chat-recall 0.6.8 → 0.6.9

package/dist/cli.js

@@ -5083,978 +5083,978 @@ var init_settings = __esm({
   }
 });
 
-// ../engine/dist/core/home-approval.js
-var home_approval_exports = {};
-__export(home_approval_exports, {
-  approveHome: () => approveHome,
-  declineHome: () => declineHome,
-  grandfatherLegacyHomes: () => grandfatherLegacyHomes,
-  homeDecision: () => homeDecision,
-  isHomeSynced: () => isHomeSynced,
-  normalizeHomePath: () => normalizeHomePath,
-  resetHomeDecision: () => resetHomeDecision
+// ../engine/dist/core/secret-redactor.js
+var secret_redactor_exports = {};
+__export(secret_redactor_exports, {
+  DEFAULT_REDACTION_RULES: () => DEFAULT_REDACTION_RULES,
+  _clearServerRulePack: () => _clearServerRulePack,
+  _resetPrivacyCache: () => _resetPrivacyCache,
+  _resetRedactorCache: () => _resetRedactorCache,
+  applyChunkPrivacy: () => applyChunkPrivacy,
+  findContextualSecrets: () => findContextualSecrets,
+  installServerRulePack: () => installServerRulePack,
+  isFilePathRedactionEnabled: () => isFilePathRedactionEnabled,
+  isRedactionEnabled: () => isRedactionEnabled,
+  isToolOutputRedactionEnabled: () => isToolOutputRedactionEnabled,
+  redactFilePaths: () => redactFilePaths,
+  redactSecrets: () => redactSecrets,
+  redactToolResultBody: () => redactToolResultBody,
+  scanTextForFindings: () => scanTextForFindings,
+  serverRulePackVersion: () => serverRulePackVersion,
+  validateRedactionRule: () => validateRedactionRule
 });
-import { existsSync as existsSync3, readdirSync as readdirSync2, realpathSync } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join3, dirname as dirname3 } from "path";
-function normalizeHomePath(p) {
-  const expanded = p.startsWith("~") ? join3(homedir2(), p.slice(1)) : p;
-  const trimmed = expanded.replace(/[/\\]+$/, "");
-  try {
-    return realpathSync(trimmed);
-  } catch {
-    return trimmed;
-  }
+import { statSync as statSync3 } from "fs";
+import { createHash } from "crypto";
+function secretOf(rule, m) {
+  const raw = rule.secret != null ? m[rule.secret] : m[0];
+  if (raw == null)
+    return null;
+  if (rule.where && !rule.where(raw))
+    return null;
+  return raw;
 }
-function legacyAutoSyncedHomes() {
-  const home = homedir2();
-  const out = [];
-  const add = (dir, marker) => {
-    if (!existsSync3(join3(dir, marker)))
-      return;
-    const n = normalizeHomePath(dir);
-    if (!out.includes(n))
-      out.push(n);
-  };
-  const bases = [
-    { base: join3(home, ".claude"), marker: "projects" },
-    { base: join3(home, ".gemini"), marker: "tmp" },
-    { base: join3(home, ".codex"), marker: "sessions" },
-    { base: join3(home, ".gemini", "antigravity-cli"), marker: "brain" },
-    { base: join3(home, ".local", "share", "opencode"), marker: "opencode.db" },
-    { base: join3(home, ".cursor"), marker: "chats" }
-  ];
-  for (const { base: base3, marker } of bases) {
-    add(base3, marker);
-    const parent = dirname3(base3);
-    const leaf = base3.slice(parent.length + 1);
-    try {
-      for (const e of readdirSync2(parent, { withFileTypes: true })) {
-        if (!e.isDirectory())
-          continue;
-        if (e.name === leaf || !e.name.startsWith(leaf + "-"))
-          continue;
-        if (e.name === ".claude-code")
-          continue;
-        add(join3(parent, e.name), marker);
+function looksLikeSecretToken(t) {
+  if (t.length < 32)
+    return false;
+  if (/^[a-f0-9]+$/i.test(t))
+    return true;
+  return /[A-Z]/.test(t) && /[a-z]/.test(t) && /[0-9]/.test(t);
+}
+function findContextualSecrets(text) {
+  if (!text)
+    return [];
+  const ranges = [];
+  let m;
+  SECRET_CONTEXT_RE.lastIndex = 0;
+  while ((m = SECRET_CONTEXT_RE.exec(text)) !== null) {
+    const winStart = m.index + m[0].length;
+    const window = text.slice(winStart, winStart + 80);
+    HIGH_ENTROPY_TOKEN_RE.lastIndex = 0;
+    let tm;
+    while ((tm = HIGH_ENTROPY_TOKEN_RE.exec(window)) !== null) {
+      if (!looksLikeSecretToken(tm[0]))
+        continue;
+      if (/^[a-f0-9]+$/i.test(tm[0]) && /\b(?:commit|sha-?\d*|hash|digest|checksum|uuid|guid|etag|blob|ref)\b/i.test(window.slice(0, tm.index))) {
+        continue;
       }
-    } catch {
+      ranges.push({ start: winStart + tm.index, end: winStart + tm.index + tm[0].length });
+      break;
     }
   }
-  return out;
-}
-function grandfatherLegacyHomes() {
-  let s;
-  try {
-    s = loadSettings();
-  } catch {
-    return { seeded: [] };
-  }
-  if (s.sources.homesGrandfathered)
-    return { seeded: [] };
-  const legacy = legacyAutoSyncedHomes();
-  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
-  const seeded = [];
-  for (const p of legacy) {
-    if (!approved.has(p)) {
-      approved.add(p);
-      seeded.push(p);
+  ranges.sort((a, b) => a.start - b.start);
+  const out = [];
+  for (const r of ranges) {
+    const last = out[out.length - 1];
+    if (last && r.start < last.end) {
+      last.end = Math.max(last.end, r.end);
+      continue;
     }
+    out.push({ ...r });
   }
-  s.sources.approvedHomes = [...approved];
-  s.sources.homesGrandfathered = true;
+  return out;
+}
+function isEnvRedactionRequested() {
+  const v = process.env.CHAT_RECALL_REDACT_INDEX;
+  if (v === void 0)
+    return null;
+  return v === "1" || v === "true" || v === "yes";
+}
+function settingsView() {
+  let mtimeMs = -1;
   try {
-    saveSettings(s);
+    mtimeMs = statSync3(settingsFilePath()).mtimeMs;
   } catch {
-    return { seeded: [] };
   }
-  return { seeded };
-}
-function primaryHomes() {
-  const home = homedir2();
-  const env = process.env;
-  let s;
+  if (cache && cache.mtimeMs === mtimeMs)
+    return cache;
+  let enabled = false;
+  const extra = [];
   try {
-    s = loadSettings().sources;
+    const s = loadSettings();
+    enabled = !!s.privacy?.redactIndex;
+    for (const r of s.privacy?.redactionRules ?? []) {
+      try {
+        extra.push({ label: r.label, pattern: new RegExp(r.pattern, "g") });
+      } catch {
+      }
+    }
   } catch {
-    s = void 0;
   }
-  const opencodeDb = env.CHAT_RECALL_OPENCODE_DB || s?.opencodeDbPath || join3(home, ".local", "share", "opencode", "opencode.db");
-  const candidates2 = [
-    env.CHAT_RECALL_CLAUDE_HOME || s?.claudeHome || join3(home, ".claude"),
-    env.CHAT_RECALL_GEMINI_HOME || s?.geminiHome || join3(home, ".gemini"),
-    env.CHAT_RECALL_CODEX_HOME || s?.codexHome || join3(home, ".codex"),
-    env.CHAT_RECALL_AGY_HOME || s?.agyHome || join3(home, ".gemini", "antigravity-cli"),
-    env.CHAT_RECALL_CURSOR_HOME || s?.cursorHome || join3(home, ".cursor"),
-    dirOf(opencodeDb)
-  ];
-  return candidates2.map(normalizeHomePath);
+  cache = { mtimeMs, enabled, rules: [...DEFAULT_REDACTION_RULES, ...extra] };
+  return cache;
 }
-function homeDecision(path) {
-  const p = normalizeHomePath(path);
-  if (primaryHomes().includes(p))
-    return "primary";
-  let s;
+function compileServerRule(spec) {
+  const name = spec.name || "(unnamed)";
+  if (!spec.regex)
+    return { name, reason: "empty pattern" };
+  if (spec.regex.length > MAX_PATTERN_LEN)
+    return { name, reason: `pattern longer than ${MAX_PATTERN_LEN} chars` };
+  let re;
   try {
-    s = loadSettings().sources;
-  } catch {
-    return "pending";
+    const flags = "g" + (spec.flags || "").replace(/[^ims]/g, "");
+    re = new RegExp(spec.regex, flags);
+  } catch (e) {
+    return { name, reason: `invalid regex: ${e instanceof Error ? e.message : e}` };
   }
-  if ((s.declinedHomes ?? []).map(normalizeHomePath).includes(p))
-    return "declined";
-  if ((s.approvedHomes ?? []).map(normalizeHomePath).includes(p))
-    return "approved";
-  if ((s.extraClaudeHomes ?? []).map(normalizeHomePath).includes(p))
-    return "approved";
-  return "pending";
+  if (re.test(""))
+    return { name, reason: "matches the empty string (would redact everything)" };
+  re.lastIndex = 0;
+  if (re.test(CANARY))
+    return { name, reason: "matches benign text \u2014 too broad" };
+  re.lastIndex = 0;
+  return { label: `${spec.source === "pack" ? "pack" : "tenant"}:${name}`, pattern: re };
 }
-function isHomeSynced(path) {
-  const d = homeDecision(path);
-  return d === "primary" || d === "approved";
+function validateRedactionRule(spec) {
+  const out = compileServerRule(spec);
+  return "reason" in out ? { ok: false, reason: out.reason } : { ok: true };
 }
-function setDecision(path, decision) {
-  const p = normalizeHomePath(path);
-  let s;
-  try {
-    s = loadSettings();
-  } catch {
-    return false;
-  }
-  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
-  const declined = new Set((s.sources.declinedHomes ?? []).map(normalizeHomePath));
-  approved.delete(p);
-  declined.delete(p);
-  (decision === "approved" ? approved : declined).add(p);
-  s.sources.approvedHomes = [...approved];
-  s.sources.declinedHomes = [...declined];
-  try {
-    saveSettings(s);
-  } catch {
-    return false;
+function installServerRulePack(pack) {
+  const rejected = [];
+  const rules = [];
+  for (const spec of pack.rules || []) {
+    if (rules.length >= MAX_PACK_RULES) {
+      rejected.push({ name: spec.name || "(unnamed)", reason: `pack exceeds ${MAX_PACK_RULES} rules` });
+      continue;
+    }
+    const out = compileServerRule(spec);
+    if ("reason" in out)
+      rejected.push(out);
+    else
+      rules.push(out);
   }
-  return true;
+  const version2 = pack.version || "";
+  serverPack = { version: version2, rules };
+  return { version: version2, accepted: rules.length, rejected };
 }
-function approveHome(path) {
-  return setDecision(path, "approved");
+function serverRulePackVersion() {
+  return serverPack ? serverPack.version || "unversioned" : null;
 }
-function declineHome(path) {
-  return setDecision(path, "declined");
+function _clearServerRulePack() {
+  serverPack = null;
 }
-function resetHomeDecision(path) {
-  const p = normalizeHomePath(path);
-  let s;
-  try {
-    s = loadSettings();
-  } catch {
-    return false;
-  }
-  s.sources.approvedHomes = (s.sources.approvedHomes ?? []).filter((x) => normalizeHomePath(x) !== p);
-  s.sources.declinedHomes = (s.sources.declinedHomes ?? []).filter((x) => normalizeHomePath(x) !== p);
-  try {
-    saveSettings(s);
-  } catch {
-    return false;
-  }
-  return true;
+function activeRules() {
+  const base3 = settingsView().rules;
+  return serverPack && serverPack.rules.length > 0 ? [...base3, ...serverPack.rules] : base3;
 }
-var dirOf;
-var init_home_approval = __esm({
-  "../engine/dist/core/home-approval.js"() {
-    "use strict";
-    init_settings();
-    dirOf = (filePath) => dirname3(filePath);
-  }
-});
-
-// ../engine/dist/core/tool-paths.js
-import { existsSync as existsSync4, readdirSync as readdirSync3 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join4, dirname as dirname4, basename } from "path";
-function claudeHomeDir() {
-  return process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome || join4(homedir3(), ".claude");
+function isRedactionEnabled() {
+  const env = isEnvRedactionRequested();
+  if (env !== null)
+    return env;
+  return settingsView().enabled;
 }
-function claudeProjectDirs(opts = {}) {
-  const home = homedir3();
-  const dirs = [];
-  const addHome = (d) => {
-    const p = join4(d, "projects");
-    if (existsSync4(p) && !dirs.includes(p))
-      dirs.push(p);
-  };
-  addHome(claudeHomeDir());
-  const homeOverridden = !!(process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome);
-  if (!homeOverridden) {
-    try {
-      for (const entry of readdirSync3(home, { withFileTypes: true })) {
-        if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
-          addHome(join4(home, entry.name));
-        }
-      }
-    } catch {
-    }
+function _resetRedactorCache() {
+  cache = null;
+}
+function redactSecrets(text, opts = {}) {
+  if (!opts.force && !isRedactionEnabled())
+    return text;
+  if (!text)
+    return text;
+  const rules = opts.rules || activeRules();
+  let out = text;
+  for (const r of rules) {
+    out = out.replace(r.pattern, (...args) => {
+      const whole = args[0];
+      const m = args.slice(0, args.length);
+      const secret = secretOf(r, m);
+      if (secret == null)
+        return whole;
+      if (opts.count)
+        opts.count.redactions++;
+      return whole.slice(0, whole.length - secret.length) + `[REDACTED:${r.label}]`;
+    });
   }
-  if (process.env.CLAUDE_DIRS) {
-    for (const d of process.env.CLAUDE_DIRS.split(",")) {
-      const t = d.trim();
-      if (t)
-        addHome(t.startsWith("~/") ? join4(home, t.slice(2)) : t);
-    }
+  const ctx = findContextualSecrets(out);
+  for (let i = ctx.length - 1; i >= 0; i--) {
+    const { start, end } = ctx[i];
+    if (opts.count)
+      opts.count.redactions++;
+    out = out.slice(0, start) + "[REDACTED:secret-context]" + out.slice(end);
   }
-  if (dirs.length === 0)
-    dirs.push(join4(claudeHomeDir(), "projects"));
-  return applyDecisions(dirs, opts.includeExcluded);
-}
-function _setSourceExclusionFilter(fn) {
-  _sourceExclusionFilter = fn;
-}
-function geminiHomeDir() {
-  return process.env.CHAT_RECALL_GEMINI_HOME || sources().geminiHome || join4(homedir3(), ".gemini");
-}
-function opencodeDbPath() {
-  return process.env.CHAT_RECALL_OPENCODE_DB || sources().opencodeDbPath || join4(homedir3(), ".local", "share", "opencode", "opencode.db");
-}
-function codexHomeDir() {
-  return process.env.CHAT_RECALL_CODEX_HOME || sources().codexHome || join4(homedir3(), ".codex");
-}
-function agyHomeDir() {
-  return process.env.CHAT_RECALL_AGY_HOME || sources().agyHome || join4(homedir3(), ".gemini", "antigravity-cli");
+  return out;
 }
-function cursorHomeDir() {
-  return process.env.CHAT_RECALL_CURSOR_HOME || sources().cursorHome || join4(homedir3(), ".cursor");
+function maskSecret(s) {
+  if (!s)
+    return "";
+  if (s.length <= 4)
+    return "*".repeat(s.length);
+  return "*".repeat(Math.min(s.length - 4, 60)) + s.slice(-4);
 }
-function cursorIdeHomeDir() {
-  return process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome || (process.platform === "darwin" ? join4(homedir3(), "Library", "Application Support", "Cursor") : join4(homedir3(), ".config", "Cursor"));
+function globalRegexFor(pattern) {
+  const flags = pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g";
+  const key2 = pattern.source + "\0" + flags;
+  let re = globalRegexCache.get(key2);
+  if (!re) {
+    re = new RegExp(pattern.source, flags);
+    globalRegexCache.set(key2, re);
+  }
+  return re;
 }
-function siblingHomes(base3, overridden, suffix) {
-  const roots = [];
-  const add = (home) => {
-    const root = suffix ? join4(home, suffix) : home;
-    if (existsSync4(root) && !roots.includes(root))
-      roots.push(root);
+function makeLineResolver(text) {
+  const starts = [];
+  for (let i = text.indexOf("\n"); i !== -1; i = text.indexOf("\n", i + 1))
+    starts.push(i);
+  return (index) => {
+    let lo = 0, hi = starts.length;
+    while (lo < hi) {
+      const mid = lo + hi >> 1;
+      if (starts[mid] < index)
+        lo = mid + 1;
+      else
+        hi = mid;
+    }
+    return lo + 1;
   };
-  add(base3);
-  if (!overridden) {
-    const parent = dirname4(base3);
-    const leaf = basename(base3);
-    try {
-      for (const entry of readdirSync3(parent, { withFileTypes: true })) {
-        if (!entry.isDirectory())
-          continue;
-        if (entry.name === leaf || !entry.name.startsWith(leaf + "-"))
-          continue;
-        add(join4(parent, entry.name));
+}
+function scanTextForFindings(text, opts = {}) {
+  if (!text)
+    return [];
+  const rules = opts.rules || activeRules();
+  const findings = [];
+  const seenSpans = /* @__PURE__ */ new Set();
+  const lineAt = makeLineResolver(text);
+  for (const r of rules) {
+    const re = globalRegexFor(r.pattern);
+    re.lastIndex = 0;
+    let m;
+    while ((m = re.exec(text)) !== null) {
+      const secret = secretOf(r, m);
+      if (secret == null) {
+        if (re.lastIndex === m.index)
+          re.lastIndex++;
+        continue;
       }
-    } catch {
+      const at = m.index + (m[0].length - secret.length);
+      const span = `${at}:${secret.length}`;
+      if (!seenSpans.has(span)) {
+        seenSpans.add(span);
+        findings.push({ rule: r.label, line: lineAt(at), preview: maskSecret(secret) });
+      }
+      if (re.lastIndex === m.index)
+        re.lastIndex++;
     }
   }
-  return roots;
+  for (const { start, end } of findContextualSecrets(text)) {
+    const line = lineAt(start);
+    findings.push({ rule: "secret-context", line, preview: maskSecret(text.slice(start, end)) });
+  }
+  return findings;
 }
-function applyDecisions(roots, includeExcluded) {
-  if (roots.length === 0)
-    return roots;
-  let kept = roots;
-  if (!includeExcluded) {
-    try {
-      grandfatherLegacyHomes();
-      const approved = kept.filter((r) => isHomeSynced(dirname4(r)));
-      if (approved.length > 0)
-        kept = approved;
-    } catch {
-    }
+function privacyView() {
+  let mtimeMs = -1;
+  try {
+    mtimeMs = statSync3(settingsFilePath()).mtimeMs;
+  } catch {
   }
-  if (!includeExcluded && _sourceExclusionFilter) {
-    const notExcluded = kept.filter((r) => !_sourceExclusionFilter(r));
-    if (notExcluded.length > 0)
-      kept = notExcluded;
+  if (privacyCache && privacyCache.mtimeMs === mtimeMs)
+    return privacyCache;
+  let redactToolOutputs = false, redactFilePaths2 = false;
+  try {
+    const s = loadSettings();
+    redactToolOutputs = !!s.privacy?.redactToolOutputs;
+    redactFilePaths2 = !!s.privacy?.redactFilePaths;
+  } catch {
   }
-  return kept;
-}
-function applyExclusions(roots, includeExcluded) {
-  return applyDecisions(roots, includeExcluded);
-}
-function codexSessionDirs(opts = {}) {
-  const overridden = !!(process.env.CHAT_RECALL_CODEX_HOME || sources().codexHome);
-  return applyExclusions(siblingHomes(codexHomeDir(), overridden, "sessions"), opts.includeExcluded);
+  privacyCache = { mtimeMs, redactToolOutputs, redactFilePaths: redactFilePaths2 };
+  return privacyCache;
 }
-function agyBrainDirs(opts = {}) {
-  const overridden = !!(process.env.CHAT_RECALL_AGY_HOME || sources().agyHome);
-  return applyExclusions(siblingHomes(agyHomeDir(), overridden, "brain"), opts.includeExcluded);
+function _resetPrivacyCache() {
+  privacyCache = null;
 }
-function cursorChatDirs(opts = {}) {
-  const overridden = !!(process.env.CHAT_RECALL_CURSOR_HOME || sources().cursorHome);
-  return applyExclusions(siblingHomes(cursorHomeDir(), overridden, "chats"), opts.includeExcluded);
+function isToolOutputRedactionEnabled() {
+  return privacyView().redactToolOutputs;
 }
-function cursorIdeWorkspaceDirs(opts = {}) {
-  const overridden = !!(process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome);
-  return applyExclusions(siblingHomes(cursorIdeHomeDir(), overridden, join4("User", "workspaceStorage")), opts.includeExcluded);
+function isFilePathRedactionEnabled() {
+  return privacyView().redactFilePaths;
 }
-function cursorIdeGlobalDbs(opts = {}) {
-  const overridden = !!(process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome);
-  const roots = applyExclusions(siblingHomes(cursorIdeHomeDir(), overridden, join4("User", "globalStorage")), opts.includeExcluded);
-  const dbs = [];
-  for (const r of roots) {
-    const p = join4(r, "state.vscdb");
-    if (existsSync4(p) && !dbs.includes(p))
-      dbs.push(p);
+function redactFilePaths(text) {
+  if (!text)
+    return text;
+  return text.replace(PATH_REGEX, (m) => {
+    if (m.startsWith("[REDACTED:"))
+      return m;
+    const h = createHash("sha256").update(m).digest("hex").slice(0, 12);
+    return `[path:${h}]`;
+  });
+}
+function applyChunkPrivacy(text) {
+  let out = redactSecrets(text);
+  if (privacyView().redactFilePaths)
+    out = redactFilePaths(out);
+  return out;
+}
+function redactToolResultBody(toolName, body) {
+  if (!body)
+    return body;
+  return `[redacted: ${toolName} output, ${body.length} chars]`;
+}
+var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, globalRegexCache, privacyCache, PATH_REGEX;
+var init_secret_redactor = __esm({
+  "../engine/dist/core/secret-redactor.js"() {
+    "use strict";
+    init_settings();
+    DEFAULT_REDACTION_RULES = [
+      // AWS access tokens. Prefix-anchored: AKIA, ASIA, ABIA (long-term,
+      // STS, EC2). Always exactly 16 hex/alphanumeric after the prefix.
+      // NOTE: this matches only the access-key-ID, NOT the secret key value —
+      // the `env-secret` rule below covers AWS_SECRET_ACCESS_KEY / AWS_SESSION_TOKEN.
+      { label: "aws-access-token", pattern: /\b(?:AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}\b/g },
+      // AWS STS session tokens. These are long base64 blobs with NO `NAME=` context
+      // when pasted bare into prose/code, so `env-secret` misses them — but they
+      // reliably start with one of a handful of base64 prefixes (the encoded
+      // `{"...` JSON header). Prefix-anchored → low false-positive. This is the
+      // bare-value form that leaked (`search('IQoJEXAMPLEfakeSESSIONtokenNOTreal01234567890abcDEF==...')`).
+      { label: "aws-session-token", pattern: /\b(?:IQoJ|FwoG|FwoH|FQoG|FQoH|FwoD)[A-Za-z0-9/+]{40,}={0,2}/g },
+      // Env/shell-assignment secrets — a VAR whose name ends in KEY/SECRET/TOKEN/
+      // PASSWORD/CREDENTIAL, then `=`/`:`, then the value. Zero-width lookbehind so
+      // only the VALUE is redacted (the var name stays for context). This is the
+      // dominant real-world leak vector (`export` dumps, .env files, `curl -H`,
+      // tool output) and is exactly what leaked AWS_SECRET_ACCESS_KEY and
+      // AWS_SESSION_TOKEN in cleartext while the access-key-ID rule above caught
+      // only the (least-sensitive) ID.
+      // Suffix list deliberately broad: DB_PASS (our own helm chart's name!),
+      // NPM_AUTH, SENTRY_DSN, SESSION/COOKIE secrets and BEARER vars all leaked
+      // past the original KEY/SECRET/TOKEN/PASSWORD-only list. Values under 12
+      // chars don't redact, so flag-ish vars (BYPASS=true) stay readable.
+      // Context CONSUMED, secret in group 1 — see RedactionRule.secret. As a
+      // lookbehind this was the second most expensive rule in the collector.
+      { label: "env-secret", secret: 1, pattern: /\b[A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASSWORD|PASSWD|PASS|PWD|CREDENTIAL|AUTH|DSN|SESSION|COOKIE|BEARER|SIGNATURE)S?["']?[ \t]{0,3}[:=][ \t]{0,3}["']?([A-Za-z0-9/+_.~=:@-]{12,})/g },
+      // Credentials embedded in a connection URL: scheme://user:PASSWORD@host.
+      // Redacts only the password segment (keeps scheme/user/host for context).
+      //
+      // Scheme-agnostic on purpose. The old rule allowlisted eight DB schemes, so
+      // `https://user:pass@host`, `ssh://`, `ftp://`, `smtp://` and every other
+      // userinfo URL walked through in cleartext — and a `jdbc:postgresql://…`
+      // prefix broke the \b anchor for the one family it did cover. Any scheme
+      // followed by userinfo is a credential, so match the shape, not a list.
+      { label: "url-password", secret: 1, pattern: /\b[a-zA-Z][a-zA-Z0-9+.-]{1,31}:\/\/[^:@\s/]{1,64}:([^@\s/]{1,256})(?=@)/g },
+      // Bare AWS secret-access-key VALUE: EXACTLY 40 base64 chars, word-bounded,
+      // containing upper+lower+digit. This is the gitleaks heuristic — the mixed-case
+      // requirement excludes 40-char lowercase-hex git SHAs, and the exact-40 bound
+      // excludes longer blobs/tokens. It catches the value when it appears bare in
+      // prose with NO `NAME=` and NO nearby context word (e.g. inside a markdown
+      // table or quoted in analysis) — the residual leak path the env-secret and
+      // contextual rules both miss. Placed AFTER env-secret/url-password so the
+      // keyed/URL forms keep their more-specific labels.
+      // The three stacked lookaheads each re-scanned the same 40 characters, which
+      // made this the MOST expensive rule of all 106 the collector runs (13.1% of a
+      // 29.5 MB scan). The mixed-case-plus-digit test is now one JS pass.
+      {
+        label: "aws-secret-key",
+        secret: 1,
+        pattern: /(?<![A-Za-z0-9/+])([A-Za-z0-9/+]{40})(?![A-Za-z0-9/+])/g,
+        where: (v) => /[a-z]/.test(v) && /[A-Z]/.test(v) && /[0-9]/.test(v)
+      },
+      // GitHub personal access tokens.
+      { label: "github-pat", pattern: /\bghp_[A-Za-z0-9]{36}\b/g },
+      // GitHub fine-grained PATs.
+      { label: "github-fine", pattern: /\bgithub_pat_[A-Za-z0-9_]{82}\b/g },
+      // GitHub OAuth.
+      { label: "github-oauth", pattern: /\bgho_[A-Za-z0-9]{36}\b/g },
+      // GitHub app + refresh.
+      { label: "github-app", pattern: /\b(?:ghs|ghu|ghr)_[A-Za-z0-9]{36}\b/g },
+      // Slack bot/user/app tokens.
+      { label: "slack-token", pattern: /\bxox[abopr]-[A-Za-z0-9-]{10,}\b/g },
+      // Slack incoming webhook URL.
+      { label: "slack-webhook", pattern: /\bhttps:\/\/hooks\.slack\.com\/services\/T[A-Z0-9]+\/B[A-Z0-9]+\/[A-Za-z0-9]+\b/g },
+      // Stripe live + test keys.
+      { label: "stripe-key", pattern: /\b(?:sk|pk|rk)_(?:live|test)_[A-Za-z0-9]{24,}\b/g },
+      // Anthropic.
+      { label: "anthropic-key", pattern: /\bsk-ant-[a-zA-Z0-9_-]{40,}\b/g },
+      // OpenAI. Two shapes, deliberately kept apart. The classic key is
+      // `sk-` + base62 with NO hyphens; the modern scoped keys carry an explicit
+      // proj/svcacct/admin segment first. Allowing hyphens after a bare `sk-`
+      // (which is what admitted sk-proj- in the first place) also matches ordinary
+      // kebab-case text — `sk-fix-the-login-redirect-bug`, `.sk-button-primary`,
+      // `sk-2024-01-01-backup` — and this corpus is full of branch names and CSS
+      // classes. Requiring the segment keeps sk-proj- coverage without that.
+      { label: "openai-key", pattern: /\bsk-(?:proj|svcacct|admin)-[A-Za-z0-9_-]{20,}\b|\bsk-[A-Za-z0-9]{20,}\b/g },
+      // Google API key (AIza…).
+      { label: "google-api-key", pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+      // Generic JWT — three base64url segments.
+      { label: "jwt", pattern: /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g },
+      // Private key blocks (PEM). The label is a free word run rather than a fixed
+      // list, so ENCRYPTED PRIVATE KEY and PGP PRIVATE KEY BLOCK are covered
+      // without another enumeration, and \1 forces END to name the same kind as
+      // BEGIN.
+      //
+      // The body is [^-], NOT [\s\S]*?. That is a performance boundary, not a
+      // style choice. An unanchored prefix with an unbounded lazy gap re-scans to
+      // end-of-input from every candidate start, so text carrying many BEGIN
+      // markers and no matching END costs O(n^2): 500KB of that measured 810ms
+      // here, and this runs synchronously on the server's event loop over
+      // tenant-supplied text (services/secret-rescan.ts). A PEM body is base64
+      // plus headers and contains no '-', so excluding it makes the scan stop at
+      // the next delimiter instead of at EOF — same matches, linear cost.
+      { label: "private-key", pattern: /-----BEGIN ([A-Z0-9 ]{0,32})PRIVATE KEY(?: BLOCK)?-----[^-]{0,10000}?-----END \1PRIVATE KEY(?: BLOCK)?-----/g },
+      // PuTTY keys are not PEM. Match the Private-Lines payload — the actual key
+      // material — rather than spanning the whole file, which would need the same
+      // unbounded gap the rule above just removed. Line-anchored and base64-only,
+      // so it cannot run away.
+      { label: "putty-key", pattern: /^Private-Lines:[ \t]*\d{1,4}[\r\n]+(?:[A-Za-z0-9+/=]{8,120}[\r\n]+){1,400}/gm },
+      // npm tokens (uuid-shaped — overlap with our UUID filter; intentional).
+      { label: "npm-token", pattern: /\bnpm_[A-Za-z0-9]{36}\b/g },
+      // .npmrc auth lines: //registry.npmjs.org/:_authToken=VALUE (the key is not
+      // ALL-CAPS, so the env-secret rule above never matched it). The leading `:`
+      // is required — it is what makes this npmrc syntax rather than any shell var
+      // ending in _AUTH, which env-secret already owns and labels better.
+      // [^\s"'`]+ so the closing quote is not swallowed, and a ${VAR} placeholder
+      // is left alone — redacting it destroys a config example and hides nothing.
+      // The rule the perf profile caught the wedged daemon inside: 98.94% of samples.
+      { label: "npmrc-auth", secret: 1, pattern: /:_(?:authToken|password|auth)[ \t]*=[ \t]*(?!\$\{)([^\s"'`]{12,})/gi },
+      // HTTP Authorization headers. env-secret requires an ALL-CAPS name, and
+      // `Authorization` is mixed case, so both Bearer and Basic walked straight
+      // through — including short opaque tokens the contextual pass also misses
+      // (it needs 32+ chars AND mixed-case-plus-digit).
+      // Same two guards as npmrc-auth: stop at a quote, and skip the obvious
+      // placeholders that fill documentation (<YOUR_TOKEN>, ${TOKEN}, xxx…).
+      { label: "auth-header", secret: 1, pattern: /\bauthorization[ \t]*:[ \t]*(?:bearer|basic|token)[ \t]+(?![<$])([^\s"'`<]{8,})/gi },
+      // Vendor tokens with unambiguous prefixes. Each is a fixed literal, so a
+      // false positive is essentially impossible and the cost of listing is low.
+      { label: "gitlab-pat", pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g },
+      { label: "slack-app-token", pattern: /\bxapp-\d-[A-Z0-9]{8,}-\d{10,}-[a-f0-9]{32,}\b/g },
+      { label: "sendgrid-key", pattern: /\bSG\.[A-Za-z0-9_-]{20,24}\.[A-Za-z0-9_-]{40,50}\b/g },
+      // (?<![-\w]) so `cache-key-<md5>` is not read as a mailgun key.
+      { label: "mailgun-key", pattern: /(?<![-\w])key-[a-f0-9]{32}\b/g },
+      { label: "digitalocean-pat", pattern: /\bdop_v1_[a-f0-9]{64}\b/g },
+      { label: "huggingface-token", pattern: /\bhf_[A-Za-z0-9]{30,}\b/g },
+      { label: "shopify-token", pattern: /\bshp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}\b/g },
+      { label: "pypi-token", pattern: /\bpypi-AgEIcHlwaS5vcmc[A-Za-z0-9_-]{50,}\b/g },
+      // No twilio-sid rule: AC…/SK… are Twilio SIDs, which are public account and
+      // key identifiers, not the auth token. Redacting them hid nothing and
+      // collided with 32-hex etags and MD5 sums.
+      // No discord-bot-token rule either: the shape (word.word.word) matched
+      // ordinary dotted symbols such as a.b.ApplicationContextProviderImpl.
+      { label: "telegram-bot-token", pattern: /\b\d{8,10}:AA[A-Za-z0-9_-]{32,}\b/g },
+      { label: "doppler-token", pattern: /\bdp\.(?:pt|st|sa|ct)\.[A-Za-z0-9_-]{20,}\b/g },
+      // Azure Storage SAS signature — the `sig=` parameter is the actual secret.
+      { label: "azure-sas", secret: 1, pattern: /[?&]sig=([A-Za-z0-9%/+=]{20,})/g }
+    ];
+    SECRET_CONTEXT_RE = /\b(?:secret|password|passwd|credential|access[ _-]?key|private[ _-]?key|api[ _-]?key|auth(?:oriz\w*)?|bearer|token)\b/gi;
+    HIGH_ENTROPY_TOKEN_RE = /[A-Za-z0-9/+_-]{32,}/g;
+    cache = null;
+    CANARY = "the quick brown fox jumps over the lazy dog 0123456789 commit 8ba1f109551bd432803012645ac136ddd475d0fb src/index.ts:42";
+    MAX_PACK_RULES = 200;
+    MAX_PATTERN_LEN = 512;
+    serverPack = null;
+    globalRegexCache = /* @__PURE__ */ new Map();
+    privacyCache = null;
+    PATH_REGEX = /(?<![A-Za-z0-9_])(?:\/[^\s'"`<>]+|[A-Za-z]:\\[^\s'"`<>]+)/g;
+  }
+});
+
+// ../engine/dist/parsers/chunker.js
+function stripInjectedBanners(text) {
+  let result = text;
+  for (const re of INJECTED_BANNERS)
+    result = result.replace(re, " ");
+  return result;
+}
+function cleanText(text) {
+  let result = text.replace(/<system-reminder>.*?<\/system-reminder>/gs, "");
+  result = stripInjectedBanners(result);
+  result = result.replace(/\x1b\[[0-9;]*m/g, "");
+  result = result.replace(/\s+/g, " ");
+  return result.trim();
+}
+function windowText(text, maxChars, maxWindows = 12) {
+  const clean = cleanText(text);
+  if (clean.length <= maxChars)
+    return clean ? [clean] : [];
+  const out = [];
+  const overlap = 80;
+  const step = Math.max(1, maxChars - overlap);
+  for (let i = 0; i < clean.length && out.length < maxWindows; i += step) {
+    out.push(clean.slice(i, i + maxChars));
+  }
+  return out;
+}
+function chunkSession(entry, content, maxChunks = 80, maxTokensPerChunk = 500) {
+  const chunks = [];
+  const maxChars = maxTokensPerChunk * 4;
+  const baseData = {
+    sessionId: entry.sessionId,
+    projectPath: entry.projectPath,
+    created: entry.created,
+    modified: entry.modified,
+    mtime: entry.fileMtime,
+    firstPrompt: entry.firstPrompt || content.firstPrompt,
+    sourceFile: content.sessionPath
+  };
+  for (let i = 0; i < Math.min(2, content.summaries.length); i++) {
+    const summary = content.summaries[i];
+    if (!summary?.trim())
+      continue;
+    const chunkText = cleanText(summary.slice(0, maxChars));
+    if (chunkText.length > 8e3) {
+      chunks.push({
+        chunkId: `${entry.sessionId}_summary_${i}`,
+        chunkType: "summary",
+        text: chunkText.slice(0, 8e3),
+        sourceLine: 0,
+        ...baseData
+      });
+    } else {
+      chunks.push({
+        chunkId: `${entry.sessionId}_summary_${i}`,
+        chunkType: "summary",
+        text: chunkText,
+        sourceLine: 0,
+        ...baseData
+      });
+    }
+  }
+  if (chunks.length >= maxChunks) {
+    return chunks.slice(0, maxChunks);
+  }
+  const firstPrompt = entry.firstPrompt || content.firstPrompt;
+  if (firstPrompt?.trim()) {
+    const firstLine = content.userMessages[0]?.lineNumber || 0;
+    chunks.push({
+      chunkId: `${entry.sessionId}_first_prompt`,
+      chunkType: "first_prompt",
+      text: cleanText(firstPrompt.slice(0, maxChars)),
+      sourceLine: firstLine,
+      ...baseData
+    });
+  }
+  if (chunks.length >= maxChunks) {
+    return chunks.slice(0, maxChunks);
+  }
+  const userStart = firstPrompt ? 1 : 0;
+  for (let i = userStart; i < content.userMessages.length; i++) {
+    if (chunks.length >= maxChunks)
+      break;
+    const msg = content.userMessages[i];
+    if (!msg.text.trim())
+      continue;
+    const windows = windowText(msg.text, maxChars);
+    for (let w = 0; w < windows.length; w++) {
+      if (chunks.length >= maxChunks)
+        break;
+      chunks.push({
+        chunkId: `${entry.sessionId}_user_${i}_${w}`,
+        chunkType: "user_context",
+        text: windows[w],
+        sourceLine: msg.lineNumber,
+        ...baseData
+      });
+    }
   }
-  return dbs;
-}
-function opencodeDbPaths(opts = {}) {
-  const primary = opencodeDbPath();
-  const overridden = !!(process.env.CHAT_RECALL_OPENCODE_DB || sources().opencodeDbPath);
-  const dbFile = basename(primary);
-  const dirs = siblingHomes(dirname4(primary), overridden, "");
-  const dbs = [];
-  for (const d of dirs) {
-    const p = join4(d, dbFile);
-    if (existsSync4(p) && !dbs.includes(p))
-      dbs.push(p);
+  if (chunks.length >= maxChunks) {
+    return chunks.slice(0, maxChunks);
   }
-  if (dbs.length === 0)
-    dbs.push(primary);
-  return applyExclusions(dbs, opts.includeExcluded);
-}
-function extraClaudeHomeDirs() {
-  const extras = sources().extraClaudeHomes ?? [];
-  const primary = claudeHomeDir();
-  return Array.from(new Set(extras)).filter((p) => p && p !== primary);
-}
-function claudeHomeDirs() {
-  const overridden = !!(process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome);
-  const homes = siblingHomes(claudeHomeDir(), overridden, "").filter((h) => basename(h) !== ".claude-code");
-  for (const extra of extraClaudeHomeDirs()) {
-    if (existsSync4(extra) && !homes.includes(extra))
-      homes.push(extra);
+  for (let i = 0; i < content.assistantMessages.length; i++) {
+    if (chunks.length >= maxChunks)
+      break;
+    const msg = content.assistantMessages[i];
+    if (!msg.text.trim() || msg.text.length <= 50)
+      continue;
+    const windows = windowText(msg.text, maxChars);
+    for (let w = 0; w < windows.length; w++) {
+      if (chunks.length >= maxChunks)
+        break;
+      chunks.push({
+        chunkId: `${entry.sessionId}_assistant_${i}_${w}`,
+        chunkType: "assistant",
+        text: windows[w],
+        sourceLine: msg.lineNumber,
+        ...baseData
+      });
+    }
   }
-  return homes;
+  if (chunks.length >= maxChunks) {
+    return chunks.slice(0, maxChunks);
+  }
+  if (content.toolResults.length > 0) {
+    const webSearches = content.toolResults.filter((r) => r.contentType === "web_search");
+    const otherResults = content.toolResults.filter((r) => r.contentType !== "web_search");
+    const resultsToProcess = [...webSearches.slice(0, 5), ...otherResults.slice(0, 10)];
+    const stripBodies = isToolOutputRedactionEnabled();
+    for (let i = 0; i < resultsToProcess.length; i++) {
+      if (chunks.length >= maxChunks)
+        break;
+      const result = resultsToProcess[i];
+      if (result.text.trim()) {
+        const body = stripBodies && result.contentType !== "web_search" ? redactToolResultBody(result.contentType, result.text) : result.text.slice(0, maxChars);
+        chunks.push({
+          chunkId: `${entry.sessionId}_${result.contentType}_${i}`,
+          chunkType: result.contentType,
+          text: cleanText(body),
+          sourceLine: result.lineNumber,
+          ...baseData
+        });
+      }
+    }
+  }
+  return chunks.slice(0, maxChunks);
 }
-var sources, _sourceExclusionFilter;
-var init_tool_paths = __esm({
-  "../engine/dist/core/tool-paths.js"() {
+var INJECTED_BANNERS;
+var init_chunker = __esm({
+  "../engine/dist/parsers/chunker.js"() {
     "use strict";
-    init_home_approval();
-    init_settings();
-    sources = loadSourceSettings;
-    _sourceExclusionFilter = null;
+    init_secret_redactor();
+    INJECTED_BANNERS = [
+      /MCP issues detected\. ?Run \/mcp list for status\.?/g,
+      /Context low[^\n]*Run \/compact[^\n]*/g,
+      /API Error:[^\n]{0,120}/g
+    ];
   }
 });
 
-// ../engine/dist/core/secret-redactor.js
-var secret_redactor_exports = {};
-__export(secret_redactor_exports, {
-  DEFAULT_REDACTION_RULES: () => DEFAULT_REDACTION_RULES,
-  _clearServerRulePack: () => _clearServerRulePack,
-  _resetPrivacyCache: () => _resetPrivacyCache,
-  _resetRedactorCache: () => _resetRedactorCache,
-  applyChunkPrivacy: () => applyChunkPrivacy,
-  findContextualSecrets: () => findContextualSecrets,
-  installServerRulePack: () => installServerRulePack,
-  isFilePathRedactionEnabled: () => isFilePathRedactionEnabled,
-  isRedactionEnabled: () => isRedactionEnabled,
-  isToolOutputRedactionEnabled: () => isToolOutputRedactionEnabled,
-  redactFilePaths: () => redactFilePaths,
-  redactSecrets: () => redactSecrets,
-  redactToolResultBody: () => redactToolResultBody,
-  scanTextForFindings: () => scanTextForFindings,
-  serverRulePackVersion: () => serverRulePackVersion,
-  validateRedactionRule: () => validateRedactionRule
+// ../engine/dist/core/home-approval.js
+var home_approval_exports = {};
+__export(home_approval_exports, {
+  approveHome: () => approveHome,
+  declineHome: () => declineHome,
+  grandfatherLegacyHomes: () => grandfatherLegacyHomes,
+  homeDecision: () => homeDecision,
+  isHomeSynced: () => isHomeSynced,
+  normalizeHomePath: () => normalizeHomePath,
+  resetHomeDecision: () => resetHomeDecision
 });
-import { statSync as statSync3 } from "fs";
-import { createHash } from "crypto";
-function secretOf(rule, m) {
-  const raw = rule.secret != null ? m[rule.secret] : m[0];
-  if (raw == null)
-    return null;
-  if (rule.where && !rule.where(raw))
-    return null;
-  return raw;
-}
-function looksLikeSecretToken(t) {
-  if (t.length < 32)
-    return false;
-  if (/^[a-f0-9]+$/i.test(t))
-    return true;
-  return /[A-Z]/.test(t) && /[a-z]/.test(t) && /[0-9]/.test(t);
-}
-function findContextualSecrets(text) {
-  if (!text)
-    return [];
-  const ranges = [];
-  let m;
-  SECRET_CONTEXT_RE.lastIndex = 0;
-  while ((m = SECRET_CONTEXT_RE.exec(text)) !== null) {
-    const winStart = m.index + m[0].length;
-    const window = text.slice(winStart, winStart + 80);
-    HIGH_ENTROPY_TOKEN_RE.lastIndex = 0;
-    let tm;
-    while ((tm = HIGH_ENTROPY_TOKEN_RE.exec(window)) !== null) {
-      if (!looksLikeSecretToken(tm[0]))
-        continue;
-      if (/^[a-f0-9]+$/i.test(tm[0]) && /\b(?:commit|sha-?\d*|hash|digest|checksum|uuid|guid|etag|blob|ref)\b/i.test(window.slice(0, tm.index))) {
-        continue;
-      }
-      ranges.push({ start: winStart + tm.index, end: winStart + tm.index + tm[0].length });
-      break;
-    }
+import { existsSync as existsSync3, readdirSync as readdirSync2, realpathSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join3, dirname as dirname3 } from "path";
+function normalizeHomePath(p) {
+  const expanded = p.startsWith("~") ? join3(homedir2(), p.slice(1)) : p;
+  const trimmed = expanded.replace(/[/\\]+$/, "");
+  try {
+    return realpathSync(trimmed);
+  } catch {
+    return trimmed;
   }
-  ranges.sort((a, b) => a.start - b.start);
+}
+function legacyAutoSyncedHomes() {
+  const home = homedir2();
   const out = [];
-  for (const r of ranges) {
-    const last = out[out.length - 1];
-    if (last && r.start < last.end) {
-      last.end = Math.max(last.end, r.end);
-      continue;
+  const add = (dir, marker) => {
+    if (!existsSync3(join3(dir, marker)))
+      return;
+    const n = normalizeHomePath(dir);
+    if (!out.includes(n))
+      out.push(n);
+  };
+  const bases = [
+    { base: join3(home, ".claude"), marker: "projects" },
+    { base: join3(home, ".gemini"), marker: "tmp" },
+    { base: join3(home, ".codex"), marker: "sessions" },
+    { base: join3(home, ".gemini", "antigravity-cli"), marker: "brain" },
+    { base: join3(home, ".local", "share", "opencode"), marker: "opencode.db" },
+    { base: join3(home, ".cursor"), marker: "chats" }
+  ];
+  for (const { base: base3, marker } of bases) {
+    add(base3, marker);
+    const parent = dirname3(base3);
+    const leaf = base3.slice(parent.length + 1);
+    try {
+      for (const e of readdirSync2(parent, { withFileTypes: true })) {
+        if (!e.isDirectory())
+          continue;
+        if (e.name === leaf || !e.name.startsWith(leaf + "-"))
+          continue;
+        if (e.name === ".claude-code")
+          continue;
+        add(join3(parent, e.name), marker);
+      }
+    } catch {
     }
-    out.push({ ...r });
   }
   return out;
 }
-function isEnvRedactionRequested() {
-  const v = process.env.CHAT_RECALL_REDACT_INDEX;
-  if (v === void 0)
-    return null;
-  return v === "1" || v === "true" || v === "yes";
-}
-function settingsView() {
-  let mtimeMs = -1;
+function grandfatherLegacyHomes() {
+  let s;
   try {
-    mtimeMs = statSync3(settingsFilePath()).mtimeMs;
+    s = loadSettings();
   } catch {
+    return { seeded: [] };
   }
-  if (cache && cache.mtimeMs === mtimeMs)
-    return cache;
-  let enabled = false;
-  const extra = [];
-  try {
-    const s = loadSettings();
-    enabled = !!s.privacy?.redactIndex;
-    for (const r of s.privacy?.redactionRules ?? []) {
-      try {
-        extra.push({ label: r.label, pattern: new RegExp(r.pattern, "g") });
-      } catch {
-      }
+  if (s.sources.homesGrandfathered)
+    return { seeded: [] };
+  const legacy = legacyAutoSyncedHomes();
+  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
+  const seeded = [];
+  for (const p of legacy) {
+    if (!approved.has(p)) {
+      approved.add(p);
+      seeded.push(p);
     }
+  }
+  s.sources.approvedHomes = [...approved];
+  s.sources.homesGrandfathered = true;
+  try {
+    saveSettings(s);
   } catch {
+    return { seeded: [] };
   }
-  cache = { mtimeMs, enabled, rules: [...DEFAULT_REDACTION_RULES, ...extra] };
-  return cache;
+  return { seeded };
 }
-function compileServerRule(spec) {
-  const name = spec.name || "(unnamed)";
-  if (!spec.regex)
-    return { name, reason: "empty pattern" };
-  if (spec.regex.length > MAX_PATTERN_LEN)
-    return { name, reason: `pattern longer than ${MAX_PATTERN_LEN} chars` };
-  let re;
+function primaryHomes() {
+  const home = homedir2();
+  const env = process.env;
+  let s;
   try {
-    const flags = "g" + (spec.flags || "").replace(/[^ims]/g, "");
-    re = new RegExp(spec.regex, flags);
-  } catch (e) {
-    return { name, reason: `invalid regex: ${e instanceof Error ? e.message : e}` };
+    s = loadSettings().sources;
+  } catch {
+    s = void 0;
   }
-  if (re.test(""))
-    return { name, reason: "matches the empty string (would redact everything)" };
-  re.lastIndex = 0;
-  if (re.test(CANARY))
-    return { name, reason: "matches benign text \u2014 too broad" };
-  re.lastIndex = 0;
-  return { label: `${spec.source === "pack" ? "pack" : "tenant"}:${name}`, pattern: re };
-}
-function validateRedactionRule(spec) {
-  const out = compileServerRule(spec);
-  return "reason" in out ? { ok: false, reason: out.reason } : { ok: true };
+  const opencodeDb = env.CHAT_RECALL_OPENCODE_DB || s?.opencodeDbPath || join3(home, ".local", "share", "opencode", "opencode.db");
+  const candidates2 = [
+    env.CHAT_RECALL_CLAUDE_HOME || s?.claudeHome || join3(home, ".claude"),
+    env.CHAT_RECALL_GEMINI_HOME || s?.geminiHome || join3(home, ".gemini"),
+    env.CHAT_RECALL_CODEX_HOME || s?.codexHome || join3(home, ".codex"),
+    env.CHAT_RECALL_AGY_HOME || s?.agyHome || join3(home, ".gemini", "antigravity-cli"),
+    env.CHAT_RECALL_CURSOR_HOME || s?.cursorHome || join3(home, ".cursor"),
+    dirOf(opencodeDb)
+  ];
+  return candidates2.map(normalizeHomePath);
 }
-function installServerRulePack(pack) {
-  const rejected = [];
-  const rules = [];
-  for (const spec of pack.rules || []) {
-    if (rules.length >= MAX_PACK_RULES) {
-      rejected.push({ name: spec.name || "(unnamed)", reason: `pack exceeds ${MAX_PACK_RULES} rules` });
-      continue;
-    }
-    const out = compileServerRule(spec);
-    if ("reason" in out)
-      rejected.push(out);
-    else
-      rules.push(out);
+function homeDecision(path) {
+  const p = normalizeHomePath(path);
+  if (primaryHomes().includes(p))
+    return "primary";
+  let s;
+  try {
+    s = loadSettings().sources;
+  } catch {
+    return "pending";
   }
-  const version2 = pack.version || "";
-  serverPack = { version: version2, rules };
-  return { version: version2, accepted: rules.length, rejected };
-}
-function serverRulePackVersion() {
-  return serverPack ? serverPack.version || "unversioned" : null;
+  if ((s.declinedHomes ?? []).map(normalizeHomePath).includes(p))
+    return "declined";
+  if ((s.approvedHomes ?? []).map(normalizeHomePath).includes(p))
+    return "approved";
+  if ((s.extraClaudeHomes ?? []).map(normalizeHomePath).includes(p))
+    return "approved";
+  return "pending";
 }
-function _clearServerRulePack() {
-  serverPack = null;
+function isHomeSynced(path) {
+  const d = homeDecision(path);
+  return d === "primary" || d === "approved";
 }
-function activeRules() {
-  const base3 = settingsView().rules;
-  return serverPack && serverPack.rules.length > 0 ? [...base3, ...serverPack.rules] : base3;
+function setDecision(path, decision) {
+  const p = normalizeHomePath(path);
+  let s;
+  try {
+    s = loadSettings();
+  } catch {
+    return false;
+  }
+  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
+  const declined = new Set((s.sources.declinedHomes ?? []).map(normalizeHomePath));
+  approved.delete(p);
+  declined.delete(p);
+  (decision === "approved" ? approved : declined).add(p);
+  s.sources.approvedHomes = [...approved];
+  s.sources.declinedHomes = [...declined];
+  try {
+    saveSettings(s);
+  } catch {
+    return false;
+  }
+  return true;
 }
-function isRedactionEnabled() {
-  const env = isEnvRedactionRequested();
-  if (env !== null)
-    return env;
-  return settingsView().enabled;
+function approveHome(path) {
+  return setDecision(path, "approved");
 }
-function _resetRedactorCache() {
-  cache = null;
+function declineHome(path) {
+  return setDecision(path, "declined");
 }
-function redactSecrets(text, opts = {}) {
-  if (!opts.force && !isRedactionEnabled())
-    return text;
-  if (!text)
-    return text;
-  const rules = opts.rules || activeRules();
-  let out = text;
-  for (const r of rules) {
-    out = out.replace(r.pattern, (...args) => {
-      const whole = args[0];
-      const m = args.slice(0, args.length);
-      const secret = secretOf(r, m);
-      if (secret == null)
-        return whole;
-      if (opts.count)
-        opts.count.redactions++;
-      return whole.slice(0, whole.length - secret.length) + `[REDACTED:${r.label}]`;
-    });
+function resetHomeDecision(path) {
+  const p = normalizeHomePath(path);
+  let s;
+  try {
+    s = loadSettings();
+  } catch {
+    return false;
   }
-  const ctx = findContextualSecrets(out);
-  for (let i = ctx.length - 1; i >= 0; i--) {
-    const { start, end } = ctx[i];
-    if (opts.count)
-      opts.count.redactions++;
-    out = out.slice(0, start) + "[REDACTED:secret-context]" + out.slice(end);
+  s.sources.approvedHomes = (s.sources.approvedHomes ?? []).filter((x) => normalizeHomePath(x) !== p);
+  s.sources.declinedHomes = (s.sources.declinedHomes ?? []).filter((x) => normalizeHomePath(x) !== p);
+  try {
+    saveSettings(s);
+  } catch {
+    return false;
   }
-  return out;
-}
-function maskSecret(s) {
-  if (!s)
-    return "";
-  if (s.length <= 4)
-    return "*".repeat(s.length);
-  return "*".repeat(Math.min(s.length - 4, 60)) + s.slice(-4);
+  return true;
 }
-function globalRegexFor(pattern) {
-  const flags = pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g";
-  const key2 = pattern.source + "\0" + flags;
-  let re = globalRegexCache.get(key2);
-  if (!re) {
-    re = new RegExp(pattern.source, flags);
-    globalRegexCache.set(key2, re);
+var dirOf;
+var init_home_approval = __esm({
+  "../engine/dist/core/home-approval.js"() {
+    "use strict";
+    init_settings();
+    dirOf = (filePath) => dirname3(filePath);
   }
-  return re;
+});
+
+// ../engine/dist/core/tool-paths.js
+import { existsSync as existsSync4, readdirSync as readdirSync3 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join4, dirname as dirname4, basename } from "path";
+function claudeHomeDir() {
+  return process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome || join4(homedir3(), ".claude");
 }
-function makeLineResolver(text) {
-  const starts = [];
-  for (let i = text.indexOf("\n"); i !== -1; i = text.indexOf("\n", i + 1))
-    starts.push(i);
-  return (index) => {
-    let lo = 0, hi = starts.length;
-    while (lo < hi) {
-      const mid = lo + hi >> 1;
-      if (starts[mid] < index)
-        lo = mid + 1;
-      else
-        hi = mid;
-    }
-    return lo + 1;
+function claudeProjectDirs(opts = {}) {
+  const home = homedir3();
+  const dirs = [];
+  const addHome = (d) => {
+    const p = join4(d, "projects");
+    if (existsSync4(p) && !dirs.includes(p))
+      dirs.push(p);
   };
-}
-function scanTextForFindings(text, opts = {}) {
-  if (!text)
-    return [];
-  const rules = opts.rules || activeRules();
-  const findings = [];
-  const seenSpans = /* @__PURE__ */ new Set();
-  const lineAt = makeLineResolver(text);
-  for (const r of rules) {
-    const re = globalRegexFor(r.pattern);
-    re.lastIndex = 0;
-    let m;
-    while ((m = re.exec(text)) !== null) {
-      const secret = secretOf(r, m);
-      if (secret == null) {
-        if (re.lastIndex === m.index)
-          re.lastIndex++;
-        continue;
-      }
-      const at = m.index + (m[0].length - secret.length);
-      const span = `${at}:${secret.length}`;
-      if (!seenSpans.has(span)) {
-        seenSpans.add(span);
-        findings.push({ rule: r.label, line: lineAt(at), preview: maskSecret(secret) });
-      }
-      if (re.lastIndex === m.index)
-        re.lastIndex++;
-    }
-  }
-  for (const { start, end } of findContextualSecrets(text)) {
-    const line = lineAt(start);
-    findings.push({ rule: "secret-context", line, preview: maskSecret(text.slice(start, end)) });
-  }
-  return findings;
-}
-function privacyView() {
-  let mtimeMs = -1;
-  try {
-    mtimeMs = statSync3(settingsFilePath()).mtimeMs;
-  } catch {
+  addHome(claudeHomeDir());
+  const homeOverridden = !!(process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome);
+  if (!homeOverridden) {
+    try {
+      for (const entry of readdirSync3(home, { withFileTypes: true })) {
+        if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
+          addHome(join4(home, entry.name));
+        }
+      }
+    } catch {
+    }
   }
-  if (privacyCache && privacyCache.mtimeMs === mtimeMs)
-    return privacyCache;
-  let redactToolOutputs = false, redactFilePaths2 = false;
-  try {
-    const s = loadSettings();
-    redactToolOutputs = !!s.privacy?.redactToolOutputs;
-    redactFilePaths2 = !!s.privacy?.redactFilePaths;
-  } catch {
+  if (process.env.CLAUDE_DIRS) {
+    for (const d of process.env.CLAUDE_DIRS.split(",")) {
+      const t = d.trim();
+      if (t)
+        addHome(t.startsWith("~/") ? join4(home, t.slice(2)) : t);
+    }
   }
-  privacyCache = { mtimeMs, redactToolOutputs, redactFilePaths: redactFilePaths2 };
-  return privacyCache;
-}
-function _resetPrivacyCache() {
-  privacyCache = null;
-}
-function isToolOutputRedactionEnabled() {
-  return privacyView().redactToolOutputs;
+  if (dirs.length === 0)
+    dirs.push(join4(claudeHomeDir(), "projects"));
+  return applyDecisions(dirs, opts.includeExcluded);
 }
-function isFilePathRedactionEnabled() {
-  return privacyView().redactFilePaths;
+function _setSourceExclusionFilter(fn) {
+  _sourceExclusionFilter = fn;
 }
-function redactFilePaths(text) {
-  if (!text)
-    return text;
-  return text.replace(PATH_REGEX, (m) => {
-    if (m.startsWith("[REDACTED:"))
-      return m;
-    const h = createHash("sha256").update(m).digest("hex").slice(0, 12);
-    return `[path:${h}]`;
-  });
+function geminiHomeDir() {
+  return process.env.CHAT_RECALL_GEMINI_HOME || sources().geminiHome || join4(homedir3(), ".gemini");
 }
-function applyChunkPrivacy(text) {
-  let out = redactSecrets(text);
-  if (privacyView().redactFilePaths)
-    out = redactFilePaths(out);
-  return out;
+function opencodeDbPath() {
+  return process.env.CHAT_RECALL_OPENCODE_DB || sources().opencodeDbPath || join4(homedir3(), ".local", "share", "opencode", "opencode.db");
 }
-function redactToolResultBody(toolName, body) {
-  if (!body)
-    return body;
-  return `[redacted: ${toolName} output, ${body.length} chars]`;
+function codexHomeDir() {
+  return process.env.CHAT_RECALL_CODEX_HOME || sources().codexHome || join4(homedir3(), ".codex");
 }
-var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, globalRegexCache, privacyCache, PATH_REGEX;
-var init_secret_redactor = __esm({
-  "../engine/dist/core/secret-redactor.js"() {
-    "use strict";
-    init_settings();
-    DEFAULT_REDACTION_RULES = [
-      // AWS access tokens. Prefix-anchored: AKIA, ASIA, ABIA (long-term,
-      // STS, EC2). Always exactly 16 hex/alphanumeric after the prefix.
-      // NOTE: this matches only the access-key-ID, NOT the secret key value —
-      // the `env-secret` rule below covers AWS_SECRET_ACCESS_KEY / AWS_SESSION_TOKEN.
-      { label: "aws-access-token", pattern: /\b(?:AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}\b/g },
-      // AWS STS session tokens. These are long base64 blobs with NO `NAME=` context
-      // when pasted bare into prose/code, so `env-secret` misses them — but they
-      // reliably start with one of a handful of base64 prefixes (the encoded
-      // `{"...` JSON header). Prefix-anchored → low false-positive. This is the
-      // bare-value form that leaked (`search('IQoJEXAMPLEfakeSESSIONtokenNOTreal01234567890abcDEF==...')`).
-      { label: "aws-session-token", pattern: /\b(?:IQoJ|FwoG|FwoH|FQoG|FQoH|FwoD)[A-Za-z0-9/+]{40,}={0,2}/g },
-      // Env/shell-assignment secrets — a VAR whose name ends in KEY/SECRET/TOKEN/
-      // PASSWORD/CREDENTIAL, then `=`/`:`, then the value. Zero-width lookbehind so
-      // only the VALUE is redacted (the var name stays for context). This is the
-      // dominant real-world leak vector (`export` dumps, .env files, `curl -H`,
-      // tool output) and is exactly what leaked AWS_SECRET_ACCESS_KEY and
-      // AWS_SESSION_TOKEN in cleartext while the access-key-ID rule above caught
-      // only the (least-sensitive) ID.
-      // Suffix list deliberately broad: DB_PASS (our own helm chart's name!),
-      // NPM_AUTH, SENTRY_DSN, SESSION/COOKIE secrets and BEARER vars all leaked
-      // past the original KEY/SECRET/TOKEN/PASSWORD-only list. Values under 12
-      // chars don't redact, so flag-ish vars (BYPASS=true) stay readable.
-      // Context CONSUMED, secret in group 1 — see RedactionRule.secret. As a
-      // lookbehind this was the second most expensive rule in the collector.
-      { label: "env-secret", secret: 1, pattern: /\b[A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASSWORD|PASSWD|PASS|PWD|CREDENTIAL|AUTH|DSN|SESSION|COOKIE|BEARER|SIGNATURE)S?["']?[ \t]{0,3}[:=][ \t]{0,3}["']?([A-Za-z0-9/+_.~=:@-]{12,})/g },
-      // Credentials embedded in a connection URL: scheme://user:PASSWORD@host.
-      // Redacts only the password segment (keeps scheme/user/host for context).
-      //
-      // Scheme-agnostic on purpose. The old rule allowlisted eight DB schemes, so
-      // `https://user:pass@host`, `ssh://`, `ftp://`, `smtp://` and every other
-      // userinfo URL walked through in cleartext — and a `jdbc:postgresql://…`
-      // prefix broke the \b anchor for the one family it did cover. Any scheme
-      // followed by userinfo is a credential, so match the shape, not a list.
-      { label: "url-password", secret: 1, pattern: /\b[a-zA-Z][a-zA-Z0-9+.-]{1,31}:\/\/[^:@\s/]{1,64}:([^@\s/]{1,256})(?=@)/g },
-      // Bare AWS secret-access-key VALUE: EXACTLY 40 base64 chars, word-bounded,
-      // containing upper+lower+digit. This is the gitleaks heuristic — the mixed-case
-      // requirement excludes 40-char lowercase-hex git SHAs, and the exact-40 bound
-      // excludes longer blobs/tokens. It catches the value when it appears bare in
-      // prose with NO `NAME=` and NO nearby context word (e.g. inside a markdown
-      // table or quoted in analysis) — the residual leak path the env-secret and
-      // contextual rules both miss. Placed AFTER env-secret/url-password so the
-      // keyed/URL forms keep their more-specific labels.
-      // The three stacked lookaheads each re-scanned the same 40 characters, which
-      // made this the MOST expensive rule of all 106 the collector runs (13.1% of a
-      // 29.5 MB scan). The mixed-case-plus-digit test is now one JS pass.
-      {
-        label: "aws-secret-key",
-        secret: 1,
-        pattern: /(?<![A-Za-z0-9/+])([A-Za-z0-9/+]{40})(?![A-Za-z0-9/+])/g,
-        where: (v) => /[a-z]/.test(v) && /[A-Z]/.test(v) && /[0-9]/.test(v)
-      },
-      // GitHub personal access tokens.
-      { label: "github-pat", pattern: /\bghp_[A-Za-z0-9]{36}\b/g },
-      // GitHub fine-grained PATs.
-      { label: "github-fine", pattern: /\bgithub_pat_[A-Za-z0-9_]{82}\b/g },
-      // GitHub OAuth.
-      { label: "github-oauth", pattern: /\bgho_[A-Za-z0-9]{36}\b/g },
-      // GitHub app + refresh.
-      { label: "github-app", pattern: /\b(?:ghs|ghu|ghr)_[A-Za-z0-9]{36}\b/g },
-      // Slack bot/user/app tokens.
-      { label: "slack-token", pattern: /\bxox[abopr]-[A-Za-z0-9-]{10,}\b/g },
-      // Slack incoming webhook URL.
-      { label: "slack-webhook", pattern: /\bhttps:\/\/hooks\.slack\.com\/services\/T[A-Z0-9]+\/B[A-Z0-9]+\/[A-Za-z0-9]+\b/g },
-      // Stripe live + test keys.
-      { label: "stripe-key", pattern: /\b(?:sk|pk|rk)_(?:live|test)_[A-Za-z0-9]{24,}\b/g },
-      // Anthropic.
-      { label: "anthropic-key", pattern: /\bsk-ant-[a-zA-Z0-9_-]{40,}\b/g },
-      // OpenAI. Two shapes, deliberately kept apart. The classic key is
-      // `sk-` + base62 with NO hyphens; the modern scoped keys carry an explicit
-      // proj/svcacct/admin segment first. Allowing hyphens after a bare `sk-`
-      // (which is what admitted sk-proj- in the first place) also matches ordinary
-      // kebab-case text — `sk-fix-the-login-redirect-bug`, `.sk-button-primary`,
-      // `sk-2024-01-01-backup` — and this corpus is full of branch names and CSS
-      // classes. Requiring the segment keeps sk-proj- coverage without that.
-      { label: "openai-key", pattern: /\bsk-(?:proj|svcacct|admin)-[A-Za-z0-9_-]{20,}\b|\bsk-[A-Za-z0-9]{20,}\b/g },
-      // Google API key (AIza…).
-      { label: "google-api-key", pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g },
-      // Generic JWT — three base64url segments.
-      { label: "jwt", pattern: /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g },
-      // Private key blocks (PEM). The label is a free word run rather than a fixed
-      // list, so ENCRYPTED PRIVATE KEY and PGP PRIVATE KEY BLOCK are covered
-      // without another enumeration, and \1 forces END to name the same kind as
-      // BEGIN.
-      //
-      // The body is [^-], NOT [\s\S]*?. That is a performance boundary, not a
-      // style choice. An unanchored prefix with an unbounded lazy gap re-scans to
-      // end-of-input from every candidate start, so text carrying many BEGIN
-      // markers and no matching END costs O(n^2): 500KB of that measured 810ms
-      // here, and this runs synchronously on the server's event loop over
-      // tenant-supplied text (services/secret-rescan.ts). A PEM body is base64
-      // plus headers and contains no '-', so excluding it makes the scan stop at
-      // the next delimiter instead of at EOF — same matches, linear cost.
-      { label: "private-key", pattern: /-----BEGIN ([A-Z0-9 ]{0,32})PRIVATE KEY(?: BLOCK)?-----[^-]{0,10000}?-----END \1PRIVATE KEY(?: BLOCK)?-----/g },
-      // PuTTY keys are not PEM. Match the Private-Lines payload — the actual key
-      // material — rather than spanning the whole file, which would need the same
-      // unbounded gap the rule above just removed. Line-anchored and base64-only,
-      // so it cannot run away.
-      { label: "putty-key", pattern: /^Private-Lines:[ \t]*\d{1,4}[\r\n]+(?:[A-Za-z0-9+/=]{8,120}[\r\n]+){1,400}/gm },
-      // npm tokens (uuid-shaped — overlap with our UUID filter; intentional).
-      { label: "npm-token", pattern: /\bnpm_[A-Za-z0-9]{36}\b/g },
-      // .npmrc auth lines: //registry.npmjs.org/:_authToken=VALUE (the key is not
-      // ALL-CAPS, so the env-secret rule above never matched it). The leading `:`
-      // is required — it is what makes this npmrc syntax rather than any shell var
-      // ending in _AUTH, which env-secret already owns and labels better.
-      // [^\s"'`]+ so the closing quote is not swallowed, and a ${VAR} placeholder
-      // is left alone — redacting it destroys a config example and hides nothing.
-      // The rule the perf profile caught the wedged daemon inside: 98.94% of samples.
-      { label: "npmrc-auth", secret: 1, pattern: /:_(?:authToken|password|auth)[ \t]*=[ \t]*(?!\$\{)([^\s"'`]{12,})/gi },
-      // HTTP Authorization headers. env-secret requires an ALL-CAPS name, and
-      // `Authorization` is mixed case, so both Bearer and Basic walked straight
-      // through — including short opaque tokens the contextual pass also misses
-      // (it needs 32+ chars AND mixed-case-plus-digit).
-      // Same two guards as npmrc-auth: stop at a quote, and skip the obvious
-      // placeholders that fill documentation (<YOUR_TOKEN>, ${TOKEN}, xxx…).
-      { label: "auth-header", secret: 1, pattern: /\bauthorization[ \t]*:[ \t]*(?:bearer|basic|token)[ \t]+(?![<$])([^\s"'`<]{8,})/gi },
-      // Vendor tokens with unambiguous prefixes. Each is a fixed literal, so a
-      // false positive is essentially impossible and the cost of listing is low.
-      { label: "gitlab-pat", pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g },
-      { label: "slack-app-token", pattern: /\bxapp-\d-[A-Z0-9]{8,}-\d{10,}-[a-f0-9]{32,}\b/g },
-      { label: "sendgrid-key", pattern: /\bSG\.[A-Za-z0-9_-]{20,24}\.[A-Za-z0-9_-]{40,50}\b/g },
-      // (?<![-\w]) so `cache-key-<md5>` is not read as a mailgun key.
-      { label: "mailgun-key", pattern: /(?<![-\w])key-[a-f0-9]{32}\b/g },
-      { label: "digitalocean-pat", pattern: /\bdop_v1_[a-f0-9]{64}\b/g },
-      { label: "huggingface-token", pattern: /\bhf_[A-Za-z0-9]{30,}\b/g },
-      { label: "shopify-token", pattern: /\bshp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}\b/g },
-      { label: "pypi-token", pattern: /\bpypi-AgEIcHlwaS5vcmc[A-Za-z0-9_-]{50,}\b/g },
-      // No twilio-sid rule: AC…/SK… are Twilio SIDs, which are public account and
-      // key identifiers, not the auth token. Redacting them hid nothing and
-      // collided with 32-hex etags and MD5 sums.
-      // No discord-bot-token rule either: the shape (word.word.word) matched
-      // ordinary dotted symbols such as a.b.ApplicationContextProviderImpl.
-      { label: "telegram-bot-token", pattern: /\b\d{8,10}:AA[A-Za-z0-9_-]{32,}\b/g },
-      { label: "doppler-token", pattern: /\bdp\.(?:pt|st|sa|ct)\.[A-Za-z0-9_-]{20,}\b/g },
-      // Azure Storage SAS signature — the `sig=` parameter is the actual secret.
-      { label: "azure-sas", secret: 1, pattern: /[?&]sig=([A-Za-z0-9%/+=]{20,})/g }
-    ];
-    SECRET_CONTEXT_RE = /\b(?:secret|password|passwd|credential|access[ _-]?key|private[ _-]?key|api[ _-]?key|auth(?:oriz\w*)?|bearer|token)\b/gi;
-    HIGH_ENTROPY_TOKEN_RE = /[A-Za-z0-9/+_-]{32,}/g;
-    cache = null;
-    CANARY = "the quick brown fox jumps over the lazy dog 0123456789 commit 8ba1f109551bd432803012645ac136ddd475d0fb src/index.ts:42";
-    MAX_PACK_RULES = 200;
-    MAX_PATTERN_LEN = 512;
-    serverPack = null;
-    globalRegexCache = /* @__PURE__ */ new Map();
-    privacyCache = null;
-    PATH_REGEX = /(?<![A-Za-z0-9_])(?:\/[^\s'"`<>]+|[A-Za-z]:\\[^\s'"`<>]+)/g;
-  }
-});
-
-// ../engine/dist/parsers/chunker.js
-function stripInjectedBanners(text) {
-  let result = text;
-  for (const re of INJECTED_BANNERS)
-    result = result.replace(re, " ");
-  return result;
+function agyHomeDir() {
+  return process.env.CHAT_RECALL_AGY_HOME || sources().agyHome || join4(homedir3(), ".gemini", "antigravity-cli");
 }
-function cleanText(text) {
-  let result = text.replace(/<system-reminder>.*?<\/system-reminder>/gs, "");
-  result = stripInjectedBanners(result);
-  result = result.replace(/\x1b\[[0-9;]*m/g, "");
-  result = result.replace(/\s+/g, " ");
-  return result.trim();
+function cursorHomeDir() {
+  return process.env.CHAT_RECALL_CURSOR_HOME || sources().cursorHome || join4(homedir3(), ".cursor");
 }
-function windowText(text, maxChars, maxWindows = 12) {
-  const clean = cleanText(text);
-  if (clean.length <= maxChars)
-    return clean ? [clean] : [];
-  const out = [];
-  const overlap = 80;
-  const step = Math.max(1, maxChars - overlap);
-  for (let i = 0; i < clean.length && out.length < maxWindows; i += step) {
-    out.push(clean.slice(i, i + maxChars));
-  }
-  return out;
+function cursorIdeHomeDir() {
+  return process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome || (process.platform === "darwin" ? join4(homedir3(), "Library", "Application Support", "Cursor") : join4(homedir3(), ".config", "Cursor"));
 }
-function chunkSession(entry, content, maxChunks = 80, maxTokensPerChunk = 500) {
-  const chunks = [];
-  const maxChars = maxTokensPerChunk * 4;
-  const baseData = {
-    sessionId: entry.sessionId,
-    projectPath: entry.projectPath,
-    created: entry.created,
-    modified: entry.modified,
-    mtime: entry.fileMtime,
-    firstPrompt: entry.firstPrompt || content.firstPrompt,
-    sourceFile: content.sessionPath
+function siblingHomes(base3, overridden, suffix) {
+  const roots = [];
+  const add = (home) => {
+    const root = suffix ? join4(home, suffix) : home;
+    if (existsSync4(root) && !roots.includes(root))
+      roots.push(root);
   };
-  for (let i = 0; i < Math.min(2, content.summaries.length); i++) {
-    const summary = content.summaries[i];
-    if (!summary?.trim())
-      continue;
-    const chunkText = cleanText(summary.slice(0, maxChars));
-    if (chunkText.length > 8e3) {
-      chunks.push({
-        chunkId: `${entry.sessionId}_summary_${i}`,
-        chunkType: "summary",
-        text: chunkText.slice(0, 8e3),
-        sourceLine: 0,
-        ...baseData
-      });
-    } else {
-      chunks.push({
-        chunkId: `${entry.sessionId}_summary_${i}`,
-        chunkType: "summary",
-        text: chunkText,
-        sourceLine: 0,
-        ...baseData
-      });
+  add(base3);
+  if (!overridden) {
+    const parent = dirname4(base3);
+    const leaf = basename(base3);
+    try {
+      for (const entry of readdirSync3(parent, { withFileTypes: true })) {
+        if (!entry.isDirectory())
+          continue;
+        if (entry.name === leaf || !entry.name.startsWith(leaf + "-"))
+          continue;
+        add(join4(parent, entry.name));
+      }
+    } catch {
     }
   }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
-  }
-  const firstPrompt = entry.firstPrompt || content.firstPrompt;
-  if (firstPrompt?.trim()) {
-    const firstLine = content.userMessages[0]?.lineNumber || 0;
-    chunks.push({
-      chunkId: `${entry.sessionId}_first_prompt`,
-      chunkType: "first_prompt",
-      text: cleanText(firstPrompt.slice(0, maxChars)),
-      sourceLine: firstLine,
-      ...baseData
-    });
-  }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
-  }
-  const userStart = firstPrompt ? 1 : 0;
-  for (let i = userStart; i < content.userMessages.length; i++) {
-    if (chunks.length >= maxChunks)
-      break;
-    const msg = content.userMessages[i];
-    if (!msg.text.trim())
-      continue;
-    const windows = windowText(msg.text, maxChars);
-    for (let w = 0; w < windows.length; w++) {
-      if (chunks.length >= maxChunks)
-        break;
-      chunks.push({
-        chunkId: `${entry.sessionId}_user_${i}_${w}`,
-        chunkType: "user_context",
-        text: windows[w],
-        sourceLine: msg.lineNumber,
-        ...baseData
-      });
+  return roots;
+}
+function applyDecisions(roots, includeExcluded) {
+  if (roots.length === 0)
+    return roots;
+  let kept = roots;
+  if (!includeExcluded) {
+    try {
+      grandfatherLegacyHomes();
+      const approved = kept.filter((r) => isHomeSynced(dirname4(r)));
+      if (approved.length > 0)
+        kept = approved;
+    } catch {
     }
   }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
+  if (!includeExcluded && _sourceExclusionFilter) {
+    const notExcluded = kept.filter((r) => !_sourceExclusionFilter(r));
+    if (notExcluded.length > 0)
+      kept = notExcluded;
   }
-  for (let i = 0; i < content.assistantMessages.length; i++) {
-    if (chunks.length >= maxChunks)
-      break;
-    const msg = content.assistantMessages[i];
-    if (!msg.text.trim() || msg.text.length <= 50)
-      continue;
-    const windows = windowText(msg.text, maxChars);
-    for (let w = 0; w < windows.length; w++) {
-      if (chunks.length >= maxChunks)
-        break;
-      chunks.push({
-        chunkId: `${entry.sessionId}_assistant_${i}_${w}`,
-        chunkType: "assistant",
-        text: windows[w],
-        sourceLine: msg.lineNumber,
-        ...baseData
-      });
-    }
+  return kept;
+}
+function applyExclusions(roots, includeExcluded) {
+  return applyDecisions(roots, includeExcluded);
+}
+function codexSessionDirs(opts = {}) {
+  const overridden = !!(process.env.CHAT_RECALL_CODEX_HOME || sources().codexHome);
+  return applyExclusions(siblingHomes(codexHomeDir(), overridden, "sessions"), opts.includeExcluded);
+}
+function agyBrainDirs(opts = {}) {
+  const overridden = !!(process.env.CHAT_RECALL_AGY_HOME || sources().agyHome);
+  return applyExclusions(siblingHomes(agyHomeDir(), overridden, "brain"), opts.includeExcluded);
+}
+function cursorChatDirs(opts = {}) {
+  const overridden = !!(process.env.CHAT_RECALL_CURSOR_HOME || sources().cursorHome);
+  return applyExclusions(siblingHomes(cursorHomeDir(), overridden, "chats"), opts.includeExcluded);
+}
+function cursorIdeWorkspaceDirs(opts = {}) {
+  const overridden = !!(process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome);
+  return applyExclusions(siblingHomes(cursorIdeHomeDir(), overridden, join4("User", "workspaceStorage")), opts.includeExcluded);
+}
+function cursorIdeGlobalDbs(opts = {}) {
+  const overridden = !!(process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome);
+  const roots = applyExclusions(siblingHomes(cursorIdeHomeDir(), overridden, join4("User", "globalStorage")), opts.includeExcluded);
+  const dbs = [];
+  for (const r of roots) {
+    const p = join4(r, "state.vscdb");
+    if (existsSync4(p) && !dbs.includes(p))
+      dbs.push(p);
   }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
+  return dbs;
+}
+function opencodeDbPaths(opts = {}) {
+  const primary = opencodeDbPath();
+  const overridden = !!(process.env.CHAT_RECALL_OPENCODE_DB || sources().opencodeDbPath);
+  const dbFile = basename(primary);
+  const dirs = siblingHomes(dirname4(primary), overridden, "");
+  const dbs = [];
+  for (const d of dirs) {
+    const p = join4(d, dbFile);
+    if (existsSync4(p) && !dbs.includes(p))
+      dbs.push(p);
   }
-  if (content.toolResults.length > 0) {
-    const webSearches = content.toolResults.filter((r) => r.contentType === "web_search");
-    const otherResults = content.toolResults.filter((r) => r.contentType !== "web_search");
-    const resultsToProcess = [...webSearches.slice(0, 5), ...otherResults.slice(0, 10)];
-    const stripBodies = isToolOutputRedactionEnabled();
-    for (let i = 0; i < resultsToProcess.length; i++) {
-      if (chunks.length >= maxChunks)
-        break;
-      const result = resultsToProcess[i];
-      if (result.text.trim()) {
-        const body = stripBodies && result.contentType !== "web_search" ? redactToolResultBody(result.contentType, result.text) : result.text.slice(0, maxChars);
-        chunks.push({
-          chunkId: `${entry.sessionId}_${result.contentType}_${i}`,
-          chunkType: result.contentType,
-          text: cleanText(body),
-          sourceLine: result.lineNumber,
-          ...baseData
-        });
-      }
-    }
+  if (dbs.length === 0)
+    dbs.push(primary);
+  return applyExclusions(dbs, opts.includeExcluded);
+}
+function extraClaudeHomeDirs() {
+  const extras = sources().extraClaudeHomes ?? [];
+  const primary = claudeHomeDir();
+  return Array.from(new Set(extras)).filter((p) => p && p !== primary);
+}
+function claudeHomeDirs() {
+  const overridden = !!(process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome);
+  const homes = siblingHomes(claudeHomeDir(), overridden, "").filter((h) => basename(h) !== ".claude-code");
+  for (const extra of extraClaudeHomeDirs()) {
+    if (existsSync4(extra) && !homes.includes(extra))
+      homes.push(extra);
   }
-  return chunks.slice(0, maxChunks);
+  return homes;
 }
-var INJECTED_BANNERS;
-var init_chunker = __esm({
-  "../engine/dist/parsers/chunker.js"() {
+var sources, _sourceExclusionFilter;
+var init_tool_paths = __esm({
+  "../engine/dist/core/tool-paths.js"() {
     "use strict";
-    init_secret_redactor();
-    INJECTED_BANNERS = [
-      /MCP issues detected\. ?Run \/mcp list for status\.?/g,
-      /Context low[^\n]*Run \/compact[^\n]*/g,
-      /API Error:[^\n]{0,120}/g
-    ];
+    init_home_approval();
+    init_settings();
+    sources = loadSourceSettings;
+    _sourceExclusionFilter = null;
   }
 });
 
@@ -7821,6 +7821,28 @@ var init_session_git = __esm({
   }
 });
 
+// ../engine/dist/core/session-multi-tool.js
+function extractTurnsAny(sessionId, opts = {}) {
+  const backend = getBackendForId(sessionId);
+  if (!backend)
+    return { sessionId, found: false, turns: [], startMs: 0, endMs: 0 };
+  return memoInSessionScope(`turns:${sessionId}:${opts.maxTurns ?? ""}:${opts.assistantMax ?? ""}`, () => backend.extractTurns(sessionId, opts));
+}
+function replaySessionAny(sessionId) {
+  const backend = getBackendForId(sessionId);
+  if (!backend)
+    return { sessionId, found: false, projectPath: "", files: [], totalLinesAdded: 0, totalLinesRemoved: 0 };
+  return memoInSessionScope(`replay:${sessionId}`, () => backend.replay(sessionId));
+}
+var init_session_multi_tool = __esm({
+  "../engine/dist/core/session-multi-tool.js"() {
+    "use strict";
+    init_tool_backend();
+    init_live_session_scan();
+    init_backends();
+  }
+});
+
 // ../engine/dist/core/session-outcome.js
 function extractDecisionsFromTurn(turn) {
   if (turn.kind !== "assistant_text" || !turn.text)
@@ -7917,7 +7939,7 @@ function computeOutcome(sessionId, opts = {}) {
   };
   if (!backend)
     return notFound;
-  const turnsRes = backend.extractTurns(sessionId, { assistantMax: 2e3 });
+  const turnsRes = extractTurnsAny(sessionId, { assistantMax: 2e3 });
   if (!turnsRes.found)
     return notFound;
   const decisions = [];
@@ -7956,7 +7978,7 @@ function computeOutcome(sessionId, opts = {}) {
     totalLinesAdded = fast.totalLinesAdded;
     totalLinesRemoved = fast.totalLinesRemoved;
   } else {
-    const replay = backend.replay(sessionId);
+    const replay = replaySessionAny(sessionId);
     filesChanged = replay.files.map((f) => f.file);
     totalLinesAdded = replay.totalLinesAdded;
     totalLinesRemoved = replay.totalLinesRemoved;
@@ -7995,6 +8017,7 @@ var init_session_outcome = __esm({
     init_session_sentiment();
     init_session_git();
     init_tool_backend();
+    init_session_multi_tool();
     init_backends();
     DECISION_PATTERNS = [
       /\b(?:I'?ll|I will|I'?m going to|Going to|Let me|We'?ll|We will|We should|Let'?s|I'?m about to|I'?m going to)\b[^\n.!?]*[.!?]/i,
@@ -11675,13 +11698,26 @@ function resolveSessionContentGroups(sessionId) {
 }
 function withSessionReadCache(fn) {
   readScopeDepth++;
+  if (readScopeDepth === 1)
+    derivedScope = /* @__PURE__ */ new Map();
   try {
     return fn();
   } finally {
-    if (--readScopeDepth === 0)
+    if (--readScopeDepth === 0) {
       readScope = null;
+      derivedScope = null;
+    }
   }
 }
+function memoInSessionScope(key2, compute) {
+  if (!derivedScope)
+    return compute();
+  if (derivedScope.has(key2))
+    return derivedScope.get(key2);
+  const value = compute();
+  derivedScope.set(key2, value);
+  return value;
+}
 function readSessionGroupText(group) {
   let key2 = "";
   if (readScopeDepth > 0) {
@@ -11793,7 +11829,7 @@ function findCodexSessionFileIn(root, sessionId) {
   }
   return scanDir(root);
 }
-var scanScopeDepth, indexCache, readScope, readScopeDepth, geminiCache, MAX_EVENT_LINE_BYTES;
+var scanScopeDepth, indexCache, readScope, readScopeDepth, derivedScope, geminiCache, MAX_EVENT_LINE_BYTES;
 var init_live_session_scan = __esm({
   "../engine/dist/core/live-session-scan.js"() {
     "use strict";
@@ -11807,6 +11843,7 @@ var init_live_session_scan = __esm({
     indexCache = null;
     readScope = null;
     readScopeDepth = 0;
+    derivedScope = null;
     geminiCache = null;
     MAX_EVENT_LINE_BYTES = 8 * 1024 * 1024;
   }
@@ -11937,6 +11974,7 @@ var UUID_RE, ClaudeBackend, claudeBackend;
 var init_claude2 = __esm({
   "../engine/dist/core/backends/claude.js"() {
     "use strict";
+    init_live_session_scan();
     init_tool_paths();
     init_live_session_scan();
     init_session_outcome();
@@ -12199,6 +12237,9 @@ var init_claude2 = __esm({
        * splits show up alongside the parent.
        */
       readEvents(rawId) {
+        return memoInSessionScope(`events:claude:${rawId}`, () => this.#readEventsUncached(rawId));
+      }
+      #readEventsUncached(rawId) {
         const groups = resolveSessionContentGroups(rawId);
         if (groups.length === 0)
           return [];
@@ -18817,7 +18858,7 @@ var init_http = __esm({
       CLI_VERSION = JSON.parse(readFileSync31(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.6.8";
+        if (true) CLI_VERSION = "0.6.9";
       } catch {
       }
     }
@@ -18842,27 +18883,6 @@ var init_redact_deep = __esm({
   }
 });
 
-// ../engine/dist/core/session-multi-tool.js
-function extractTurnsAny(sessionId, opts = {}) {
-  const backend = getBackendForId(sessionId);
-  if (!backend)
-    return { sessionId, found: false, turns: [], startMs: 0, endMs: 0 };
-  return backend.extractTurns(sessionId, opts);
-}
-function replaySessionAny(sessionId) {
-  const backend = getBackendForId(sessionId);
-  if (!backend)
-    return { sessionId, found: false, projectPath: "", files: [], totalLinesAdded: 0, totalLinesRemoved: 0 };
-  return backend.replay(sessionId);
-}
-var init_session_multi_tool = __esm({
-  "../engine/dist/core/session-multi-tool.js"() {
-    "use strict";
-    init_tool_backend();
-    init_backends();
-  }
-});
-
 // src/derived.ts
 function collectDerivedRows(ref, mtime, count, maxRowBytes) {
   const id = ref.prefixedId;
@@ -19337,7 +19357,7 @@ var init_telemetry = __esm({
     init_sync_client();
     cliVersion2 = () => {
       try {
-        return true ? "0.6.8" : "dev";
+        return true ? "0.6.9" : "dev";
       } catch {
         return "dev";
       }
@@ -19352,6 +19372,7 @@ var collector_health_exports = {};
 __export(collector_health_exports, {
   CRASHLOOP_RESTARTS: () => CRASHLOOP_RESTARTS,
   STALE_AFTER_MS: () => STALE_AFTER_MS,
+  applySyncOutcome: () => applySyncOutcome,
   collectorHealthPath: () => collectorHealthPath,
   judgeHealth: () => judgeHealth,
   progressLine: () => progressLine,
@@ -19362,6 +19383,22 @@ __export(collector_health_exports, {
 });
 import { readFileSync as readFileSync32, writeFileSync as writeFileSync7, mkdirSync as mkdirSync8 } from "node:fs";
 import { join as join40, dirname as dirname17 } from "node:path";
+function applySyncOutcome(prior, outcome, now = Date.now()) {
+  const t = { lastOkAt: prior?.lastOkAt ?? null, failures: prior?.failures ?? 0 };
+  if (prior?.lastError !== void 0)
+    t.lastError = prior.lastError;
+  if (outcome.ok) {
+    t.lastOkAt = now;
+    t.failures = 0;
+    delete t.lastError;
+    return t;
+  }
+  if ((outcome.accepted ?? 0) > 0)
+    t.lastOkAt = now;
+  t.failures += 1;
+  t.lastError = (outcome.error ?? "unknown error").slice(0, 160);
+  return t;
+}
 function progressLine(h) {
   const p = h?.progress;
   if (!p || p.complete || p.total <= 0)
@@ -19920,6 +19957,7 @@ var sync_client_exports = {};
 __export(sync_client_exports, {
   BATCH_SCAN_MAX_BYTES: () => BATCH_SCAN_MAX_BYTES,
   FULL_BUILD_MAX_BYTES: () => FULL_BUILD_MAX_BYTES,
+  _acceptedUploads: () => _acceptedUploads,
   _fetchTenantSyncConfigForTests: () => _fetchTenantSyncConfigForTests,
   _resetCapsCacheForTests: () => _resetCapsCacheForTests,
   _resetTenantSecurityConfigCache: () => _resetTenantSecurityConfigCache,
@@ -20183,6 +20221,9 @@ function removeCredentials(serverUrl) {
   writeFileSync9(credPath(), JSON.stringify({ targets: kept }, null, 2));
   return true;
 }
+function _acceptedUploads(url) {
+  return acceptedUploads.get(url) ?? 0;
+}
 async function syncSessions(opts = {}) {
   const targets = loadAllCredentials();
   if (targets.length === 0) throw new Error("Not logged in \u2014 run `chat-recall login <server-url> --token <token>`");
@@ -20206,10 +20247,11 @@ async function syncSessions(opts = {}) {
       };
       continue;
     }
+    acceptedUploads.set(cred.serverUrl, 0);
     try {
       const r = await syncToTarget(cred, opts);
       noteTargetSuccess(cred.serverUrl);
-      perTarget[cred.serverUrl] = { ok: true };
+      perTarget[cred.serverUrl] = { ok: true, accepted: acceptedUploads.get(cred.serverUrl) ?? 0 };
       agg = agg ? {
         uploaded: agg.uploaded + r.uploaded,
         skipped: agg.skipped + r.skipped,
@@ -20226,7 +20268,7 @@ async function syncSessions(opts = {}) {
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       errors.push(`${cred.serverUrl}: ${msg}`);
-      perTarget[cred.serverUrl] = { ok: false, error: msg };
+      perTarget[cred.serverUrl] = { ok: false, error: msg, accepted: acceptedUploads.get(cred.serverUrl) ?? 0 };
       const next = noteTargetFailure(cred.serverUrl, msg);
       const notice = breakerNotice(cred.serverUrl, next);
       if (notice) console.error(`[sync] ${notice}`);
@@ -20492,7 +20534,7 @@ async function syncToTargetInScope(cred, opts = {}) {
       return [];
     }
   });
-  const MAX_BATCH_BYTES = 4 * 1024 * 1024;
+  const MAX_BATCH_BYTES = Number(process.env.CHAT_RECALL_MAX_BATCH_BYTES) || (isLocalHost(cred.serverUrl) ? 4 * 1024 * 1024 : 1024 * 1024);
   const sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
   const explicitThrottle = typeof opts.throttleMs === "number" && opts.throttleMs > 0;
   const throttleMs = explicitThrottle ? opts.throttleMs : 0;
@@ -20527,6 +20569,7 @@ async function syncToTargetInScope(cred, opts = {}) {
           signal: ac.signal
         });
         if (res.ok) {
+          acceptedUploads.set(cred.serverUrl, (acceptedUploads.get(cred.serverUrl) ?? 0) + 1);
           const body2 = await res.json().catch(() => ({}));
           if (typeof body2.telemetry === "boolean") {
             setTelemetryEligible(base3, body2.telemetry);
@@ -20577,7 +20620,8 @@ async function syncToTargetInScope(cred, opts = {}) {
         if (attempt >= RETRY_DELAYS_MS.length) throw new Error(`sync failed after ${attempt + 1} attempts: HTTP ${res.status} ${text}`);
         const retryAfterS = Number(res.headers.get("retry-after"));
         const waitMs = res.status === 429 && retryAfterS > 0 ? retryAfterS * 1e3 : RETRY_DELAYS_MS[attempt];
-        console.error(`[sync] HTTP ${res.status} from ${base3} \u2014 backing off ${Math.round(waitMs / 1e3)}s (attempt ${attempt + 1})`);
+        const why = res.status === 524 ? ` \u2014 the proxy cut the request at its time limit; the batch is too big for one request` : "";
+        console.error(`[sync] HTTP ${res.status} from ${base3}${why} \u2014 backing off ${Math.round(waitMs / 1e3)}s (attempt ${attempt + 1})`);
         await sleep2(waitMs);
         continue;
       } catch (err) {
@@ -21436,7 +21480,7 @@ async function syncIncremental(opts = {}) {
     lock.release();
   }
 }
-var ownVersion, ERROR_CLASS, STANDING_FAILURE, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, EMPTY_SYNC_CONFIG, _fetchTenantSyncConfigForTests, SYNC_RULES_REFUSAL, hashPath, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
+var ownVersion, ERROR_CLASS, STANDING_FAILURE, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, EMPTY_SYNC_CONFIG, _fetchTenantSyncConfigForTests, SYNC_RULES_REFUSAL, hashPath, acceptedUploads, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
 var init_sync_client = __esm({
   "src/sync-client.ts"() {
     "use strict";
@@ -21481,7 +21525,7 @@ var init_sync_client = __esm({
       ownVersion = JSON.parse(readFileSync35(join42(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.6.8";
+        if (true) ownVersion = "0.6.9";
       } catch {
       }
     }
@@ -21501,6 +21545,7 @@ var init_sync_client = __esm({
     _fetchTenantSyncConfigForTests = fetchTenantSyncConfig;
     SYNC_RULES_REFUSAL = /* @__PURE__ */ Symbol.for("chat-recall.syncRulesRefusal");
     hashPath = (p) => p ? "p_" + createHash9("sha256").update(p).digest("hex").slice(0, 12) : "";
+    acceptedUploads = /* @__PURE__ */ new Map();
     MAX_DERIVED_ROW_BYTES = 2 * 1024 * 1024;
     isLocalHost = isPrivateHost;
     CAPS_TTL_MS = 60 * 6e4;
@@ -25596,7 +25641,7 @@ var init_intent_drain = __esm({
       ownVersion2 = JSON.parse(readFileSync45(join56(dir, "../package.json"), "utf-8")).version || ownVersion2;
     } catch {
       try {
-        if (true) ownVersion2 = "0.6.8";
+        if (true) ownVersion2 = "0.6.9";
       } catch {
       }
     }
@@ -29945,7 +29990,19 @@ program.command("guard").description("Check a pending tool call against the deci
     if (target.token) headers.authorization = `Bearer ${target.token}`;
     const res = await fetchWithTimeout2(
       `${target.base}/api/decisions/check`,
-      { method: "POST", headers, body: JSON.stringify({ names, via, project: opts.project }) },
+      {
+        method: "POST",
+        headers,
+        // The folder group is resolved HERE, from the directory the hook runs
+        // in. The server has no checkout to read it from, and a lookup per
+        // tool call is exactly the cost this guard cannot afford.
+        body: JSON.stringify({
+          names,
+          via,
+          project: opts.project,
+          workspace: resolveWorkspaceId(process.cwd())?.slice(3)
+        })
+      },
       4e3
     );
     if (!res.ok) return;