chat-recall 0.6.4 → 0.6.6

package/dist/cli.js

@@ -2034,7 +2034,7 @@ var require_thread_stream = __commonJS({
     var { version: version2 } = require_package();
     var { EventEmitter } = __require("events");
     var { Worker: Worker2 } = __require("worker_threads");
-    var { join: join59 } = __require("path");
+    var { join: join62 } = __require("path");
     var { pathToFileURL } = __require("url");
     var { wait } = require_wait();
     var {
@@ -2077,7 +2077,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join59(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join62(__dirname, "lib", "worker.js");
       const worker = new Worker2(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -2480,7 +2480,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire: createRequire3 } = __require("module");
     var getCallers = require_caller();
-    var { join: join59, isAbsolute: isAbsolute4, sep: sep4 } = __require("node:path");
+    var { join: join62, isAbsolute: isAbsolute4, sep: sep4 } = __require("node:path");
     var sleep2 = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -2543,7 +2543,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join59(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join62(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -2561,7 +2561,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline) {
-        target = bundlerOverrides["pino-worker"] || join59(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join62(__dirname, "worker.js");
         options.pipelines = [pipeline.map((dest) => {
           return {
             ...dest,
@@ -2583,7 +2583,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join59(__dirname, "..", "file.js");
+          return join62(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -3572,7 +3572,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join59 = ",";
+            let join62 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -3586,7 +3586,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join59 = `,
+                join62 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3594,13 +3594,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join59;
+                res += join62;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join59}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join62}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3621,7 +3621,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join59 = `,
+              join62 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3635,13 +3635,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key3, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}:${whitespace}${tmp}`;
-                separator = join59;
+                separator = join62;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join59;
+              separator = join62;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -3682,7 +3682,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join59 = ",";
+            let join62 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -3695,7 +3695,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join59 = `,
+                join62 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3703,13 +3703,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join59;
+                res += join62;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join59}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join62}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3722,7 +3722,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join59 = `,
+              join62 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3731,7 +3731,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key3, value[key3], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}:${whitespace}${tmp}`;
-                separator = join59;
+                separator = join62;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -3789,20 +3789,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join60 = `,
+              const join63 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join60;
+                res2 += join63;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join60}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join63}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -3818,16 +3818,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join59 = `,
+            const join62 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join59, maximumBreadth);
+              res += stringifyTypedArray(value, join62, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join59;
+              separator = join62;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -3838,13 +3838,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key3, value[key3], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}: ${tmp}`;
-                separator = join59;
+                separator = join62;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join59;
+              separator = join62;
             }
             if (separator !== "") {
               res = `
@@ -7443,11 +7443,11 @@ async function archiveRawSession(store, sessionId) {
   return await store.putRawSession(sessionId, exp.tool, Math.floor(exp.mtime), gz, size);
 }
 function detectForkPredecessor(sessionPath) {
-  const { readFileSync: readFileSync49, readdirSync: readdirSync35 } = requireFs();
-  const { dirname: dirname28, join: join59, basename: basename28 } = requirePath();
+  const { readFileSync: readFileSync50, readdirSync: readdirSync35 } = requireFs();
+  const { dirname: dirname30, join: join62, basename: basename28 } = requirePath();
   let text;
   try {
-    text = readFileSync49(sessionPath, "utf-8");
+    text = readFileSync50(sessionPath, "utf-8");
   } catch {
     return null;
   }
@@ -7469,7 +7469,7 @@ function detectForkPredecessor(sessionPath) {
     return null;
   if (text.includes(`"uuid":"${headParent}"`))
     return null;
-  const dir = dirname28(sessionPath);
+  const dir = dirname30(sessionPath);
   const self = basename28(sessionPath);
   let entries;
   try {
@@ -7481,7 +7481,7 @@ function detectForkPredecessor(sessionPath) {
     if (!f.endsWith(".jsonl") || f === self || f === "sessions-index.json")
       continue;
     try {
-      if (readFileSync49(join59(dir, f), "utf-8").includes(`"uuid":"${headParent}"`)) {
+      if (readFileSync50(join62(dir, f), "utf-8").includes(`"uuid":"${headParent}"`)) {
         return basename28(f, ".jsonl");
       }
     } catch {
@@ -13995,10 +13995,10 @@ var init_types = __esm({
 
 // ../engine/dist/transcript/opencode.js
 async function parseOpenCodeSubagents(parentSessionId) {
-  const { existsSync: existsSync55 } = await import("fs");
+  const { existsSync: existsSync57 } = await import("fs");
   const { opencodeBackend: opencodeBackend2 } = await Promise.resolve().then(() => (init_opencode(), opencode_exports));
   const dbPath = opencodeBackend2.dbPath();
-  if (!existsSync55(dbPath))
+  if (!existsSync57(dbPath))
     return [];
   const realParent = parentSessionId.replace("opencode_", "");
   const db = openSqliteReadonlyOrThrow(dbPath);
@@ -14039,10 +14039,10 @@ async function parseOpenCodeSubagents(parentSessionId) {
   }
 }
 async function parseOpenCodeTranscript(sessionId) {
-  const { existsSync: existsSync55 } = await import("fs");
+  const { existsSync: existsSync57 } = await import("fs");
   const { opencodeBackend: opencodeBackend2 } = await Promise.resolve().then(() => (init_opencode(), opencode_exports));
   const dbPath = opencodeBackend2.dbPath();
-  if (!existsSync55(dbPath))
+  if (!existsSync57(dbPath))
     return [];
   const realId = sessionId.replace("opencode_", "");
   const db = openSqliteReadonlyOrThrow(dbPath);
@@ -14322,12 +14322,12 @@ function extractEntities(text, context3 = {}) {
         if (chosen && looksLikeStrictTool(chosen) && looksLikeStrictTool(rejected)) {
           const c = canonTool(chosen), r = canonTool(rejected);
           if (projectName)
-            addTriple(projectName, "chose", c, 0.8);
-          addTriple(projectName || "project", "rejected", r, 0.7);
-          addTriple(c, "chosen_over", r, 0.8);
+            addTriple(projectName, "chose", c, DECISION_GUESS_CONFIDENCE);
+          addTriple(projectName || "project", "rejected", r, DECISION_GUESS_CONFIDENCE);
+          addTriple(c, "chosen_over", r, DECISION_GUESS_CONFIDENCE);
         }
       } else if (chosen && looksLikeDecisionObject(chosen) && projectName) {
-        addTriple(projectName, "chose", canonTool(chosen), 0.8);
+        addTriple(projectName, "chose", canonTool(chosen), DECISION_GUESS_CONFIDENCE);
       }
     }
   }
@@ -14364,7 +14364,7 @@ function extractEntities(text, context3 = {}) {
   }
   return triples;
 }
-var KNOWN_TOOLS, AMBIGUOUS_TOOLS, toolContextRe, TOOL_PATTERNS, DECISION_PATTERNS2, DECISION_OBJECT_STOPWORDS, KNOWN_TOOL_NAMES, CANONICAL_TOOL, canonTool, PROJECT_PATH_PATTERN, PEOPLE_PATTERNS, NOT_PEOPLE;
+var KNOWN_TOOLS, AMBIGUOUS_TOOLS, toolContextRe, TOOL_PATTERNS, DECISION_PATTERNS2, DECISION_OBJECT_STOPWORDS, KNOWN_TOOL_NAMES, CANONICAL_TOOL, canonTool, DECISION_GUESS_CONFIDENCE, PROJECT_PATH_PATTERN, PEOPLE_PATTERNS, NOT_PEOPLE;
 var init_entity_extractor = __esm({
   "../engine/dist/core/entity-extractor.js"() {
     "use strict";
@@ -14585,6 +14585,7 @@ var init_entity_extractor = __esm({
       "nextjs": "next.js"
     };
     canonTool = (n) => CANONICAL_TOOL[n.toLowerCase()] ?? n;
+    DECISION_GUESS_CONFIDENCE = 0.6;
     PROJECT_PATH_PATTERN = /\/(?:home|Users)\/\w+\/(?:code|projects|work|dev|src)\/(?:\w+\/)?([a-zA-Z][a-zA-Z0-9_-]{1,40})/g;
     PEOPLE_PATTERNS = [
       /\b(?:my name is|I'm|I am)\s+([A-Z][a-z]{1,15}(?:\s+[A-Z][a-z]{1,15})?)/g,
@@ -18816,7 +18817,7 @@ var init_http = __esm({
       CLI_VERSION = JSON.parse(readFileSync31(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.6.4";
+        if (true) CLI_VERSION = "0.6.6";
       } catch {
       }
     }
@@ -19336,7 +19337,7 @@ var init_telemetry = __esm({
     init_sync_client();
     cliVersion2 = () => {
       try {
-        return true ? "0.6.4" : "dev";
+        return true ? "0.6.6" : "dev";
       } catch {
         return "dev";
       }
@@ -19665,12 +19666,16 @@ var init_client_events = __esm({
 // src/auto-update.ts
 var auto_update_exports = {};
 __export(auto_update_exports, {
+  clearUpdateFailures: () => clearUpdateFailures,
   compareVersions: () => compareVersions,
   executeAutoUpdate: () => executeAutoUpdate,
+  hasGivenUpOn: () => hasGivenUpOn,
   installedVersion: () => installedVersion,
   isAutoUpdateEnabled: () => isAutoUpdateEnabled,
   newerOf: () => newerOf,
+  noteUpdateFailure: () => noteUpdateFailure,
   planAutoUpdate: () => planAutoUpdate,
+  readUpdateState: () => readUpdateState,
   runAutoUpdate: () => runAutoUpdate,
   runningPrefix: () => runningPrefix,
   sweepStaleStaging: () => sweepStaleStaging,
@@ -19679,9 +19684,9 @@ __export(auto_update_exports, {
 import { execSync as execSync2 } from "node:child_process";
 import { readFileSync as readFileSync34 } from "node:fs";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-import { writeFileSync as writeFileSync8, mkdtempSync as mkdtempSync3, rmSync as rmSync5, readdirSync as readdirSync31, statSync as statSync36 } from "node:fs";
+import { writeFileSync as writeFileSync8, mkdtempSync as mkdtempSync3, rmSync as rmSync5, readdirSync as readdirSync31, statSync as statSync36, mkdirSync as mkdirSync9 } from "node:fs";
 import { join as join41, dirname as dirname18, sep as sep2 } from "node:path";
-import { tmpdir as tmpdir2 } from "node:os";
+import { tmpdir as tmpdir2, homedir as homedir15 } from "node:os";
 import { createHash as createHash8 } from "node:crypto";
 function compareVersions(a, b) {
   const pa = String(a).split("-")[0].split(".").map((n) => parseInt(n, 10) || 0);
@@ -19795,16 +19800,25 @@ function runningPrefix(moduleUrl = import.meta.url) {
   const beforeNodeModules = here.slice(0, at);
   return beforeNodeModules.endsWith(`${sep2}lib`) ? beforeNodeModules.slice(0, -4) : beforeNodeModules;
 }
+function npmInstall(cmd) {
+  try {
+    execSync2(cmd, { stdio: ["ignore", "ignore", "pipe"] });
+  } catch (e) {
+    const err = e;
+    const detail = String(err.stderr ?? "").trim().split("\n").filter((l) => l.trim() && !/^npm (notice|warn)\b/i.test(l)).slice(-4).join(" | ").slice(0, 400);
+    throw new Error(detail ? `${err.message ?? "install failed"} \u2014 ${detail}` : err.message ?? "install failed");
+  }
+}
 function realInstall(tgz) {
   const prefix = runningPrefix();
   if (prefix) {
-    execSync2(`npm install -g --prefix "${prefix}" "${tgz}"`, { stdio: "ignore" });
+    npmInstall(`npm install -g --prefix "${prefix}" "${tgz}"`);
     return;
   }
   try {
-    execSync2(`npm install -g "${tgz}"`, { stdio: "ignore" });
+    npmInstall(`npm install -g "${tgz}"`);
   } catch {
-    execSync2(`npm install -g --prefix "${process.env.HOME}/.local" "${tgz}"`, { stdio: "ignore" });
+    npmInstall(`npm install -g --prefix "${process.env.HOME}/.local" "${tgz}"`);
   }
 }
 function realRestart(platform2) {
@@ -19812,6 +19826,37 @@ function realRestart(platform2) {
   else if (platform2 === "darwin") execSync2("launchctl kickstart -k gui/$(id -u)/com.chat-recall.watch", { stdio: "ignore", shell: "/bin/bash" });
   else if (platform2 === "win32") execSync2("schtasks /End /TN chat-recall-watch & schtasks /Run /TN chat-recall-watch", { stdio: "ignore" });
 }
+function updateStatePath() {
+  const dir = process.env.CHAT_RECALL_DATA_DIR || join41(homedir15(), ".chat-recall");
+  return join41(dir, "auto-update-state.json");
+}
+function readUpdateState() {
+  try {
+    return JSON.parse(readFileSync34(updateStatePath(), "utf8"));
+  } catch {
+    return {};
+  }
+}
+function writeUpdateState(st) {
+  try {
+    const p = updateStatePath();
+    mkdirSync9(dirname18(p), { recursive: true });
+    writeFileSync8(p, JSON.stringify(st), "utf8");
+  } catch {
+  }
+}
+function hasGivenUpOn(target, st = readUpdateState()) {
+  return st.target === target && (st.failures ?? 0) >= GIVE_UP_AFTER;
+}
+function noteUpdateFailure(target) {
+  const st = readUpdateState();
+  const failures = st.target === target ? (st.failures ?? 0) + 1 : 1;
+  writeUpdateState({ target, failures });
+  return failures;
+}
+function clearUpdateFailures() {
+  writeUpdateState({});
+}
 async function runAutoUpdate(base3, authHeaders, ownVersion3, deps) {
   let caps;
   try {
@@ -19834,6 +19879,10 @@ async function runAutoUpdate(base3, authHeaders, ownVersion3, deps) {
     }
     return { updated: false, reason: plan.reason };
   }
+  const target = plan.to ?? "";
+  if (target && hasGivenUpOn(target)) {
+    return { updated: false, reason: `gave up installing ${plan.to} after ${GIVE_UP_AFTER} failed attempts \u2014 run \`npm install -g chat-recall\` by hand` };
+  }
   const result = await executeAutoUpdate(plan, {
     download: deps?.download ?? realDownload,
     install: deps?.install ?? realInstall,
@@ -19841,20 +19890,27 @@ async function runAutoUpdate(base3, authHeaders, ownVersion3, deps) {
     platform: deps?.platform
   });
   if (!result.updated) {
-    try {
-      const { reportClientEvent: reportClientEvent2 } = await Promise.resolve().then(() => (init_client_events(), client_events_exports));
-      reportClientEvent2("auto_update_failed", { message: `${plan.from} \u2192 ${plan.to}: ${result.reason}` });
-    } catch {
+    const failures = target ? noteUpdateFailure(target) : 1;
+    if (failures <= GIVE_UP_AFTER) {
+      try {
+        const { reportClientEvent: reportClientEvent2 } = await Promise.resolve().then(() => (init_client_events(), client_events_exports));
+        const suffix = failures >= GIVE_UP_AFTER ? ` \u2014 giving up after ${failures} attempts, needs a manual \`npm install -g chat-recall\`` : ` (attempt ${failures} of ${GIVE_UP_AFTER})`;
+        reportClientEvent2("auto_update_failed", { message: `${plan.from} \u2192 ${plan.to}: ${result.reason}${suffix}` });
+      } catch {
+      }
     }
+  } else {
+    clearUpdateFailures();
   }
   return result;
 }
-var tarballUrl, reportedStandingSkip;
+var tarballUrl, GIVE_UP_AFTER, reportedStandingSkip;
 var init_auto_update = __esm({
   "src/auto-update.ts"() {
     "use strict";
     init_http();
     tarballUrl = (base3) => `${base3.replace(/\/+$/, "")}/install/chat-recall.tgz`;
+    GIVE_UP_AFTER = 3;
     reportedStandingSkip = /* @__PURE__ */ new Set();
   }
 });
@@ -19889,7 +19945,7 @@ __export(sync_client_exports, {
   syncSessions: () => syncSessions
 });
 import { join as join42, dirname as dirname19, basename as basename20 } from "node:path";
-import { readFileSync as readFileSync35, writeFileSync as writeFileSync9, mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync4, rmSync as rmSync6, chmodSync as chmodSync3, unlinkSync as unlinkSync2, readdirSync as readdirSync32, statSync as statSync37 } from "node:fs";
+import { readFileSync as readFileSync35, writeFileSync as writeFileSync9, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync4, rmSync as rmSync6, chmodSync as chmodSync3, unlinkSync as unlinkSync2, readdirSync as readdirSync32, statSync as statSync37 } from "node:fs";
 import { tmpdir as tmpdir3, hostname as hostname2 } from "node:os";
 import { createHash as createHash9 } from "node:crypto";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
@@ -19924,7 +19980,7 @@ function classifyError(msg, err) {
 }
 function saveCredentials(c) {
   assertTransportSafe(c.serverUrl);
-  mkdirSync9(dirname19(credPath()), { recursive: true });
+  mkdirSync10(dirname19(credPath()), { recursive: true });
   const targets = loadAllCredentials().filter((t) => t.serverUrl !== c.serverUrl);
   targets.unshift(c);
   writeFileSync9(credPath(), JSON.stringify({ targets }, null, 2));
@@ -20019,7 +20075,7 @@ function persistSyncConfig(base3, config2) {
   try {
     const all = readPersistedSyncConfigs();
     all[base3] = { fetchedAt: Date.now(), config: config2 };
-    mkdirSync9(dirname19(syncConfigCachePath()), { recursive: true });
+    mkdirSync10(dirname19(syncConfigCachePath()), { recursive: true });
     writeFileSync9(syncConfigCachePath(), JSON.stringify(all, null, 2));
   } catch {
   }
@@ -21425,7 +21481,7 @@ var init_sync_client = __esm({
       ownVersion = JSON.parse(readFileSync35(join42(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.6.4";
+        if (true) ownVersion = "0.6.6";
       } catch {
       }
     }
@@ -21677,16 +21733,16 @@ __export(mcp_clients_exports, {
   inspectMcpClients: () => inspectMcpClients,
   registerMcpEverywhere: () => registerMcpEverywhere
 });
-import { existsSync as existsSync42, mkdirSync as mkdirSync10, readFileSync as readFileSync37, writeFileSync as writeFileSync11 } from "fs";
-import { homedir as homedir15 } from "os";
-import { dirname as dirname20, join as join45 } from "path";
+import { existsSync as existsSync43, mkdirSync as mkdirSync12, readFileSync as readFileSync37, writeFileSync as writeFileSync12 } from "fs";
+import { homedir as homedir16 } from "os";
+import { dirname as dirname21, join as join46 } from "path";
 function envHome(varName, fallback) {
   const v = process.env[varName];
   return v && v.trim() ? v.trim() : fallback;
 }
 function writeFileMkdir(path, body) {
-  mkdirSync10(dirname20(path), { recursive: true });
-  writeFileSync11(path, body);
+  mkdirSync12(dirname21(path), { recursive: true });
+  writeFileSync12(path, body);
 }
 function readJsonObject(path) {
   const raw = readFileSync37(path, "utf-8");
@@ -21696,7 +21752,7 @@ function readJsonObject(path) {
 }
 function registerMcpServersJson(target, path, spec) {
   let cfg = {};
-  if (existsSync42(path)) {
+  if (existsSync43(path)) {
     try {
       cfg = readJsonObject(path);
     } catch (err) {
@@ -21725,7 +21781,7 @@ function registerOpencodeJson(path, spec) {
   const id = "opencode";
   const label = "OpenCode";
   let cfg = {};
-  if (existsSync42(path)) {
+  if (existsSync43(path)) {
     try {
       cfg = readJsonObject(path);
     } catch (err) {
@@ -21764,7 +21820,7 @@ function registerCodexToml(path, spec) {
   const id = "codex";
   const label = "Codex";
   const block = codexBlock(spec);
-  const prev = existsSync42(path) ? readFileSync37(path, "utf-8") : "";
+  const prev = existsSync43(path) ? readFileSync37(path, "utf-8") : "";
   const lines = prev.length ? prev.split("\n") : [];
   const start = lines.findIndex((l) => l.trim() === CODEX_HEADER);
   if (start === -1) {
@@ -21796,16 +21852,16 @@ function getMcpClient(id) {
   return t;
 }
 function registerMcpEverywhere(spec, opts = {}) {
-  const home = opts.home ?? homedir15();
+  const home = opts.home ?? homedir16();
   const forced = new Set(opts.extraIds ?? []);
   return MCP_CLIENTS.filter((c) => c.isPresent(home) || forced.has(c.id)).map((c) => c.register(spec, home));
 }
 function inspectMcpClients(opts = {}) {
-  const home = opts.home ?? homedir15();
+  const home = opts.home ?? homedir16();
   return MCP_CLIENTS.map((c) => {
     const path = c.configPath(home);
     let registered = false;
-    if (existsSync42(path)) {
+    if (existsSync43(path)) {
       try {
         const raw = readFileSync37(path, "utf-8");
         registered = c.id === "codex" ? raw.includes(CODEX_HEADER) : !!(JSON.parse(raw).mcpServers?.[MCP_SERVER_NAME] ?? JSON.parse(raw).mcp?.[MCP_SERVER_NAME]);
@@ -21827,7 +21883,7 @@ var init_mcp_clients = __esm({
         id: "claude",
         label: "Claude Code",
         bin: "claude",
-        configPath: (home) => join45(home, ".mcp.json"),
+        configPath: (home) => join46(home, ".mcp.json"),
         // Claude Code is the reference client and `init`'s historical target, so we
         // always write it — a fresh machine has no ~/.claude yet on first install.
         isPresent: () => true,
@@ -21839,10 +21895,10 @@ var init_mcp_clients = __esm({
         id: "codex",
         label: "Codex",
         bin: "codex",
-        configPath: (home) => join45(envHome("CHAT_RECALL_CODEX_HOME", join45(home, ".codex")), "config.toml"),
+        configPath: (home) => join46(envHome("CHAT_RECALL_CODEX_HOME", join46(home, ".codex")), "config.toml"),
         isPresent(home) {
           const p = this.configPath(home);
-          return existsSync42(p) || existsSync42(dirname20(p));
+          return existsSync43(p) || existsSync43(dirname21(p));
         },
         register(spec, home) {
           return registerCodexToml(this.configPath(home), spec);
@@ -21852,10 +21908,10 @@ var init_mcp_clients = __esm({
         id: "opencode",
         label: "OpenCode",
         bin: "opencode",
-        configPath: (home) => join45(envHome("XDG_CONFIG_HOME", join45(home, ".config")), "opencode", "opencode.json"),
+        configPath: (home) => join46(envHome("XDG_CONFIG_HOME", join46(home, ".config")), "opencode", "opencode.json"),
         isPresent(home) {
           const p = this.configPath(home);
-          return existsSync42(p) || existsSync42(dirname20(p));
+          return existsSync43(p) || existsSync43(dirname21(p));
         },
         register(spec, home) {
           return registerOpencodeJson(this.configPath(home), spec);
@@ -21867,9 +21923,9 @@ var init_mcp_clients = __esm({
         id: "agy",
         label: "Antigravity",
         bin: "agy",
-        configPath: (home) => join45(home, ".gemini", "config", "mcp_config.json"),
+        configPath: (home) => join46(home, ".gemini", "config", "mcp_config.json"),
         isPresent(home) {
-          return existsSync42(join45(home, ".gemini", "antigravity-cli")) || existsSync42(this.configPath(home));
+          return existsSync43(join46(home, ".gemini", "antigravity-cli")) || existsSync43(this.configPath(home));
         },
         register(spec, home) {
           return registerMcpServersJson(this, this.configPath(home), spec);
@@ -21879,10 +21935,10 @@ var init_mcp_clients = __esm({
         id: "cursor",
         label: "Cursor",
         bin: "cursor",
-        configPath: (home) => join45(home, ".cursor", "mcp.json"),
+        configPath: (home) => join46(home, ".cursor", "mcp.json"),
         isPresent(home) {
           const p = this.configPath(home);
-          return existsSync42(p) || existsSync42(dirname20(p));
+          return existsSync43(p) || existsSync43(dirname21(p));
         },
         register(spec, home) {
           return registerMcpServersJson(this, this.configPath(home), spec);
@@ -21906,9 +21962,9 @@ __export(companions_exports, {
   uninstallCodeindex: () => uninstallCodeindex,
   unregisterCodeindexMcp: () => unregisterCodeindexMcp
 });
-import { existsSync as existsSync43, mkdirSync as mkdirSync11, statSync as statSync39, chmodSync as chmodSync4, unlinkSync as unlinkSync3, renameSync as renameSync5, createWriteStream, readFileSync as readFileSync38, writeFileSync as writeFileSync12 } from "node:fs";
-import { homedir as homedir16 } from "node:os";
-import { join as join46 } from "node:path";
+import { existsSync as existsSync44, mkdirSync as mkdirSync13, statSync as statSync39, chmodSync as chmodSync4, unlinkSync as unlinkSync3, renameSync as renameSync5, createWriteStream, readFileSync as readFileSync38, writeFileSync as writeFileSync13 } from "node:fs";
+import { homedir as homedir17 } from "node:os";
+import { join as join47 } from "node:path";
 import { execSync as execSync3 } from "node:child_process";
 import { createHash as createHash10 } from "node:crypto";
 function expectedCodeindexSha256(artifact) {
@@ -22010,7 +22066,7 @@ async function installCodeindex(opts = {}) {
     return status;
   if (!status.prebuiltAvailable)
     return status;
-  mkdirSync11(CODEINDEX_INSTALL_DIR, { recursive: true });
+  mkdirSync13(CODEINDEX_INSTALL_DIR, { recursive: true });
   const tmpPath = `${CODEINDEX_BIN_PATH}.partial`;
   try {
     await downloadArtifact(status.artifactName, tmpPath);
@@ -22029,7 +22085,7 @@ Refusing to install. The release may have been re-uploaded, or something is serv
     renameSync5(tmpPath, CODEINDEX_BIN_PATH);
   } catch (err) {
     try {
-      if (existsSync43(tmpPath))
+      if (existsSync44(tmpPath))
         unlinkSync3(tmpPath);
     } catch {
     }
@@ -22038,7 +22094,7 @@ Refusing to install. The release may have been re-uploaded, or something is serv
   return checkCodeindexStatus();
 }
 function uninstallCodeindex() {
-  if (existsSync43(CODEINDEX_BIN_PATH)) {
+  if (existsSync44(CODEINDEX_BIN_PATH)) {
     unlinkSync3(CODEINDEX_BIN_PATH);
     return { removed: true, path: CODEINDEX_BIN_PATH };
   }
@@ -22046,7 +22102,7 @@ function uninstallCodeindex() {
 }
 function registerCodeindexMcp(mcpJsonPath, binaryPath) {
   let cfg = {};
-  if (existsSync43(mcpJsonPath)) {
+  if (existsSync44(mcpJsonPath)) {
     try {
       cfg = JSON.parse(readFileSync38(mcpJsonPath, "utf-8"));
     } catch {
@@ -22057,11 +22113,11 @@ function registerCodeindexMcp(mcpJsonPath, binaryPath) {
   if (cfg.mcpServers["codeindex"])
     return { added: false };
   cfg.mcpServers["codeindex"] = { command: binaryPath, args: ["--mcp"] };
-  writeFileSync12(mcpJsonPath, JSON.stringify(cfg, null, 2));
+  writeFileSync13(mcpJsonPath, JSON.stringify(cfg, null, 2));
   return { added: true };
 }
 function unregisterCodeindexMcp(mcpJsonPath) {
-  if (!existsSync43(mcpJsonPath))
+  if (!existsSync44(mcpJsonPath))
     return { removed: false };
   let cfg;
   try {
@@ -22072,7 +22128,7 @@ function unregisterCodeindexMcp(mcpJsonPath) {
   if (!cfg.mcpServers?.["codeindex"])
     return { removed: false };
   delete cfg.mcpServers["codeindex"];
-  writeFileSync12(mcpJsonPath, JSON.stringify(cfg, null, 2));
+  writeFileSync13(mcpJsonPath, JSON.stringify(cfg, null, 2));
   return { removed: true };
 }
 var CODEINDEX_REPO, CODEINDEX_VERSION, CODEINDEX_SHA256, CODEINDEX_INSTALL_DIR, CODEINDEX_BIN_NAME, CODEINDEX_BIN_PATH;
@@ -22090,9 +22146,9 @@ var init_companions = __esm({
       "x86_64-windows": "a96fc8c8949bb399a44cc0615b12e458460a529c69f01e8829cc39a20f45ab29",
       "aarch64-windows": "42620d56272cd9ba9d785569d8d754d6b4a3e80f36f28db3e0c483fd600ed117"
     };
-    CODEINDEX_INSTALL_DIR = join46(homedir16(), ".local", "bin");
+    CODEINDEX_INSTALL_DIR = join47(homedir17(), ".local", "bin");
     CODEINDEX_BIN_NAME = process.platform === "win32" ? "codeindex.exe" : "codeindex";
-    CODEINDEX_BIN_PATH = join46(CODEINDEX_INSTALL_DIR, CODEINDEX_BIN_NAME);
+    CODEINDEX_BIN_PATH = join47(CODEINDEX_INSTALL_DIR, CODEINDEX_BIN_NAME);
   }
 });
 
@@ -22107,11 +22163,11 @@ __export(install_skills_exports, {
   skillsSourceDir: () => skillsSourceDir,
   uninstallSkills: () => uninstallSkills
 });
-import { readdirSync as readdirSync33, existsSync as existsSync44, mkdirSync as mkdirSync12, rmSync as rmSync7, cpSync, writeFileSync as writeFileSync13, readFileSync as readFileSync39, statSync as statSync40, realpathSync as realpathSync4 } from "fs";
+import { readdirSync as readdirSync33, existsSync as existsSync45, mkdirSync as mkdirSync14, rmSync as rmSync7, cpSync, writeFileSync as writeFileSync14, readFileSync as readFileSync39, statSync as statSync40, realpathSync as realpathSync4 } from "fs";
 import { createHash as createHash11 } from "crypto";
-import { join as join47, basename as basename21 } from "path";
+import { join as join48, basename as basename21 } from "path";
 function skillsSourceDir() {
-  return join47(import.meta.dirname, "..", "skills");
+  return join48(import.meta.dirname, "..", "skills");
 }
 function version() {
   try {
@@ -22124,9 +22180,9 @@ function skillsFingerprint() {
   const src = skillsSourceDir();
   const h = createHash11("sha256");
   for (const name of bundledSkillNames()) {
-    for (const rel of filesUnder(join47(src, name)).sort()) {
+    for (const rel of filesUnder(join48(src, name)).sort()) {
       h.update(name + "/" + rel);
-      h.update(readFileSync39(join47(src, name, rel)));
+      h.update(readFileSync39(join48(src, name, rel)));
     }
   }
   return h.digest("hex").slice(0, 12);
@@ -22136,7 +22192,7 @@ function filesUnder(dir, prefix = "") {
   for (const e of readdirSync33(dir, { withFileTypes: true })) {
     if (e.name === MARKER) continue;
     const rel = prefix ? `${prefix}/${e.name}` : e.name;
-    if (e.isDirectory()) out.push(...filesUnder(join47(dir, e.name), rel));
+    if (e.isDirectory()) out.push(...filesUnder(join48(dir, e.name), rel));
     else out.push(rel);
   }
   return out;
@@ -22146,8 +22202,8 @@ function skillStamp() {
 }
 function bundledSkillNames() {
   const src = skillsSourceDir();
-  if (!existsSync44(src)) return [];
-  return readdirSync33(src, { withFileTypes: true }).filter((e) => e.isDirectory() && existsSync44(join47(src, e.name, "SKILL.md"))).map((e) => e.name).sort();
+  if (!existsSync45(src)) return [];
+  return readdirSync33(src, { withFileTypes: true }).filter((e) => e.isDirectory() && existsSync45(join48(src, e.name, "SKILL.md"))).map((e) => e.name).sort();
 }
 function realPathOrSelf(p) {
   try {
@@ -22160,7 +22216,7 @@ function claudeSkillTargets() {
   const targets = [];
   const seen = /* @__PURE__ */ new Set();
   for (const home of claudeHomeDirs()) {
-    const dir = join47(home, "skills");
+    const dir = join48(home, "skills");
     const key2 = realPathOrSelf(dir);
     if (seen.has(key2)) continue;
     seen.add(key2);
@@ -22171,7 +22227,7 @@ function claudeSkillTargets() {
       dir,
       // Judge each profile on ITS OWN transcripts, not the primary's: a home
       // with no projects/ is a directory someone made, not a Claude install.
-      available: existsSync44(join47(home, "projects"))
+      available: existsSync45(join48(home, "projects"))
     });
   }
   if (targets.length === 0) {
@@ -22186,16 +22242,16 @@ function skillTargets() {
     // both produces "skill conflict" duplicate warnings. Every tool we support
     // has its own dir, so per-tool coverage is complete.
     ...claudeSkillTargets(),
-    { id: "agy", label: "Antigravity", dir: join47(agyBackend.homeDir(), "skills"), available: agyBackend.isAvailable() },
+    { id: "agy", label: "Antigravity", dir: join48(agyBackend.homeDir(), "skills"), available: agyBackend.isAvailable() },
     { id: "codex", label: "Codex", dir: codexBackend.skillsDir(), available: codexBackend.isAvailable() },
     { id: "opencode", label: "OpenCode", dir: opencodeBackend.skillsDir(), available: opencodeBackend.isAvailable() },
     // Cursor DOES have its own dir (~/.cursor/skills). `skills-cursor` next to
     // it is Cursor's bundled set — read-only, never an install target.
-    { id: "cursor", label: "Cursor", dir: join47(cursorHomeDir(), "skills"), available: cursorBackend.isAvailable() }
+    { id: "cursor", label: "Cursor", dir: join48(cursorHomeDir(), "skills"), available: cursorBackend.isAvailable() }
   ];
 }
 function isManaged(dir) {
-  return existsSync44(join47(dir, MARKER));
+  return existsSync45(join48(dir, MARKER));
 }
 function installSkills(opts = {}) {
   const onlyAvailable = opts.onlyAvailable ?? true;
@@ -22212,15 +22268,15 @@ function installSkills(opts = {}) {
       continue;
     }
     for (const name of names) {
-      const dest = join47(t.dir, name);
-      if (existsSync44(dest) && !isManaged(dest)) {
+      const dest = join48(t.dir, name);
+      if (existsSync45(dest) && !isManaged(dest)) {
         skippedUserOwned.push(name);
         continue;
       }
-      mkdirSync12(t.dir, { recursive: true });
+      mkdirSync14(t.dir, { recursive: true });
       rmSync7(dest, { recursive: true, force: true });
-      cpSync(join47(src, name), dest, { recursive: true });
-      writeFileSync13(join47(dest, MARKER), `${stamp}
+      cpSync(join48(src, name), dest, { recursive: true });
+      writeFileSync14(join48(dest, MARKER), `${stamp}
 `);
       installed.push(name);
     }
@@ -22233,13 +22289,13 @@ function uninstallSkills() {
   const perTarget = [];
   for (const t of skillTargets()) {
     const removed = [];
-    if (!existsSync44(t.dir)) {
+    if (!existsSync45(t.dir)) {
       perTarget.push({ id: t.id, label: t.label, removed });
       continue;
     }
     for (const entry of readdirSync33(t.dir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
-      const dir = join47(t.dir, entry.name);
+      const dir = join48(t.dir, entry.name);
       if (isManaged(dir) && (names.has(entry.name) || entry.name.startsWith("chat-recall"))) {
         rmSync7(dir, { recursive: true, force: true });
         removed.push(entry.name);
@@ -22256,8 +22312,8 @@ function skillsNeedRefresh() {
   for (const t of skillTargets()) {
     if (!t.available) continue;
     for (const name of names) {
-      const marker = join47(t.dir, name, MARKER);
-      if (!existsSync44(marker)) return true;
+      const marker = join48(t.dir, name, MARKER);
+      if (!existsSync45(marker)) return true;
       try {
         if (readFileSync39(marker, "utf-8").trim() !== cur) return true;
       } catch {
@@ -22274,8 +22330,8 @@ function skillStatus() {
     let installed = 0;
     let ver = null;
     for (const name of names) {
-      const marker = join47(t.dir, name, MARKER);
-      if (existsSync44(marker)) {
+      const marker = join48(t.dir, name, MARKER);
+      if (existsSync45(marker)) {
         installed++;
         try {
           ver = readFileSync39(marker, "utf-8").trim();
@@ -22303,8 +22359,8 @@ var init_install_skills = __esm({
 
 // ../engine/dist/core/artifact-codec.js
 import { readFileSync as readFileSync40 } from "fs";
-import { basename as basename22, join as join48 } from "path";
-import { homedir as homedir17 } from "os";
+import { basename as basename22, join as join49 } from "path";
+import { homedir as homedir18 } from "os";
 function parseCommandText(content, format, fallbackName) {
   if (format === "toml") {
     const t = parseScalarToml(content);
@@ -22338,29 +22394,29 @@ function readInstructions(filePath, name) {
 function commandPath(tool, name) {
   switch (tool) {
     case "claude":
-      return join48(claudeBackend.commandsDir(), `${name}.md`);
+      return join49(claudeBackend.commandsDir(), `${name}.md`);
     case "agy":
-      return join48(join48(agyBackend.homeDir(), "commands"), `${name}.toml`);
+      return join49(join49(agyBackend.homeDir(), "commands"), `${name}.toml`);
     case "opencode":
-      return join48(opencodeBackend.commandsDir(), `${name}.md`);
+      return join49(opencodeBackend.commandsDir(), `${name}.md`);
     case "codex":
-      return join48(codexBackend.promptsDir(), `${name}.md`);
+      return join49(codexBackend.promptsDir(), `${name}.md`);
     case "cursor":
-      return join48(cursorHomeDir(), "commands", `${name}.md`);
+      return join49(cursorHomeDir(), "commands", `${name}.md`);
   }
 }
 function agentPath(tool, name) {
   switch (tool) {
     case "claude":
-      return join48(claudeBackend.agentsDir(), `${name}.md`);
+      return join49(claudeBackend.agentsDir(), `${name}.md`);
     case "agy":
-      return join48(join48(agyBackend.homeDir(), "agents"), `${name}.md`);
+      return join49(join49(agyBackend.homeDir(), "agents"), `${name}.md`);
     case "opencode":
-      return join48(opencodeBackend.agentsDir(), `${name}.md`);
+      return join49(opencodeBackend.agentsDir(), `${name}.md`);
     case "codex":
-      return join48(codexBackend.agentsDir(), `${name}.toml`);
+      return join49(codexBackend.agentsDir(), `${name}.toml`);
     case "cursor":
-      return join48(cursorHomeDir(), "agents", `${name}.md`);
+      return join49(cursorHomeDir(), "agents", `${name}.md`);
   }
 }
 function instructionsFilename(tool) {
@@ -22385,21 +22441,21 @@ function instructionsFilename(tool) {
 function instructionsPath(tool, projectPath) {
   const file = instructionsFilename(tool);
   if (projectPath)
-    return join48(projectPath, file);
+    return join49(projectPath, file);
   switch (tool) {
     case "claude":
-      return join48(claudeBackend.homeDir(), file);
+      return join49(claudeBackend.homeDir(), file);
     case "agy":
-      return join48(agyBackend.homeDir(), file);
+      return join49(agyBackend.homeDir(), file);
     case "codex":
-      return join48(codexBackend.homeDir(), file);
+      return join49(codexBackend.homeDir(), file);
     case "opencode":
-      return join48(homedir17(), ".config", "opencode", file);
+      return join49(homedir18(), ".config", "opencode", file);
     // Cursor has no single user-scope instructions FILE — user-level guidance
     // is User Rules plus ~/.cursor/rules/*.mdc. AGENTS.md at the home root is
     // the closest equivalent and is what a mirror can actually write.
     case "cursor":
-      return join48(cursorHomeDir(), file);
+      return join49(cursorHomeDir(), file);
   }
 }
 function emit(type, art, toTool, projectPath) {
@@ -22463,9 +22519,9 @@ __export(toolkit_sync_exports, {
   supportedTargetsFor: () => supportedTargetsFor,
   writeMcpEntry: () => writeMcpEntry
 });
-import { existsSync as existsSync45, mkdirSync as mkdirSync13, readFileSync as readFileSync41, writeFileSync as writeFileSync14, cpSync as cpSync2 } from "fs";
-import { dirname as dirname21, join as join49, basename as basename23 } from "path";
-import { homedir as homedir18 } from "os";
+import { existsSync as existsSync46, mkdirSync as mkdirSync15, readFileSync as readFileSync41, writeFileSync as writeFileSync15, cpSync as cpSync2 } from "fs";
+import { dirname as dirname22, join as join50, basename as basename23 } from "path";
+import { homedir as homedir19 } from "os";
 function supportedTargetsFor(type) {
   return SUPPORTED_TARGETS[type];
 }
@@ -22506,26 +22562,26 @@ function skillsDirFor(tool) {
     case "claude":
       return claudeBackend.skillsDir();
     case "agy":
-      return join49(agyBackend.homeDir(), "skills");
+      return join50(agyBackend.homeDir(), "skills");
     case "opencode":
       return opencodeBackend.skillsDir();
     case "codex":
       return codexBackend.skillsDir();
     // user skills, NOT .system
     case "cursor":
-      return join49(cursorHomeDir(), "skills");
+      return join50(cursorHomeDir(), "skills");
   }
 }
 function copySkill(row, toTool) {
-  const skillDir = row.extra.skillDir || dirname21(row.filePath);
-  if (!existsSync45(skillDir))
+  const skillDir = row.extra.skillDir || dirname22(row.filePath);
+  if (!existsSync46(skillDir))
     return { ok: false, status: 404, error: `Source dir missing: ${skillDir}` };
   const name = row.extra.skillName || basename23(skillDir);
-  const targetDir = join49(skillsDirFor(toTool), name);
-  if (existsSync45(targetDir))
+  const targetDir = join50(skillsDirFor(toTool), name);
+  if (existsSync46(targetDir))
     return { ok: false, status: 409, error: `Already exists: ${targetDir}` };
   try {
-    mkdirSync13(dirname21(targetDir), { recursive: true });
+    mkdirSync15(dirname22(targetDir), { recursive: true });
     cpSync2(skillDir, targetDir, { recursive: true });
     return { ok: true, targetPath: targetDir };
   } catch (e) {
@@ -22533,28 +22589,28 @@ function copySkill(row, toTool) {
   }
 }
 function readMcpEntry(tool, name) {
-  const home = homedir18();
+  const home = homedir19();
   const tries = [];
   if (tool === "claude") {
-    tries.push({ path: join49(home, ".mcp.json"), key: "mcpServers" });
-    tries.push({ path: join49(home, ".claude.json"), key: "mcpServers" });
+    tries.push({ path: join50(home, ".mcp.json"), key: "mcpServers" });
+    tries.push({ path: join50(home, ".claude.json"), key: "mcpServers" });
   } else if (tool === "gemini") {
-    tries.push({ path: join49(home, ".gemini", "settings.json"), key: "mcpServers" });
+    tries.push({ path: join50(home, ".gemini", "settings.json"), key: "mcpServers" });
   } else if (tool === "agy") {
-    tries.push({ path: join49(home, ".gemini", "config", "mcp_config.json"), key: "mcpServers" });
+    tries.push({ path: join50(home, ".gemini", "config", "mcp_config.json"), key: "mcpServers" });
   } else if (tool === "cursor") {
-    tries.push({ path: join49(cursorHomeDir(), "mcp.json"), key: "mcpServers" });
+    tries.push({ path: join50(cursorHomeDir(), "mcp.json"), key: "mcpServers" });
   } else if (tool === "opencode") {
-    tries.push({ path: join49(home, ".config", "opencode", "opencode.json"), key: "mcp" });
-    tries.push({ path: join49(home, ".config", "opencode", "config.json"), key: "mcp" });
-    tries.push({ path: join49(home, ".opencode", "config.json"), key: "mcp" });
+    tries.push({ path: join50(home, ".config", "opencode", "opencode.json"), key: "mcp" });
+    tries.push({ path: join50(home, ".config", "opencode", "config.json"), key: "mcp" });
+    tries.push({ path: join50(home, ".opencode", "config.json"), key: "mcp" });
   } else if (tool === "codex") {
-    const entry = readCodexMcpEntry(join49(home, ".codex", "config.toml"), name);
+    const entry = readCodexMcpEntry(join50(home, ".codex", "config.toml"), name);
     if (entry)
       return entry;
   }
   for (const t of tries) {
-    if (!existsSync45(t.path))
+    if (!existsSync46(t.path))
       continue;
     try {
       const cfg = JSON.parse(readFileSync41(t.path, "utf-8"));
@@ -22567,7 +22623,7 @@ function readMcpEntry(tool, name) {
   return null;
 }
 function readCodexMcpEntry(path, target) {
-  if (!existsSync45(path))
+  if (!existsSync46(path))
     return null;
   let content;
   try {
@@ -22621,7 +22677,7 @@ function readCodexMcpEntry(path, target) {
 }
 function writeCodexMcpEntry(path, name, entry) {
   let content = "";
-  if (existsSync45(path))
+  if (existsSync46(path))
     content = readFileSync41(path, "utf-8");
   const header = `[mcp_servers.${name}]`;
   if (content.includes(header))
@@ -22651,14 +22707,14 @@ function writeCodexMcpEntry(path, name, entry) {
     for (const [k, v] of Object.entries(entry.env))
       lines.push(`${k} = ${escape(String(v))}`);
   }
-  mkdirSync13(dirname21(path), { recursive: true });
-  writeFileSync14(path, content + lines.join("\n") + "\n");
+  mkdirSync15(dirname22(path), { recursive: true });
+  writeFileSync15(path, content + lines.join("\n") + "\n");
   return true;
 }
 function writeMcpEntry(toTool, name, entry) {
-  const home = homedir18();
+  const home = homedir19();
   if (toTool === "codex") {
-    const path2 = join49(home, ".codex", "config.toml");
+    const path2 = join50(home, ".codex", "config.toml");
     if (!writeCodexMcpEntry(path2, name, entry))
       return { ok: false, status: 409, error: `MCP "${name}" already exists in ${path2}.` };
     return { ok: true, targetPath: path2 };
@@ -22666,27 +22722,27 @@ function writeMcpEntry(toTool, name, entry) {
   let path;
   let key2;
   if (toTool === "claude") {
-    path = join49(home, ".mcp.json");
+    path = join50(home, ".mcp.json");
     key2 = "mcpServers";
   } else if (toTool === "agy") {
-    path = join49(home, ".gemini", "config", "mcp_config.json");
+    path = join50(home, ".gemini", "config", "mcp_config.json");
     key2 = "mcpServers";
   } else if (toTool === "cursor") {
-    path = join49(cursorHomeDir(), "mcp.json");
+    path = join50(cursorHomeDir(), "mcp.json");
     key2 = "mcpServers";
   } else {
-    path = join49(home, ".config", "opencode", "opencode.json");
+    path = join50(home, ".config", "opencode", "opencode.json");
     key2 = "mcp";
   }
   let cfg = {};
-  if (existsSync45(path)) {
+  if (existsSync46(path)) {
     try {
       cfg = JSON.parse(readFileSync41(path, "utf-8"));
     } catch {
       return { ok: false, status: 500, error: `Target config is malformed: ${path}` };
     }
   } else {
-    mkdirSync13(dirname21(path), { recursive: true });
+    mkdirSync15(dirname22(path), { recursive: true });
   }
   cfg[key2] = cfg[key2] || {};
   if (cfg[key2][name])
@@ -22713,7 +22769,7 @@ function writeMcpEntry(toTool, name, entry) {
   }
   cfg[key2][name] = normalized;
   try {
-    writeFileSync14(path, JSON.stringify(cfg, null, 2));
+    writeFileSync15(path, JSON.stringify(cfg, null, 2));
     return { ok: true, targetPath: path };
   } catch (e) {
     return { ok: false, status: 500, error: e instanceof Error ? e.message : "write failed" };
@@ -22743,11 +22799,11 @@ function copyCommandOrAgent(type, row, toTool) {
     return { ok: false, status: 404, error: `Source unreadable: ${e instanceof Error ? e.message : "failed"}` };
   }
   const out = emit(type, art, toTool);
-  if (existsSync45(out.path))
+  if (existsSync46(out.path))
     return { ok: false, status: 409, error: `Already exists: ${out.path}` };
   try {
-    mkdirSync13(dirname21(out.path), { recursive: true });
-    writeFileSync14(out.path, out.content);
+    mkdirSync15(dirname22(out.path), { recursive: true });
+    writeFileSync15(out.path, out.content);
     return { ok: true, targetPath: out.path };
   } catch (e) {
     return { ok: false, status: 500, error: e instanceof Error ? e.message : "write failed" };
@@ -22763,11 +22819,11 @@ function copyInstructions(row, toTool) {
     return { ok: false, status: 404, error: `Source unreadable: ${e instanceof Error ? e.message : "failed"}` };
   }
   const out = emit("instructions", art, toTool, row.projectPath || void 0);
-  if (existsSync45(out.path))
+  if (existsSync46(out.path))
     return { ok: false, status: 409, error: `Already exists: ${out.path}` };
   try {
-    mkdirSync13(dirname21(out.path), { recursive: true });
-    writeFileSync14(out.path, out.content);
+    mkdirSync15(dirname22(out.path), { recursive: true });
+    writeFileSync15(out.path, out.content);
     return { ok: true, targetPath: out.path };
   } catch (e) {
     return { ok: false, status: 500, error: e instanceof Error ? e.message : "write failed" };
@@ -22913,8 +22969,8 @@ __export(toolkit_pull_exports, {
   planPull: () => planPull,
   portableCommand: () => portableCommand
 });
-import { existsSync as existsSync46, mkdirSync as mkdirSync14, statSync as statSync41, writeFileSync as writeFileSync15 } from "node:fs";
-import { dirname as dirname22, join as join50, basename as basename24, isAbsolute as isAbsolute3 } from "node:path";
+import { existsSync as existsSync47, mkdirSync as mkdirSync16, statSync as statSync41, writeFileSync as writeFileSync16 } from "node:fs";
+import { dirname as dirname23, join as join51, basename as basename24, isAbsolute as isAbsolute3 } from "node:path";
 function isExecutableFile(p) {
   try {
     return statSync41(p).isFile();
@@ -23064,9 +23120,9 @@ function executePull(rows, opts = {}) {
   const outcomes = [];
   for (const { name, body, truncated, redacted, tools } of skills) {
     for (const tool of tools) {
-      const dir = join50(skillsDirFor(tool), name);
-      const file = join50(dir, "SKILL.md");
-      if (existsSync46(file)) {
+      const dir = join51(skillsDirFor(tool), name);
+      const file = join51(dir, "SKILL.md");
+      if (existsSync47(file)) {
         outcomes.push({ type: "skill", name, tool, status: "present" });
         continue;
       }
@@ -23079,8 +23135,8 @@ function executePull(rows, opts = {}) {
         continue;
       }
       try {
-        mkdirSync14(dir, { recursive: true });
-        writeFileSync15(file, body);
+        mkdirSync16(dir, { recursive: true });
+        writeFileSync16(file, body);
         outcomes.push({ type: "skill", name, tool, status: "written", path: file, redactedContent: redacted });
       } catch (e) {
         outcomes.push({ type: "skill", name, tool, status: "failed", reason: e instanceof Error ? e.message : "write failed" });
@@ -23111,7 +23167,7 @@ function executePull(rows, opts = {}) {
         outcomes.push({ type, name, tool, status: "failed", reason: e instanceof Error ? e.message : "emit failed" });
         continue;
       }
-      if (existsSync46(out.path)) {
+      if (existsSync47(out.path)) {
         outcomes.push({ type, name, tool, status: "present" });
         continue;
       }
@@ -23120,8 +23176,8 @@ function executePull(rows, opts = {}) {
         continue;
       }
       try {
-        mkdirSync14(dirname22(out.path), { recursive: true });
-        writeFileSync15(out.path, out.content);
+        mkdirSync16(dirname23(out.path), { recursive: true });
+        writeFileSync16(out.path, out.content);
         outcomes.push({ type, name, tool, status: "written", path: out.path, redactedContent: redacted });
       } catch (e) {
         outcomes.push({ type, name, tool, status: "failed", reason: e instanceof Error ? e.message : "write failed" });
@@ -23257,6 +23313,103 @@ var init_init_progress = __esm({
   }
 });
 
+// src/board-hooks.ts
+var board_hooks_exports = {};
+__export(board_hooks_exports, {
+  BOARD_HOOKS: () => BOARD_HOOKS,
+  boardHookCommand: () => boardHookCommand,
+  boardHookEntries: () => boardHookEntries,
+  isBoardHookEntry: () => isBoardHookEntry,
+  mergeBoardHooks: () => mergeBoardHooks,
+  registerBoardHooks: () => registerBoardHooks,
+  removeBoardHooks: () => removeBoardHooks,
+  resolveCliEntry: () => resolveCliEntry
+});
+import { existsSync as existsSync48, mkdirSync as mkdirSync17, readFileSync as readFileSync42, writeFileSync as writeFileSync17 } from "node:fs";
+import { dirname as dirname24, join as join52 } from "node:path";
+function boardHookCommand(execPath, cliEntry, mode) {
+  return `"${execPath}" "${cliEntry}" task-hook --${mode}`;
+}
+function isBoardHookEntry(entry) {
+  const cmd = entry?.hooks?.[0]?.command;
+  if (typeof cmd !== "string") return false;
+  if (cmd.includes("chat_recall_task_hook.sh")) return true;
+  return cmd.includes("task-hook") && (cmd.includes("--claim") || cmd.includes("--close"));
+}
+function boardHookEntries(execPath, cliEntry) {
+  return BOARD_HOOKS.map(({ event, mode }) => [
+    event,
+    { matcher: "", hooks: [{ type: "command", command: boardHookCommand(execPath, cliEntry, mode) }] }
+  ]);
+}
+function mergeBoardHooks(config2, execPath, cliEntry) {
+  if (!config2.hooks || typeof config2.hooks !== "object") config2.hooks = {};
+  const entries = boardHookEntries(execPath, cliEntry);
+  for (const { event } of BOARD_HOOKS) {
+    const current = Array.isArray(config2.hooks[event]) ? config2.hooks[event] : [];
+    const kept = current.filter((h) => !isBoardHookEntry(h));
+    for (const [ev, entry] of entries) if (ev === event) kept.push(entry);
+    config2.hooks[event] = kept;
+  }
+}
+function removeBoardHooks(config2) {
+  if (!config2.hooks) return 0;
+  let removed = 0;
+  for (const { event } of BOARD_HOOKS) {
+    const current = Array.isArray(config2.hooks[event]) ? config2.hooks[event] : [];
+    const kept = current.filter((h) => !isBoardHookEntry(h));
+    removed += current.length - kept.length;
+    if (kept.length) config2.hooks[event] = kept;
+    else delete config2.hooks[event];
+  }
+  return removed;
+}
+function readConfig(file) {
+  if (!existsSync48(file)) return { hooks: {} };
+  try {
+    const parsed = JSON.parse(readFileSync42(file, "utf-8"));
+    if (!parsed.hooks || typeof parsed.hooks !== "object") parsed.hooks = {};
+    return parsed;
+  } catch {
+    return { hooks: {} };
+  }
+}
+function registerBoardHooks(files, execPath, cliEntry) {
+  const written = [];
+  for (const file of files) {
+    if (existsSync48(file)) {
+      try {
+        JSON.parse(readFileSync42(file, "utf-8"));
+      } catch {
+        continue;
+      }
+    }
+    const config2 = readConfig(file);
+    mergeBoardHooks(config2, execPath, cliEntry);
+    try {
+      mkdirSync17(dirname24(file), { recursive: true });
+      writeFileSync17(file, JSON.stringify(config2, null, 2) + "\n");
+      written.push(file);
+    } catch {
+    }
+  }
+  return written;
+}
+function resolveCliEntry(distDir) {
+  const bundled = join52(distDir, "cli.js");
+  return existsSync48(bundled) ? bundled : join52(distDir, "cli.ts");
+}
+var BOARD_HOOKS;
+var init_board_hooks = __esm({
+  "src/board-hooks.ts"() {
+    "use strict";
+    BOARD_HOOKS = [
+      { event: "UserPromptSubmit", mode: "claim" },
+      { event: "SessionEnd", mode: "close" }
+    ];
+  }
+});
+
 // src/repair.ts
 var repair_exports = {};
 __export(repair_exports, {
@@ -23612,6 +23765,222 @@ var init_escalate = __esm({
   }
 });
 
+// ../engine/dist/core/guard-registration.js
+var guard_registration_exports = {};
+__export(guard_registration_exports, {
+  GUARD_ID: () => GUARD_ID,
+  guardCommand: () => guardCommand,
+  guardTargets: () => guardTargets,
+  guardWrapperName: () => guardWrapperName,
+  guardWrapperSource: () => guardWrapperSource,
+  opencodeConfigDir: () => opencodeConfigDir,
+  opencodePluginDir: () => opencodePluginDir,
+  opencodePluginSource: () => opencodePluginSource,
+  registerGuard: () => registerGuard,
+  unregisterGuard: () => unregisterGuard
+});
+import { homedir as homedir20 } from "os";
+import { join as join53 } from "path";
+function opencodeConfigDir() {
+  const xdg = process.env.XDG_CONFIG_HOME;
+  const base3 = xdg && xdg.trim() ? xdg : join53(homedir20(), ".config");
+  return join53(base3, "opencode");
+}
+function opencodePluginDir() {
+  return join53(opencodeConfigDir(), "plugins");
+}
+function guardTargets() {
+  return [
+    {
+      tool: "codex",
+      label: "Codex",
+      configPath: join53(codexBackend.homeDir(), "hooks.json"),
+      homeDir: codexBackend.homeDir(),
+      // Codex will not run a hook until a person has reviewed it, and the
+      // approval is bound to the hook's hash. There is no way to grant it from
+      // outside: /etc/codex/requirements.toml is the root-owned admin policy,
+      // and the only other route is the per-invocation
+      // --dangerously-bypass-hook-trust flag. An installer that could grant its
+      // own approval is the thing the gate exists to stop.
+      note: "Codex asks you to approve a hook before it runs one. Run /hooks in Codex once to approve this."
+    },
+    {
+      tool: "agy",
+      label: "Antigravity",
+      configPath: join53(agyBackend.homeDir(), "hooks.json"),
+      homeDir: agyBackend.homeDir()
+    },
+    {
+      tool: "cursor",
+      label: "Cursor",
+      configPath: join53(cursorBackend.homeDir(), "hooks.json"),
+      homeDir: cursorBackend.homeDir(),
+      note: "Cursor checks a shell command before it runs and a file edit after it is written."
+    },
+    {
+      tool: "opencode",
+      label: "OpenCode",
+      configPath: join53(opencodePluginDir(), "chat-recall-guard.js"),
+      homeDir: opencodeConfigDir(),
+      note: "OpenCode plugin hooks do not fire for subagent tool calls, so a delegating agent bypasses this."
+    }
+  ];
+}
+function guardWrapperName(tool) {
+  return `chat_recall_guard_${tool}.sh`;
+}
+function guardWrapperSource(tool, hookPath) {
+  return `#!/bin/sh
+# Written by \`chat-recall install-hooks\`. Re-running replaces it.
+CHAT_RECALL_GUARD_HARNESS=${tool}
+export CHAT_RECALL_GUARD_HARNESS
+exec ${JSON.stringify(hookPath)} "$@"
+`;
+}
+function guardCommand(wrapperPath) {
+  return wrapperPath.includes(" ") ? `"${wrapperPath}"` : wrapperPath;
+}
+function mergeCodex(config2, command) {
+  const c = config2 && typeof config2 === "object" ? { ...config2 } : {};
+  const hooks = c.hooks && typeof c.hooks === "object" ? { ...c.hooks } : {};
+  const kept = asArray2(hooks.PreToolUse).filter((e) => !asArray2(e?.hooks).some((h) => isOurs(h?.command)));
+  kept.push({
+    matcher: CODEX_MATCHER,
+    hooks: [{ type: "command", command, statusMessage: "chat-recall: checking decisions", timeout: TIMEOUT_SECS }]
+  });
+  hooks.PreToolUse = kept;
+  c.hooks = hooks;
+  return c;
+}
+function stripCodex(config2) {
+  const c = config2 && typeof config2 === "object" ? { ...config2 } : {};
+  const hooks = c.hooks && typeof c.hooks === "object" ? { ...c.hooks } : {};
+  const before = asArray2(hooks.PreToolUse);
+  const kept = before.filter((e) => !asArray2(e?.hooks).some((h) => isOurs(h?.command)));
+  if (kept.length)
+    hooks.PreToolUse = kept;
+  else
+    delete hooks.PreToolUse;
+  c.hooks = hooks;
+  return { config: c, removed: before.length - kept.length };
+}
+function mergeAgy(config2, command) {
+  const c = config2 && typeof config2 === "object" ? { ...config2 } : {};
+  c[GUARD_ID] = {
+    enabled: true,
+    PreToolUse: [{
+      matcher: AGY_MATCHER,
+      hooks: [{ type: "command", command, timeout: TIMEOUT_SECS }]
+    }]
+  };
+  return c;
+}
+function stripAgy(config2) {
+  const c = config2 && typeof config2 === "object" ? { ...config2 } : {};
+  const had = Object.prototype.hasOwnProperty.call(c, GUARD_ID) ? 1 : 0;
+  delete c[GUARD_ID];
+  return { config: c, removed: had };
+}
+function mergeCursor(config2, command) {
+  const c = config2 && typeof config2 === "object" ? { ...config2 } : {};
+  c.version = typeof c.version === "number" ? c.version : 1;
+  const hooks = c.hooks && typeof c.hooks === "object" ? { ...c.hooks } : {};
+  for (const event of ["beforeShellExecution", "afterFileEdit"]) {
+    const kept = asArray2(hooks[event]).filter((e) => !isOurs(e?.command));
+    kept.push({ command });
+    hooks[event] = kept;
+  }
+  c.hooks = hooks;
+  return c;
+}
+function stripCursor(config2) {
+  const c = config2 && typeof config2 === "object" ? { ...config2 } : {};
+  const hooks = c.hooks && typeof c.hooks === "object" ? { ...c.hooks } : {};
+  let removed = 0;
+  for (const event of ["beforeShellExecution", "afterFileEdit"]) {
+    const before = asArray2(hooks[event]);
+    const kept = before.filter((e) => !isOurs(e?.command));
+    removed += before.length - kept.length;
+    if (kept.length)
+      hooks[event] = kept;
+    else
+      delete hooks[event];
+  }
+  c.hooks = hooks;
+  return { config: c, removed };
+}
+function registerGuard(tool, config2, command) {
+  switch (tool) {
+    case "codex":
+      return mergeCodex(config2, command);
+    case "agy":
+      return mergeAgy(config2, command);
+    case "cursor":
+      return mergeCursor(config2, command);
+  }
+}
+function unregisterGuard(tool, config2) {
+  switch (tool) {
+    case "codex":
+      return stripCodex(config2);
+    case "agy":
+      return stripAgy(config2);
+    case "cursor":
+      return stripCursor(config2);
+  }
+}
+function opencodePluginSource(hookPath) {
+  return `// Written by \`chat-recall install-hooks\`. Re-running replaces it.
+//
+// Sends each tool call to the same guard the other harnesses run, and prints
+// what it says. Blocking is opt-in: set CHAT_RECALL_GUARD_ENFORCE=1 and a
+// finding throws, which is how an OpenCode plugin stops a call.
+import { spawn } from "child_process";
+
+const HOOK = ${JSON.stringify(hookPath)};
+
+function ask(payload) {
+  return new Promise((resolve) => {
+    let out = "";
+    const child = spawn(HOOK, {
+      env: { ...process.env, CHAT_RECALL_GUARD_HARNESS: "opencode" },
+      stdio: ["pipe", "pipe", "ignore"],
+    });
+    const done = setTimeout(() => { child.kill(); resolve(null); }, ${TIMEOUT_SECS * 1e3});
+    child.stdout.on("data", (c) => { out += c; });
+    child.on("error", () => { clearTimeout(done); resolve(null); });
+    child.on("close", () => {
+      clearTimeout(done);
+      try { resolve(out.trim() ? JSON.parse(out) : null); } catch { resolve(null); }
+    });
+    child.stdin.end(JSON.stringify(payload));
+  });
+}
+
+export const ChatRecallGuard = async () => ({
+  "tool.execute.before": async (input, output) => {
+    const verdict = await ask({ tool: input?.tool, args: output?.args });
+    if (!verdict || !verdict.message) return;
+    if (verdict.block) throw new Error(verdict.message);
+    console.error(verdict.message);
+  },
+});
+`;
+}
+var GUARD_ID, AGY_MATCHER, CODEX_MATCHER, TIMEOUT_SECS, isOurs, asArray2;
+var init_guard_registration = __esm({
+  "../engine/dist/core/guard-registration.js"() {
+    "use strict";
+    init_backends();
+    GUARD_ID = "chat-recall-guard";
+    AGY_MATCHER = "run_command|write_to_file|replace_file_content|multi_replace_file_content";
+    CODEX_MATCHER = "Bash|apply_patch|Edit|Write";
+    TIMEOUT_SECS = 8;
+    isOurs = (cmd) => typeof cmd === "string" && cmd.includes("chat_recall_guard");
+    asArray2 = (v) => Array.isArray(v) ? v : [];
+  }
+});
+
 // src/verify-deep.ts
 var verify_deep_exports = {};
 __export(verify_deep_exports, {
@@ -23680,11 +24049,11 @@ var verify_repair_exports = {};
 __export(verify_repair_exports, {
   forceFullResync: () => forceFullResync
 });
-import { copyFileSync as copyFileSync3, existsSync as existsSync47 } from "fs";
+import { copyFileSync as copyFileSync3, existsSync as existsSync49 } from "fs";
 function forceFullResync(server, sessionIds) {
   if (sessionIds.length === 0) return 0;
   const path = ledgerFilePath();
-  if (existsSync47(path)) {
+  if (existsSync49(path)) {
     const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "").replace(/-/g, "");
     try {
       copyFileSync3(path, `${path}.bak-${stamp}`);
@@ -23874,8 +24243,8 @@ __export(collector_exports, {
 });
 import { spawn as spawn3 } from "node:child_process";
 import { execSync as execSync4 } from "node:child_process";
-import { readFileSync as readFileSync42 } from "node:fs";
-import { join as join51, basename as basename26 } from "node:path";
+import { readFileSync as readFileSync43 } from "node:fs";
+import { join as join54, basename as basename26 } from "node:path";
 async function resolveCodeindexBin(autoInstall = true) {
   let st = checkCodeindexStatus();
   if (!st.installed && autoInstall)
@@ -24054,7 +24423,7 @@ async function collectCode(opts) {
   }
   const complexity = (r) => {
     try {
-      const txt = readFileSync42(join51(ws, r), "utf8");
+      const txt = readFileSync43(join54(ws, r), "utf8");
       if (txt.length > 2e6)
         return 1;
       const m = txt.match(CF_RE);
@@ -24838,9 +25207,9 @@ __export(project_tasks_exports, {
   pushProjectTaskStatuses: () => pushProjectTaskStatuses,
   renderTeamTasksMd: () => renderTeamTasksMd
 });
-import { existsSync as existsSync48, readFileSync as readFileSync43, writeFileSync as writeFileSync16, mkdirSync as mkdirSync15, statSync as statSync42 } from "node:fs";
-import { join as join52, dirname as dirname23 } from "node:path";
-import { homedir as homedir19 } from "node:os";
+import { existsSync as existsSync50, readFileSync as readFileSync44, writeFileSync as writeFileSync18, mkdirSync as mkdirSync18, statSync as statSync42 } from "node:fs";
+import { join as join55, dirname as dirname25 } from "node:path";
+import { homedir as homedir21 } from "node:os";
 function isTeamTaskStatus(v) {
   return !!v && TEAM_STATUSES.has(v);
 }
@@ -24890,22 +25259,22 @@ function parseTaskFile(content) {
   return out;
 }
 function ledgerPath2() {
-  return join52(homedir19(), ".chat-recall", "project-tasks-ledger.json");
+  return join55(homedir21(), ".chat-recall", "project-tasks-ledger.json");
 }
 function readLedger() {
   try {
-    return JSON.parse(readFileSync43(ledgerPath2(), "utf8"));
+    return JSON.parse(readFileSync44(ledgerPath2(), "utf8"));
   } catch {
     return {};
   }
 }
 function writeLedger(l) {
   try {
-    mkdirSync15(dirname23(ledgerPath2()), { recursive: true });
+    mkdirSync18(dirname25(ledgerPath2()), { recursive: true });
   } catch {
   }
   try {
-    writeFileSync16(ledgerPath2(), JSON.stringify(l));
+    writeFileSync18(ledgerPath2(), JSON.stringify(l));
   } catch {
   }
 }
@@ -24923,8 +25292,8 @@ async function pushProjectTaskStatuses(base3, authHeaders, opts = {}) {
       continue;
     }
     for (const project of projects) {
-      const file = join52(project, fk.filename);
-      if (!existsSync48(file)) continue;
+      const file = join55(project, fk.filename);
+      if (!existsSync50(file)) continue;
       let mtime;
       try {
         mtime = statSync42(file).mtimeMs;
@@ -24934,7 +25303,7 @@ async function pushProjectTaskStatuses(base3, authHeaders, opts = {}) {
       if (ledger[file] === mtime) continue;
       let changed;
       try {
-        changed = parseTaskFile(readFileSync43(file, "utf8")).filter((t) => t.kind === fk.kind);
+        changed = parseTaskFile(readFileSync44(file, "utf8")).filter((t) => t.kind === fk.kind);
       } catch {
         continue;
       }
@@ -25006,10 +25375,10 @@ __export(intent_drain_exports, {
   drainSyncIntents: () => drainSyncIntents,
   instructionTargets: () => instructionTargets
 });
-import { existsSync as existsSync49, readFileSync as readFileSync44, writeFileSync as writeFileSync17, appendFileSync, mkdirSync as mkdirSync16 } from "node:fs";
-import { join as join53 } from "node:path";
+import { existsSync as existsSync51, readFileSync as readFileSync45, writeFileSync as writeFileSync19, appendFileSync, mkdirSync as mkdirSync19 } from "node:fs";
+import { join as join56 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
-import { dirname as dirname24 } from "node:path";
+import { dirname as dirname26 } from "node:path";
 function instructionTargets(rootPath, isGlobal) {
   const installed = INSTRUCTION_TOOLS.filter((t) => {
     try {
@@ -25021,17 +25390,17 @@ function instructionTargets(rootPath, isGlobal) {
   const tools = installed.length ? installed : [INSTRUCTION_TOOLS[0]];
   if (isGlobal) return [...new Set(tools.map((t) => instructionsPath(t.id)))];
   if (!rootPath) return [];
-  const present = INSTRUCTION_FILENAMES.map((f) => join53(rootPath, f)).filter((p) => existsSync49(p));
+  const present = INSTRUCTION_FILENAMES.map((f) => join56(rootPath, f)).filter((p) => existsSync51(p));
   if (present.length) return present;
-  return [...new Set(tools.map((t) => join53(rootPath, instructionsFilename(t.id))))];
+  return [...new Set(tools.map((t) => join56(rootPath, instructionsFilename(t.id))))];
 }
 function applyCodeRecommendation(intent) {
   try {
     const meta = JSON.parse(intent.name || "{}");
     if (intent.artifact_type === "write_tasks_file") {
       if (!meta.rootPath || !meta.content) return { status: "error", result: JSON.stringify({ error: "missing rootPath or content" }) };
-      const file = join53(meta.rootPath, meta.filename || "CODE_TASKS.md");
-      writeFileSync17(file, meta.content);
+      const file = join56(meta.rootPath, meta.filename || "CODE_TASKS.md");
+      writeFileSync19(file, meta.content);
       return { status: "done", result: JSON.stringify({ wrote: file }) };
     }
     if (intent.artifact_type === "append_claude_md") {
@@ -25046,10 +25415,10 @@ function applyCodeRecommendation(intent) {
       for (const file of targets) {
         const dir = file.slice(0, file.lastIndexOf("/"));
         try {
-          mkdirSync16(dir, { recursive: true });
+          mkdirSync19(dir, { recursive: true });
         } catch {
         }
-        const existing = existsSync49(file) ? readFileSync44(file, "utf8") : "";
+        const existing = existsSync51(file) ? readFileSync45(file, "utf8") : "";
         if (existing.includes(text)) {
           skipped.push(file);
           continue;
@@ -25059,7 +25428,7 @@ function applyCodeRecommendation(intent) {
 ${text}
 `;
         if (existing) appendFileSync(file, block);
-        else writeFileSync17(file, `# ${meta.rootPath?.split("/").pop() || "Global"} instructions
+        else writeFileSync19(file, `# ${meta.rootPath?.split("/").pop() || "Global"} instructions
 ${block}`);
         appended.push(file);
       }
@@ -25223,11 +25592,11 @@ var init_intent_drain = __esm({
     ];
     ownVersion2 = "0.0.0";
     try {
-      const dir = dirname24(fileURLToPath4(import.meta.url));
-      ownVersion2 = JSON.parse(readFileSync44(join53(dir, "../package.json"), "utf-8")).version || ownVersion2;
+      const dir = dirname26(fileURLToPath4(import.meta.url));
+      ownVersion2 = JSON.parse(readFileSync45(join56(dir, "../package.json"), "utf-8")).version || ownVersion2;
     } catch {
       try {
-        if (true) ownVersion2 = "0.6.4";
+        if (true) ownVersion2 = "0.6.6";
       } catch {
       }
     }
@@ -25428,48 +25797,48 @@ var team_merge_exports = {};
 __export(team_merge_exports, {
   mergePullResult: () => mergePullResult
 });
-import { existsSync as existsSync50, mkdirSync as mkdirSync17, readFileSync as readFileSync45, rmSync as rmSync8, writeFileSync as writeFileSync18, statSync as statSync43 } from "fs";
-import { dirname as dirname25, join as join54 } from "path";
+import { existsSync as existsSync52, mkdirSync as mkdirSync20, readFileSync as readFileSync46, rmSync as rmSync8, writeFileSync as writeFileSync20, statSync as statSync43 } from "fs";
+import { dirname as dirname27, join as join57 } from "path";
 import { createHash as createHash14 } from "crypto";
 function installPathFor(art, tool) {
   switch (art.type) {
     case "skill":
       switch (tool) {
         case "claude":
-          return join54(claudeBackend.skillsDir(), art.name, "SKILL.md");
+          return join57(claudeBackend.skillsDir(), art.name, "SKILL.md");
         // Antigravity's OWN skills dir. It used to resolve to the shared
         // ~/.gemini/skills while toolkit-sync installed to
         // ~/.gemini/antigravity-cli/skills, so a team skill landed in one place
         // and a synced skill in the other.
         case "agy":
-          return join54(agyBackend.homeDir(), "skills", art.name, "SKILL.md");
+          return join57(agyBackend.homeDir(), "skills", art.name, "SKILL.md");
         case "opencode":
-          return join54(opencodeBackend.skillsDir(), art.name, "SKILL.md");
+          return join57(opencodeBackend.skillsDir(), art.name, "SKILL.md");
         // User skills go to ~/.codex/skills (NOT .system, which is OpenAI's bundle).
         case "codex":
-          return join54(codexBackend.skillsDir(), art.name, "SKILL.md");
+          return join57(codexBackend.skillsDir(), art.name, "SKILL.md");
         case "cursor":
-          return join54(cursorHomeDir(), "skills", art.name, "SKILL.md");
+          return join57(cursorHomeDir(), "skills", art.name, "SKILL.md");
       }
       break;
     case "agent":
       if (tool === "claude")
-        return join54(claudeBackend.agentsDir(), `${art.name}.md`);
+        return join57(claudeBackend.agentsDir(), `${art.name}.md`);
       return null;
     case "command":
       if (tool === "claude")
-        return join54(claudeBackend.commandsDir(), `${art.name}.md`);
+        return join57(claudeBackend.commandsDir(), `${art.name}.md`);
       return null;
     case "hook":
       if (tool === "claude")
-        return join54(claudeBackend.homeDir(), "chat-recall-hooks", `${art.name}.json`);
+        return join57(claudeBackend.homeDir(), "chat-recall-hooks", `${art.name}.json`);
       return null;
     case "plan":
       switch (tool) {
         case "claude":
-          return join54(claudeBackend.plansDir(), `${art.name}.md`);
+          return join57(claudeBackend.plansDir(), `${art.name}.md`);
         case "opencode":
-          return join54(opencodeBackend.plansDir(), `${art.name}.md`);
+          return join57(opencodeBackend.plansDir(), `${art.name}.md`);
         case "agy":
           return null;
         // Antigravity plans live per-session
@@ -25480,11 +25849,11 @@ function installPathFor(art, tool) {
       }
       break;
     case "instructions":
-      return join54(getDataDir(), "team-instructions", tool, `${art.name}.md`);
+      return join57(getDataDir(), "team-instructions", tool, `${art.name}.md`);
     case "mcp":
-      return join54(getDataDir(), "team-mcps", `${art.name}.json`);
+      return join57(getDataDir(), "team-mcps", `${art.name}.json`);
     case "plugin":
-      return join54(getDataDir(), "team-plugins", tool, art.name, "manifest.json");
+      return join57(getDataDir(), "team-plugins", tool, art.name, "manifest.json");
   }
   return null;
 }
@@ -25523,8 +25892,8 @@ async function mergePullResult(opts) {
           pending.push({ artifactId: a.id, tool, artifactType: a.type, artifactName: a.name, sha256: sha, installedAt: Date.now() });
           continue;
         }
-        mkdirSync17(dirname25(path), { recursive: true });
-        writeFileSync18(path, body);
+        mkdirSync20(dirname27(path), { recursive: true });
+        writeFileSync20(path, body);
         pending.push({ artifactId: a.id, tool, artifactType: a.type, artifactName: a.name, sha256: sha, installedAt: Date.now() });
         report.written.push({ artifactId: a.id, path });
       } catch (err) {
@@ -25545,7 +25914,7 @@ async function mergePullResult(opts) {
       if (!path)
         continue;
       try {
-        if (existsSync50(path))
+        if (existsSync52(path))
           rmSync8(path, { force: true });
         await teamInstallsForget(id, row.tool);
         report.removed.push({ artifactId: id, path });
@@ -25563,12 +25932,12 @@ async function mergePullResult(opts) {
 }
 function readFileIfExists(path) {
   try {
-    if (!existsSync50(path))
+    if (!existsSync52(path))
       return null;
     const s = statSync43(path);
     if (!s.isFile())
       return null;
-    return readFileSync45(path);
+    return readFileSync46(path);
   } catch {
     return null;
   }
@@ -25649,8 +26018,8 @@ var init_vault_crypto = __esm({
 });
 
 // ../engine/dist/core/vault-source.js
-import { existsSync as existsSync51, readdirSync as readdirSync34, statSync as statSync44 } from "fs";
-import { extname, join as join55 } from "path";
+import { existsSync as existsSync53, readdirSync as readdirSync34, statSync as statSync44 } from "fs";
+import { extname, join as join58 } from "path";
 function* walkVaultSources() {
   const t = loadSettings().team.vault;
   const include2 = new Set(t.syncTools);
@@ -25675,7 +26044,7 @@ function safeStat(path) {
 }
 function* walkClaude() {
   const root = claudeBackend.projectsDir();
-  if (!existsSync51(root))
+  if (!existsSync53(root))
     return;
   let projectDirs = [];
   try {
@@ -25687,7 +26056,7 @@ function* walkClaude() {
     if (proj.startsWith("."))
       continue;
     const projectPath = resolveProjectDirName(proj);
-    const projDir = join55(root, proj);
+    const projDir = join58(root, proj);
     let entries = [];
     try {
       entries = readdirSync34(projDir);
@@ -25697,7 +26066,7 @@ function* walkClaude() {
     for (const f of entries) {
       if (extname(f) !== ".jsonl")
         continue;
-      const path = join55(projDir, f);
+      const path = join58(projDir, f);
       const s = safeStat(path);
       if (!s)
         continue;
@@ -25727,8 +26096,8 @@ function* walkCursor() {
   }
 }
 function* walkCodex() {
-  const sessionsRoot = join55(codexBackend.homeDir(), "sessions");
-  if (!existsSync51(sessionsRoot))
+  const sessionsRoot = join58(codexBackend.homeDir(), "sessions");
+  if (!existsSync53(sessionsRoot))
     return;
   const stack = [sessionsRoot];
   while (stack.length) {
@@ -25740,7 +26109,7 @@ function* walkCodex() {
       continue;
     }
     for (const e of entries) {
-      const path = join55(dir, e.name);
+      const path = join58(dir, e.name);
       if (e.isDirectory()) {
         stack.push(path);
         continue;
@@ -25756,8 +26125,8 @@ function* walkCodex() {
   }
 }
 function* walkAgy() {
-  const brainDir = join55(agyBackend.homeDir(), "brain");
-  if (!existsSync51(brainDir))
+  const brainDir = join58(agyBackend.homeDir(), "brain");
+  if (!existsSync53(brainDir))
     return;
   let sessionDirs = [];
   try {
@@ -25766,18 +26135,18 @@ function* walkAgy() {
     return;
   }
   for (const rawId of sessionDirs) {
-    const sessionPath = join55(brainDir, rawId);
+    const sessionPath = join58(brainDir, rawId);
     try {
       if (!statSync44(sessionPath).isDirectory())
         continue;
     } catch {
       continue;
     }
-    let filePath = join55(sessionPath, ".system_generated", "logs", "transcript.jsonl");
-    if (!existsSync51(filePath)) {
-      filePath = join55(sessionPath, ".system_generated", "logs", "transcript_full.jsonl");
+    let filePath = join58(sessionPath, ".system_generated", "logs", "transcript.jsonl");
+    if (!existsSync53(filePath)) {
+      filePath = join58(sessionPath, ".system_generated", "logs", "transcript_full.jsonl");
     }
-    if (!existsSync51(filePath))
+    if (!existsSync53(filePath))
       continue;
     const s = safeStat(filePath);
     if (!s)
@@ -25813,8 +26182,8 @@ __export(vault_client_exports, {
   vaultStatus: () => vaultStatus,
   vaultSync: () => vaultSync
 });
-import { mkdirSync as mkdirSync18, readFileSync as readFileSync46, writeFileSync as writeFileSync19, existsSync as existsSync52 } from "fs";
-import { dirname as dirname26, join as join56 } from "path";
+import { mkdirSync as mkdirSync21, readFileSync as readFileSync47, writeFileSync as writeFileSync21, existsSync as existsSync54 } from "fs";
+import { dirname as dirname28, join as join59 } from "path";
 function context2() {
   const s = loadSettings().team;
   if (!s.enabled)
@@ -25953,7 +26322,7 @@ async function vaultSync(passphrase) {
       continue;
     }
     try {
-      const plaintext = readFileSync46(src.path);
+      const plaintext = readFileSync47(src.path);
       const sourceSha = sha256Hex(plaintext);
       const priorSha = uploaded.get(uploadKey(src.sessionId, src.tool));
       if (priorSha === sourceSha) {
@@ -26005,7 +26374,7 @@ async function vaultSync(passphrase) {
 }
 function importedPathFor(tool, sessionId) {
   const base3 = sessionId.replace(/^gemini_/, "").replace(/^codex_/, "").replace(/^agy_/, "").replace(/^cursor_/, "").replace(/^opencode_/, "");
-  return join56(IMPORTED_ROOT(), tool, `${base3}.jsonl`);
+  return join59(IMPORTED_ROOT(), tool, `${base3}.jsonl`);
 }
 async function vaultRestore(passphrase, opts = {}) {
   const ctx = context2();
@@ -26026,7 +26395,7 @@ async function vaultRestore(passphrase, opts = {}) {
     }
     try {
       const path = importedPathFor(blob.tool, blob.sessionId);
-      if (existsSync52(path)) {
+      if (existsSync54(path)) {
         const localStat = await import("fs").then((m) => m.statSync(path));
         if (Math.abs(localStat.mtimeMs - blob.mtimeSourceMs) < 1) {
           report.skipped.push({ sessionId: blob.sessionId, tool: blob.tool, reason: "unchanged" });
@@ -26042,8 +26411,8 @@ async function vaultRestore(passphrase, opts = {}) {
         throw new Error("cipher integrity check failed");
       }
       const plaintext = decryptBlob(key2, cipher);
-      mkdirSync18(dirname26(path), { recursive: true });
-      writeFileSync19(path, Buffer.from(plaintext));
+      mkdirSync21(dirname28(path), { recursive: true });
+      writeFileSync21(path, Buffer.from(plaintext));
       const { utimesSync } = await import("fs");
       const t = blob.mtimeSourceMs / 1e3;
       utimesSync(path, t, t);
@@ -26094,7 +26463,7 @@ var init_vault_client = __esm({
     uploadKey = (sessionId, tool) => `${sessionId}\0${tool}`;
     VaultPassphraseMismatchError = class extends Error {
     };
-    IMPORTED_ROOT = () => join56(getDataDir(), "imported");
+    IMPORTED_ROOT = () => join59(getDataDir(), "imported");
   }
 });
 
@@ -26235,6 +26604,413 @@ var init_keyring = __esm({
   }
 });
 
+// ../engine/dist/core/decision-guard.js
+function normaliseName(raw) {
+  let t = raw.trim().replace(/^["'`]|["'`,;]+$/g, "").trim();
+  if (!t || NOT_A_PACKAGE.has(t))
+    return null;
+  if (t.startsWith("-"))
+    return null;
+  if (/^(?:\.{1,2}\/|\/|~\/|[a-z]+:\/\/)/i.test(t))
+    return null;
+  if (/\.(?:tgz|tar\.gz|whl|zip)$/i.test(t))
+    return null;
+  if (t.startsWith("@")) {
+    const slash = t.indexOf("/");
+    t = slash > 0 ? t.slice(slash + 1) : t.slice(1);
+  }
+  t = t.split("@")[0];
+  t = t.split(/[=<>~!^]/)[0];
+  t = t.replace(/\[[^\]]*\]$/, "");
+  t = t.trim().toLowerCase();
+  if (!t || t.length < 2)
+    return null;
+  if (!/^[a-z0-9][a-z0-9._-]*$/.test(t))
+    return null;
+  return t;
+}
+function fromCommand(command) {
+  const out = [];
+  for (const { re } of INSTALL_PATTERNS) {
+    re.lastIndex = 0;
+    let m;
+    while ((m = re.exec(command)) !== null) {
+      for (const tok of (m[1] ?? "").split(/\s+/)) {
+        const n = normaliseName(tok);
+        if (n)
+          out.push(n);
+      }
+    }
+  }
+  return out;
+}
+function fromContent(content) {
+  const out = [];
+  for (const re of IMPORT_PATTERNS) {
+    re.lastIndex = 0;
+    let m;
+    while ((m = re.exec(content)) !== null) {
+      const spec = m[1] ?? m[2];
+      if (!spec)
+        continue;
+      const root = spec.split(/[./]/)[0];
+      const n = normaliseName(spec.startsWith("@") ? spec : root);
+      if (n)
+        out.push(n);
+    }
+  }
+  return out;
+}
+function fromManifest(content) {
+  const out = [];
+  for (const m of content.matchAll(/"([^"]+)"\s*:\s*"[^"]*"/g)) {
+    const n = normaliseName(m[1]);
+    if (n)
+      out.push(n);
+  }
+  for (const m of content.matchAll(/^\s*([A-Za-z][\w.-]*)\s*(?:=|==|>=|$)/gm)) {
+    const n = normaliseName(m[1]);
+    if (n)
+      out.push(n);
+  }
+  return out;
+}
+function introducedBy(input) {
+  const names = /* @__PURE__ */ new Set();
+  let via = null;
+  if (input.command) {
+    for (const n of fromCommand(input.command)) {
+      names.add(n);
+      via = "install";
+    }
+  }
+  if (input.content) {
+    if (isManifest(input.path)) {
+      for (const n of fromManifest(input.content)) {
+        names.add(n);
+        via = via ?? "manifest";
+      }
+    }
+    for (const n of fromContent(input.content)) {
+      names.add(n);
+      via = via ?? "import";
+    }
+  }
+  return { names: [...names], via };
+}
+var INSTALL_PATTERNS, NOT_A_PACKAGE, MANIFESTS, IMPORT_PATTERNS, isManifest;
+var init_decision_guard = __esm({
+  "../engine/dist/core/decision-guard.js"() {
+    "use strict";
+    INSTALL_PATTERNS = [
+      // npm/pnpm/yarn/bun. `add` and `install`, global or not.
+      { re: /\b(?:npm|pnpm|yarn|bun)\s+(?:install|add|i)\b([^\n;&|]*)/gi, via: "install" },
+      // pip / pipx / uv
+      { re: /\b(?:pip3?|pipx|uv\s+pip)\s+install\b([^\n;&|]*)/gi, via: "install" },
+      // cargo
+      { re: /\bcargo\s+add\b([^\n;&|]*)/gi, via: "install" },
+      // go
+      { re: /\bgo\s+get\b([^\n;&|]*)/gi, via: "install" },
+      // ruby
+      { re: /\b(?:gem\s+install|bundle\s+add)\b([^\n;&|]*)/gi, via: "install" },
+      // php
+      { re: /\bcomposer\s+require\b([^\n;&|]*)/gi, via: "install" }
+    ];
+    NOT_A_PACKAGE = /* @__PURE__ */ new Set([
+      "-g",
+      "--global",
+      "-d",
+      "-D",
+      "--save",
+      "--save-dev",
+      "--save-exact",
+      "--dev",
+      "-e",
+      "--editable",
+      "--user",
+      "--upgrade",
+      "-U",
+      "--force",
+      "-f",
+      "--yes",
+      "-y",
+      "--prefix",
+      "--no-save",
+      "--legacy-peer-deps",
+      "--frozen-lockfile",
+      "-r",
+      "--requirement",
+      "--quiet",
+      "-q",
+      "--silent",
+      ".",
+      "..",
+      "*"
+    ]);
+    MANIFESTS = [
+      "package.json",
+      "cargo.toml",
+      "requirements.txt",
+      "pyproject.toml",
+      "go.mod",
+      "gemfile",
+      "composer.json",
+      "build.gradle",
+      "pom.xml"
+    ];
+    IMPORT_PATTERNS = [
+      /\bimport\s+(?:[\w*{}\s,]+\s+from\s+)?["']([^"']+)["']/g,
+      // ES
+      /\brequire\s*\(\s*["']([^"']+)["']\s*\)/g,
+      // CJS
+      // Python. The bare `import X` form must END there: without the anchor it also
+      // matched the `import Keycloak` half of `import Keycloak from "keycloak-js"`,
+      // so one JS line yielded both `keycloak` and `keycloak-js` and the guard
+      // would have reported a library nobody named.
+      /^\s*from\s+([\w.]+)\s+import\b/gm,
+      /^\s*import\s+([\w.]+)(?:\s+as\s+\w+)?\s*$/gm,
+      /^\s*use\s+([a-z0-9_]+)\s*(?:::|;)/gmi
+      // Rust
+    ];
+    isManifest = (p) => {
+      if (!p)
+        return false;
+      const base3 = p.split(/[\\/]/).pop()?.toLowerCase() ?? "";
+      return MANIFESTS.includes(base3);
+    };
+  }
+});
+
+// ../engine/dist/core/guard-adapters.js
+var guard_adapters_exports = {};
+__export(guard_adapters_exports, {
+  COVERAGE: () => COVERAGE,
+  explain: () => explain,
+  namesFrom: () => namesFrom,
+  readPayload: () => readPayload,
+  writeVerdict: () => writeVerdict
+});
+function readPayload(harness, payload) {
+  const p = payload ?? {};
+  switch (harness) {
+    case "claude":
+    case "codex": {
+      const input = p.tool_input ?? p.toolInput ?? {};
+      return {
+        tool: p.tool_name ?? p.toolName ?? null,
+        command: input.command ?? null,
+        path: input.file_path ?? input.path ?? null,
+        content: input.new_string ?? input.content ?? input.new_str ?? null
+      };
+    }
+    case "agy": {
+      const call2 = p.toolCall ?? p.tool_call ?? {};
+      const input = call2.args ?? p.tool_input ?? p.args ?? {};
+      return {
+        tool: call2.name ?? p.tool_name ?? p.tool ?? null,
+        command: input.CommandLine ?? input.command ?? input.cmd ?? null,
+        path: input.TargetFile ?? input.AbsolutePath ?? input.file_path ?? input.path ?? null,
+        content: input.CodeContent ?? input.ReplacementContent ?? input.content ?? input.new_string ?? null
+      };
+    }
+    case "cursor": {
+      const edits = Array.isArray(p.edits) ? p.edits : [];
+      return {
+        tool: p.hook_event_name ?? null,
+        command: p.command ?? null,
+        path: p.file_path ?? null,
+        content: edits.map((e) => e?.new_string ?? e?.newText ?? "").join("\n") || p.content || null
+      };
+    }
+    case "opencode": {
+      const args = p.args ?? p.output?.args ?? {};
+      return {
+        tool: p.tool ?? p.input?.tool ?? null,
+        command: args.command ?? null,
+        path: args.filePath ?? args.path ?? null,
+        content: args.content ?? args.newString ?? null
+      };
+    }
+  }
+}
+function namesFrom(harness, payload) {
+  return introducedBy(readPayload(harness, payload));
+}
+function explain(findings) {
+  if (!findings.length)
+    return "";
+  const lines = findings.map((f) => {
+    const head = f.instead ? `${f.name} was ruled out \u2014 ${f.instead} is the decision` : `${f.name} was ruled out`;
+    const when = f.since ? ` (${f.since})` : "";
+    const where = f.source_session ? ` \xB7 session ${f.source_session}` : "";
+    return `- ${head}${when}${where}`;
+  });
+  return [
+    "chat-recall: this reaches for something already decided against.",
+    ...lines,
+    "Proceed only if this is a deliberate reversal. If it is, record it:",
+    "recall_decision_record with the area, so the old decision is closed rather than contradicted."
+  ].join("\n");
+}
+function writeVerdict(harness, verdict, message) {
+  if (verdict === "allow" || !message)
+    return { exitCode: 0 };
+  switch (harness) {
+    case "claude":
+    case "codex": {
+      if (verdict === "deny") {
+        return {
+          json: { hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: message } },
+          exitCode: 0
+        };
+      }
+      return {
+        json: { hookSpecificOutput: { hookEventName: "PreToolUse", additionalContext: message } },
+        exitCode: 0
+      };
+    }
+    case "agy": {
+      const decision = verdict === "deny" ? "deny" : verdict === "ask" ? "ask" : "allow";
+      return { json: { decision, reason: message }, exitCode: 0 };
+    }
+    case "cursor": {
+      if (verdict === "deny") {
+        return { json: { permission: "deny", user_message: message, userMessage: message }, exitCode: 0 };
+      }
+      return {
+        json: { permission: "allow", agent_message: message, agentMessage: message },
+        exitCode: 0
+      };
+    }
+    case "opencode": {
+      return { json: { block: verdict === "deny", message }, exitCode: 0 };
+    }
+  }
+}
+var COVERAGE;
+var init_guard_adapters = __esm({
+  "../engine/dist/core/guard-adapters.js"() {
+    "use strict";
+    init_decision_guard();
+    COVERAGE = {
+      claude: { commands: true, edits: "before" },
+      codex: { commands: true, edits: "before" },
+      agy: { commands: true, edits: "before" },
+      cursor: {
+        commands: true,
+        edits: "after",
+        note: "Cursor exposes beforeShellExecution but only afterFileEdit, so an import added in an edit is reported after the write, not prevented."
+      },
+      opencode: {
+        commands: true,
+        edits: "before",
+        note: "OpenCode plugin hooks do not fire for subagent tool calls (anomalyco/opencode#5894), so an agent that delegates bypasses this."
+      }
+    };
+  }
+});
+
+// ../engine/dist/core/task-hook.js
+var task_hook_exports = {};
+__export(task_hook_exports, {
+  CLAIMABLE_STATUSES: () => CLAIMABLE_STATUSES,
+  CLOSEABLE_STATUSES: () => CLOSEABLE_STATUSES,
+  COMMIT_LOG_FORMAT: () => COMMIT_LOG_FORMAT,
+  MAX_EVIDENCE_COMMITS: () => MAX_EVIDENCE_COMMITS,
+  MAX_EVIDENCE_FILES: () => MAX_EVIDENCE_FILES,
+  TASK_ID_PATTERN: () => TASK_ID_PATTERN,
+  extractTaskIds: () => extractTaskIds,
+  mayClaim: () => mayClaim,
+  mayClose: () => mayClose,
+  parseChangedFiles: () => parseChangedFiles,
+  parseCommitLog: () => parseCommitLog,
+  planCloses: () => planCloses
+});
+function extractTaskIds(text) {
+  if (!text)
+    return [];
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const match of text.toLowerCase().matchAll(TASK_ID_PATTERN)) {
+    if (seen.has(match[0]))
+      continue;
+    seen.add(match[0]);
+    out.push(match[0]);
+  }
+  return out;
+}
+function parseCommitLog(raw) {
+  if (!raw)
+    return [];
+  const out = [];
+  for (const record3 of raw.split("")) {
+    const sep4 = record3.indexOf("");
+    if (sep4 < 0)
+      continue;
+    const sha = record3.slice(0, sep4).trim();
+    if (!/^[0-9a-f]{7,40}$/i.test(sha))
+      continue;
+    out.push({ sha, message: record3.slice(sep4 + 1) });
+  }
+  return out;
+}
+function planCloses(commits) {
+  const byId = /* @__PURE__ */ new Map();
+  for (const commit of commits) {
+    for (const id of extractTaskIds(commit.message)) {
+      const shas = byId.get(id) ?? [];
+      if (!shas.includes(commit.sha) && shas.length < MAX_EVIDENCE_COMMITS)
+        shas.push(commit.sha);
+      byId.set(id, shas);
+    }
+  }
+  return [...byId].map(([id, shas]) => ({ id, commits: shas }));
+}
+function parseChangedFiles(raw) {
+  if (!raw)
+    return [];
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const line of raw.split("\n")) {
+    const file = line.trim();
+    if (!file)
+      continue;
+    if (file.startsWith("/") || file.startsWith("~"))
+      continue;
+    if (/(^|\/)\.\.(\/|$)/.test(file))
+      continue;
+    if (seen.has(file))
+      continue;
+    seen.add(file);
+    out.push(file);
+    if (out.length >= MAX_EVIDENCE_FILES)
+      break;
+  }
+  return out;
+}
+function mayClaim(status, linkedSessionId, sessionId) {
+  if (!sessionId)
+    return false;
+  if (linkedSessionId === sessionId && status === "in_progress")
+    return false;
+  return CLAIMABLE_STATUSES.has(String(status ?? ""));
+}
+function mayClose(status) {
+  return CLOSEABLE_STATUSES.has(String(status ?? ""));
+}
+var TASK_ID_PATTERN, CLAIMABLE_STATUSES, CLOSEABLE_STATUSES, MAX_EVIDENCE_COMMITS, MAX_EVIDENCE_FILES, COMMIT_LOG_FORMAT;
+var init_task_hook = __esm({
+  "../engine/dist/core/task-hook.js"() {
+    "use strict";
+    TASK_ID_PATTERN = /\bt_[0-9a-f]{18}\b/g;
+    CLAIMABLE_STATUSES = /* @__PURE__ */ new Set(["todo"]);
+    CLOSEABLE_STATUSES = /* @__PURE__ */ new Set(["todo", "in_progress"]);
+    MAX_EVIDENCE_COMMITS = 20;
+    MAX_EVIDENCE_FILES = 50;
+    COMMIT_LOG_FORMAT = "%H%x1f%B%x1e";
+  }
+});
+
 // src/service-installer.ts
 var service_installer_exports = {};
 __export(service_installer_exports, {
@@ -26249,15 +27025,15 @@ __export(service_installer_exports, {
   uninstallService: () => uninstallService
 });
 import { execSync as execSync5 } from "child_process";
-import { existsSync as existsSync53, mkdirSync as mkdirSync19, readFileSync as readFileSync47, rmSync as rmSync9, writeFileSync as writeFileSync20 } from "fs";
-import { homedir as homedir20 } from "os";
-import { join as join57 } from "path";
+import { existsSync as existsSync55, mkdirSync as mkdirSync22, readFileSync as readFileSync48, rmSync as rmSync9, writeFileSync as writeFileSync22 } from "fs";
+import { homedir as homedir22 } from "os";
+import { join as join60 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 function resolveDaemonPaths() {
   const watchJs = fileURLToPath5(new URL("./watch.js", import.meta.url));
   const node = process.execPath;
-  const dataDir = join57(homedir20(), ".chat-recall");
-  const logFile = join57(dataDir, "watch.log");
+  const dataDir = join60(homedir22(), ".chat-recall");
+  const logFile = join60(dataDir, "watch.log");
   return { watchJs, node, logFile, dataDir };
 }
 function tryCmd(cmd) {
@@ -26284,13 +27060,13 @@ function refreshServiceDefinition() {
   if (process.platform !== "linux") return false;
   try {
     const { watchJs, node, logFile } = resolveDaemonPaths();
-    const unitPath = join57(homedir20(), ".config", "systemd", "user", "chat-recall-watch.service");
-    if (!existsSync53(unitPath)) return false;
-    const current = readFileSync47(unitPath, "utf8");
+    const unitPath = join60(homedir22(), ".config", "systemd", "user", "chat-recall-watch.service");
+    if (!existsSync55(unitPath)) return false;
+    const current = readFileSync48(unitPath, "utf8");
     if (!current.includes(watchJs)) return false;
     const wanted = renderSystemdUnit(watchJs, node, logFile);
-    if (readFileSync47(unitPath, "utf8") === wanted) return false;
-    writeFileSync20(unitPath, wanted);
+    if (readFileSync48(unitPath, "utf8") === wanted) return false;
+    writeFileSync22(unitPath, wanted);
     execSync5("systemctl --user daemon-reload", { stdio: "ignore" });
     return true;
   } catch {
@@ -26299,7 +27075,7 @@ function refreshServiceDefinition() {
 }
 function installService() {
   const { watchJs, node, logFile, dataDir } = resolveDaemonPaths();
-  mkdirSync19(dataDir, { recursive: true });
+  mkdirSync22(dataDir, { recursive: true });
   if (process.platform === "linux") {
     return installSystemd(watchJs, node, logFile);
   }
@@ -26315,11 +27091,11 @@ function installService() {
   );
 }
 function installSystemd(watchJs, node, logFile) {
-  const unitDir = join57(homedir20(), ".config", "systemd", "user");
-  const unitPath = join57(unitDir, "chat-recall-watch.service");
+  const unitDir = join60(homedir22(), ".config", "systemd", "user");
+  const unitPath = join60(unitDir, "chat-recall-watch.service");
   const unit = renderSystemdUnit(watchJs, node, logFile);
-  mkdirSync19(unitDir, { recursive: true });
-  writeFileSync20(unitPath, unit);
+  mkdirSync22(unitDir, { recursive: true });
+  writeFileSync22(unitPath, unit);
   try {
     execSync5("systemctl --user daemon-reload && systemctl --user enable chat-recall-watch.service && systemctl --user restart chat-recall-watch.service", { stdio: "inherit" });
     try {
@@ -26390,11 +27166,11 @@ function renderSystemdUnit(watchJs, node, logFile) {
 }
 function installLaunchd(watchJs, node, logFile) {
   const label = "com.chat-recall.watch";
-  const plistDir = join57(homedir20(), "Library", "LaunchAgents");
-  const plistPath = join57(plistDir, `${label}.plist`);
+  const plistDir = join60(homedir22(), "Library", "LaunchAgents");
+  const plistPath = join60(plistDir, `${label}.plist`);
   const plist = renderLaunchdPlist(watchJs, node, logFile, label);
-  mkdirSync19(plistDir, { recursive: true });
-  writeFileSync20(plistPath, plist);
+  mkdirSync22(plistDir, { recursive: true });
+  writeFileSync22(plistPath, plist);
   try {
     try {
       execSync5(`launchctl unload "${plistPath}"`, { stdio: "ignore" });
@@ -26447,8 +27223,8 @@ function uninstallService() {
       removed = true;
     } catch {
     }
-    const unitPath = join57(homedir20(), ".config", "systemd", "user", "chat-recall-watch.service");
-    if (existsSync53(unitPath)) {
+    const unitPath = join60(homedir22(), ".config", "systemd", "user", "chat-recall-watch.service");
+    if (existsSync55(unitPath)) {
       rmSync9(unitPath, { force: true });
       removed = true;
     }
@@ -26459,13 +27235,13 @@ function uninstallService() {
     return removed;
   }
   if (process.platform === "darwin") {
-    const plistPath = join57(homedir20(), "Library", "LaunchAgents", "com.chat-recall.watch.plist");
+    const plistPath = join60(homedir22(), "Library", "LaunchAgents", "com.chat-recall.watch.plist");
     try {
       execSync5(`launchctl unload "${plistPath}" 2>/dev/null`, { stdio: "ignore" });
     } catch {
     }
     let removed = false;
-    if (existsSync53(plistPath)) {
+    if (existsSync55(plistPath)) {
       rmSync9(plistPath, { force: true });
       removed = true;
     }
@@ -26878,9 +27654,9 @@ init_project_resolver();
 import { config } from "dotenv";
 import { Command } from "commander";
 import chalk2 from "chalk";
-import { existsSync as existsSync54, readFileSync as readFileSync48, writeFileSync as writeFileSync21, realpathSync as realpathSync5 } from "fs";
-import { homedir as homedir21 } from "os";
-import { join as join58, resolve as resolve2, dirname as dirname27, basename as basename27 } from "path";
+import { existsSync as existsSync56, readFileSync as readFileSync49, writeFileSync as writeFileSync23, realpathSync as realpathSync5 } from "fs";
+import { homedir as homedir23 } from "os";
+import { join as join61, resolve as resolve2, dirname as dirname29, basename as basename27 } from "path";
 
 // ../engine/dist/core/score-tier.js
 var STRONG_RATIO = 0.85;
@@ -26985,6 +27761,47 @@ function renderEnvNeeds(needs, installedCount) {
   return lines;
 }
 
+// src/star-nudge.ts
+init_paths();
+import { existsSync as existsSync42, mkdirSync as mkdirSync11, writeFileSync as writeFileSync11 } from "node:fs";
+import { dirname as dirname20, join as join45 } from "node:path";
+var REPO = "https://github.com/munhq/chat-recall";
+function markerPath() {
+  return join45(getDataDir(), ".star-asked");
+}
+function suppressed() {
+  const env = process.env;
+  if (env.CHAT_RECALL_NO_STAR_PROMPT) return true;
+  return Boolean(env.CI || env.GITHUB_ACTIONS || env.GITLAB_CI || env.BUILDKITE || env.TEAMCITY_VERSION);
+}
+function shouldAskForStar(resultCount) {
+  if (resultCount <= 0) return false;
+  if (suppressed()) return false;
+  if (!process.stderr.isTTY) return false;
+  try {
+    return !existsSync42(markerPath());
+  } catch {
+    return false;
+  }
+}
+function markStarAsked() {
+  try {
+    const p = markerPath();
+    mkdirSync11(dirname20(p), { recursive: true });
+    writeFileSync11(p, `${(/* @__PURE__ */ new Date()).toISOString()}
+`);
+  } catch {
+  }
+}
+function askForStar(resultCount, dim) {
+  if (!shouldAskForStar(resultCount)) return;
+  markStarAsked();
+  process.stderr.write(`${dim(`If this saved you time, a star helps other people find it: ${REPO}`)}
+`);
+  process.stderr.write(`${dim("You will not be asked again. CHAT_RECALL_NO_STAR_PROMPT=1 disables it everywhere.")}
+`);
+}
+
 // src/cli.ts
 function matchLabel(tier) {
   switch (tier) {
@@ -27003,8 +27820,8 @@ function claudeHookConfigFiles() {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   for (const home of claudeHomeDirs()) {
-    if (!existsSync54(join58(home, "projects"))) continue;
-    const file = join58(home, "hooks.json");
+    if (!existsSync56(join61(home, "projects"))) continue;
+    const file = join61(home, "hooks.json");
     let key2;
     try {
       key2 = realpathSync5(file);
@@ -27099,13 +27916,13 @@ async function serverDelete(path, body) {
 }
 var pkgEngines = (() => {
   try {
-    return JSON.parse(readFileSync48(new URL("../package.json", import.meta.url), "utf-8")).engines?.node ?? "";
+    return JSON.parse(readFileSync49(new URL("../package.json", import.meta.url), "utf-8")).engines?.node ?? "";
   } catch {
     return "";
   }
 })();
 var pkgVersion = JSON.parse(
-  readFileSync48(new URL("../package.json", import.meta.url), "utf-8")
+  readFileSync49(new URL("../package.json", import.meta.url), "utf-8")
 ).version;
 var DEFAULT_SERVER = (process.env.CHAT_RECALL_DEFAULT_SERVER || "https://chatrecall.dev").replace(/\/+$/, "");
 var DEFAULT_ALLOW = [
@@ -27150,6 +27967,7 @@ var DEFAULT_ALLOW = [
   "recall_redundant_files",
   "recall_user_prompts",
   "recall_decision_record",
+  "recall_decisions",
   "recall_analytics_summary",
   "recall_outcome_summary",
   "recall_regenerate_summary",
@@ -27192,7 +28010,7 @@ process.env.CHAT_RECALL_CLI_VERSION = pkgVersion;
 enforceNodeVersion();
 var program = new Command();
 program.name("chat-recall").description("Semantic search for Claude Code sessions - recall and resume past conversations").version(pkgVersion);
-program.command("init").description("Set up chat-recall: connect to your server, configure MCP, ship your local sessions").option("--server <url>", "chat-recall server URL to connect this machine to").option("--token <token>", "Self-host device token (skips the interactive OIDC login)").option("--skip-mcp", "Skip MCP server configuration").option("--skip-sync", "Skip the first session sync").option("--with-codeindex", "Force-download the codeindex binary during init. Default behavior is to detect an already-installed codeindex on PATH and register it as an MCP server.").option("--skip-codeindex", "Skip the codeindex companion entirely (no detection, no registration).").option("--skip-service", "Skip installing the per-user background sync service (Linux/macOS/Windows). By default init installs it so new conversations ship automatically.").option("--yes", "Do not pause before the first upload. The scope summary still prints.", false).option("--prompt-json", "Print the device prompt as one JSON line on stdout, then continue", false).action(async (options) => {
+program.command("init").description("Set up chat-recall: connect to your server, configure MCP, ship your local sessions").option("--server <url>", "chat-recall server URL to connect this machine to").option("--token <token>", "Self-host device token (skips the interactive OIDC login)").option("--skip-mcp", "Skip MCP server configuration").option("--skip-sync", "Skip the first session sync").option("--with-codeindex", "Force-download the codeindex binary during init. Default behavior is to detect an already-installed codeindex on PATH and register it as an MCP server.").option("--skip-codeindex", "Skip the codeindex companion entirely (no detection, no registration).").option("--skip-service", "Skip installing the per-user background sync service (Linux/macOS/Windows). By default init installs it so new conversations ship automatically.").option("--skip-hooks", "Skip registering the task-board hooks").option("--yes", "Do not pause before the first upload. The scope summary still prints.", false).option("--prompt-json", "Print the device prompt as one JSON line on stdout, then continue", false).action(async (options) => {
   try {
     console.log(chalk2.bold("chat-recall init") + chalk2.dim(`  v${pkgVersion}`));
     const { createInitReporter: createInitReporter2 } = await Promise.resolve().then(() => (init_init_report(), init_report_exports));
@@ -27218,6 +28036,18 @@ program.command("init").description("Set up chat-recall: connect to your server,
     }
     const foundTools = clis.filter((c) => c.available).map((c) => c.name.replace(/ (CLI|Code)$/, ""));
     if (!foundTools.length) rep.warn(chalk2.yellow("No AI tools detected \u2014 chat-recall indexes their transcripts, so there is nothing to ship yet."));
+    else {
+      try {
+        const { listAvailableBackends: listAvailableBackends2 } = await Promise.resolve().then(() => (init_tool_backend(), tool_backend_exports));
+        const transcripts = listAvailableBackends2().reduce((n, b) => n + (b.listSessions?.({ limit: 1 })?.length ?? 0), 0);
+        if (transcripts === 0) {
+          rep.warn(chalk2.yellow(
+            `Found ${foundTools.join(", ")} but no conversations yet \u2014 chat-recall indexes the transcripts your AI tools write as you work. Use one for a while, then run ${chalk2.bold("chat-recall sync")}.`
+          ));
+        }
+      } catch {
+      }
+    }
     const serverBad = (text) => rep.warn(`${chalk2.yellow("Not connected")} \u2014 ${text}`);
     let target = firstTarget();
     let deadTarget = false;
@@ -27265,10 +28095,10 @@ program.command("init").description("Set up chat-recall: connect to your server,
     } else if (target) {
     }
     if (!options.skipMcp) {
-      const projectRoot = join58(import.meta.dirname, "..");
+      const projectRoot = join61(import.meta.dirname, "..");
       let mcpBinOnPath = false;
       mcpBinOnPath = isOnPath("chat-recall-mcp");
-      const launch = mcpBinOnPath ? { command: "chat-recall-mcp" } : { command: "node", args: [join58(projectRoot, "dist", "mcp-relay.js")] };
+      const launch = mcpBinOnPath ? { command: "chat-recall-mcp" } : { command: "node", args: [join61(projectRoot, "dist", "mcp-relay.js")] };
       const MCP_ENV = { NODE_OPTIONS: "--max-old-space-size=1024" };
       const { registerMcpEverywhere: registerMcpEverywhere2 } = await Promise.resolve().then(() => (init_mcp_clients(), mcp_clients_exports));
       const MCP_CLIENT_FOR_BIN = {
@@ -27308,7 +28138,7 @@ program.command("init").description("Set up chat-recall: connect to your server,
       const detected = checkCodeindexStatus2();
       if (detected.installed && !forceInstall) {
         if (!options.skipMcp) {
-          const mcpJsonPath = join58(homedir21(), ".mcp.json");
+          const mcpJsonPath = join61(homedir23(), ".mcp.json");
           const reg = registerCodeindexMcp2(mcpJsonPath, detected.path);
         }
       } else if (forceInstall) {
@@ -27317,7 +28147,7 @@ program.command("init").description("Set up chat-recall: connect to your server,
           if (result.installed) {
             const sizeMb = result.size ? `${(result.size / 1024 / 1024).toFixed(1)} MB` : "?";
             if (!options.skipMcp) {
-              const mcpJsonPath = join58(homedir21(), ".mcp.json");
+              const mcpJsonPath = join61(homedir23(), ".mcp.json");
               const reg = registerCodeindexMcp2(mcpJsonPath, CODEINDEX_BIN_PATH2);
             }
           } else if (!result.prebuiltAvailable) {
@@ -27436,6 +28266,15 @@ program.command("init").description("Set up chat-recall: connect to your server,
     } else {
     }
     void options.skipService;
+    if (!options.skipHooks) {
+      try {
+        const { registerBoardHooks: registerBoardHooks2, resolveCliEntry: resolveCliEntry2 } = await Promise.resolve().then(() => (init_board_hooks(), board_hooks_exports));
+        const { fileURLToPath: toPath } = await import("url");
+        const distDir = toPath(new URL(".", import.meta.url));
+        registerBoardHooks2(claudeHookConfigFiles(), process.execPath, resolveCliEntry2(distDir));
+      } catch {
+      }
+    }
     rep.done(chalk2.green.bold("\u2713 Done"));
   } catch (err) {
     console.error(chalk2.red("Error:"), err);
@@ -27572,6 +28411,7 @@ program.command("search <query>").description("Search your server for relevant s
       }
       console.log();
     }
+    askForStar(results.length, chalk2.dim);
   } catch (err) {
     console.error(chalk2.red("Error:"), err instanceof Error ? err.message : err);
     process.exit(1);
@@ -27765,8 +28605,8 @@ memory.command("wake-up").description("Generate wake-up context (high-importance
   try {
     const identityFile = getIdentityFilePath();
     let identity = "AI coding assistant";
-    if (existsSync54(identityFile)) {
-      identity = readFileSync48(identityFile, "utf-8").trim();
+    if (existsSync56(identityFile)) {
+      identity = readFileSync49(identityFile, "utf-8").trim();
     }
     const lines = [
       chalk2.bold("# Wake-Up Context"),
@@ -27866,7 +28706,7 @@ program.command("feedback").argument("<message...>", "what you want to say \u201
   }
 });
 program.command("doctor").description("Quick health check across login, server, credentials, hooks, MCP server, and codeindex").option("--purge-local", "Remove the legacy local index (cache.db + vector/KG files) left by pre-thin-collector versions \u2014 storage is server-side now. Requires login; keeps credentials, sync ledger, identity, and the audit log.").action(async (opts) => {
-  const { existsSync: existsSync55, readFileSync: readFileSync49, statSync: statSync45 } = await import("fs");
+  const { existsSync: existsSync57, readFileSync: readFileSync50, statSync: statSync45 } = await import("fs");
   const { execSync: execSync6 } = await import("child_process");
   const rows = [];
   const note = (ok, label, detail) => rows.push({ ok, label, detail });
@@ -27929,8 +28769,8 @@ program.command("doctor").description("Quick health check across login, server,
       }
     }
   }
-  const credFile = join58(getDataDir(), "credentials.json");
-  if (!existsSync55(credFile)) {
+  const credFile = join61(getDataDir(), "credentials.json");
+  if (!existsSync57(credFile)) {
     note(false, "Credentials file", `missing \u2014 run \`chat-recall login <server-url>\``);
   } else {
     try {
@@ -27943,23 +28783,23 @@ program.command("doctor").description("Quick health check across login, server,
     }
   }
   for (const hooksJson of claudeHookConfigFiles()) {
-    const profile = basename27(dirname27(hooksJson));
+    const profile = basename27(dirname29(hooksJson));
     const label = `Claude hooks (${profile})`;
-    if (!existsSync55(hooksJson)) {
+    if (!existsSync57(hooksJson)) {
       note(false, label, `no ${hooksJson} \u2014 run \`chat-recall install-hooks\``);
       continue;
     }
     try {
       const readHooks = (file) => {
-        if (!existsSync55(file)) return {};
+        if (!existsSync57(file)) return {};
         try {
-          return JSON.parse(readFileSync49(file, "utf-8")).hooks || {};
+          return JSON.parse(readFileSync50(file, "utf-8")).hooks || {};
         } catch {
           return {};
         }
       };
       const cfg = readHooks(hooksJson);
-      const settings2 = readHooks(join58(dirname27(hooksJson), "settings.json"));
+      const settings2 = readHooks(join61(dirname29(hooksJson), "settings.json"));
       const all = ["SessionStart", "UserPromptSubmit", "Stop", "PreCompact", "SessionEnd"];
       const hits = [];
       for (const ev of all) {
@@ -27974,16 +28814,54 @@ program.command("doctor").description("Quick health check across login, server,
         label,
         hits.length === 0 ? "none \u2014 run `chat-recall install-hooks`" : `${hits.join(", ")}${hits.length < all.length ? ` (missing ${all.filter((e) => !hits.includes(e)).join(", ")} \u2014 run install-hooks)` : ""}`
       );
+      const boardEvents = ["UserPromptSubmit", "SessionEnd"];
+      const boardHits = boardEvents.filter((ev) => [
+        ...Array.isArray(cfg[ev]) ? cfg[ev] : [],
+        ...Array.isArray(settings2[ev]) ? settings2[ev] : []
+      ].some((h) => {
+        const cmd = h.hooks?.[0]?.command || "";
+        return cmd.includes("task-hook") && (cmd.includes("--claim") || cmd.includes("--close"));
+      }));
+      note(
+        boardHits.length === boardEvents.length,
+        `Task board hooks (${profile})`,
+        boardHits.length === 0 ? "not registered \u2014 run `chat-recall install-hooks`" : boardHits.length === boardEvents.length ? "claim on a prompt, close on a commit" : `only ${boardHits.join(", ")} \u2014 run \`chat-recall install-hooks\``
+      );
     } catch {
       note(false, label, `${hooksJson} unparseable`);
     }
   }
+  try {
+    const reg = await Promise.resolve().then(() => (init_guard_registration(), guard_registration_exports));
+    for (const target2 of reg.guardTargets()) {
+      if (!existsSync57(target2.homeDir)) continue;
+      const label = `Decision guard \u2014 ${target2.label}`;
+      if (!existsSync57(target2.configPath)) {
+        note(false, label, `not registered \u2014 run \`chat-recall install-hooks\``);
+        continue;
+      }
+      if (target2.tool === "opencode") {
+        note(true, label, target2.configPath);
+        continue;
+      }
+      let registered = false;
+      try {
+        const cfg = JSON.parse(readFileSync50(target2.configPath, "utf-8"));
+        registered = JSON.stringify(cfg).includes("chat_recall_guard");
+      } catch {
+      }
+      const detail = registered && target2.tool === "codex" ? `${target2.configPath} \u2014 approve it in Codex with /hooks` : registered ? target2.configPath : `${target2.configPath} has no chat-recall entry \u2014 run \`chat-recall install-hooks\``;
+      note(registered, label, detail);
+    }
+  } catch (err) {
+    note(false, "Decision guard", `check failed: ${err}`);
+  }
   try {
     const { skillTargets: skillTargets2, bundledSkillNames: bundledSkillNames2 } = await Promise.resolve().then(() => (init_install_skills(), install_skills_exports));
     const want = bundledSkillNames2().length;
     for (const t of skillTargets2()) {
       if (!t.available) continue;
-      const have = want === 0 ? 0 : bundledSkillNames2().filter((n) => existsSync55(join58(t.dir, n, ".chat-recall-managed"))).length;
+      const have = want === 0 ? 0 : bundledSkillNames2().filter((n) => existsSync57(join61(t.dir, n, ".chat-recall-managed"))).length;
       note(
         have === want,
         `Skills \u2014 ${t.label}`,
@@ -28058,14 +28936,14 @@ program.command("doctor").description("Quick health check across login, server,
   note(watchRunning, "Watch daemon", watchRunning ? "running" : "not running (run `chat-recall watch --install-service` to keep collection running)");
   const dataDir = getDataDir();
   const legacyPaths = [
-    join58(dataDir, "cache.db"),
-    join58(dataDir, "cache.db-wal"),
-    join58(dataDir, "cache.db-shm"),
-    join58(dataDir, "index", "lancedb"),
-    join58(dataDir, "index", "knowledge_graph.db"),
-    join58(dataDir, "index", "metadata.db")
+    join61(dataDir, "cache.db"),
+    join61(dataDir, "cache.db-wal"),
+    join61(dataDir, "cache.db-shm"),
+    join61(dataDir, "index", "lancedb"),
+    join61(dataDir, "index", "knowledge_graph.db"),
+    join61(dataDir, "index", "metadata.db")
   ];
-  const legacyPresent = legacyPaths.filter((p) => existsSync55(p));
+  const legacyPresent = legacyPaths.filter((p) => existsSync57(p));
   if (opts.purgeLocal) {
     if (!target) {
       note(false, "Purge legacy index", "refused \u2014 log in and `chat-recall sync` first, so your history is on the server before removing local copies");
@@ -28136,7 +29014,7 @@ companions.command("install").description("Install codeindex (downloads from mun
     if (result.installed) {
       const sizeMb = result.size ? `${(result.size / 1024 / 1024).toFixed(1)} MB` : "?";
       console.log(chalk2.green(`\u2713 codeindex installed (${sizeMb}) \u2192 ${result.path}`));
-      const mcpJsonPath = join58(homedir21(), ".mcp.json");
+      const mcpJsonPath = join61(homedir23(), ".mcp.json");
       const reg = registerCodeindexMcp2(mcpJsonPath, CODEINDEX_BIN_PATH2);
       if (reg.added) console.log(chalk2.dim(`  Registered as MCP server in ${mcpJsonPath}`));
       else console.log(chalk2.dim(`  Already registered as MCP server`));
@@ -28158,7 +29036,7 @@ companions.command("uninstall").description("Remove the codeindex binary chat-re
   const r = uninstallCodeindex2();
   if (r.removed) console.log(chalk2.green(`\u2713 Removed ${r.path}`));
   else console.log(chalk2.dim(`  Nothing to remove at ${r.path}`));
-  const mcpJsonPath = join58(homedir21(), ".mcp.json");
+  const mcpJsonPath = join61(homedir23(), ".mcp.json");
   const u = unregisterCodeindexMcp2(mcpJsonPath);
   if (u.removed) console.log(chalk2.dim(`  Unregistered MCP server from ${mcpJsonPath}`));
 });
@@ -28709,10 +29587,10 @@ tasks.command("pull [dir]").description("Write TEAM_TASKS.md for your tasks in t
   try {
     const { resolveProjectId: resolveProjectId2 } = await Promise.resolve().then(() => (init_project_resolver(), project_resolver_exports));
     const { renderTeamTasksMd: renderTeamTasksMd2, parseTeamTasksFile: parseTeamTasksFile2 } = await Promise.resolve().then(() => (init_project_tasks(), project_tasks_exports));
-    const { writeFileSync: writeFileSync22, readFileSync: readFileSync49, existsSync: existsSync55 } = await import("node:fs");
-    const { join: join59 } = await import("node:path");
-    const file = join59(cwd, "TEAM_TASKS.md");
-    if (!opts.force && existsSync55(file) && parseTeamTasksFile2(readFileSync49(file, "utf8")).length > 0) {
+    const { writeFileSync: writeFileSync24, readFileSync: readFileSync50, existsSync: existsSync57 } = await import("node:fs");
+    const { join: join62 } = await import("node:path");
+    const file = join62(cwd, "TEAM_TASKS.md");
+    if (!opts.force && existsSync57(file) && parseTeamTasksFile2(readFileSync50(file, "utf8")).length > 0) {
       console.error(chalk2.red("TEAM_TASKS.md has unpushed edits."), "Run", chalk2.bold("chat-recall tasks push"), "first, or", chalk2.bold("tasks pull --force"), "to discard.");
       process.exit(1);
     }
@@ -28720,7 +29598,7 @@ tasks.command("pull [dir]").description("Write TEAM_TASKS.md for your tasks in t
     const pid = resolved && resolved.source !== "ignored" ? resolved.id : "";
     const { tasks: tasks2 } = await serverGet("/api/tasks?assignee=@me");
     const mine = tasks2.filter((t) => !pid || !t.projectId || t.projectId === pid);
-    writeFileSync22(file, renderTeamTasksMd2(mine));
+    writeFileSync24(file, renderTeamTasksMd2(mine));
     console.log(chalk2.green("\u2713 wrote"), "TEAM_TASKS.md", chalk2.gray(`(${mine.length} task(s))`), "\u2014 edit, then", chalk2.bold("chat-recall tasks push"));
   } catch (e) {
     console.error(chalk2.red(e instanceof Error ? e.message : String(e)));
@@ -28731,14 +29609,14 @@ tasks.command("push [dir]").description("Push TEAM_TASKS.md status edits back to
   const cwd = dir || process.cwd();
   try {
     const { parseTeamTasksFile: parseTeamTasksFile2 } = await Promise.resolve().then(() => (init_project_tasks(), project_tasks_exports));
-    const { readFileSync: readFileSync49, existsSync: existsSync55 } = await import("node:fs");
-    const { join: join59 } = await import("node:path");
-    const file = join59(cwd, "TEAM_TASKS.md");
-    if (!existsSync55(file)) {
+    const { readFileSync: readFileSync50, existsSync: existsSync57 } = await import("node:fs");
+    const { join: join62 } = await import("node:path");
+    const file = join62(cwd, "TEAM_TASKS.md");
+    if (!existsSync57(file)) {
       console.error(chalk2.red("no TEAM_TASKS.md here \u2014"), "run", chalk2.bold("chat-recall tasks pull"), "first");
       process.exit(1);
     }
-    const edits = parseTeamTasksFile2(readFileSync49(file, "utf8"));
+    const edits = parseTeamTasksFile2(readFileSync50(file, "utf8"));
     let n = 0;
     for (const e of edits) {
       await serverPatch(`/api/tasks/${encodeURIComponent(e.id)}`, { status: e.intent });
@@ -28844,8 +29722,8 @@ team.command("publish <type> <name> <file>").description("Publish a local file a
     console.error(chalk2.red(`Invalid tool: ${opts.tool}. Must be one of: ${validTools.join(", ")}`));
     process.exit(1);
   }
-  const { readFileSync: readFileSync49 } = await import("fs");
-  const body = readFileSync49(file);
+  const { readFileSync: readFileSync50 } = await import("fs");
+  const body = readFileSync50(file);
   const { teamPublish: teamPublish2 } = await Promise.resolve().then(() => (init_team_client(), team_client_exports));
   const a = await teamPublish2({
     type,
@@ -29031,18 +29909,201 @@ vault.command("forget").description("Remove the stored passphrase from this mach
   const { keyringDelete: keyringDelete2 } = await Promise.resolve().then(() => (init_keyring(), keyring_exports));
   console.log(keyringDelete2() ? chalk2.green("\u2713 Passphrase removed from the OS keyring.") : chalk2.dim("Nothing stored in the OS keyring."));
 }));
-program.command("install-hooks").description("Install Claude Code hooks (Stop + PreCompact + UserPromptSubmit + SessionEnd + SessionStart) into every Claude profile").option("--uninstall", "Remove hooks instead of installing them").option("--no-resume-hint", "Don't install the UserPromptSubmit resume-hint hook").option("--no-escalate", "Don't install the SessionEnd learnings-escalation hook").option("--no-wakeup", "Don't install the SessionStart wake-up hook").action(async (opts) => {
-  const { mkdirSync: mkdirSync20, copyFileSync: copyFileSync4, chmodSync: chmodSync5, existsSync: existsSync55, readFileSync: readFileSync49, writeFileSync: writeFileSync22, statSync: statSync45 } = await import("fs");
+program.command("guard").description("Check a pending tool call against the decision register (used by the pre-execution hooks)").option("--harness <name>", "claude | codex | agy | cursor | opencode", "claude").option("--project <id>", "Resolve decisions for this project").option("--enforce", "Return a blocking verdict instead of a warning").action(async (opts) => {
+  try {
+    const { namesFrom: namesFrom2, writeVerdict: writeVerdict2, explain: explain2 } = await Promise.resolve().then(() => (init_guard_adapters(), guard_adapters_exports));
+    const harness = opts.harness ?? "claude";
+    const raw = await new Promise((resolve3) => {
+      let buf = "";
+      const t = setTimeout(() => resolve3(buf), 2e3);
+      process.stdin.setEncoding("utf8");
+      process.stdin.on("data", (c) => {
+        buf += c;
+      });
+      process.stdin.on("end", () => {
+        clearTimeout(t);
+        resolve3(buf);
+      });
+      process.stdin.on("error", () => {
+        clearTimeout(t);
+        resolve3(buf);
+      });
+    });
+    if (!raw.trim()) return;
+    let payload;
+    try {
+      payload = JSON.parse(raw);
+    } catch {
+      return;
+    }
+    const { names, via } = namesFrom2(harness, payload);
+    if (!names.length) return;
+    const target = firstTarget();
+    if (!target) return;
+    const { fetchWithTimeout: fetchWithTimeout2 } = await Promise.resolve().then(() => (init_http(), http_exports));
+    const headers = { "content-type": "application/json" };
+    if (target.token) headers.authorization = `Bearer ${target.token}`;
+    const res = await fetchWithTimeout2(
+      `${target.base}/api/decisions/check`,
+      { method: "POST", headers, body: JSON.stringify({ names, via, project: opts.project }) },
+      4e3
+    );
+    if (!res.ok) return;
+    const out = await res.json();
+    if (!out.findings?.length) return;
+    const message = explain2(out.findings);
+    const verdict = opts.enforce ? "deny" : out.verdict === "ask" ? "ask" : "warn";
+    const written = writeVerdict2(harness, verdict, message);
+    if (written.json) process.stdout.write(JSON.stringify(written.json));
+  } catch {
+  }
+});
+program.command("task-hook").description("Move a board card when a prompt or a commit names its id (used by the task hooks)").option("--claim", "UserPromptSubmit: claim every open card the prompt names").option("--close", "SessionEnd: close every open card a recent commit names").option("--since <hours>", "How far back --close reads commits", "24").action(async (opts) => {
+  if (process.env.CHAT_RECALL_TASK_HOOK === "0") return;
+  const deadline = setTimeout(() => process.exit(0), opts.close ? 2e4 : 1e4);
+  deadline.unref();
+  try {
+    const {
+      extractTaskIds: extractTaskIds2,
+      parseCommitLog: parseCommitLog2,
+      planCloses: planCloses2,
+      parseChangedFiles: parseChangedFiles2,
+      mayClaim: mayClaim2,
+      mayClose: mayClose2,
+      COMMIT_LOG_FORMAT: COMMIT_LOG_FORMAT2
+    } = await Promise.resolve().then(() => (init_task_hook(), task_hook_exports));
+    const raw = await new Promise((resolve3) => {
+      let buf = "";
+      const t = setTimeout(() => resolve3(buf), 2e3);
+      process.stdin.setEncoding("utf8");
+      process.stdin.on("data", (c) => {
+        buf += c;
+      });
+      process.stdin.on("end", () => {
+        clearTimeout(t);
+        resolve3(buf);
+      });
+      process.stdin.on("error", () => {
+        clearTimeout(t);
+        resolve3(buf);
+      });
+    });
+    if (!raw.trim()) return;
+    let payload;
+    try {
+      payload = JSON.parse(raw);
+    } catch {
+      return;
+    }
+    const sessionId = typeof payload.session_id === "string" ? payload.session_id : "";
+    if (!sessionId) return;
+    const cwd = typeof payload.cwd === "string" && payload.cwd ? payload.cwd : process.cwd();
+    const target = firstTarget();
+    if (!target) return;
+    const { fetchWithTimeout: fetchWithTimeout2 } = await Promise.resolve().then(() => (init_http(), http_exports));
+    const headers = { "content-type": "application/json" };
+    if (target.token) headers.authorization = `Bearer ${target.token}`;
+    const readCard = async (id) => {
+      const res = await fetchWithTimeout2(
+        `${target.base}/api/tasks/${encodeURIComponent(id)}`,
+        { headers },
+        4e3
+      );
+      if (!res.ok) return null;
+      const body = await res.json().catch(() => ({}));
+      return body.task ?? null;
+    };
+    const patchCard = async (id, body) => {
+      const res = await fetchWithTimeout2(
+        `${target.base}/api/tasks/${encodeURIComponent(id)}`,
+        { method: "PATCH", headers, body: JSON.stringify(body) },
+        6e3
+      );
+      return res.ok;
+    };
+    if (opts.claim) {
+      const ids = extractTaskIds2(payload.prompt);
+      if (!ids.length) return;
+      const claimed = [];
+      for (const id of ids) {
+        const card = await readCard(id);
+        if (!card) continue;
+        if (!mayClaim2(card.status, card.linkedSessionId, sessionId)) continue;
+        if (await patchCard(id, { status: "in_progress", linkedSessionId: sessionId })) {
+          claimed.push(`${id} \u2014 ${card.title}`);
+        }
+      }
+      if (claimed.length) {
+        process.stdout.write("<!-- chat-recall-task-claim -->\n");
+        process.stdout.write(
+          "**Claimed on the chat-recall board**, linked to this session:\n" + claimed.map((c) => `- \u{1F7E1} ${c}`).join("\n") + "\n\nWrite the card id in the commit message and the card closes itself at session end.\n"
+        );
+      }
+      return;
+    }
+    if (!opts.close) return;
+    const { execFileSync: execFileSync4 } = await import("node:child_process");
+    const git2 = (args) => {
+      try {
+        return execFileSync4("git", args, {
+          cwd,
+          encoding: "utf8",
+          timeout: 5e3,
+          stdio: ["ignore", "pipe", "ignore"]
+        });
+      } catch {
+        return "";
+      }
+    };
+    if (!git2(["rev-parse", "--is-inside-work-tree"]).trim().startsWith("true")) return;
+    const hours = Math.max(1, Math.min(720, Number(opts.since) || 24));
+    const intents = planCloses2(parseCommitLog2(git2([
+      "log",
+      `--since=${hours}.hours.ago`,
+      "--max-count=200",
+      "--no-merges",
+      `--pretty=format:${COMMIT_LOG_FORMAT2}`
+    ])));
+    if (!intents.length) return;
+    for (const intent of intents) {
+      const card = await readCard(intent.id);
+      if (!card) continue;
+      if (!mayClose2(card.status)) continue;
+      const files = parseChangedFiles2(
+        intent.commits.map((sha) => git2(["show", "--name-only", "--pretty=format:", sha])).join("\n")
+      );
+      const shortShas = intent.commits.map((s) => s.slice(0, 8)).join(", ");
+      await patchCard(intent.id, {
+        status: "done",
+        linkedSessionId: sessionId,
+        doneEvidence: {
+          commits: intent.commits,
+          files,
+          summary: `Closed by ${intent.commits.length === 1 ? "commit" : "commits"} ${shortShas}, which named this card.`
+        }
+      });
+    }
+  } catch {
+  }
+});
+program.command("install-hooks").description("Install Claude Code hooks (Stop + PreCompact + UserPromptSubmit + SessionEnd + SessionStart) into every Claude profile").option("--uninstall", "Remove hooks instead of installing them").option("--no-resume-hint", "Don't install the UserPromptSubmit resume-hint hook").option("--no-escalate", "Don't install the SessionEnd learnings-escalation hook").option("--no-wakeup", "Don't install the SessionStart wake-up hook").option("--no-guard", "Don't install the PreToolUse decision guard").option("--no-task-board", "Don't install the hooks that claim and close board cards").action(async (opts) => {
+  const { mkdirSync: mkdirSync23, copyFileSync: copyFileSync4, chmodSync: chmodSync5, existsSync: existsSync57, readFileSync: readFileSync50, writeFileSync: writeFileSync24, statSync: statSync45, unlinkSync: unlinkSync4 } = await import("fs");
   const { fileURLToPath: fileURLToPath6 } = await import("url");
+  const { boardHookEntries: boardHookEntries2, isBoardHookEntry: isBoardHookEntry2, registerBoardHooks: registerBoardHooks2, resolveCliEntry: resolveCliEntry2 } = await Promise.resolve().then(() => (init_board_hooks(), board_hooks_exports));
   const here = fileURLToPath6(new URL(".", import.meta.url));
   const findHook = (name) => {
     const candidates2 = [
-      join58(here, "..", "hooks", name),
-      join58(here, "..", "..", "hooks", name)
+      join61(here, "..", "hooks", name),
+      join61(here, "..", "..", "hooks", name),
+      // The monorepo root, for a run straight from the checkout. The copy
+      // under packages/cli/hooks is written by the package build, so a
+      // freshly added script is only at the root until that build runs.
+      join61(here, "..", "..", "..", "hooks", name)
     ];
-    return candidates2.find((p) => existsSync55(p));
+    return candidates2.find((p) => existsSync57(p));
   };
   const sourceSaveHook = findHook("chat_recall_save_hook.sh");
+  const sourceGuardHook = findHook("chat_recall_guard_hook.sh");
   const sourceResumeHook = findHook("chat_recall_resume_hook.sh");
   const sourceEscalateHook = findHook("chat_recall_escalate_hook.sh");
   const sourceWakeupHook = findHook("chat_recall_wakeup_hook.sh");
@@ -29051,15 +30112,16 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
     process.exit(1);
   }
   const hooksDir = getHooksDir();
-  const installedSaveHook = join58(hooksDir, "chat_recall_save_hook.sh");
-  const installedResumeHook = join58(hooksDir, "chat_recall_resume_hook.sh");
-  const installedEscalateHook = join58(hooksDir, "chat_recall_escalate_hook.sh");
-  const installedWakeupHook = join58(hooksDir, "chat_recall_wakeup_hook.sh");
+  const installedSaveHook = join61(hooksDir, "chat_recall_save_hook.sh");
+  const installedGuardHook = join61(hooksDir, "chat_recall_guard_hook.sh");
+  const installedResumeHook = join61(hooksDir, "chat_recall_resume_hook.sh");
+  const installedEscalateHook = join61(hooksDir, "chat_recall_escalate_hook.sh");
+  const installedWakeupHook = join61(hooksDir, "chat_recall_wakeup_hook.sh");
   const wakeupWiredInSettings = (home) => {
-    const settings2 = join58(home, "settings.json");
-    if (!existsSync55(settings2)) return false;
+    const settings2 = join61(home, "settings.json");
+    if (!existsSync57(settings2)) return false;
     try {
-      const cfg = JSON.parse(readFileSync49(settings2, "utf-8"));
+      const cfg = JSON.parse(readFileSync50(settings2, "utf-8"));
       const arr = Array.isArray(cfg.hooks?.SessionStart) ? cfg.hooks.SessionStart : [];
       return arr.some((h) => (h?.hooks?.[0]?.command || "").includes("chat_recall_wakeup_hook"));
     } catch {
@@ -29068,9 +30130,9 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
   };
   const hookConfigFiles = claudeHookConfigFiles();
   const readHookConfig = (file) => {
-    if (!existsSync55(file)) return { hooks: {} };
+    if (!existsSync57(file)) return { hooks: {} };
     try {
-      const c = JSON.parse(readFileSync49(file, "utf-8"));
+      const c = JSON.parse(readFileSync50(file, "utf-8"));
       if (!c.hooks || typeof c.hooks !== "object") c.hooks = {};
       return c;
     } catch (err) {
@@ -29081,9 +30143,58 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
   };
   const matchesOurs = (h) => {
     const cmd = h?.hooks?.[0]?.command;
-    return typeof cmd === "string" && (cmd.includes("chat_recall_save_hook.sh") || cmd.includes("chat_recall_resume_hook.sh") || cmd.includes("chat_recall_escalate_hook.sh") || cmd.includes("chat_recall_wakeup_hook.sh"));
+    return typeof cmd === "string" && (cmd.includes("chat_recall_save_hook.sh") || cmd.includes("chat_recall_resume_hook.sh") || cmd.includes("chat_recall_escalate_hook.sh") || cmd.includes("chat_recall_wakeup_hook.sh") || cmd.includes("chat_recall_guard_hook.sh")) || isBoardHookEntry2(h);
+  };
+  const HOOK_EVENTS = ["Stop", "PreCompact", "UserPromptSubmit", "SessionEnd", "SessionStart", "PreToolUse"];
+  const readJson4 = (file) => {
+    if (!existsSync57(file)) return {};
+    try {
+      return JSON.parse(readFileSync50(file, "utf-8"));
+    } catch {
+      return {};
+    }
+  };
+  const addGuardToOtherTools = async (hookPath) => {
+    const reg = await Promise.resolve().then(() => (init_guard_registration(), guard_registration_exports));
+    const notes = [];
+    for (const target of reg.guardTargets()) {
+      if (!existsSync57(target.homeDir)) continue;
+      const wrapper = join61(hooksDir, reg.guardWrapperName(target.tool));
+      writeFileSync24(wrapper, reg.guardWrapperSource(target.tool, hookPath));
+      chmodSync5(wrapper, 493);
+      mkdirSync23(dirname29(target.configPath), { recursive: true });
+      if (target.tool === "opencode") {
+        writeFileSync24(target.configPath, reg.opencodePluginSource(wrapper));
+      } else {
+        const merged = reg.registerGuard(target.tool, readJson4(target.configPath), reg.guardCommand(wrapper));
+        writeFileSync24(target.configPath, JSON.stringify(merged, null, 2) + "\n");
+      }
+      console.log(chalk2.green(`\u2713 Registered the guard for ${target.label}`));
+      console.log(chalk2.dim(`  ${target.configPath}`));
+      if (target.note) notes.push(`${target.label}: ${target.note}`);
+    }
+    for (const n of notes) console.log(chalk2.yellow(`  ! ${n}`));
+  };
+  const removeGuardFromOtherTools = async () => {
+    const reg = await Promise.resolve().then(() => (init_guard_registration(), guard_registration_exports));
+    let removed = 0;
+    for (const target of reg.guardTargets()) {
+      if (!existsSync57(target.configPath)) continue;
+      if (target.tool === "opencode") {
+        const body = readFileSync50(target.configPath, "utf-8");
+        if (!body.includes("chat-recall install-hooks")) continue;
+        unlinkSync4(target.configPath);
+        removed += 1;
+      } else {
+        const r = reg.unregisterGuard(target.tool, readJson4(target.configPath));
+        if (r.removed === 0) continue;
+        writeFileSync24(target.configPath, JSON.stringify(r.config, null, 2) + "\n");
+        removed += r.removed;
+      }
+      console.log(chalk2.green(`\u2713 Removed the guard from ${target.label} (${target.configPath})`));
+    }
+    return removed;
   };
-  const HOOK_EVENTS = ["Stop", "PreCompact", "UserPromptSubmit", "SessionEnd", "SessionStart"];
   if (opts.uninstall) {
     let total = 0;
     for (const hooksJson of hookConfigFiles) {
@@ -29096,29 +30207,39 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
         if (filtered.length) config2.hooks[event] = filtered;
         else delete config2.hooks[event];
       }
-      if (removed === 0 && !existsSync55(hooksJson)) continue;
-      writeFileSync22(hooksJson, JSON.stringify(config2, null, 2) + "\n");
+      if (removed === 0 && !existsSync57(hooksJson)) continue;
+      writeFileSync24(hooksJson, JSON.stringify(config2, null, 2) + "\n");
       total += removed;
       console.log(chalk2.green(`\u2713 Removed ${removed} chat-recall hook entr${removed === 1 ? "y" : "ies"} from ${hooksJson}`));
     }
+    total += await removeGuardFromOtherTools();
     if (total === 0) console.log(chalk2.dim("No chat-recall hook entries were registered."));
     console.log(chalk2.dim(`  (Hook scripts left in ${hooksDir} \u2014 delete manually if you want.)`));
     return;
   }
   if (process.platform === "win32") {
-    console.log(chalk2.yellow("Hooks are not installed on Windows."));
+    if (opts.taskBoard !== false && !opts.uninstall) {
+      const written = registerBoardHooks2(hookConfigFiles, process.execPath, resolveCliEntry2(here));
+      if (written.length) {
+        console.log(chalk2.green("\u2713 Registered the chat-recall task-board hooks"));
+        console.log(chalk2.dim("  A prompt naming a card id claims it; a commit message naming one closes it."));
+        for (const f of written) console.log(chalk2.dim(`  ${f}`));
+        console.log();
+      }
+    }
+    console.log(chalk2.yellow("The five shell hooks are not installed on Windows."));
     console.log(chalk2.dim("  They are POSIX shell scripts, and Claude Code runs hook commands through"));
     console.log(chalk2.dim("  cmd.exe, which cannot execute them. Registering them would put an error on"));
     console.log(chalk2.dim("  every turn instead of saving anything."));
     console.log(chalk2.dim(""));
-    console.log(chalk2.dim("  Everything else works: indexing, sync, search and the MCP server are"));
-    console.log(chalk2.dim("  unaffected. Hooks only add automatic fact-saving and the wake-up bundle,"));
-    console.log(chalk2.dim("  and you can get the same context by calling recall_wake_up from the agent."));
+    console.log(chalk2.dim("  Everything else works: indexing, sync, search, the MCP server and the"));
+    console.log(chalk2.dim("  board hooks above. The five scripts add automatic fact-saving and the"));
+    console.log(chalk2.dim("  wake-up bundle; recall_wake_up gives an agent the same context on demand."));
     console.log(chalk2.dim(""));
     console.log(chalk2.dim("  Under WSL, run this from inside the WSL shell and it installs normally."));
     return;
   }
-  mkdirSync20(hooksDir, { recursive: true });
+  mkdirSync23(hooksDir, { recursive: true });
   copyFileSync4(sourceSaveHook, installedSaveHook);
   chmodSync5(installedSaveHook, 493);
   const installResume = opts.resumeHint !== false && !!sourceResumeHook;
@@ -29131,40 +30252,56 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
     copyFileSync4(sourceEscalateHook, installedEscalateHook);
     chmodSync5(installedEscalateHook, 493);
   }
+  const installGuard = opts.guard !== false && !!sourceGuardHook;
+  if (opts.guard !== false && !sourceGuardHook) {
+    console.error(chalk2.yellow("! chat_recall_guard_hook.sh is not in this package \u2014 the decision guard is not installed."));
+  }
+  if (installGuard) {
+    copyFileSync4(sourceGuardHook, installedGuardHook);
+    chmodSync5(installedGuardHook, 493);
+  }
   const installWakeup = opts.wakeup !== false && !!sourceWakeupHook;
   if (installWakeup) {
     copyFileSync4(sourceWakeupHook, installedWakeupHook);
     chmodSync5(installedWakeupHook, 493);
   }
+  const installTaskBoard = opts.taskBoard !== false;
   const stopEntry = { matcher: "", hooks: [{ type: "command", command: installedSaveHook }] };
   const precompactEntry = { matcher: "", hooks: [{ type: "command", command: `"${installedSaveHook}" --precompact` }] };
   const resumeEntry = { matcher: "", hooks: [{ type: "command", command: installedResumeHook }] };
   const escalateEntry = { matcher: "", hooks: [{ type: "command", command: installedEscalateHook }] };
   const wakeupEntry = { matcher: "startup|clear", hooks: [{ type: "command", command: installedWakeupHook }] };
+  const guardEntry = {
+    matcher: "Bash|Edit|Write|MultiEdit|NotebookEdit",
+    hooks: [{ type: "command", command: installedGuardHook }]
+  };
+  const boardEntries = boardHookEntries2(process.execPath, resolveCliEntry2(here));
   const events = [
     ["Stop", stopEntry],
     ["PreCompact", precompactEntry]
   ];
   if (installResume) events.push(["UserPromptSubmit", resumeEntry]);
   if (installEscalate) events.push(["SessionEnd", escalateEntry]);
+  if (installGuard) events.push(["PreToolUse", guardEntry]);
+  if (installTaskBoard) for (const pair of boardEntries) events.push(pair);
   const wakeupSkipped = [];
   for (const hooksJson of hookConfigFiles) {
     const config2 = readHookConfig(hooksJson);
-    const home = dirname27(hooksJson);
+    const home = dirname29(hooksJson);
     const alreadyWired = wakeupWiredInSettings(home);
-    if (alreadyWired) wakeupSkipped.push(join58(home, "settings.json"));
+    if (alreadyWired) wakeupSkipped.push(join61(home, "settings.json"));
     const perProfile = installWakeup && !alreadyWired ? [...events, ["SessionStart", wakeupEntry]] : events;
     for (const event of HOOK_EVENTS) {
       const arr = Array.isArray(config2.hooks[event]) ? config2.hooks[event] : [];
       const without = arr.filter((h) => !matchesOurs(h));
-      const wanted = perProfile.find(([e]) => e === event);
-      if (wanted) without.push(wanted[1]);
+      for (const [, entry] of perProfile.filter(([e]) => e === event)) without.push(entry);
       if (without.length) config2.hooks[event] = without;
       else delete config2.hooks[event];
     }
-    mkdirSync20(dirname27(hooksJson), { recursive: true });
-    writeFileSync22(hooksJson, JSON.stringify(config2, null, 2) + "\n");
+    mkdirSync23(dirname29(hooksJson), { recursive: true });
+    writeFileSync24(hooksJson, JSON.stringify(config2, null, 2) + "\n");
   }
+  if (installGuard) await addGuardToOtherTools(installedGuardHook);
   const saveSz = statSync45(installedSaveHook).size;
   console.log(chalk2.green(`\u2713 Installed chat-recall save hook (${saveSz} bytes)`));
   if (installResume) {
@@ -29175,6 +30312,14 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
     const escalateSz = statSync45(installedEscalateHook).size;
     console.log(chalk2.green(`\u2713 Installed chat-recall learnings-escalation hook (${escalateSz} bytes)`));
   }
+  if (installGuard) {
+    const guardSz = statSync45(installedGuardHook).size;
+    console.log(chalk2.green(`\u2713 Installed chat-recall decision guard (${guardSz} bytes)`));
+  }
+  if (installTaskBoard) {
+    console.log(chalk2.green("\u2713 Registered the chat-recall task-board hooks"));
+    console.log(chalk2.dim("  A prompt naming a card id claims it; a commit message naming one closes it."));
+  }
   if (installWakeup) {
     const wakeupSz = statSync45(installedWakeupHook).size;
     console.log(chalk2.green(`\u2713 Installed chat-recall wake-up hook (${wakeupSz} bytes)`));
@@ -29186,7 +30331,12 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
   for (const [i, f] of hookConfigFiles.entries()) {
     console.log(chalk2.dim(`  ${i === 0 ? "config:   " : "          "} ${f}`));
   }
-  console.log(chalk2.dim(`  events:    Stop, PreCompact${installResume ? ", UserPromptSubmit" : ""}${installEscalate ? ", SessionEnd" : ""}${installWakeup ? ", SessionStart" : ""}`));
+  const registeredEvents = ["Stop", "PreCompact"];
+  if (installResume || installTaskBoard) registeredEvents.push("UserPromptSubmit");
+  if (installEscalate || installTaskBoard) registeredEvents.push("SessionEnd");
+  if (installWakeup) registeredEvents.push("SessionStart");
+  if (installGuard) registeredEvents.push("PreToolUse");
+  console.log(chalk2.dim(`  events:    ${registeredEvents.join(", ")}`));
   console.log();
   console.log(chalk2.dim("Run `chat-recall install-hooks --uninstall` to remove later."));
   if (!installResume) {
@@ -29208,7 +30358,7 @@ program.command("dossier <project>").description("Generate a project dossier (ov
     );
     const md = dossier.markdown;
     if (options.out) {
-      writeFileSync21(options.out, md);
+      writeFileSync23(options.out, md);
       console.log(chalk2.green(`Wrote dossier to ${options.out} (${md.length} chars)`));
     } else {
       console.log(md);
@@ -29466,8 +30616,8 @@ include.command("list", { isDefault: true }).description("Show paths opted back
 include.command("project <path>").description("Re-permit a path under a personal folder (substring match; e.g. ~/Documents/code)").action(async (path) => {
   const { loadSettings: loadSettings2, saveSettings: saveSettings2 } = await Promise.resolve().then(() => (init_settings(), settings_exports));
   const { resolve: resolve3 } = await import("node:path");
-  const { homedir: homedir22 } = await import("node:os");
-  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir22()));
+  const { homedir: homedir24 } = await import("node:os");
+  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir24()));
   const s = loadSettings2();
   s.sync.includeProjects = s.sync.includeProjects || [];
   if (s.sync.includeProjects.includes(abs)) {
@@ -29481,8 +30631,8 @@ include.command("project <path>").description("Re-permit a path under a personal
 include.command("remove <path>").description("Undo an opt-in (personal folder goes back to skipped)").action(async (path) => {
   const { loadSettings: loadSettings2, saveSettings: saveSettings2 } = await Promise.resolve().then(() => (init_settings(), settings_exports));
   const { resolve: resolve3 } = await import("node:path");
-  const { homedir: homedir22 } = await import("node:os");
-  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir22()));
+  const { homedir: homedir24 } = await import("node:os");
+  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir24()));
   const s = loadSettings2();
   const before = (s.sync.includeProjects || []).length;
   s.sync.includeProjects = (s.sync.includeProjects || []).filter((p) => p !== path && p !== abs);
@@ -29621,8 +30771,8 @@ program.command("projects").description("List distinct project ids discovered on
 exclude.command("project <path>").description("Exclude a project path from syncing (substring match on the project path; e.g. ~/.claude-pr-bot)").action(async (path) => {
   const { loadSettings: loadSettings2, saveSettings: saveSettings2 } = await Promise.resolve().then(() => (init_settings(), settings_exports));
   const { resolve: resolve3 } = await import("node:path");
-  const { homedir: homedir22 } = await import("node:os");
-  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir22()));
+  const { homedir: homedir24 } = await import("node:os");
+  const abs = resolve3(path.replace(/^~(?=\/|$)/, homedir24()));
   const s = loadSettings2();
   if (s.sync.excludeProjects.includes(abs)) {
     console.log(chalk2.dim(`Already excluded: ${abs}`));
@@ -29651,8 +30801,8 @@ exclude.command("tool <tool>").description("Exclude an AI tool entirely (claude
 exclude.command("remove <value>").description("Remove an exclusion (tool name or project path)").action(async (value) => {
   const { loadSettings: loadSettings2, saveSettings: saveSettings2 } = await Promise.resolve().then(() => (init_settings(), settings_exports));
   const { resolve: resolve3 } = await import("node:path");
-  const { homedir: homedir22 } = await import("node:os");
-  const abs = resolve3(value.replace(/^~(?=\/|$)/, homedir22()));
+  const { homedir: homedir24 } = await import("node:os");
+  const abs = resolve3(value.replace(/^~(?=\/|$)/, homedir24()));
   const s = loadSettings2();
   const beforeTools = s.sync.excludeTools.length;
   const beforeProjects = s.sync.excludeProjects.length;