) => o.status === "skipped").map((o) => `${o.name}: ${o.reason}`).slice(0, 20),
+      failed: failed.map((o) => `${o.name}: ${o.reason}`).slice(0, 20),
+      needsEnv: [...new Set(written.flatMap((o) => o.needsEnv || []))],
+      unsupported: report.unsupported
+    })
+  };
+}
 async function runIntent(intent, ctx) {
   try {
     if (intent.kind === "recheck_session") {
@@ -25243,6 +25534,14 @@ async function runIntent(intent, ctx) {
     if (intent.kind === "code_apply") {
       return applyCodeRecommendation(intent);
     }
+    if (intent.kind === "pull") {
+      const types = (intent.artifact_type || "").split(",").map((t) => t.trim()).filter(Boolean);
+      const r2 = await runPull(ctx.base, {
+        types: types.length ? types : void 0,
+        name: intent.name || void 0
+      });
+      return r2;
+    }
     if (intent.kind === "sync_all") {
       const report = await executeSyncAll();
       const status2 = report.failed.length > 0 ? "error" : "done";
@@ -25286,7 +25585,7 @@ async function drainSyncIntents(opts = {}) {
       if (status === "done") out.done++;
       else out.errored++;
       if (opts.verbose) {
-        const label = intent.kind === "sync_all" ? "sync_all" : intent.kind === "recheck_session" ? `recheck ${intent.name}` : `${intent.artifact_type} "${intent.name}" ${intent.from_tool}\u2192${intent.to_tool}`;
+        const label = intent.kind === "sync_all" ? "sync_all" : intent.kind === "pull" ? `pull ${intent.artifact_type || "all"}${intent.name ? ` "${intent.name}"` : ""}` : intent.kind === "recheck_session" ? `recheck ${intent.name}` : `${intent.artifact_type} "${intent.name}" ${intent.from_tool}\u2192${intent.to_tool}`;
         console.error(`[sync-intent] ${label}: ${status}`);
       }
       try {
@@ -25321,11 +25620,11 @@ var init_intent_drain = __esm({
     init_project_tasks();
     ownVersion2 = "0.0.0";
     try {
-      const dir = dirname22(fileURLToPath3(import.meta.url));
+      const dir = dirname23(fileURLToPath3(import.meta.url));
       ownVersion2 = JSON.parse(readFileSync45(join55(dir, "../package.json"), "utf-8")).version || ownVersion2;
     } catch {
       try {
-        if (true) ownVersion2 = "0.5.7";
+        if (true) ownVersion2 = "0.5.9";
       } catch {
       }
     }
@@ -25526,8 +25825,8 @@ var team_merge_exports = {};
 __export(team_merge_exports, {
   mergePullResult: () => mergePullResult
 });
-import { existsSync as existsSync51, mkdirSync as mkdirSync16, readFileSync as readFileSync46, rmSync as rmSync7, writeFileSync as writeFileSync17, statSync as statSync44 } from "fs";
-import { dirname as dirname23, join as join56 } from "path";
+import { existsSync as existsSync52, mkdirSync as mkdirSync17, readFileSync as readFileSync46, rmSync as rmSync7, writeFileSync as writeFileSync18, statSync as statSync44 } from "fs";
+import { dirname as dirname24, join as join56 } from "path";
 import { createHash as createHash17 } from "crypto";
 function installPathFor(art, tool) {
   switch (art.type) {
@@ -25620,8 +25919,8 @@ async function mergePullResult(opts) {
           pending.push({ artifactId: a.id, tool, artifactType: a.type, artifactName: a.name, sha256: sha, installedAt: Date.now() });
           continue;
         }
-        mkdirSync16(dirname23(path), { recursive: true });
-        writeFileSync17(path, body);
+        mkdirSync17(dirname24(path), { recursive: true });
+        writeFileSync18(path, body);
         pending.push({ artifactId: a.id, tool, artifactType: a.type, artifactName: a.name, sha256: sha, installedAt: Date.now() });
         report.written.push({ artifactId: a.id, path });
       } catch (err) {
@@ -25642,7 +25941,7 @@ async function mergePullResult(opts) {
       if (!path)
         continue;
       try {
-        if (existsSync51(path))
+        if (existsSync52(path))
           rmSync7(path, { force: true });
         await teamInstallsForget(id, row.tool);
         report.removed.push({ artifactId: id, path });
@@ -25660,7 +25959,7 @@ async function mergePullResult(opts) {
 }
 function readFileIfExists(path) {
   try {
-    if (!existsSync51(path))
+    if (!existsSync52(path))
       return null;
     const s = statSync44(path);
     if (!s.isFile())
@@ -25747,7 +26046,7 @@ var init_vault_crypto = __esm({
 });
 
 // ../engine/dist/core/vault-source.js
-import { existsSync as existsSync52, readdirSync as readdirSync34, statSync as statSync45 } from "fs";
+import { existsSync as existsSync53, readdirSync as readdirSync34, statSync as statSync45 } from "fs";
 import { extname, join as join57 } from "path";
 function* walkVaultSources() {
   const t = loadSettings().team.vault;
@@ -25775,7 +26074,7 @@ function safeStat(path) {
 }
 function* walkClaude() {
   const root = claudeBackend.projectsDir();
-  if (!existsSync52(root))
+  if (!existsSync53(root))
     return;
   let projectDirs = [];
   try {
@@ -25808,7 +26107,7 @@ function* walkClaude() {
 }
 function* walkGemini() {
   const tmp = geminiBackend.tmpDir();
-  if (!existsSync52(tmp))
+  if (!existsSync53(tmp))
     return;
   let hashDirs = [];
   try {
@@ -25818,7 +26117,7 @@ function* walkGemini() {
   }
   for (const hash of hashDirs) {
     const chatsDir = join57(tmp, hash, "chats");
-    if (!existsSync52(chatsDir))
+    if (!existsSync53(chatsDir))
       continue;
     let entries = [];
     try {
@@ -25861,7 +26160,7 @@ function* walkCursor() {
 }
 function* walkCodex() {
   const sessionsRoot = join57(codexBackend.homeDir(), "sessions");
-  if (!existsSync52(sessionsRoot))
+  if (!existsSync53(sessionsRoot))
     return;
   const stack = [sessionsRoot];
   while (stack.length) {
@@ -25890,7 +26189,7 @@ function* walkCodex() {
 }
 function* walkAgy() {
   const brainDir = join57(agyBackend.homeDir(), "brain");
-  if (!existsSync52(brainDir))
+  if (!existsSync53(brainDir))
     return;
   let sessionDirs = [];
   try {
@@ -25907,10 +26206,10 @@ function* walkAgy() {
       continue;
     }
     let filePath = join57(sessionPath, ".system_generated", "logs", "transcript.jsonl");
-    if (!existsSync52(filePath)) {
+    if (!existsSync53(filePath)) {
       filePath = join57(sessionPath, ".system_generated", "logs", "transcript_full.jsonl");
     }
-    if (!existsSync52(filePath))
+    if (!existsSync53(filePath))
       continue;
     const s = safeStat(filePath);
     if (!s)
@@ -25947,8 +26246,8 @@ __export(vault_client_exports, {
   vaultStatus: () => vaultStatus,
   vaultSync: () => vaultSync
 });
-import { mkdirSync as mkdirSync17, readFileSync as readFileSync47, writeFileSync as writeFileSync18, existsSync as existsSync53 } from "fs";
-import { dirname as dirname24, join as join58 } from "path";
+import { mkdirSync as mkdirSync18, readFileSync as readFileSync47, writeFileSync as writeFileSync19, existsSync as existsSync54 } from "fs";
+import { dirname as dirname25, join as join58 } from "path";
 function context2() {
   const s = loadSettings().team;
   if (!s.enabled)
@@ -26160,7 +26459,7 @@ async function vaultRestore(passphrase, opts = {}) {
     }
     try {
       const path = importedPathFor(blob.tool, blob.sessionId);
-      if (existsSync53(path)) {
+      if (existsSync54(path)) {
         const localStat = await import("fs").then((m) => m.statSync(path));
         if (Math.abs(localStat.mtimeMs - blob.mtimeSourceMs) < 1) {
           report.skipped.push({ sessionId: blob.sessionId, tool: blob.tool, reason: "unchanged" });
@@ -26176,8 +26475,8 @@ async function vaultRestore(passphrase, opts = {}) {
         throw new Error("cipher integrity check failed");
       }
       const plaintext = decryptBlob(key2, cipher);
-      mkdirSync17(dirname24(path), { recursive: true });
-      writeFileSync18(path, Buffer.from(plaintext));
+      mkdirSync18(dirname25(path), { recursive: true });
+      writeFileSync19(path, Buffer.from(plaintext));
       const { utimesSync } = await import("fs");
       const t = blob.mtimeSourceMs / 1e3;
       utimesSync(path, t, t);
@@ -26382,7 +26681,7 @@ __export(service_installer_exports, {
   uninstallService: () => uninstallService
 });
 import { execSync as execSync5 } from "child_process";
-import { existsSync as existsSync54, mkdirSync as mkdirSync18, rmSync as rmSync8, writeFileSync as writeFileSync19 } from "fs";
+import { existsSync as existsSync55, mkdirSync as mkdirSync19, rmSync as rmSync8, writeFileSync as writeFileSync20 } from "fs";
 import { homedir as homedir21 } from "os";
 import { join as join59 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
@@ -26415,7 +26714,7 @@ function isServiceRunning() {
 }
 function installService() {
   const { watchJs, node, logFile, dataDir } = resolveDaemonPaths();
-  mkdirSync18(dataDir, { recursive: true });
+  mkdirSync19(dataDir, { recursive: true });
   if (process.platform === "linux") {
     return installSystemd(watchJs, node, logFile);
   }
@@ -26434,8 +26733,8 @@ function installSystemd(watchJs, node, logFile) {
   const unitDir = join59(homedir21(), ".config", "systemd", "user");
   const unitPath = join59(unitDir, "chat-recall-watch.service");
   const unit = renderSystemdUnit(watchJs, node, logFile);
-  mkdirSync18(unitDir, { recursive: true });
-  writeFileSync19(unitPath, unit);
+  mkdirSync19(unitDir, { recursive: true });
+  writeFileSync20(unitPath, unit);
   try {
     execSync5("systemctl --user daemon-reload && systemctl --user enable chat-recall-watch.service && systemctl --user restart chat-recall-watch.service", { stdio: "inherit" });
     try {
@@ -26482,8 +26781,8 @@ function installLaunchd(watchJs, node, logFile) {
   const plistDir = join59(homedir21(), "Library", "LaunchAgents");
   const plistPath = join59(plistDir, `${label}.plist`);
   const plist = renderLaunchdPlist(watchJs, node, logFile, label);
-  mkdirSync18(plistDir, { recursive: true });
-  writeFileSync19(plistPath, plist);
+  mkdirSync19(plistDir, { recursive: true });
+  writeFileSync20(plistPath, plist);
   try {
     try {
       execSync5(`launchctl unload "${plistPath}"`, { stdio: "ignore" });
@@ -26537,7 +26836,7 @@ function uninstallService() {
     } catch {
     }
     const unitPath = join59(homedir21(), ".config", "systemd", "user", "chat-recall-watch.service");
-    if (existsSync54(unitPath)) {
+    if (existsSync55(unitPath)) {
       rmSync8(unitPath, { force: true });
       removed = true;
     }
@@ -26554,7 +26853,7 @@ function uninstallService() {
     } catch {
     }
     let removed = false;
-    if (existsSync54(plistPath)) {
+    if (existsSync55(plistPath)) {
       rmSync8(plistPath, { force: true });
       removed = true;
     }
@@ -26771,9 +27070,9 @@ init_project_resolver();
 import { config } from "dotenv";
 import { Command } from "commander";
 import chalk from "chalk";
-import { existsSync as existsSync55, readFileSync as readFileSync48, writeFileSync as writeFileSync20, realpathSync as realpathSync5 } from "fs";
+import { existsSync as existsSync56, readFileSync as readFileSync48, writeFileSync as writeFileSync21, realpathSync as realpathSync5 } from "fs";
 import { homedir as homedir22 } from "os";
-import { join as join60, resolve as resolve2, dirname as dirname25, basename as basename28 } from "path";
+import { join as join60, resolve as resolve2, dirname as dirname26, basename as basename28 } from "path";
 
 // ../engine/dist/core/score-tier.js
 var STRONG_RATIO = 0.85;
@@ -26820,7 +27119,7 @@ function claudeHookConfigFiles() {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   for (const home of claudeHomeDirs()) {
-    if (!existsSync55(join60(home, "projects"))) continue;
+    if (!existsSync56(join60(home, "projects"))) continue;
     const file = join60(home, "hooks.json");
     let key2;
     try {
@@ -26958,7 +27257,9 @@ var DEFAULT_ALLOW = [
   "recall_code_findings",
   "recall_code_actions",
   "recall_claude_suggestions",
-  "recall_improvements"
+  "recall_improvements",
+  "recall_toolkit_status",
+  "recall_toolkit_sync"
 ];
 var SELF_HOST_DOCS = "https://github.com/munhq/chat-recall/blob/main/docs/SELF_HOSTING.md";
 var program = new Command();
@@ -27510,7 +27811,7 @@ memory.command("wake-up").description("Generate wake-up context (high-importance
   try {
     const identityFile = getIdentityFilePath();
     let identity = "AI coding assistant";
-    if (existsSync55(identityFile)) {
+    if (existsSync56(identityFile)) {
       identity = readFileSync48(identityFile, "utf-8").trim();
     }
     const lines = [
@@ -27568,7 +27869,7 @@ program.command("escalate [sessionId]").description("Escalate a finished session
   }
 });
 program.command("doctor").description("Quick health check across login, server, credentials, hooks, MCP server, and codeindex").option("--purge-local", "Remove the legacy local index (cache.db + vector/KG files) left by pre-thin-collector versions \u2014 storage is server-side now. Requires login; keeps credentials, sync ledger, identity, and the audit log.").action(async (opts) => {
-  const { existsSync: existsSync56, readFileSync: readFileSync49, statSync: statSync46 } = await import("fs");
+  const { existsSync: existsSync57, readFileSync: readFileSync49, statSync: statSync46 } = await import("fs");
   const { execSync: execSync6 } = await import("child_process");
   const rows = [];
   const note = (ok, label, detail) => rows.push({ ok, label, detail });
@@ -27632,7 +27933,7 @@ program.command("doctor").description("Quick health check across login, server,
     }
   }
   const credFile = join60(getDataDir(), "credentials.json");
-  if (!existsSync56(credFile)) {
+  if (!existsSync57(credFile)) {
     note(false, "Credentials file", `missing \u2014 run \`chat-recall login <server-url>\``);
   } else {
     try {
@@ -27645,15 +27946,15 @@ program.command("doctor").description("Quick health check across login, server,
     }
   }
   for (const hooksJson of claudeHookConfigFiles()) {
-    const profile = basename28(dirname25(hooksJson));
+    const profile = basename28(dirname26(hooksJson));
     const label = `Claude hooks (${profile})`;
-    if (!existsSync56(hooksJson)) {
+    if (!existsSync57(hooksJson)) {
       note(false, label, `no ${hooksJson} \u2014 run \`chat-recall install-hooks\``);
       continue;
     }
     try {
       const readHooks = (file) => {
-        if (!existsSync56(file)) return {};
+        if (!existsSync57(file)) return {};
         try {
           return JSON.parse(readFileSync49(file, "utf-8")).hooks || {};
         } catch {
@@ -27661,7 +27962,7 @@ program.command("doctor").description("Quick health check across login, server,
         }
       };
       const cfg = readHooks(hooksJson);
-      const settings2 = readHooks(join60(dirname25(hooksJson), "settings.json"));
+      const settings2 = readHooks(join60(dirname26(hooksJson), "settings.json"));
       const all = ["SessionStart", "UserPromptSubmit", "Stop", "PreCompact", "SessionEnd"];
       const hits = [];
       for (const ev of all) {
@@ -27685,7 +27986,7 @@ program.command("doctor").description("Quick health check across login, server,
     const want = bundledSkillNames2().length;
     for (const t of skillTargets2()) {
       if (!t.available) continue;
-      const have = want === 0 ? 0 : bundledSkillNames2().filter((n) => existsSync56(join60(t.dir, n, ".chat-recall-managed"))).length;
+      const have = want === 0 ? 0 : bundledSkillNames2().filter((n) => existsSync57(join60(t.dir, n, ".chat-recall-managed"))).length;
       note(
         have === want,
         `Skills \u2014 ${t.label}`,
@@ -27767,7 +28068,7 @@ program.command("doctor").description("Quick health check across login, server,
     join60(dataDir, "index", "knowledge_graph.db"),
     join60(dataDir, "index", "metadata.db")
   ];
-  const legacyPresent = legacyPaths.filter((p) => existsSync56(p));
+  const legacyPresent = legacyPaths.filter((p) => existsSync57(p));
   if (opts.purgeLocal) {
     if (!target) {
       note(false, "Purge legacy index", "refused \u2014 log in and `chat-recall sync` first, so your history is on the server before removing local copies");
@@ -28413,10 +28714,10 @@ tasks.command("pull [dir]").description("Write TEAM_TASKS.md for your tasks in t
   try {
     const { resolveProjectId: resolveProjectId2 } = await Promise.resolve().then(() => (init_project_resolver(), project_resolver_exports));
     const { renderTeamTasksMd: renderTeamTasksMd2, parseTeamTasksFile: parseTeamTasksFile2 } = await Promise.resolve().then(() => (init_project_tasks(), project_tasks_exports));
-    const { writeFileSync: writeFileSync21, readFileSync: readFileSync49, existsSync: existsSync56 } = await import("node:fs");
+    const { writeFileSync: writeFileSync22, readFileSync: readFileSync49, existsSync: existsSync57 } = await import("node:fs");
     const { join: join61 } = await import("node:path");
     const file = join61(cwd, "TEAM_TASKS.md");
-    if (!opts.force && existsSync56(file) && parseTeamTasksFile2(readFileSync49(file, "utf8")).length > 0) {
+    if (!opts.force && existsSync57(file) && parseTeamTasksFile2(readFileSync49(file, "utf8")).length > 0) {
       console.error(chalk.red("TEAM_TASKS.md has unpushed edits."), "Run", chalk.bold("chat-recall tasks push"), "first, or", chalk.bold("tasks pull --force"), "to discard.");
       process.exit(1);
     }
@@ -28424,7 +28725,7 @@ tasks.command("pull [dir]").description("Write TEAM_TASKS.md for your tasks in t
     const pid = resolved && resolved.source !== "ignored" ? resolved.id : "";
     const { tasks: tasks2 } = await serverGet("/api/tasks?assignee=@me");
     const mine = tasks2.filter((t) => !pid || !t.projectId || t.projectId === pid);
-    writeFileSync21(file, renderTeamTasksMd2(mine));
+    writeFileSync22(file, renderTeamTasksMd2(mine));
     console.log(chalk.green("\u2713 wrote"), "TEAM_TASKS.md", chalk.gray(`(${mine.length} task(s))`), "\u2014 edit, then", chalk.bold("chat-recall tasks push"));
   } catch (e) {
     console.error(chalk.red(e instanceof Error ? e.message : String(e)));
@@ -28435,10 +28736,10 @@ tasks.command("push [dir]").description("Push TEAM_TASKS.md status edits back to
   const cwd = dir || process.cwd();
   try {
     const { parseTeamTasksFile: parseTeamTasksFile2 } = await Promise.resolve().then(() => (init_project_tasks(), project_tasks_exports));
-    const { readFileSync: readFileSync49, existsSync: existsSync56 } = await import("node:fs");
+    const { readFileSync: readFileSync49, existsSync: existsSync57 } = await import("node:fs");
     const { join: join61 } = await import("node:path");
     const file = join61(cwd, "TEAM_TASKS.md");
-    if (!existsSync56(file)) {
+    if (!existsSync57(file)) {
       console.error(chalk.red("no TEAM_TASKS.md here \u2014"), "run", chalk.bold("chat-recall tasks pull"), "first");
       process.exit(1);
     }
@@ -28736,7 +29037,7 @@ vault.command("forget").description("Remove the stored passphrase from this mach
   console.log(keyringDelete2() ? chalk.green("\u2713 Passphrase removed from the OS keyring.") : chalk.dim("Nothing stored in the OS keyring."));
 }));
 program.command("install-hooks").description("Install Claude Code hooks (Stop + PreCompact + UserPromptSubmit + SessionEnd + SessionStart) into every Claude profile").option("--uninstall", "Remove hooks instead of installing them").option("--no-resume-hint", "Don't install the UserPromptSubmit resume-hint hook").option("--no-escalate", "Don't install the SessionEnd learnings-escalation hook").option("--no-wakeup", "Don't install the SessionStart wake-up hook").action(async (opts) => {
-  const { mkdirSync: mkdirSync19, copyFileSync: copyFileSync4, chmodSync: chmodSync5, existsSync: existsSync56, readFileSync: readFileSync49, writeFileSync: writeFileSync21, statSync: statSync46 } = await import("fs");
+  const { mkdirSync: mkdirSync20, copyFileSync: copyFileSync4, chmodSync: chmodSync5, existsSync: existsSync57, readFileSync: readFileSync49, writeFileSync: writeFileSync22, statSync: statSync46 } = await import("fs");
   const { fileURLToPath: fileURLToPath5 } = await import("url");
   const here = fileURLToPath5(new URL(".", import.meta.url));
   const findHook = (name) => {
@@ -28744,7 +29045,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
       join60(here, "..", "hooks", name),
       join60(here, "..", "..", "hooks", name)
     ];
-    return candidates2.find((p) => existsSync56(p));
+    return candidates2.find((p) => existsSync57(p));
   };
   const sourceSaveHook = findHook("chat_recall_save_hook.sh");
   const sourceResumeHook = findHook("chat_recall_resume_hook.sh");
@@ -28761,7 +29062,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
   const installedWakeupHook = join60(hooksDir, "chat_recall_wakeup_hook.sh");
   const wakeupWiredInSettings = (home) => {
     const settings2 = join60(home, "settings.json");
-    if (!existsSync56(settings2)) return false;
+    if (!existsSync57(settings2)) return false;
     try {
       const cfg = JSON.parse(readFileSync49(settings2, "utf-8"));
       const arr = Array.isArray(cfg.hooks?.SessionStart) ? cfg.hooks.SessionStart : [];
@@ -28772,7 +29073,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
   };
   const hookConfigFiles = claudeHookConfigFiles();
   const readHookConfig = (file) => {
-    if (!existsSync56(file)) return { hooks: {} };
+    if (!existsSync57(file)) return { hooks: {} };
     try {
       const c = JSON.parse(readFileSync49(file, "utf-8"));
       if (!c.hooks || typeof c.hooks !== "object") c.hooks = {};
@@ -28800,8 +29101,8 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
         if (filtered.length) config2.hooks[event] = filtered;
         else delete config2.hooks[event];
       }
-      if (removed === 0 && !existsSync56(hooksJson)) continue;
-      writeFileSync21(hooksJson, JSON.stringify(config2, null, 2) + "\n");
+      if (removed === 0 && !existsSync57(hooksJson)) continue;
+      writeFileSync22(hooksJson, JSON.stringify(config2, null, 2) + "\n");
       total += removed;
       console.log(chalk.green(`\u2713 Removed ${removed} chat-recall hook entr${removed === 1 ? "y" : "ies"} from ${hooksJson}`));
     }
@@ -28822,7 +29123,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
     console.log(chalk.dim("  Under WSL, run this from inside the WSL shell and it installs normally."));
     return;
   }
-  mkdirSync19(hooksDir, { recursive: true });
+  mkdirSync20(hooksDir, { recursive: true });
   copyFileSync4(sourceSaveHook, installedSaveHook);
   chmodSync5(installedSaveHook, 493);
   const installResume = opts.resumeHint !== false && !!sourceResumeHook;
@@ -28854,7 +29155,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
   const wakeupSkipped = [];
   for (const hooksJson of hookConfigFiles) {
     const config2 = readHookConfig(hooksJson);
-    const home = dirname25(hooksJson);
+    const home = dirname26(hooksJson);
     const alreadyWired = wakeupWiredInSettings(home);
     if (alreadyWired) wakeupSkipped.push(join60(home, "settings.json"));
     const perProfile = installWakeup && !alreadyWired ? [...events, ["SessionStart", wakeupEntry]] : events;
@@ -28866,8 +29167,8 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
       if (without.length) config2.hooks[event] = without;
       else delete config2.hooks[event];
     }
-    mkdirSync19(dirname25(hooksJson), { recursive: true });
-    writeFileSync21(hooksJson, JSON.stringify(config2, null, 2) + "\n");
+    mkdirSync20(dirname26(hooksJson), { recursive: true });
+    writeFileSync22(hooksJson, JSON.stringify(config2, null, 2) + "\n");
   }
   const saveSz = statSync46(installedSaveHook).size;
   console.log(chalk.green(`\u2713 Installed chat-recall save hook (${saveSz} bytes)`));
@@ -28912,7 +29213,7 @@ program.command("dossier <project>").description("Generate a project dossier (ov
     );
     const md = dossier.markdown;
     if (options.out) {
-      writeFileSync20(options.out, md);
+      writeFileSync21(options.out, md);
       console.log(chalk.green(`Wrote dossier to ${options.out} (${md.length} chars)`));
     } else {
       console.log(md);