chat-recall 0.6.8 → 0.6.9

package/dist/mcp.js

@@ -4593,6 +4593,28 @@ function resolveProjectId(inputPath) {
   resolveCache.set(realPath, result);
   return result;
 }
+function resolveWorkspaceId(inputPath) {
+  if (!inputPath || !isAbsolute(inputPath))
+    return null;
+  const realPath = safeRealpath(inputPath);
+  const cached = wsIdCache.get(realPath);
+  if (cached !== void 0)
+    return cached;
+  const result = doResolveWorkspace(realPath);
+  wsIdCache.set(realPath, result);
+  return result;
+}
+function doResolveWorkspace(realPath) {
+  const cfg = loadProjectsConfig();
+  const declaredWorkspaces = (cfg.projects || []).filter((p) => p.workspace).sort((a, b) => b.root.length - a.root.length);
+  for (const proj of declaredWorkspaces) {
+    if (isInside(realPath, safeRealpath(proj.root)))
+      return proj.id;
+  }
+  const anchor = findGitToplevel(realPath) ?? realPath;
+  const ws = resolveAutoWorkspace(anchor, cfg.autoWorkspaceMinRepos ?? DEFAULT_AUTO_WORKSPACE_MIN_REPOS);
+  return ws ? ws.id : null;
+}
 function doResolve(realPath) {
   const cfg = loadProjectsConfig();
   if (matchesIgnore(realPath, cfg)) {
@@ -4869,7 +4891,7 @@ function globToRegex(glob) {
 function escapeRe(s) {
   return s.replace(/[.+^${}()|[\]\\]/g, "\\$&");
 }
-var DEFAULT_AUTO_WORKSPACE_MIN_REPOS, BOT_WORKTREE_MARKERS, resolveCache, gitCache, workspaceCache, cachedConfig, GIT_TIMEOUT_MS, AUTO_WORKSPACE_MAX_DEPTH;
+var DEFAULT_AUTO_WORKSPACE_MIN_REPOS, BOT_WORKTREE_MARKERS, resolveCache, gitCache, workspaceCache, wsIdCache, cachedConfig, GIT_TIMEOUT_MS, AUTO_WORKSPACE_MAX_DEPTH;
 var init_project_resolver = __esm({
   "../engine/dist/core/project-resolver.js"() {
     "use strict";
@@ -4879,6 +4901,7 @@ var init_project_resolver = __esm({
     resolveCache = /* @__PURE__ */ new Map();
     gitCache = /* @__PURE__ */ new Map();
     workspaceCache = /* @__PURE__ */ new Map();
+    wsIdCache = /* @__PURE__ */ new Map();
     cachedConfig = null;
     GIT_TIMEOUT_MS = 1e4;
     AUTO_WORKSPACE_MAX_DEPTH = 2;
@@ -5568,591 +5591,262 @@ var init_settings = __esm({
   }
 });
 
-// ../engine/dist/core/home-approval.js
-import { existsSync as existsSync4, readdirSync as readdirSync3, realpathSync as realpathSync2 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join5, dirname as dirname5 } from "path";
-function normalizeHomePath(p) {
-  const expanded = p.startsWith("~") ? join5(homedir2(), p.slice(1)) : p;
-  const trimmed = expanded.replace(/[/\\]+$/, "");
-  try {
-    return realpathSync2(trimmed);
-  } catch {
-    return trimmed;
-  }
+// ../engine/dist/core/secret-redactor.js
+import { statSync as statSync5 } from "fs";
+function secretOf(rule, m) {
+  const raw = rule.secret != null ? m[rule.secret] : m[0];
+  if (raw == null)
+    return null;
+  if (rule.where && !rule.where(raw))
+    return null;
+  return raw;
 }
-function legacyAutoSyncedHomes() {
-  const home = homedir2();
-  const out = [];
-  const add = (dir, marker) => {
-    if (!existsSync4(join5(dir, marker)))
-      return;
-    const n = normalizeHomePath(dir);
-    if (!out.includes(n))
-      out.push(n);
-  };
-  const bases = [
-    { base: join5(home, ".claude"), marker: "projects" },
-    { base: join5(home, ".gemini"), marker: "tmp" },
-    { base: join5(home, ".codex"), marker: "sessions" },
-    { base: join5(home, ".gemini", "antigravity-cli"), marker: "brain" },
-    { base: join5(home, ".local", "share", "opencode"), marker: "opencode.db" },
-    { base: join5(home, ".cursor"), marker: "chats" }
-  ];
-  for (const { base, marker } of bases) {
-    add(base, marker);
-    const parent = dirname5(base);
-    const leaf = base.slice(parent.length + 1);
-    try {
-      for (const e of readdirSync3(parent, { withFileTypes: true })) {
-        if (!e.isDirectory())
-          continue;
-        if (e.name === leaf || !e.name.startsWith(leaf + "-"))
-          continue;
-        if (e.name === ".claude-code")
-          continue;
-        add(join5(parent, e.name), marker);
+function looksLikeSecretToken(t) {
+  if (t.length < 32)
+    return false;
+  if (/^[a-f0-9]+$/i.test(t))
+    return true;
+  return /[A-Z]/.test(t) && /[a-z]/.test(t) && /[0-9]/.test(t);
+}
+function findContextualSecrets(text) {
+  if (!text)
+    return [];
+  const ranges = [];
+  let m;
+  SECRET_CONTEXT_RE.lastIndex = 0;
+  while ((m = SECRET_CONTEXT_RE.exec(text)) !== null) {
+    const winStart = m.index + m[0].length;
+    const window = text.slice(winStart, winStart + 80);
+    HIGH_ENTROPY_TOKEN_RE.lastIndex = 0;
+    let tm;
+    while ((tm = HIGH_ENTROPY_TOKEN_RE.exec(window)) !== null) {
+      if (!looksLikeSecretToken(tm[0]))
+        continue;
+      if (/^[a-f0-9]+$/i.test(tm[0]) && /\b(?:commit|sha-?\d*|hash|digest|checksum|uuid|guid|etag|blob|ref)\b/i.test(window.slice(0, tm.index))) {
+        continue;
       }
-    } catch {
+      ranges.push({ start: winStart + tm.index, end: winStart + tm.index + tm[0].length });
+      break;
+    }
+  }
+  ranges.sort((a, b) => a.start - b.start);
+  const out = [];
+  for (const r of ranges) {
+    const last = out[out.length - 1];
+    if (last && r.start < last.end) {
+      last.end = Math.max(last.end, r.end);
+      continue;
     }
+    out.push({ ...r });
   }
   return out;
 }
-function grandfatherLegacyHomes() {
-  let s;
+function isEnvRedactionRequested() {
+  const v = process.env.CHAT_RECALL_REDACT_INDEX;
+  if (v === void 0)
+    return null;
+  return v === "1" || v === "true" || v === "yes";
+}
+function settingsView() {
+  let mtimeMs = -1;
   try {
-    s = loadSettings();
+    mtimeMs = statSync5(settingsFilePath()).mtimeMs;
   } catch {
-    return { seeded: [] };
-  }
-  if (s.sources.homesGrandfathered)
-    return { seeded: [] };
-  const legacy = legacyAutoSyncedHomes();
-  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
-  const seeded = [];
-  for (const p of legacy) {
-    if (!approved.has(p)) {
-      approved.add(p);
-      seeded.push(p);
-    }
   }
-  s.sources.approvedHomes = [...approved];
-  s.sources.homesGrandfathered = true;
+  if (cache && cache.mtimeMs === mtimeMs)
+    return cache;
+  let enabled = false;
+  const extra = [];
   try {
-    saveSettings(s);
+    const s = loadSettings();
+    enabled = !!s.privacy?.redactIndex;
+    for (const r of s.privacy?.redactionRules ?? []) {
+      try {
+        extra.push({ label: r.label, pattern: new RegExp(r.pattern, "g") });
+      } catch {
+      }
+    }
   } catch {
-    return { seeded: [] };
   }
-  return { seeded };
+  cache = { mtimeMs, enabled, rules: [...DEFAULT_REDACTION_RULES, ...extra] };
+  return cache;
 }
-function primaryHomes() {
-  const home = homedir2();
-  const env = process.env;
-  let s;
+function compileServerRule(spec) {
+  const name = spec.name || "(unnamed)";
+  if (!spec.regex)
+    return { name, reason: "empty pattern" };
+  if (spec.regex.length > MAX_PATTERN_LEN)
+    return { name, reason: `pattern longer than ${MAX_PATTERN_LEN} chars` };
+  let re;
   try {
-    s = loadSettings().sources;
-  } catch {
-    s = void 0;
+    const flags = "g" + (spec.flags || "").replace(/[^ims]/g, "");
+    re = new RegExp(spec.regex, flags);
+  } catch (e) {
+    return { name, reason: `invalid regex: ${e instanceof Error ? e.message : e}` };
   }
-  const opencodeDb = env.CHAT_RECALL_OPENCODE_DB || s?.opencodeDbPath || join5(home, ".local", "share", "opencode", "opencode.db");
-  const candidates2 = [
-    env.CHAT_RECALL_CLAUDE_HOME || s?.claudeHome || join5(home, ".claude"),
-    env.CHAT_RECALL_GEMINI_HOME || s?.geminiHome || join5(home, ".gemini"),
-    env.CHAT_RECALL_CODEX_HOME || s?.codexHome || join5(home, ".codex"),
-    env.CHAT_RECALL_AGY_HOME || s?.agyHome || join5(home, ".gemini", "antigravity-cli"),
-    env.CHAT_RECALL_CURSOR_HOME || s?.cursorHome || join5(home, ".cursor"),
-    dirOf(opencodeDb)
-  ];
-  return candidates2.map(normalizeHomePath);
+  if (re.test(""))
+    return { name, reason: "matches the empty string (would redact everything)" };
+  re.lastIndex = 0;
+  if (re.test(CANARY))
+    return { name, reason: "matches benign text \u2014 too broad" };
+  re.lastIndex = 0;
+  return { label: `${spec.source === "pack" ? "pack" : "tenant"}:${name}`, pattern: re };
 }
-function homeDecision(path) {
-  const p = normalizeHomePath(path);
-  if (primaryHomes().includes(p))
-    return "primary";
-  let s;
-  try {
-    s = loadSettings().sources;
-  } catch {
-    return "pending";
+function installServerRulePack(pack) {
+  const rejected = [];
+  const rules = [];
+  for (const spec of pack.rules || []) {
+    if (rules.length >= MAX_PACK_RULES) {
+      rejected.push({ name: spec.name || "(unnamed)", reason: `pack exceeds ${MAX_PACK_RULES} rules` });
+      continue;
+    }
+    const out = compileServerRule(spec);
+    if ("reason" in out)
+      rejected.push(out);
+    else
+      rules.push(out);
   }
-  if ((s.declinedHomes ?? []).map(normalizeHomePath).includes(p))
-    return "declined";
-  if ((s.approvedHomes ?? []).map(normalizeHomePath).includes(p))
-    return "approved";
-  if ((s.extraClaudeHomes ?? []).map(normalizeHomePath).includes(p))
-    return "approved";
-  return "pending";
-}
-function isHomeSynced(path) {
-  const d = homeDecision(path);
-  return d === "primary" || d === "approved";
+  const version2 = pack.version || "";
+  serverPack = { version: version2, rules };
+  return { version: version2, accepted: rules.length, rejected };
 }
-function setDecision(path, decision) {
-  const p = normalizeHomePath(path);
-  let s;
-  try {
-    s = loadSettings();
-  } catch {
-    return false;
-  }
-  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
-  const declined = new Set((s.sources.declinedHomes ?? []).map(normalizeHomePath));
-  approved.delete(p);
-  declined.delete(p);
-  (decision === "approved" ? approved : declined).add(p);
-  s.sources.approvedHomes = [...approved];
-  s.sources.declinedHomes = [...declined];
-  try {
-    saveSettings(s);
-  } catch {
-    return false;
-  }
-  return true;
+function serverRulePackVersion() {
+  return serverPack ? serverPack.version || "unversioned" : null;
 }
-function approveHome(path) {
-  return setDecision(path, "approved");
+function activeRules() {
+  const base = settingsView().rules;
+  return serverPack && serverPack.rules.length > 0 ? [...base, ...serverPack.rules] : base;
 }
-function declineHome(path) {
-  return setDecision(path, "declined");
+function isRedactionEnabled() {
+  const env = isEnvRedactionRequested();
+  if (env !== null)
+    return env;
+  return settingsView().enabled;
 }
-var dirOf;
-var init_home_approval = __esm({
-  "../engine/dist/core/home-approval.js"() {
-    "use strict";
-    init_settings();
-    dirOf = (filePath) => dirname5(filePath);
-  }
-});
-
-// ../engine/dist/core/tool-paths.js
-import { existsSync as existsSync5, readdirSync as readdirSync4 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join6, dirname as dirname6, basename as basename2 } from "path";
-function claudeHomeDir() {
-  return process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome || join6(homedir3(), ".claude");
-}
-function claudeProjectDirs(opts = {}) {
-  const home = homedir3();
-  const dirs = [];
-  const addHome = (d) => {
-    const p = join6(d, "projects");
-    if (existsSync5(p) && !dirs.includes(p))
-      dirs.push(p);
-  };
-  addHome(claudeHomeDir());
-  const homeOverridden = !!(process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome);
-  if (!homeOverridden) {
-    try {
-      for (const entry of readdirSync4(home, { withFileTypes: true })) {
-        if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
-          addHome(join6(home, entry.name));
-        }
-      }
-    } catch {
-    }
+function redactSecrets(text, opts = {}) {
+  if (!opts.force && !isRedactionEnabled())
+    return text;
+  if (!text)
+    return text;
+  const rules = opts.rules || activeRules();
+  let out = text;
+  for (const r of rules) {
+    out = out.replace(r.pattern, (...args) => {
+      const whole = args[0];
+      const m = args.slice(0, args.length);
+      const secret = secretOf(r, m);
+      if (secret == null)
+        return whole;
+      if (opts.count)
+        opts.count.redactions++;
+      return whole.slice(0, whole.length - secret.length) + `[REDACTED:${r.label}]`;
+    });
   }
-  if (process.env.CLAUDE_DIRS) {
-    for (const d of process.env.CLAUDE_DIRS.split(",")) {
-      const t = d.trim();
-      if (t)
-        addHome(t.startsWith("~/") ? join6(home, t.slice(2)) : t);
-    }
+  const ctx = findContextualSecrets(out);
+  for (let i = ctx.length - 1; i >= 0; i--) {
+    const { start, end } = ctx[i];
+    if (opts.count)
+      opts.count.redactions++;
+    out = out.slice(0, start) + "[REDACTED:secret-context]" + out.slice(end);
   }
-  if (dirs.length === 0)
-    dirs.push(join6(claudeHomeDir(), "projects"));
-  return applyDecisions(dirs, opts.includeExcluded);
-}
-function _setSourceExclusionFilter(fn) {
-  _sourceExclusionFilter = fn;
-}
-function geminiHomeDir() {
-  return process.env.CHAT_RECALL_GEMINI_HOME || sources().geminiHome || join6(homedir3(), ".gemini");
-}
-function opencodeDbPath() {
-  return process.env.CHAT_RECALL_OPENCODE_DB || sources().opencodeDbPath || join6(homedir3(), ".local", "share", "opencode", "opencode.db");
-}
-function codexHomeDir() {
-  return process.env.CHAT_RECALL_CODEX_HOME || sources().codexHome || join6(homedir3(), ".codex");
-}
-function agyHomeDir() {
-  return process.env.CHAT_RECALL_AGY_HOME || sources().agyHome || join6(homedir3(), ".gemini", "antigravity-cli");
+  return out;
 }
-function cursorHomeDir() {
-  return process.env.CHAT_RECALL_CURSOR_HOME || sources().cursorHome || join6(homedir3(), ".cursor");
+function maskSecret(s) {
+  if (!s)
+    return "";
+  if (s.length <= 4)
+    return "*".repeat(s.length);
+  return "*".repeat(Math.min(s.length - 4, 60)) + s.slice(-4);
 }
-function cursorIdeHomeDir() {
-  return process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome || (process.platform === "darwin" ? join6(homedir3(), "Library", "Application Support", "Cursor") : join6(homedir3(), ".config", "Cursor"));
+function globalRegexFor(pattern) {
+  const flags = pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g";
+  const key2 = pattern.source + "\0" + flags;
+  let re = globalRegexCache.get(key2);
+  if (!re) {
+    re = new RegExp(pattern.source, flags);
+    globalRegexCache.set(key2, re);
+  }
+  return re;
 }
-function siblingHomes(base, overridden, suffix) {
-  const roots = [];
-  const add = (home) => {
-    const root = suffix ? join6(home, suffix) : home;
-    if (existsSync5(root) && !roots.includes(root))
-      roots.push(root);
-  };
-  add(base);
-  if (!overridden) {
-    const parent = dirname6(base);
-    const leaf = basename2(base);
-    try {
-      for (const entry of readdirSync4(parent, { withFileTypes: true })) {
-        if (!entry.isDirectory())
-          continue;
-        if (entry.name === leaf || !entry.name.startsWith(leaf + "-"))
-          continue;
-        add(join6(parent, entry.name));
-      }
-    } catch {
+function makeLineResolver(text) {
+  const starts = [];
+  for (let i = text.indexOf("\n"); i !== -1; i = text.indexOf("\n", i + 1))
+    starts.push(i);
+  return (index) => {
+    let lo = 0, hi = starts.length;
+    while (lo < hi) {
+      const mid = lo + hi >> 1;
+      if (starts[mid] < index)
+        lo = mid + 1;
+      else
+        hi = mid;
     }
-  }
-  return roots;
+    return lo + 1;
+  };
 }
-function applyDecisions(roots, includeExcluded) {
-  if (roots.length === 0)
-    return roots;
-  let kept = roots;
-  if (!includeExcluded) {
-    try {
-      grandfatherLegacyHomes();
-      const approved = kept.filter((r) => isHomeSynced(dirname6(r)));
-      if (approved.length > 0)
-        kept = approved;
-    } catch {
+function scanTextForFindings(text, opts = {}) {
+  if (!text)
+    return [];
+  const rules = opts.rules || activeRules();
+  const findings = [];
+  const seenSpans = /* @__PURE__ */ new Set();
+  const lineAt = makeLineResolver(text);
+  for (const r of rules) {
+    const re = globalRegexFor(r.pattern);
+    re.lastIndex = 0;
+    let m;
+    while ((m = re.exec(text)) !== null) {
+      const secret = secretOf(r, m);
+      if (secret == null) {
+        if (re.lastIndex === m.index)
+          re.lastIndex++;
+        continue;
+      }
+      const at = m.index + (m[0].length - secret.length);
+      const span = `${at}:${secret.length}`;
+      if (!seenSpans.has(span)) {
+        seenSpans.add(span);
+        findings.push({ rule: r.label, line: lineAt(at), preview: maskSecret(secret) });
+      }
+      if (re.lastIndex === m.index)
+        re.lastIndex++;
     }
   }
-  if (!includeExcluded && _sourceExclusionFilter) {
-    const notExcluded = kept.filter((r) => !_sourceExclusionFilter(r));
-    if (notExcluded.length > 0)
-      kept = notExcluded;
+  for (const { start, end } of findContextualSecrets(text)) {
+    const line = lineAt(start);
+    findings.push({ rule: "secret-context", line, preview: maskSecret(text.slice(start, end)) });
   }
-  return kept;
-}
-function applyExclusions(roots, includeExcluded) {
-  return applyDecisions(roots, includeExcluded);
-}
-function codexSessionDirs(opts = {}) {
-  const overridden = !!(process.env.CHAT_RECALL_CODEX_HOME || sources().codexHome);
-  return applyExclusions(siblingHomes(codexHomeDir(), overridden, "sessions"), opts.includeExcluded);
-}
-function agyBrainDirs(opts = {}) {
-  const overridden = !!(process.env.CHAT_RECALL_AGY_HOME || sources().agyHome);
-  return applyExclusions(siblingHomes(agyHomeDir(), overridden, "brain"), opts.includeExcluded);
-}
-function cursorChatDirs(opts = {}) {
-  const overridden = !!(process.env.CHAT_RECALL_CURSOR_HOME || sources().cursorHome);
-  return applyExclusions(siblingHomes(cursorHomeDir(), overridden, "chats"), opts.includeExcluded);
-}
-function cursorIdeWorkspaceDirs(opts = {}) {
-  const overridden = !!(process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome);
-  return applyExclusions(siblingHomes(cursorIdeHomeDir(), overridden, join6("User", "workspaceStorage")), opts.includeExcluded);
+  return findings;
 }
-function cursorIdeGlobalDbs(opts = {}) {
-  const overridden = !!(process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome);
-  const roots = applyExclusions(siblingHomes(cursorIdeHomeDir(), overridden, join6("User", "globalStorage")), opts.includeExcluded);
-  const dbs = [];
-  for (const r of roots) {
-    const p = join6(r, "state.vscdb");
-    if (existsSync5(p) && !dbs.includes(p))
-      dbs.push(p);
+function privacyView() {
+  let mtimeMs = -1;
+  try {
+    mtimeMs = statSync5(settingsFilePath()).mtimeMs;
+  } catch {
   }
-  return dbs;
-}
-function opencodeDbPaths(opts = {}) {
-  const primary = opencodeDbPath();
-  const overridden = !!(process.env.CHAT_RECALL_OPENCODE_DB || sources().opencodeDbPath);
-  const dbFile = basename2(primary);
-  const dirs = siblingHomes(dirname6(primary), overridden, "");
-  const dbs = [];
-  for (const d of dirs) {
-    const p = join6(d, dbFile);
-    if (existsSync5(p) && !dbs.includes(p))
-      dbs.push(p);
+  if (privacyCache && privacyCache.mtimeMs === mtimeMs)
+    return privacyCache;
+  let redactToolOutputs = false, redactFilePaths = false;
+  try {
+    const s = loadSettings();
+    redactToolOutputs = !!s.privacy?.redactToolOutputs;
+    redactFilePaths = !!s.privacy?.redactFilePaths;
+  } catch {
   }
-  if (dbs.length === 0)
-    dbs.push(primary);
-  return applyExclusions(dbs, opts.includeExcluded);
+  privacyCache = { mtimeMs, redactToolOutputs, redactFilePaths };
+  return privacyCache;
 }
-function extraClaudeHomeDirs() {
-  const extras = sources().extraClaudeHomes ?? [];
-  const primary = claudeHomeDir();
-  return Array.from(new Set(extras)).filter((p) => p && p !== primary);
+function isToolOutputRedactionEnabled() {
+  return privacyView().redactToolOutputs;
 }
-function claudeHomeDirs() {
-  const overridden = !!(process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome);
-  const homes = siblingHomes(claudeHomeDir(), overridden, "").filter((h) => basename2(h) !== ".claude-code");
-  for (const extra of extraClaudeHomeDirs()) {
-    if (existsSync5(extra) && !homes.includes(extra))
-      homes.push(extra);
-  }
-  return homes;
+function redactToolResultBody(toolName, body) {
+  if (!body)
+    return body;
+  return `[redacted: ${toolName} output, ${body.length} chars]`;
 }
-var sources, _sourceExclusionFilter;
-var init_tool_paths = __esm({
-  "../engine/dist/core/tool-paths.js"() {
-    "use strict";
-    init_home_approval();
-    init_settings();
-    sources = loadSourceSettings;
-    _sourceExclusionFilter = null;
-  }
-});
-
-// ../engine/dist/core/secret-redactor.js
-import { statSync as statSync5 } from "fs";
-function secretOf(rule, m) {
-  const raw = rule.secret != null ? m[rule.secret] : m[0];
-  if (raw == null)
-    return null;
-  if (rule.where && !rule.where(raw))
-    return null;
-  return raw;
-}
-function looksLikeSecretToken(t) {
-  if (t.length < 32)
-    return false;
-  if (/^[a-f0-9]+$/i.test(t))
-    return true;
-  return /[A-Z]/.test(t) && /[a-z]/.test(t) && /[0-9]/.test(t);
-}
-function findContextualSecrets(text) {
-  if (!text)
-    return [];
-  const ranges = [];
-  let m;
-  SECRET_CONTEXT_RE.lastIndex = 0;
-  while ((m = SECRET_CONTEXT_RE.exec(text)) !== null) {
-    const winStart = m.index + m[0].length;
-    const window = text.slice(winStart, winStart + 80);
-    HIGH_ENTROPY_TOKEN_RE.lastIndex = 0;
-    let tm;
-    while ((tm = HIGH_ENTROPY_TOKEN_RE.exec(window)) !== null) {
-      if (!looksLikeSecretToken(tm[0]))
-        continue;
-      if (/^[a-f0-9]+$/i.test(tm[0]) && /\b(?:commit|sha-?\d*|hash|digest|checksum|uuid|guid|etag|blob|ref)\b/i.test(window.slice(0, tm.index))) {
-        continue;
-      }
-      ranges.push({ start: winStart + tm.index, end: winStart + tm.index + tm[0].length });
-      break;
-    }
-  }
-  ranges.sort((a, b) => a.start - b.start);
-  const out = [];
-  for (const r of ranges) {
-    const last = out[out.length - 1];
-    if (last && r.start < last.end) {
-      last.end = Math.max(last.end, r.end);
-      continue;
-    }
-    out.push({ ...r });
-  }
-  return out;
-}
-function isEnvRedactionRequested() {
-  const v = process.env.CHAT_RECALL_REDACT_INDEX;
-  if (v === void 0)
-    return null;
-  return v === "1" || v === "true" || v === "yes";
-}
-function settingsView() {
-  let mtimeMs = -1;
-  try {
-    mtimeMs = statSync5(settingsFilePath()).mtimeMs;
-  } catch {
-  }
-  if (cache && cache.mtimeMs === mtimeMs)
-    return cache;
-  let enabled = false;
-  const extra = [];
-  try {
-    const s = loadSettings();
-    enabled = !!s.privacy?.redactIndex;
-    for (const r of s.privacy?.redactionRules ?? []) {
-      try {
-        extra.push({ label: r.label, pattern: new RegExp(r.pattern, "g") });
-      } catch {
-      }
-    }
-  } catch {
-  }
-  cache = { mtimeMs, enabled, rules: [...DEFAULT_REDACTION_RULES, ...extra] };
-  return cache;
-}
-function compileServerRule(spec) {
-  const name = spec.name || "(unnamed)";
-  if (!spec.regex)
-    return { name, reason: "empty pattern" };
-  if (spec.regex.length > MAX_PATTERN_LEN)
-    return { name, reason: `pattern longer than ${MAX_PATTERN_LEN} chars` };
-  let re;
-  try {
-    const flags = "g" + (spec.flags || "").replace(/[^ims]/g, "");
-    re = new RegExp(spec.regex, flags);
-  } catch (e) {
-    return { name, reason: `invalid regex: ${e instanceof Error ? e.message : e}` };
-  }
-  if (re.test(""))
-    return { name, reason: "matches the empty string (would redact everything)" };
-  re.lastIndex = 0;
-  if (re.test(CANARY))
-    return { name, reason: "matches benign text \u2014 too broad" };
-  re.lastIndex = 0;
-  return { label: `${spec.source === "pack" ? "pack" : "tenant"}:${name}`, pattern: re };
-}
-function installServerRulePack(pack) {
-  const rejected = [];
-  const rules = [];
-  for (const spec of pack.rules || []) {
-    if (rules.length >= MAX_PACK_RULES) {
-      rejected.push({ name: spec.name || "(unnamed)", reason: `pack exceeds ${MAX_PACK_RULES} rules` });
-      continue;
-    }
-    const out = compileServerRule(spec);
-    if ("reason" in out)
-      rejected.push(out);
-    else
-      rules.push(out);
-  }
-  const version2 = pack.version || "";
-  serverPack = { version: version2, rules };
-  return { version: version2, accepted: rules.length, rejected };
-}
-function serverRulePackVersion() {
-  return serverPack ? serverPack.version || "unversioned" : null;
-}
-function activeRules() {
-  const base = settingsView().rules;
-  return serverPack && serverPack.rules.length > 0 ? [...base, ...serverPack.rules] : base;
-}
-function isRedactionEnabled() {
-  const env = isEnvRedactionRequested();
-  if (env !== null)
-    return env;
-  return settingsView().enabled;
-}
-function redactSecrets(text, opts = {}) {
-  if (!opts.force && !isRedactionEnabled())
-    return text;
-  if (!text)
-    return text;
-  const rules = opts.rules || activeRules();
-  let out = text;
-  for (const r of rules) {
-    out = out.replace(r.pattern, (...args) => {
-      const whole = args[0];
-      const m = args.slice(0, args.length);
-      const secret = secretOf(r, m);
-      if (secret == null)
-        return whole;
-      if (opts.count)
-        opts.count.redactions++;
-      return whole.slice(0, whole.length - secret.length) + `[REDACTED:${r.label}]`;
-    });
-  }
-  const ctx = findContextualSecrets(out);
-  for (let i = ctx.length - 1; i >= 0; i--) {
-    const { start, end } = ctx[i];
-    if (opts.count)
-      opts.count.redactions++;
-    out = out.slice(0, start) + "[REDACTED:secret-context]" + out.slice(end);
-  }
-  return out;
-}
-function maskSecret(s) {
-  if (!s)
-    return "";
-  if (s.length <= 4)
-    return "*".repeat(s.length);
-  return "*".repeat(Math.min(s.length - 4, 60)) + s.slice(-4);
-}
-function globalRegexFor(pattern) {
-  const flags = pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g";
-  const key2 = pattern.source + "\0" + flags;
-  let re = globalRegexCache.get(key2);
-  if (!re) {
-    re = new RegExp(pattern.source, flags);
-    globalRegexCache.set(key2, re);
-  }
-  return re;
-}
-function makeLineResolver(text) {
-  const starts = [];
-  for (let i = text.indexOf("\n"); i !== -1; i = text.indexOf("\n", i + 1))
-    starts.push(i);
-  return (index) => {
-    let lo = 0, hi = starts.length;
-    while (lo < hi) {
-      const mid = lo + hi >> 1;
-      if (starts[mid] < index)
-        lo = mid + 1;
-      else
-        hi = mid;
-    }
-    return lo + 1;
-  };
-}
-function scanTextForFindings(text, opts = {}) {
-  if (!text)
-    return [];
-  const rules = opts.rules || activeRules();
-  const findings = [];
-  const seenSpans = /* @__PURE__ */ new Set();
-  const lineAt = makeLineResolver(text);
-  for (const r of rules) {
-    const re = globalRegexFor(r.pattern);
-    re.lastIndex = 0;
-    let m;
-    while ((m = re.exec(text)) !== null) {
-      const secret = secretOf(r, m);
-      if (secret == null) {
-        if (re.lastIndex === m.index)
-          re.lastIndex++;
-        continue;
-      }
-      const at = m.index + (m[0].length - secret.length);
-      const span = `${at}:${secret.length}`;
-      if (!seenSpans.has(span)) {
-        seenSpans.add(span);
-        findings.push({ rule: r.label, line: lineAt(at), preview: maskSecret(secret) });
-      }
-      if (re.lastIndex === m.index)
-        re.lastIndex++;
-    }
-  }
-  for (const { start, end } of findContextualSecrets(text)) {
-    const line = lineAt(start);
-    findings.push({ rule: "secret-context", line, preview: maskSecret(text.slice(start, end)) });
-  }
-  return findings;
-}
-function privacyView() {
-  let mtimeMs = -1;
-  try {
-    mtimeMs = statSync5(settingsFilePath()).mtimeMs;
-  } catch {
-  }
-  if (privacyCache && privacyCache.mtimeMs === mtimeMs)
-    return privacyCache;
-  let redactToolOutputs = false, redactFilePaths = false;
-  try {
-    const s = loadSettings();
-    redactToolOutputs = !!s.privacy?.redactToolOutputs;
-    redactFilePaths = !!s.privacy?.redactFilePaths;
-  } catch {
-  }
-  privacyCache = { mtimeMs, redactToolOutputs, redactFilePaths };
-  return privacyCache;
-}
-function isToolOutputRedactionEnabled() {
-  return privacyView().redactToolOutputs;
-}
-function redactToolResultBody(toolName, body) {
-  if (!body)
-    return body;
-  return `[redacted: ${toolName} output, ${body.length} chars]`;
-}
-var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, globalRegexCache, privacyCache;
-var init_secret_redactor = __esm({
-  "../engine/dist/core/secret-redactor.js"() {
+var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, globalRegexCache, privacyCache;
+var init_secret_redactor = __esm({
+  "../engine/dist/core/secret-redactor.js"() {
     "use strict";
     init_settings();
     DEFAULT_REDACTION_RULES = [
@@ -6302,164 +5996,493 @@ var init_secret_redactor = __esm({
     globalRegexCache = /* @__PURE__ */ new Map();
     privacyCache = null;
   }
-});
-
-// ../engine/dist/parsers/chunker.js
-function stripInjectedBanners(text) {
-  let result = text;
-  for (const re of INJECTED_BANNERS)
-    result = result.replace(re, " ");
-  return result;
+});
+
+// ../engine/dist/parsers/chunker.js
+function stripInjectedBanners(text) {
+  let result = text;
+  for (const re of INJECTED_BANNERS)
+    result = result.replace(re, " ");
+  return result;
+}
+function cleanText(text) {
+  let result = text.replace(/<system-reminder>.*?<\/system-reminder>/gs, "");
+  result = stripInjectedBanners(result);
+  result = result.replace(/\x1b\[[0-9;]*m/g, "");
+  result = result.replace(/\s+/g, " ");
+  return result.trim();
+}
+function windowText(text, maxChars, maxWindows = 12) {
+  const clean = cleanText(text);
+  if (clean.length <= maxChars)
+    return clean ? [clean] : [];
+  const out = [];
+  const overlap = 80;
+  const step = Math.max(1, maxChars - overlap);
+  for (let i = 0; i < clean.length && out.length < maxWindows; i += step) {
+    out.push(clean.slice(i, i + maxChars));
+  }
+  return out;
+}
+function chunkSession(entry, content, maxChunks = 80, maxTokensPerChunk = 500) {
+  const chunks = [];
+  const maxChars = maxTokensPerChunk * 4;
+  const baseData = {
+    sessionId: entry.sessionId,
+    projectPath: entry.projectPath,
+    created: entry.created,
+    modified: entry.modified,
+    mtime: entry.fileMtime,
+    firstPrompt: entry.firstPrompt || content.firstPrompt,
+    sourceFile: content.sessionPath
+  };
+  for (let i = 0; i < Math.min(2, content.summaries.length); i++) {
+    const summary = content.summaries[i];
+    if (!summary?.trim())
+      continue;
+    const chunkText = cleanText(summary.slice(0, maxChars));
+    if (chunkText.length > 8e3) {
+      chunks.push({
+        chunkId: `${entry.sessionId}_summary_${i}`,
+        chunkType: "summary",
+        text: chunkText.slice(0, 8e3),
+        sourceLine: 0,
+        ...baseData
+      });
+    } else {
+      chunks.push({
+        chunkId: `${entry.sessionId}_summary_${i}`,
+        chunkType: "summary",
+        text: chunkText,
+        sourceLine: 0,
+        ...baseData
+      });
+    }
+  }
+  if (chunks.length >= maxChunks) {
+    return chunks.slice(0, maxChunks);
+  }
+  const firstPrompt = entry.firstPrompt || content.firstPrompt;
+  if (firstPrompt?.trim()) {
+    const firstLine = content.userMessages[0]?.lineNumber || 0;
+    chunks.push({
+      chunkId: `${entry.sessionId}_first_prompt`,
+      chunkType: "first_prompt",
+      text: cleanText(firstPrompt.slice(0, maxChars)),
+      sourceLine: firstLine,
+      ...baseData
+    });
+  }
+  if (chunks.length >= maxChunks) {
+    return chunks.slice(0, maxChunks);
+  }
+  const userStart = firstPrompt ? 1 : 0;
+  for (let i = userStart; i < content.userMessages.length; i++) {
+    if (chunks.length >= maxChunks)
+      break;
+    const msg = content.userMessages[i];
+    if (!msg.text.trim())
+      continue;
+    const windows = windowText(msg.text, maxChars);
+    for (let w = 0; w < windows.length; w++) {
+      if (chunks.length >= maxChunks)
+        break;
+      chunks.push({
+        chunkId: `${entry.sessionId}_user_${i}_${w}`,
+        chunkType: "user_context",
+        text: windows[w],
+        sourceLine: msg.lineNumber,
+        ...baseData
+      });
+    }
+  }
+  if (chunks.length >= maxChunks) {
+    return chunks.slice(0, maxChunks);
+  }
+  for (let i = 0; i < content.assistantMessages.length; i++) {
+    if (chunks.length >= maxChunks)
+      break;
+    const msg = content.assistantMessages[i];
+    if (!msg.text.trim() || msg.text.length <= 50)
+      continue;
+    const windows = windowText(msg.text, maxChars);
+    for (let w = 0; w < windows.length; w++) {
+      if (chunks.length >= maxChunks)
+        break;
+      chunks.push({
+        chunkId: `${entry.sessionId}_assistant_${i}_${w}`,
+        chunkType: "assistant",
+        text: windows[w],
+        sourceLine: msg.lineNumber,
+        ...baseData
+      });
+    }
+  }
+  if (chunks.length >= maxChunks) {
+    return chunks.slice(0, maxChunks);
+  }
+  if (content.toolResults.length > 0) {
+    const webSearches = content.toolResults.filter((r) => r.contentType === "web_search");
+    const otherResults = content.toolResults.filter((r) => r.contentType !== "web_search");
+    const resultsToProcess = [...webSearches.slice(0, 5), ...otherResults.slice(0, 10)];
+    const stripBodies = isToolOutputRedactionEnabled();
+    for (let i = 0; i < resultsToProcess.length; i++) {
+      if (chunks.length >= maxChunks)
+        break;
+      const result = resultsToProcess[i];
+      if (result.text.trim()) {
+        const body = stripBodies && result.contentType !== "web_search" ? redactToolResultBody(result.contentType, result.text) : result.text.slice(0, maxChars);
+        chunks.push({
+          chunkId: `${entry.sessionId}_${result.contentType}_${i}`,
+          chunkType: result.contentType,
+          text: cleanText(body),
+          sourceLine: result.lineNumber,
+          ...baseData
+        });
+      }
+    }
+  }
+  return chunks.slice(0, maxChunks);
+}
+var INJECTED_BANNERS;
+var init_chunker = __esm({
+  "../engine/dist/parsers/chunker.js"() {
+    "use strict";
+    init_secret_redactor();
+    INJECTED_BANNERS = [
+      /MCP issues detected\. ?Run \/mcp list for status\.?/g,
+      /Context low[^\n]*Run \/compact[^\n]*/g,
+      /API Error:[^\n]{0,120}/g
+    ];
+  }
+});
+
+// ../engine/dist/core/home-approval.js
+import { existsSync as existsSync4, readdirSync as readdirSync3, realpathSync as realpathSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join5, dirname as dirname5 } from "path";
+function normalizeHomePath(p) {
+  const expanded = p.startsWith("~") ? join5(homedir2(), p.slice(1)) : p;
+  const trimmed = expanded.replace(/[/\\]+$/, "");
+  try {
+    return realpathSync2(trimmed);
+  } catch {
+    return trimmed;
+  }
+}
+function legacyAutoSyncedHomes() {
+  const home = homedir2();
+  const out = [];
+  const add = (dir, marker) => {
+    if (!existsSync4(join5(dir, marker)))
+      return;
+    const n = normalizeHomePath(dir);
+    if (!out.includes(n))
+      out.push(n);
+  };
+  const bases = [
+    { base: join5(home, ".claude"), marker: "projects" },
+    { base: join5(home, ".gemini"), marker: "tmp" },
+    { base: join5(home, ".codex"), marker: "sessions" },
+    { base: join5(home, ".gemini", "antigravity-cli"), marker: "brain" },
+    { base: join5(home, ".local", "share", "opencode"), marker: "opencode.db" },
+    { base: join5(home, ".cursor"), marker: "chats" }
+  ];
+  for (const { base, marker } of bases) {
+    add(base, marker);
+    const parent = dirname5(base);
+    const leaf = base.slice(parent.length + 1);
+    try {
+      for (const e of readdirSync3(parent, { withFileTypes: true })) {
+        if (!e.isDirectory())
+          continue;
+        if (e.name === leaf || !e.name.startsWith(leaf + "-"))
+          continue;
+        if (e.name === ".claude-code")
+          continue;
+        add(join5(parent, e.name), marker);
+      }
+    } catch {
+    }
+  }
+  return out;
 }
-function cleanText(text) {
-  let result = text.replace(/<system-reminder>.*?<\/system-reminder>/gs, "");
-  result = stripInjectedBanners(result);
-  result = result.replace(/\x1b\[[0-9;]*m/g, "");
-  result = result.replace(/\s+/g, " ");
-  return result.trim();
+function grandfatherLegacyHomes() {
+  let s;
+  try {
+    s = loadSettings();
+  } catch {
+    return { seeded: [] };
+  }
+  if (s.sources.homesGrandfathered)
+    return { seeded: [] };
+  const legacy = legacyAutoSyncedHomes();
+  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
+  const seeded = [];
+  for (const p of legacy) {
+    if (!approved.has(p)) {
+      approved.add(p);
+      seeded.push(p);
+    }
+  }
+  s.sources.approvedHomes = [...approved];
+  s.sources.homesGrandfathered = true;
+  try {
+    saveSettings(s);
+  } catch {
+    return { seeded: [] };
+  }
+  return { seeded };
 }
-function windowText(text, maxChars, maxWindows = 12) {
-  const clean = cleanText(text);
-  if (clean.length <= maxChars)
-    return clean ? [clean] : [];
-  const out = [];
-  const overlap = 80;
-  const step = Math.max(1, maxChars - overlap);
-  for (let i = 0; i < clean.length && out.length < maxWindows; i += step) {
-    out.push(clean.slice(i, i + maxChars));
+function primaryHomes() {
+  const home = homedir2();
+  const env = process.env;
+  let s;
+  try {
+    s = loadSettings().sources;
+  } catch {
+    s = void 0;
   }
-  return out;
+  const opencodeDb = env.CHAT_RECALL_OPENCODE_DB || s?.opencodeDbPath || join5(home, ".local", "share", "opencode", "opencode.db");
+  const candidates2 = [
+    env.CHAT_RECALL_CLAUDE_HOME || s?.claudeHome || join5(home, ".claude"),
+    env.CHAT_RECALL_GEMINI_HOME || s?.geminiHome || join5(home, ".gemini"),
+    env.CHAT_RECALL_CODEX_HOME || s?.codexHome || join5(home, ".codex"),
+    env.CHAT_RECALL_AGY_HOME || s?.agyHome || join5(home, ".gemini", "antigravity-cli"),
+    env.CHAT_RECALL_CURSOR_HOME || s?.cursorHome || join5(home, ".cursor"),
+    dirOf(opencodeDb)
+  ];
+  return candidates2.map(normalizeHomePath);
 }
-function chunkSession(entry, content, maxChunks = 80, maxTokensPerChunk = 500) {
-  const chunks = [];
-  const maxChars = maxTokensPerChunk * 4;
-  const baseData = {
-    sessionId: entry.sessionId,
-    projectPath: entry.projectPath,
-    created: entry.created,
-    modified: entry.modified,
-    mtime: entry.fileMtime,
-    firstPrompt: entry.firstPrompt || content.firstPrompt,
-    sourceFile: content.sessionPath
+function homeDecision(path) {
+  const p = normalizeHomePath(path);
+  if (primaryHomes().includes(p))
+    return "primary";
+  let s;
+  try {
+    s = loadSettings().sources;
+  } catch {
+    return "pending";
+  }
+  if ((s.declinedHomes ?? []).map(normalizeHomePath).includes(p))
+    return "declined";
+  if ((s.approvedHomes ?? []).map(normalizeHomePath).includes(p))
+    return "approved";
+  if ((s.extraClaudeHomes ?? []).map(normalizeHomePath).includes(p))
+    return "approved";
+  return "pending";
+}
+function isHomeSynced(path) {
+  const d = homeDecision(path);
+  return d === "primary" || d === "approved";
+}
+function setDecision(path, decision) {
+  const p = normalizeHomePath(path);
+  let s;
+  try {
+    s = loadSettings();
+  } catch {
+    return false;
+  }
+  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
+  const declined = new Set((s.sources.declinedHomes ?? []).map(normalizeHomePath));
+  approved.delete(p);
+  declined.delete(p);
+  (decision === "approved" ? approved : declined).add(p);
+  s.sources.approvedHomes = [...approved];
+  s.sources.declinedHomes = [...declined];
+  try {
+    saveSettings(s);
+  } catch {
+    return false;
+  }
+  return true;
+}
+function approveHome(path) {
+  return setDecision(path, "approved");
+}
+function declineHome(path) {
+  return setDecision(path, "declined");
+}
+var dirOf;
+var init_home_approval = __esm({
+  "../engine/dist/core/home-approval.js"() {
+    "use strict";
+    init_settings();
+    dirOf = (filePath) => dirname5(filePath);
+  }
+});
+
+// ../engine/dist/core/tool-paths.js
+import { existsSync as existsSync5, readdirSync as readdirSync4 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join6, dirname as dirname6, basename as basename2 } from "path";
+function claudeHomeDir() {
+  return process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome || join6(homedir3(), ".claude");
+}
+function claudeProjectDirs(opts = {}) {
+  const home = homedir3();
+  const dirs = [];
+  const addHome = (d) => {
+    const p = join6(d, "projects");
+    if (existsSync5(p) && !dirs.includes(p))
+      dirs.push(p);
   };
-  for (let i = 0; i < Math.min(2, content.summaries.length); i++) {
-    const summary = content.summaries[i];
-    if (!summary?.trim())
-      continue;
-    const chunkText = cleanText(summary.slice(0, maxChars));
-    if (chunkText.length > 8e3) {
-      chunks.push({
-        chunkId: `${entry.sessionId}_summary_${i}`,
-        chunkType: "summary",
-        text: chunkText.slice(0, 8e3),
-        sourceLine: 0,
-        ...baseData
-      });
-    } else {
-      chunks.push({
-        chunkId: `${entry.sessionId}_summary_${i}`,
-        chunkType: "summary",
-        text: chunkText,
-        sourceLine: 0,
-        ...baseData
-      });
+  addHome(claudeHomeDir());
+  const homeOverridden = !!(process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome);
+  if (!homeOverridden) {
+    try {
+      for (const entry of readdirSync4(home, { withFileTypes: true })) {
+        if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
+          addHome(join6(home, entry.name));
+        }
+      }
+    } catch {
     }
   }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
-  }
-  const firstPrompt = entry.firstPrompt || content.firstPrompt;
-  if (firstPrompt?.trim()) {
-    const firstLine = content.userMessages[0]?.lineNumber || 0;
-    chunks.push({
-      chunkId: `${entry.sessionId}_first_prompt`,
-      chunkType: "first_prompt",
-      text: cleanText(firstPrompt.slice(0, maxChars)),
-      sourceLine: firstLine,
-      ...baseData
-    });
+  if (process.env.CLAUDE_DIRS) {
+    for (const d of process.env.CLAUDE_DIRS.split(",")) {
+      const t = d.trim();
+      if (t)
+        addHome(t.startsWith("~/") ? join6(home, t.slice(2)) : t);
+    }
   }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
+  if (dirs.length === 0)
+    dirs.push(join6(claudeHomeDir(), "projects"));
+  return applyDecisions(dirs, opts.includeExcluded);
+}
+function _setSourceExclusionFilter(fn) {
+  _sourceExclusionFilter = fn;
+}
+function geminiHomeDir() {
+  return process.env.CHAT_RECALL_GEMINI_HOME || sources().geminiHome || join6(homedir3(), ".gemini");
+}
+function opencodeDbPath() {
+  return process.env.CHAT_RECALL_OPENCODE_DB || sources().opencodeDbPath || join6(homedir3(), ".local", "share", "opencode", "opencode.db");
+}
+function codexHomeDir() {
+  return process.env.CHAT_RECALL_CODEX_HOME || sources().codexHome || join6(homedir3(), ".codex");
+}
+function agyHomeDir() {
+  return process.env.CHAT_RECALL_AGY_HOME || sources().agyHome || join6(homedir3(), ".gemini", "antigravity-cli");
+}
+function cursorHomeDir() {
+  return process.env.CHAT_RECALL_CURSOR_HOME || sources().cursorHome || join6(homedir3(), ".cursor");
+}
+function cursorIdeHomeDir() {
+  return process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome || (process.platform === "darwin" ? join6(homedir3(), "Library", "Application Support", "Cursor") : join6(homedir3(), ".config", "Cursor"));
+}
+function siblingHomes(base, overridden, suffix) {
+  const roots = [];
+  const add = (home) => {
+    const root = suffix ? join6(home, suffix) : home;
+    if (existsSync5(root) && !roots.includes(root))
+      roots.push(root);
+  };
+  add(base);
+  if (!overridden) {
+    const parent = dirname6(base);
+    const leaf = basename2(base);
+    try {
+      for (const entry of readdirSync4(parent, { withFileTypes: true })) {
+        if (!entry.isDirectory())
+          continue;
+        if (entry.name === leaf || !entry.name.startsWith(leaf + "-"))
+          continue;
+        add(join6(parent, entry.name));
+      }
+    } catch {
+    }
   }
-  const userStart = firstPrompt ? 1 : 0;
-  for (let i = userStart; i < content.userMessages.length; i++) {
-    if (chunks.length >= maxChunks)
-      break;
-    const msg = content.userMessages[i];
-    if (!msg.text.trim())
-      continue;
-    const windows = windowText(msg.text, maxChars);
-    for (let w = 0; w < windows.length; w++) {
-      if (chunks.length >= maxChunks)
-        break;
-      chunks.push({
-        chunkId: `${entry.sessionId}_user_${i}_${w}`,
-        chunkType: "user_context",
-        text: windows[w],
-        sourceLine: msg.lineNumber,
-        ...baseData
-      });
+  return roots;
+}
+function applyDecisions(roots, includeExcluded) {
+  if (roots.length === 0)
+    return roots;
+  let kept = roots;
+  if (!includeExcluded) {
+    try {
+      grandfatherLegacyHomes();
+      const approved = kept.filter((r) => isHomeSynced(dirname6(r)));
+      if (approved.length > 0)
+        kept = approved;
+    } catch {
     }
   }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
+  if (!includeExcluded && _sourceExclusionFilter) {
+    const notExcluded = kept.filter((r) => !_sourceExclusionFilter(r));
+    if (notExcluded.length > 0)
+      kept = notExcluded;
   }
-  for (let i = 0; i < content.assistantMessages.length; i++) {
-    if (chunks.length >= maxChunks)
-      break;
-    const msg = content.assistantMessages[i];
-    if (!msg.text.trim() || msg.text.length <= 50)
-      continue;
-    const windows = windowText(msg.text, maxChars);
-    for (let w = 0; w < windows.length; w++) {
-      if (chunks.length >= maxChunks)
-        break;
-      chunks.push({
-        chunkId: `${entry.sessionId}_assistant_${i}_${w}`,
-        chunkType: "assistant",
-        text: windows[w],
-        sourceLine: msg.lineNumber,
-        ...baseData
-      });
-    }
+  return kept;
+}
+function applyExclusions(roots, includeExcluded) {
+  return applyDecisions(roots, includeExcluded);
+}
+function codexSessionDirs(opts = {}) {
+  const overridden = !!(process.env.CHAT_RECALL_CODEX_HOME || sources().codexHome);
+  return applyExclusions(siblingHomes(codexHomeDir(), overridden, "sessions"), opts.includeExcluded);
+}
+function agyBrainDirs(opts = {}) {
+  const overridden = !!(process.env.CHAT_RECALL_AGY_HOME || sources().agyHome);
+  return applyExclusions(siblingHomes(agyHomeDir(), overridden, "brain"), opts.includeExcluded);
+}
+function cursorChatDirs(opts = {}) {
+  const overridden = !!(process.env.CHAT_RECALL_CURSOR_HOME || sources().cursorHome);
+  return applyExclusions(siblingHomes(cursorHomeDir(), overridden, "chats"), opts.includeExcluded);
+}
+function cursorIdeWorkspaceDirs(opts = {}) {
+  const overridden = !!(process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome);
+  return applyExclusions(siblingHomes(cursorIdeHomeDir(), overridden, join6("User", "workspaceStorage")), opts.includeExcluded);
+}
+function cursorIdeGlobalDbs(opts = {}) {
+  const overridden = !!(process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome);
+  const roots = applyExclusions(siblingHomes(cursorIdeHomeDir(), overridden, join6("User", "globalStorage")), opts.includeExcluded);
+  const dbs = [];
+  for (const r of roots) {
+    const p = join6(r, "state.vscdb");
+    if (existsSync5(p) && !dbs.includes(p))
+      dbs.push(p);
   }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
+  return dbs;
+}
+function opencodeDbPaths(opts = {}) {
+  const primary = opencodeDbPath();
+  const overridden = !!(process.env.CHAT_RECALL_OPENCODE_DB || sources().opencodeDbPath);
+  const dbFile = basename2(primary);
+  const dirs = siblingHomes(dirname6(primary), overridden, "");
+  const dbs = [];
+  for (const d of dirs) {
+    const p = join6(d, dbFile);
+    if (existsSync5(p) && !dbs.includes(p))
+      dbs.push(p);
   }
-  if (content.toolResults.length > 0) {
-    const webSearches = content.toolResults.filter((r) => r.contentType === "web_search");
-    const otherResults = content.toolResults.filter((r) => r.contentType !== "web_search");
-    const resultsToProcess = [...webSearches.slice(0, 5), ...otherResults.slice(0, 10)];
-    const stripBodies = isToolOutputRedactionEnabled();
-    for (let i = 0; i < resultsToProcess.length; i++) {
-      if (chunks.length >= maxChunks)
-        break;
-      const result = resultsToProcess[i];
-      if (result.text.trim()) {
-        const body = stripBodies && result.contentType !== "web_search" ? redactToolResultBody(result.contentType, result.text) : result.text.slice(0, maxChars);
-        chunks.push({
-          chunkId: `${entry.sessionId}_${result.contentType}_${i}`,
-          chunkType: result.contentType,
-          text: cleanText(body),
-          sourceLine: result.lineNumber,
-          ...baseData
-        });
-      }
-    }
+  if (dbs.length === 0)
+    dbs.push(primary);
+  return applyExclusions(dbs, opts.includeExcluded);
+}
+function extraClaudeHomeDirs() {
+  const extras = sources().extraClaudeHomes ?? [];
+  const primary = claudeHomeDir();
+  return Array.from(new Set(extras)).filter((p) => p && p !== primary);
+}
+function claudeHomeDirs() {
+  const overridden = !!(process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome);
+  const homes = siblingHomes(claudeHomeDir(), overridden, "").filter((h) => basename2(h) !== ".claude-code");
+  for (const extra of extraClaudeHomeDirs()) {
+    if (existsSync5(extra) && !homes.includes(extra))
+      homes.push(extra);
   }
-  return chunks.slice(0, maxChunks);
+  return homes;
 }
-var INJECTED_BANNERS;
-var init_chunker = __esm({
-  "../engine/dist/parsers/chunker.js"() {
+var sources, _sourceExclusionFilter;
+var init_tool_paths = __esm({
+  "../engine/dist/core/tool-paths.js"() {
     "use strict";
-    init_secret_redactor();
-    INJECTED_BANNERS = [
-      /MCP issues detected\. ?Run \/mcp list for status\.?/g,
-      /Context low[^\n]*Run \/compact[^\n]*/g,
-      /API Error:[^\n]{0,120}/g
-    ];
+    init_home_approval();
+    init_settings();
+    sources = loadSourceSettings;
+    _sourceExclusionFilter = null;
   }
 });
 
@@ -8114,13 +8137,26 @@ function resolveSessionContentGroups(sessionId) {
 }
 function withSessionReadCache(fn) {
   readScopeDepth++;
+  if (readScopeDepth === 1)
+    derivedScope = /* @__PURE__ */ new Map();
   try {
     return fn();
   } finally {
-    if (--readScopeDepth === 0)
+    if (--readScopeDepth === 0) {
       readScope = null;
+      derivedScope = null;
+    }
   }
 }
+function memoInSessionScope(key2, compute) {
+  if (!derivedScope)
+    return compute();
+  if (derivedScope.has(key2))
+    return derivedScope.get(key2);
+  const value = compute();
+  derivedScope.set(key2, value);
+  return value;
+}
 function readSessionGroupText(group) {
   let key2 = "";
   if (readScopeDepth > 0) {
@@ -8232,7 +8268,7 @@ function findCodexSessionFileIn(root, sessionId) {
   }
   return scanDir(root);
 }
-var scanScopeDepth, indexCache, readScope, readScopeDepth, geminiCache, MAX_EVENT_LINE_BYTES;
+var scanScopeDepth, indexCache, readScope, readScopeDepth, derivedScope, geminiCache, MAX_EVENT_LINE_BYTES;
 var init_live_session_scan = __esm({
   "../engine/dist/core/live-session-scan.js"() {
     "use strict";
@@ -8246,6 +8282,7 @@ var init_live_session_scan = __esm({
     indexCache = null;
     readScope = null;
     readScopeDepth = 0;
+    derivedScope = null;
     geminiCache = null;
     MAX_EVENT_LINE_BYTES = 8 * 1024 * 1024;
   }
@@ -8523,6 +8560,28 @@ var init_session_git = __esm({
   }
 });
 
+// ../engine/dist/core/session-multi-tool.js
+function extractTurnsAny(sessionId, opts = {}) {
+  const backend = getBackendForId(sessionId);
+  if (!backend)
+    return { sessionId, found: false, turns: [], startMs: 0, endMs: 0 };
+  return memoInSessionScope(`turns:${sessionId}:${opts.maxTurns ?? ""}:${opts.assistantMax ?? ""}`, () => backend.extractTurns(sessionId, opts));
+}
+function replaySessionAny(sessionId) {
+  const backend = getBackendForId(sessionId);
+  if (!backend)
+    return { sessionId, found: false, projectPath: "", files: [], totalLinesAdded: 0, totalLinesRemoved: 0 };
+  return memoInSessionScope(`replay:${sessionId}`, () => backend.replay(sessionId));
+}
+var init_session_multi_tool = __esm({
+  "../engine/dist/core/session-multi-tool.js"() {
+    "use strict";
+    init_tool_backend();
+    init_live_session_scan();
+    init_backends();
+  }
+});
+
 // ../engine/dist/core/session-outcome.js
 function extractDecisionsFromTurn(turn) {
   if (turn.kind !== "assistant_text" || !turn.text)
@@ -8619,7 +8678,7 @@ function computeOutcome(sessionId, opts = {}) {
   };
   if (!backend)
     return notFound;
-  const turnsRes = backend.extractTurns(sessionId, { assistantMax: 2e3 });
+  const turnsRes = extractTurnsAny(sessionId, { assistantMax: 2e3 });
   if (!turnsRes.found)
     return notFound;
   const decisions = [];
@@ -8658,7 +8717,7 @@ function computeOutcome(sessionId, opts = {}) {
     totalLinesAdded = fast.totalLinesAdded;
     totalLinesRemoved = fast.totalLinesRemoved;
   } else {
-    const replay = backend.replay(sessionId);
+    const replay = replaySessionAny(sessionId);
     filesChanged = replay.files.map((f) => f.file);
     totalLinesAdded = replay.totalLinesAdded;
     totalLinesRemoved = replay.totalLinesRemoved;
@@ -8697,6 +8756,7 @@ var init_session_outcome = __esm({
     init_session_sentiment();
     init_session_git();
     init_tool_backend();
+    init_session_multi_tool();
     init_backends();
     DECISION_PATTERNS = [
       /\b(?:I'?ll|I will|I'?m going to|Going to|Let me|We'?ll|We will|We should|Let'?s|I'?m about to|I'?m going to)\b[^\n.!?]*[.!?]/i,
@@ -9166,6 +9226,7 @@ var UUID_RE, ClaudeBackend, claudeBackend;
 var init_claude2 = __esm({
   "../engine/dist/core/backends/claude.js"() {
     "use strict";
+    init_live_session_scan();
     init_tool_paths();
     init_live_session_scan();
     init_session_outcome();
@@ -9428,6 +9489,9 @@ var init_claude2 = __esm({
        * splits show up alongside the parent.
        */
       readEvents(rawId) {
+        return memoInSessionScope(`events:claude:${rawId}`, () => this.#readEventsUncached(rawId));
+      }
+      #readEventsUncached(rawId) {
         const groups = resolveSessionContentGroups(rawId);
         if (groups.length === 0)
           return [];
@@ -15237,15 +15301,15 @@ function extractEntities(text, context = {}) {
     seen.add(key2);
     triples.push({ subject: s, predicate: p, object: o, confidence: conf, validFrom: context.validFrom });
   };
-  const projectName = context.projectPath ? context.projectPath.split("/").filter(Boolean).pop() || "" : "";
+  const projectName2 = context.projectPath ? context.projectPath.split("/").filter(Boolean).pop() || "" : "";
   for (const { pattern, countPattern, contextPattern, name, category } of TOOL_PATTERNS) {
     if (!pattern.test(text))
       continue;
     countPattern.lastIndex = 0;
     const mentions = (text.match(countPattern) || []).length;
     const contextual = contextPattern.test(text);
-    if (projectName && (mentions >= 2 || contextual)) {
-      addTriple(projectName, "uses", canonTool(name), Math.min(0.9, 0.5 + 0.1 * Math.min(mentions, 4) + (contextual ? 0.1 : 0)));
+    if (projectName2 && (mentions >= 2 || contextual)) {
+      addTriple(projectName2, "uses", canonTool(name), Math.min(0.9, 0.5 + 0.1 * Math.min(mentions, 4) + (contextual ? 0.1 : 0)));
     }
     void category;
   }
@@ -15258,13 +15322,13 @@ function extractEntities(text, context = {}) {
       if (rejected) {
         if (chosen && looksLikeStrictTool(chosen) && looksLikeStrictTool(rejected)) {
           const c = canonTool(chosen), r = canonTool(rejected);
-          if (projectName)
-            addTriple(projectName, "chose", c, DECISION_GUESS_CONFIDENCE);
-          addTriple(projectName || "project", "rejected", r, DECISION_GUESS_CONFIDENCE);
+          if (projectName2)
+            addTriple(projectName2, "chose", c, DECISION_GUESS_CONFIDENCE);
+          addTriple(projectName2 || "project", "rejected", r, DECISION_GUESS_CONFIDENCE);
           addTriple(c, "chosen_over", r, DECISION_GUESS_CONFIDENCE);
         }
-      } else if (chosen && looksLikeDecisionObject(chosen) && projectName) {
-        addTriple(projectName, "chose", canonTool(chosen), DECISION_GUESS_CONFIDENCE);
+      } else if (chosen && looksLikeDecisionObject(chosen) && projectName2) {
+        addTriple(projectName2, "chose", canonTool(chosen), DECISION_GUESS_CONFIDENCE);
       }
     }
   }
@@ -15294,8 +15358,8 @@ function extractEntities(text, context = {}) {
       if (match[0].startsWith("@") && (after === "/" || after === "." || after === "("))
         continue;
       addTriple(name, "is_a", "person", 0.6);
-      if (projectName) {
-        addTriple(name, "works_on", projectName, 0.5);
+      if (projectName2) {
+        addTriple(name, "works_on", projectName2, 0.5);
       }
     }
   }
@@ -16331,13 +16395,13 @@ var init_plan_source = __esm({
           });
         }
         if (item.projectPath) {
-          const projectName = basename13(item.projectPath);
-          if (projectName) {
+          const projectName2 = basename13(item.projectPath);
+          if (projectName2) {
             links.push({
               sourceType: "plan",
               sourceId: planName,
               targetType: "claude_md",
-              targetId: projectName,
+              targetId: projectName2,
               linkType: "plan_for_project",
               confidence: sessionId ? 1 : 0.8
             });
@@ -16837,15 +16901,15 @@ var init_claude_md_source = __esm({
         try {
           const stat3 = statSync26(filePath);
           const projectDir = dirname16(filePath);
-          const projectName = basename14(projectDir);
+          const projectName2 = basename14(projectDir);
           const projectPath = projectDir;
           const content = readFileSync21(filePath, "utf-8");
-          const firstLine = content.split("\n").find((l) => l.trim() && !l.startsWith("#"))?.trim()?.slice(0, 200) || `${filename} for ${projectName}`;
-          const id = tool === "claude" ? projectName : `${projectName}_${tool}`;
+          const firstLine = content.split("\n").find((l) => l.trim() && !l.startsWith("#"))?.trim()?.slice(0, 200) || `${filename} for ${projectName2}`;
+          const id = tool === "claude" ? projectName2 : `${projectName2}_${tool}`;
           return {
             id,
             sourceType: "claude_md",
-            title: `${filename} - ${projectName}`,
+            title: `${filename} - ${projectName2}`,
             projectPath,
             filePath,
             mtime: stat3.mtimeMs,
@@ -19728,7 +19792,7 @@ var init_http = __esm({
       CLI_VERSION = JSON.parse(readFileSync35(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.6.8";
+        if (true) CLI_VERSION = "0.6.9";
       } catch {
       }
     }
@@ -19753,27 +19817,6 @@ var init_redact_deep = __esm({
   }
 });
 
-// ../engine/dist/core/session-multi-tool.js
-function extractTurnsAny(sessionId, opts = {}) {
-  const backend = getBackendForId(sessionId);
-  if (!backend)
-    return { sessionId, found: false, turns: [], startMs: 0, endMs: 0 };
-  return backend.extractTurns(sessionId, opts);
-}
-function replaySessionAny(sessionId) {
-  const backend = getBackendForId(sessionId);
-  if (!backend)
-    return { sessionId, found: false, projectPath: "", files: [], totalLinesAdded: 0, totalLinesRemoved: 0 };
-  return backend.replay(sessionId);
-}
-var init_session_multi_tool = __esm({
-  "../engine/dist/core/session-multi-tool.js"() {
-    "use strict";
-    init_tool_backend();
-    init_backends();
-  }
-});
-
 // src/derived.ts
 function collectDerivedRows(ref, mtime, count, maxRowBytes) {
   const id = ref.prefixedId;
@@ -20248,7 +20291,7 @@ var init_telemetry = __esm({
     init_sync_client();
     cliVersion2 = () => {
       try {
-        return true ? "0.6.8" : "dev";
+        return true ? "0.6.9" : "dev";
       } catch {
         return "dev";
       }
@@ -20652,6 +20695,7 @@ var sync_client_exports = {};
 __export(sync_client_exports, {
   BATCH_SCAN_MAX_BYTES: () => BATCH_SCAN_MAX_BYTES,
   FULL_BUILD_MAX_BYTES: () => FULL_BUILD_MAX_BYTES,
+  _acceptedUploads: () => _acceptedUploads,
   _fetchTenantSyncConfigForTests: () => _fetchTenantSyncConfigForTests,
   _resetCapsCacheForTests: () => _resetCapsCacheForTests,
   _resetTenantSecurityConfigCache: () => _resetTenantSecurityConfigCache,
@@ -20915,6 +20959,9 @@ function removeCredentials(serverUrl) {
   writeFileSync10(credPath(), JSON.stringify({ targets: kept }, null, 2));
   return true;
 }
+function _acceptedUploads(url) {
+  return acceptedUploads.get(url) ?? 0;
+}
 async function syncSessions(opts = {}) {
   const targets = loadAllCredentials();
   if (targets.length === 0) throw new Error("Not logged in \u2014 run `chat-recall login <server-url> --token <token>`");
@@ -20938,10 +20985,11 @@ async function syncSessions(opts = {}) {
       };
       continue;
     }
+    acceptedUploads.set(cred.serverUrl, 0);
     try {
       const r = await syncToTarget(cred, opts);
       noteTargetSuccess(cred.serverUrl);
-      perTarget[cred.serverUrl] = { ok: true };
+      perTarget[cred.serverUrl] = { ok: true, accepted: acceptedUploads.get(cred.serverUrl) ?? 0 };
       agg = agg ? {
         uploaded: agg.uploaded + r.uploaded,
         skipped: agg.skipped + r.skipped,
@@ -20958,7 +21006,7 @@ async function syncSessions(opts = {}) {
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       errors.push(`${cred.serverUrl}: ${msg}`);
-      perTarget[cred.serverUrl] = { ok: false, error: msg };
+      perTarget[cred.serverUrl] = { ok: false, error: msg, accepted: acceptedUploads.get(cred.serverUrl) ?? 0 };
       const next = noteTargetFailure(cred.serverUrl, msg);
       const notice = breakerNotice(cred.serverUrl, next);
       if (notice) console.error(`[sync] ${notice}`);
@@ -21224,7 +21272,7 @@ async function syncToTargetInScope(cred, opts = {}) {
       return [];
     }
   });
-  const MAX_BATCH_BYTES = 4 * 1024 * 1024;
+  const MAX_BATCH_BYTES = Number(process.env.CHAT_RECALL_MAX_BATCH_BYTES) || (isLocalHost(cred.serverUrl) ? 4 * 1024 * 1024 : 1024 * 1024);
   const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
   const explicitThrottle = typeof opts.throttleMs === "number" && opts.throttleMs > 0;
   const throttleMs = explicitThrottle ? opts.throttleMs : 0;
@@ -21259,6 +21307,7 @@ async function syncToTargetInScope(cred, opts = {}) {
           signal: ac.signal
         });
         if (res.ok) {
+          acceptedUploads.set(cred.serverUrl, (acceptedUploads.get(cred.serverUrl) ?? 0) + 1);
           const body2 = await res.json().catch(() => ({}));
           if (typeof body2.telemetry === "boolean") {
             setTelemetryEligible(base, body2.telemetry);
@@ -21309,7 +21358,8 @@ async function syncToTargetInScope(cred, opts = {}) {
         if (attempt >= RETRY_DELAYS_MS.length) throw new Error(`sync failed after ${attempt + 1} attempts: HTTP ${res.status} ${text}`);
         const retryAfterS = Number(res.headers.get("retry-after"));
         const waitMs = res.status === 429 && retryAfterS > 0 ? retryAfterS * 1e3 : RETRY_DELAYS_MS[attempt];
-        console.error(`[sync] HTTP ${res.status} from ${base} \u2014 backing off ${Math.round(waitMs / 1e3)}s (attempt ${attempt + 1})`);
+        const why = res.status === 524 ? ` \u2014 the proxy cut the request at its time limit; the batch is too big for one request` : "";
+        console.error(`[sync] HTTP ${res.status} from ${base}${why} \u2014 backing off ${Math.round(waitMs / 1e3)}s (attempt ${attempt + 1})`);
         await sleep(waitMs);
         continue;
       } catch (err) {
@@ -22168,7 +22218,7 @@ async function syncIncremental(opts = {}) {
     lock.release();
   }
 }
-var ownVersion, ERROR_CLASS, STANDING_FAILURE, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, EMPTY_SYNC_CONFIG, _fetchTenantSyncConfigForTests, SYNC_RULES_REFUSAL, hashPath, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
+var ownVersion, ERROR_CLASS, STANDING_FAILURE, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, EMPTY_SYNC_CONFIG, _fetchTenantSyncConfigForTests, SYNC_RULES_REFUSAL, hashPath, acceptedUploads, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
 var init_sync_client = __esm({
   "src/sync-client.ts"() {
     "use strict";
@@ -22213,7 +22263,7 @@ var init_sync_client = __esm({
       ownVersion = JSON.parse(readFileSync37(join48(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.6.8";
+        if (true) ownVersion = "0.6.9";
       } catch {
       }
     }
@@ -22233,6 +22283,7 @@ var init_sync_client = __esm({
     _fetchTenantSyncConfigForTests = fetchTenantSyncConfig;
     SYNC_RULES_REFUSAL = /* @__PURE__ */ Symbol.for("chat-recall.syncRulesRefusal");
     hashPath = (p) => p ? "p_" + createHash11("sha256").update(p).digest("hex").slice(0, 12) : "";
+    acceptedUploads = /* @__PURE__ */ new Map();
     MAX_DERIVED_ROW_BYTES = 2 * 1024 * 1024;
     isLocalHost = isPrivateHost;
     CAPS_TTL_MS = 60 * 6e4;
@@ -23065,6 +23116,128 @@ function resumeCommandFor(sessionId, tool) {
 // ../engine/dist/mcp/tools.js
 init_project_resolver();
 
+// ../engine/dist/mcp/resume-digest.js
+function splitSummary(summary) {
+  const out = {};
+  if (!summary)
+    return out;
+  const heads = [
+    ["request", /\*\*Request:?\*\*/i],
+    ["plan", /\*\*Plan:?\*\*/i],
+    ["done", /\*\*What was done:?\*\*/i],
+    ["remaining", /\*\*Remaining\s*\/?\s*Not done:?\*\*/i]
+  ];
+  const marks = [];
+  for (const [key2, re] of heads) {
+    const m = re.exec(summary);
+    if (m)
+      marks.push({ key: key2, start: m.index + m[0].length, end: m.index });
+  }
+  marks.sort((a, b) => a.start - b.start);
+  for (let i = 0; i < marks.length; i++) {
+    const stop = i + 1 < marks.length ? marks[i + 1].end : summary.length;
+    const body = summary.slice(marks[i].start, stop).trim();
+    if (body)
+      out[marks[i].key] = body;
+  }
+  return out;
+}
+function isLabelOnly(text) {
+  const bare = text.replace(/\*\*/g, "").trim();
+  return bare.endsWith(":");
+}
+function bulletLines(section, max, chars = 160) {
+  if (!section)
+    return [];
+  const out = [];
+  for (const raw of section.split("\n")) {
+    const line = raw.trim();
+    if (!line.startsWith("-") && !line.startsWith("*"))
+      continue;
+    const text = line.replace(/^[-*]\s*/, "").replace(/\s+/g, " ").trim();
+    if (!text || isLabelOnly(text))
+      continue;
+    out.push(text.length > chars ? `${text.slice(0, chars)}\u2026` : text);
+    if (out.length >= max)
+      break;
+  }
+  return out;
+}
+function statusEmoji(status) {
+  if (status === "shipped")
+    return "\u{1F6A2}";
+  if (status === "interrupted")
+    return "\u23F8";
+  if (status === "abandoned")
+    return "\u{1FAA6}";
+  if (status === "in_progress")
+    return "\u{1F7E1}";
+  return "\u2754";
+}
+function projectName(projectPath) {
+  if (!projectPath)
+    return "";
+  return projectPath.split("/").pop() || projectPath;
+}
+function digestTitle(row, max = 90) {
+  const t = row.userTitle?.trim() || row.toolTitle?.trim() || row.firstPrompt || "(no prompt)";
+  const flat = t.replace(/\s+/g, " ").trim();
+  return flat.length > max ? flat.slice(0, max) : flat;
+}
+function formatDigest(input, summaryChars = 400) {
+  const { row, outcome, related, resumeCmd } = input;
+  const lines = [];
+  lines.push(`### ${digestTitle(row)}`);
+  const when = (row.modified || "").slice(0, 16).replace("T", " ");
+  lines.push(`**Project:** ${projectName(row.projectPath) || "(unknown)"} \xB7 **Tool:** ${row.tool || "claude"}` + (when ? ` \xB7 **Modified:** ${when}` : "") + ` \xB7 \`${row.sessionId}\``);
+  if (outcome) {
+    const edits = outcome.fileCount > 0 ? ` \xB7 ${outcome.fileCount} file(s) +${outcome.totalLinesAdded}/\u2212${outcome.totalLinesRemoved}` : "";
+    const commits = outcome.commits && outcome.commits.totalCommits > 0 ? ` \xB7 ${outcome.commits.totalCommits} commit(s)` : "";
+    lines.push(`${statusEmoji(outcome.status)} **${outcome.status}** \u2014 ${outcome.reason}${edits}${commits}`);
+  }
+  const sections = splitSummary(row.summary || "");
+  const did = bulletLines(sections.done, 4);
+  const left = bulletLines(sections.remaining, 4);
+  if (did.length) {
+    lines.push("**Did:**");
+    for (const d of did)
+      lines.push(`- ${d}`);
+  }
+  if (left.length) {
+    lines.push("**Still open:**");
+    for (const l of left)
+      lines.push(`- ${l}`);
+  }
+  if (!did.length && !left.length) {
+    const gist = (row.summary || "").replace(/\s+/g, " ").trim();
+    if (gist)
+      lines.push(gist.length > summaryChars ? `${gist.slice(0, summaryChars)}\u2026` : gist);
+  }
+  if (outcome?.decisions?.length) {
+    lines.push("**Decisions:**");
+    for (const d of outcome.decisions.slice(0, 3))
+      lines.push(`- ${d.text.slice(0, 160)}`);
+  }
+  const tasks = (related?.links ?? []).filter((l) => l.sourceType === "task");
+  if (tasks.length > 0) {
+    lines.push("**Task lists:**");
+    for (const t of tasks.slice(0, 5))
+      lines.push(`- ${t.title}`);
+  }
+  if (resumeCmd)
+    lines.push(`**Resume:** \`${resumeCmd}\``);
+  lines.push("");
+  return lines;
+}
+function crossProjectNote(headProject, priorRows, hasProjectFilter) {
+  if (hasProjectFilter)
+    return null;
+  const names = new Set([headProject, ...priorRows.map((r) => projectName(r.projectPath))].filter(Boolean));
+  if (names.size < 2)
+    return null;
+  return `_These sessions span ${names.size} projects (${[...names].join(", ")}). Pass \`project_filter\` to scope the resume to one._`;
+}
+
 // ../engine/dist/core/decision-areas.js
 var DECISION_AREAS = [
   "auth",
@@ -23169,10 +23342,11 @@ function canonArea(raw) {
 function isKnownArea(key2) {
   return !!key2 && AREA_SET.has(key2);
 }
-var ACCOUNT_SCOPE = "*";
-function decisionSubject(project, area) {
-  const p = (project || "").trim() || ACCOUNT_SCOPE;
-  return `${p}:${area}`;
+function parseDecisionSubject(subject) {
+  const i = subject.lastIndexOf(":");
+  if (i <= 0 || i === subject.length - 1)
+    return null;
+  return { project: subject.slice(0, i), area: subject.slice(i + 1) };
 }
 
 // ../engine/dist/mcp/tools.js
@@ -23845,7 +24019,15 @@ var RecallSmartResumeSchema = z.object({
   // agent had to call recall_recent first, and a bare call failed with a zod
   // error about a missing field rather than doing the obvious thing.
   session_id: z.string().optional().describe("Session to resume. Omit for the most recent one."),
-  project_filter: z.string().optional().describe("When session_id is omitted, resume the latest session from this project (path or name substring).")
+  project_filter: z.string().optional().describe("When session_id is omitted, resume the latest session from this project (path or name substring)."),
+  // "Continue" rarely means one session. Work spans an evening across three of
+  // them, and the newest alone reports a fragment: the tail of a task whose
+  // decision was taken two sessions back. A bare call also takes the globally
+  // newest session, so when the last thing on the machine belonged to another
+  // project, the single-session answer was confidently about the wrong work
+  // with nothing on screen to show it. The trailing digests carry their own
+  // project, which makes that visible instead of silent.
+  depth: z.number().int().min(1).max(5).default(3).describe("How many recent sessions to cover: the newest in full, the rest as digests. Ignored when session_id is set.")
 });
 var RecallSubagentSearchSchema = z.object({
   query: z.string().describe("Text to find inside subagent transcripts (explore/compact/aside sub-tasks)"),
@@ -24020,6 +24202,30 @@ var RecallUserPromptsSchema = z.object({
   limit: z.number().optional().default(50).describe("Maximum prompts to return"),
   with_markers: z.boolean().optional().default(true).describe("Tag each prompt with sentiment / corrective markers (interrupt, frustrated, correction, approval, \u2026). Set false to revert to legacy text-only output.")
 });
+function resolveRecordScope(params) {
+  const fromSubject = parseDecisionSubject(params.subject);
+  const subjectArea = fromSubject && isKnownArea(canonArea(fromSubject.area) ?? "") ? canonArea(fromSubject.area) : null;
+  const area = canonArea(params.area) ?? subjectArea;
+  const subjectScope = subjectArea ? fromSubject.project : null;
+  const subjectProject = subjectScope && subjectScope !== "*" && !subjectScope.startsWith("ws:") ? subjectScope : void 0;
+  const subjectWorkspace = subjectScope?.startsWith("ws:") ? subjectScope.slice(3) : void 0;
+  return {
+    area,
+    project: params.project ?? subjectProject,
+    workspace: params.workspace ?? subjectWorkspace ?? (params.cwdWorkspace || void 0),
+    // A subject that named `*` asked for the account and still gets it. The
+    // response says which scope it landed on either way.
+    scope: params.scope ?? (subjectScope === "*" ? "account" : void 0)
+  };
+}
+function describeWriteScope(subject) {
+  const key2 = parseDecisionSubject(subject)?.project ?? "*";
+  if (key2 === "*")
+    return "account-wide \u2014 every project with no decision of its own inherits this";
+  if (key2.startsWith("ws:"))
+    return `the ${key2.slice(3)} folder group \u2014 every repository in it inherits this`;
+  return `${key2} only`;
+}
 var RecallDecisionRecordSchema = z.object({
   subject: z.string().describe('What the decision is about (e.g., "chat-recall", "auth strategy")'),
   decision: z.string().describe('The decision itself in plain words (e.g., "use Postgres full-text search as the default backend")'),
@@ -24028,7 +24234,9 @@ var RecallDecisionRecordSchema = z.object({
   // "auth", "authentication" and "auth setup" are three separate facts and a
   // later decision never closes an earlier one — see core/decision-areas.ts.
   area: z.string().optional().describe(`The area this decides, so a later decision about the SAME area supersedes it. Use one of: ${DECISION_AREAS.join(", ")} \u2014 or any short slug for an area not listed. Without it the decision is recorded but nothing it contradicts is closed.`),
-  project: z.string().optional().describe("Project this decision applies to. Omit for an account-wide decision that applies everywhere."),
+  project: z.string().optional().describe('Project this decision applies to \u2014 one repository, e.g. "example-app". The narrowest scope, and the one to prefer when the decision came out of one codebase.'),
+  workspace: z.string().optional().describe('Folder group this decision applies to, e.g. "personal" for everything under code/personal. Use it for a decision that binds a group of repositories but not the whole account. Resolved from the current directory when omitted.'),
+  scope: z.enum(["project", "workspace", "account"]).optional().describe('Which tier to record at. Omit and the narrowest scope you named is used: project, else workspace, else account. Pass "account" ONLY for something true of every project you own \u2014 an account decision is inherited by every project that has no opinion of its own.'),
   importance: z.number().min(1).max(5).optional().default(4).describe("1\u20135; the classifier surfaces 4+ in wake-up context"),
   session_id: z.string().optional().describe("Session this decision was made in (for traceability)"),
   agent_name: z.string().optional().default("agent").describe("Who recorded the decision (for diary linkage)")
@@ -24036,6 +24244,7 @@ var RecallDecisionRecordSchema = z.object({
 var RecallDecisionsSchema = z.object({
   area: z.string().optional().describe("Only this area"),
   project: z.string().optional().describe("Resolve for this project"),
+  workspace: z.string().optional().describe('Folder group to resolve through, e.g. "personal". Resolved from the current directory when omitted.'),
   include_candidates: z.boolean().optional().default(false)
 });
 var RecallAnalyticsSummarySchema = z.object({
@@ -24608,25 +24817,32 @@ with recall_show (pass the plan id).`,
       },
       {
         name: "recall_smart_resume",
-        description: `Get structured resume context for a session \u2014 by default, the most recent one.
+        description: `Get structured resume context for recent work \u2014 by default the last 3 sessions.
 
-Call it with NO arguments to resume the latest session. That is the common case:
-"continue", "pick up where we left off". Pass session_id only to resume a
-specific one, or project_filter to take the latest from one project.
+Call it with NO arguments to resume. That is the common case: "continue", "pick
+up where we left off". Pass session_id to resume one specific session, or
+project_filter to scope to one project.
 
-Returns:
+Returns, for the newest session:
 - What was done (completed work, decisions made)
 - What's pending (unfinished tasks, TODOs mentioned)
 - Files modified with change summary
 - Token/cost budget used
 - Resume command
 
+Then a digest of each earlier session: its project, outcome, summary, the
+decisions it took and the task lists it left open. Set depth to change how many.
+
+A bare call takes the globally newest sessions, which may belong to different
+projects \u2014 the output says so when they do. Pass project_filter to scope it.
+
 Use this instead of recall_context for a more actionable summary when resuming work.`,
         inputSchema: {
           type: "object",
           properties: {
             session_id: { type: "string", description: "Session to resume. OMIT to resume the most recent session." },
-            project_filter: { type: "string", description: "With session_id omitted, resume the latest session from this project." }
+            project_filter: { type: "string", description: "With session_id omitted, resume the latest sessions from this project." },
+            depth: { type: "number", default: 3, minimum: 1, maximum: 5, description: "How many recent sessions to cover: the newest in full, the rest as digests. Ignored when session_id is set." }
           }
         }
       },
@@ -25987,7 +26203,7 @@ Sessions already uploaded from that path stay until they are deleted; use recall
           return { content: [{ type: "text", text: soft.message || (soft.status === 404 ? `Session not found: ${params.session_id}` : `Summary not synced yet for ${params.session_id}.`) }] };
         }
         const outcome = soft.data;
-        const statusEmoji = outcome.status === "shipped" ? "\u{1F6A2}" : outcome.status === "interrupted" ? "\u23F8" : outcome.status === "abandoned" ? "\u{1FAA6}" : outcome.status === "in_progress" ? "\u{1F7E1}" : "\u2754";
+        const statusEmoji2 = outcome.status === "shipped" ? "\u{1F6A2}" : outcome.status === "interrupted" ? "\u23F8" : outcome.status === "abandoned" ? "\u{1FAA6}" : outcome.status === "in_progress" ? "\u{1F7E1}" : "\u2754";
         if (!params.rich) {
           return { content: [{ type: "text", text: [
             `# \u{1F4CB} Summary`,
@@ -25995,7 +26211,7 @@ Sessions already uploaded from that path stay until they are deleted; use recall
             `**Session:** ${params.session_id.substring(0, 8)}...`,
             aiSummary ? `
 ${aiSummary}
-` : `**Status:** ${statusEmoji} ${outcome.status} \u2014 ${outcome.reason}`,
+` : `**Status:** ${statusEmoji2} ${outcome.status} \u2014 ${outcome.reason}`,
             "",
             "---",
             "",
@@ -26009,7 +26225,7 @@ ${aiSummary}
           lines.push(aiSummary);
           lines.push("");
         }
-        lines.push(`**Status:** ${statusEmoji} ${outcome.status} \u2014 ${outcome.reason}`);
+        lines.push(`**Status:** ${statusEmoji2} ${outcome.status} \u2014 ${outcome.reason}`);
         if (outcome.startMs && outcome.endMs) {
           const mins = Math.round((outcome.endMs - outcome.startMs) / 6e4);
           lines.push(`**Window:** ${new Date(outcome.startMs).toISOString().slice(0, 16).replace("T", " ")} \u2192 ${new Date(outcome.endMs).toISOString().slice(0, 16).replace("T", " ")} (${mins} min)`);
@@ -26241,13 +26457,15 @@ _Edits stayed local or window was off \u2014 try increasing buffer_minutes._` }]
       case "recall_smart_resume": {
         const params = RecallSmartResumeSchema.parse(args);
         requireRemote();
+        let priorRows = [];
         let sid = params.session_id;
         if (!sid) {
-          const qs = new URLSearchParams({ limit: "1" });
+          const qs = new URLSearchParams({ limit: String(params.depth) });
           if (params.project_filter)
             qs.set("project", params.project_filter);
           const recent = await remoteGet(`/api/conversations/recent?${qs.toString()}`);
           sid = recent.sessions?.[0]?.sessionId;
+          priorRows = (recent.sessions ?? []).slice(1);
           if (!sid) {
             return { content: [{ type: "text", text: params.project_filter ? `No sessions found for project \`${params.project_filter}\` \u2014 nothing to resume.` : "No sessions have synced yet, so there is nothing to resume. Run `chat-recall index` first." }] };
           }
@@ -26371,6 +26589,29 @@ _Edits stayed local or window was off \u2014 try increasing buffer_minutes._` }]
           if (rc)
             lines.push(`**Resume:** \`${rc}\``);
         }
+        if (priorRows.length > 0) {
+          const digests = await Promise.all(priorRows.map(async (row) => {
+            const renc = encodeURIComponent(row.sessionId);
+            const [o, r] = await Promise.all([
+              remoteGetSoft(`/api/conversations/${renc}/outcome`),
+              remoteGetSoft(`/api/conversations/${renc}/related`)
+            ]);
+            return {
+              row,
+              outcome: o.data,
+              related: r.data,
+              resumeCmd: resumeCommandFor(row.sessionId, row.tool)
+            };
+          }));
+          lines.push("");
+          lines.push(`## Before that (${digests.length} earlier session${digests.length === 1 ? "" : "s"})`);
+          lines.push("");
+          for (const d of digests)
+            lines.push(...formatDigest(d));
+          const note = crossProjectNote(projName, priorRows, !!params.project_filter);
+          if (note)
+            lines.push(note);
+        }
         return { content: [{ type: "text", text: lines.join("\n") }] };
       }
       case "recall_project_context": {
@@ -27232,24 +27473,40 @@ ${JSON.stringify(r, null, 2)}
         const wal = getWAL();
         wal.log("decision_record", { subject: params.subject, importance: params.importance });
         const confidence = Math.min(1, params.importance / 5);
-        const area = canonArea(params.area);
-        const kgSubject = area ? decisionSubject(params.project, area) : params.subject;
-        await remotePost("/api/kg/add", {
-          subject: kgSubject,
-          predicate: "decided",
-          object: params.decision,
-          confidence,
-          source_session: params.session_id
+        const { area, project, workspace, scope } = resolveRecordScope({
+          ...params,
+          cwdWorkspace: resolveWorkspaceId(process.cwd())?.slice(3) ?? null
         });
-        if (params.reason) {
+        let kgSubject = params.subject;
+        if (area) {
+          const rec = await remotePost("/api/decisions", {
+            area,
+            value: params.decision,
+            reason: params.reason,
+            project,
+            workspace,
+            scope,
+            session_id: params.session_id
+          });
+          kgSubject = rec.subject;
+        } else {
           await remotePost("/api/kg/add", {
             subject: kgSubject,
-            predicate: "because",
-            object: params.reason,
+            predicate: "decided",
+            object: params.decision,
             confidence,
-            source_session: params.session_id,
-            supersede: false
+            source_session: params.session_id
           });
+          if (params.reason) {
+            await remotePost("/api/kg/add", {
+              subject: kgSubject,
+              predicate: "because",
+              object: params.reason,
+              confidence,
+              source_session: params.session_id,
+              supersede: false
+            });
+          }
         }
         const diaryText = params.reason ? `Decided: ${params.decision}
 Subject: ${params.subject}
@@ -27268,8 +27525,9 @@ Subject: ${params.subject}`;
               "Decision recorded.",
               `- KG: ${kgSubject} \u2192 decided \u2192 ${params.decision}`,
               area ? `- Area: ${area}${isKnownArea(area) ? "" : " (not a standard area \u2014 kept as a slug)"} \xB7 a later decision on this area supersedes this one` : "- No area given, so nothing this contradicts was closed. Pass `area` to make reversals work.",
+              area ? `- Scope: ${describeWriteScope(kgSubject)}` : "",
               `- Diary entry: ${diary.id} (importance ${params.importance})`
-            ].join("\n")
+            ].filter(Boolean).join("\n")
           }]
         };
       }
@@ -27279,27 +27537,37 @@ Subject: ${params.subject}`;
         requireRemote();
         const r = await remoteGetQS("/api/decisions", {
           project: p.project,
+          // Resolved HERE: the folder group comes from the checkout, and the
+          // checkout is on this machine.
+          workspace: p.workspace ?? resolveWorkspaceId(process.cwd())?.slice(3),
           include_candidates: p.include_candidates ? "1" : "0"
         });
         const rows = p.area ? r.decisions.filter((d) => d.area === canonArea(p.area)) : r.decisions;
         const lines = [];
         lines.push(r.project ? `Decisions for ${r.project}` : "Decisions \u2014 account-wide");
+        if (r.project && r.workspace) {
+          lines.push(`Resolved through the ${r.workspace.replace(/^ws:/, "")} folder group, then the account.`);
+        }
         if (rows.length === 0) {
           lines.push("", p.area ? `Nothing decided for "${p.area}". You are free to choose \u2014 record it afterwards with recall_decision_record.` : "Nothing decided yet.");
         } else {
           lines.push("");
           for (const d of rows) {
+            const from = d.scope === "workspace" ? `the ${d.scope_key.replace(/^ws:/, "")} folder group` : d.scope === "account" ? "the account" : d.scope_key;
             const tags = [
-              d.override ? "OVERRIDES ACCOUNT" : "",
-              d.inherited ? "inherited from account" : "",
+              d.override ? `OVERRIDES a broader decision` : "",
+              d.inherited ? `inherited from ${from}` : "",
               d.advisory ? "advisory \u2014 a personal preference, not binding" : ""
             ].filter(Boolean).join(" \xB7 ");
             lines.push(`${d.area}: ${d.value}${d.since ? `  (since ${d.since})` : ""}${tags ? `  [${tags}]` : ""}`);
             if (d.why)
               lines.push(`    why: ${d.why}`);
+            if (d.by)
+              lines.push(`    decided by ${d.by}`);
             const replaced = d.history.filter((h) => !h.current);
-            for (const h of replaced)
-              lines.push(`    replaced: ${h.value} (ended ${h.to})`);
+            for (const h of replaced) {
+              lines.push(`    replaced: ${h.value} (ended ${h.to}${h.by ? `, by ${h.by}` : ""})`);
+            }
             if (d.source_session)
               lines.push(`    from session ${d.source_session}`);
           }
@@ -28061,7 +28329,7 @@ function installCrashGuards() {
     reportClientEvent2("mcp_crash", { message: err.stack || err.message });
   });
 }
-var RELAY_VERSION = true ? "0.6.8" : "0.0.0";
+var RELAY_VERSION = true ? "0.6.9" : "0.0.0";
 function daemonIdleSecs() {
   const raw = process.env.CHAT_RECALL_DAEMON_IDLE_SECS;
   if (raw === void 0) return 900;