chat-recall 0.6.8 → 0.7.0

package/dist/watch.js

@@ -115,6 +115,25 @@ var init_tool_backend = __esm({
   }
 });
 
+// ../engine/dist/parsers/banners.js
+function stripInjectedBanners(text) {
+  let result = text;
+  for (const re of INJECTED_BANNERS)
+    result = result.replace(re, " ");
+  return result;
+}
+var INJECTED_BANNERS;
+var init_banners = __esm({
+  "../engine/dist/parsers/banners.js"() {
+    "use strict";
+    INJECTED_BANNERS = [
+      /MCP issues detected\. ?Run \/mcp list for status\.?/g,
+      /Context low[^\n]*Run \/compact[^\n]*/g,
+      /API Error:[^\n]{0,120}/g
+    ];
+  }
+});
+
 // ../engine/dist/core/project-path-match.js
 function canonicalProjectPath(p) {
   return (p || "").trim().replace(/\\/g, "/").replace(/[-_]/g, "/").replace(/\/{2,}/g, "/").replace(/\/+$/, "").toLowerCase();
@@ -5346,929 +5365,291 @@ var init_tool_paths = __esm({
   }
 });
 
-// ../engine/dist/core/secret-redactor.js
-import { statSync as statSync3 } from "fs";
-function secretOf(rule, m) {
-  const raw = rule.secret != null ? m[rule.secret] : m[0];
-  if (raw == null)
-    return null;
-  if (rule.where && !rule.where(raw))
-    return null;
-  return raw;
+// ../engine/dist/core/project-dir-name.js
+import { readdirSync as readdirSync4 } from "node:fs";
+function looksWindowsEncoded(dirName) {
+  return /^[A-Za-z]--/.test(dirName);
 }
-function looksLikeSecretToken(t) {
-  if (t.length < 32)
-    return false;
-  if (/^[a-f0-9]+$/i.test(t))
-    return true;
-  return /[A-Z]/.test(t) && /[a-z]/.test(t) && /[0-9]/.test(t);
+function decodeProjectDirName(dirName) {
+  if (!dirName)
+    return "";
+  if (looksWindowsEncoded(dirName)) {
+    const drive = dirName[0].toUpperCase();
+    const rest = dirName.slice(3).replace(/-/g, "\\");
+    return `${drive}:\\${rest}`;
+  }
+  return "/" + dirName.replace(/^-/, "").replace(/-/g, "/");
 }
-function findContextualSecrets(text) {
-  if (!text)
-    return [];
-  const ranges = [];
-  let m;
-  SECRET_CONTEXT_RE.lastIndex = 0;
-  while ((m = SECRET_CONTEXT_RE.exec(text)) !== null) {
-    const winStart = m.index + m[0].length;
-    const window = text.slice(winStart, winStart + 80);
-    HIGH_ENTROPY_TOKEN_RE.lastIndex = 0;
-    let tm;
-    while ((tm = HIGH_ENTROPY_TOKEN_RE.exec(window)) !== null) {
-      if (!looksLikeSecretToken(tm[0]))
-        continue;
-      if (/^[a-f0-9]+$/i.test(tm[0]) && /\b(?:commit|sha-?\d*|hash|digest|checksum|uuid|guid|etag|blob|ref)\b/i.test(window.slice(0, tm.index))) {
-        continue;
-      }
-      ranges.push({ start: winStart + tm.index, end: winStart + tm.index + tm[0].length });
+function resolveProjectDirName(dirName, deps = {}) {
+  const structural = decodeProjectDirName(dirName);
+  if (!dirName)
+    return structural;
+  if (looksWindowsEncoded(dirName))
+    return structural;
+  const readdir3 = deps.readdir ?? ((p) => readdirSync4(p, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name));
+  const encodeName = (name) => name.replace(/[-_.]/g, "-");
+  let remaining = dirName.replace(/^-/, "");
+  let current = "/";
+  while (remaining) {
+    let children;
+    try {
+      children = readdir3(current);
+    } catch {
       break;
     }
-  }
-  ranges.sort((a, b) => a.start - b.start);
-  const out = [];
-  for (const r of ranges) {
-    const last = out[out.length - 1];
-    if (last && r.start < last.end) {
-      last.end = Math.max(last.end, r.end);
-      continue;
+    let best = "";
+    for (const child of children) {
+      const encoded = encodeName(child);
+      if (!encoded || encoded.length < best.length)
+        continue;
+      if (!remaining.startsWith(encoded))
+        continue;
+      const next = remaining[encoded.length];
+      if (next !== void 0 && next !== "-")
+        continue;
+      if (encoded.length > best.length)
+        best = child;
     }
-    out.push({ ...r });
+    if (!best)
+      break;
+    current = current === "/" ? `/${best}` : `${current}/${best}`;
+    remaining = remaining.slice(encodeName(best).length).replace(/^-/, "");
   }
-  return out;
-}
-function isEnvRedactionRequested() {
-  const v = process.env.CHAT_RECALL_REDACT_INDEX;
-  if (v === void 0)
-    return null;
-  return v === "1" || v === "true" || v === "yes";
+  return remaining ? structural : current;
 }
-function settingsView() {
-  let mtimeMs = -1;
-  try {
-    mtimeMs = statSync3(settingsFilePath()).mtimeMs;
-  } catch {
+var init_project_dir_name = __esm({
+  "../engine/dist/core/project-dir-name.js"() {
+    "use strict";
   }
-  if (cache && cache.mtimeMs === mtimeMs)
-    return cache;
-  let enabled = false;
-  const extra = [];
-  try {
-    const s = loadSettings();
-    enabled = !!s.privacy?.redactIndex;
-    for (const r of s.privacy?.redactionRules ?? []) {
-      try {
-        extra.push({ label: r.label, pattern: new RegExp(r.pattern, "g") });
-      } catch {
-      }
+});
+
+// ../engine/dist/core/model-pricing.js
+function pricingFor(modelId) {
+  if (!modelId)
+    return null;
+  const lower = modelId.toLowerCase();
+  let best = null;
+  let bestLen = -1;
+  for (const [prefix, entry] of Object.entries(TABLE)) {
+    if (lower.startsWith(prefix.toLowerCase()) && prefix.length > bestLen) {
+      best = entry;
+      bestLen = prefix.length;
     }
-  } catch {
-  }
-  cache = { mtimeMs, enabled, rules: [...DEFAULT_REDACTION_RULES, ...extra] };
-  return cache;
-}
-function compileServerRule(spec) {
-  const name = spec.name || "(unnamed)";
-  if (!spec.regex)
-    return { name, reason: "empty pattern" };
-  if (spec.regex.length > MAX_PATTERN_LEN)
-    return { name, reason: `pattern longer than ${MAX_PATTERN_LEN} chars` };
-  let re;
-  try {
-    const flags = "g" + (spec.flags || "").replace(/[^ims]/g, "");
-    re = new RegExp(spec.regex, flags);
-  } catch (e) {
-    return { name, reason: `invalid regex: ${e instanceof Error ? e.message : e}` };
   }
-  if (re.test(""))
-    return { name, reason: "matches the empty string (would redact everything)" };
-  re.lastIndex = 0;
-  if (re.test(CANARY))
-    return { name, reason: "matches benign text \u2014 too broad" };
-  re.lastIndex = 0;
-  return { label: `${spec.source === "pack" ? "pack" : "tenant"}:${name}`, pattern: re };
+  return best;
 }
-function installServerRulePack(pack) {
-  const rejected = [];
-  const rules = [];
-  for (const spec of pack.rules || []) {
-    if (rules.length >= MAX_PACK_RULES) {
-      rejected.push({ name: spec.name || "(unnamed)", reason: `pack exceeds ${MAX_PACK_RULES} rules` });
+function estimateCostUsdOrNull(modelsUsed, tokens) {
+  let best = null;
+  let bestRate = -1;
+  for (const m of modelsUsed) {
+    if (!m || m === "<synthetic>")
       continue;
+    const p = pricingFor(m);
+    if (p && p.output > bestRate) {
+      best = p;
+      bestRate = p.output;
     }
-    const out = compileServerRule(spec);
-    if ("reason" in out)
-      rejected.push(out);
-    else
-      rules.push(out);
-  }
-  const version = pack.version || "";
-  serverPack = { version, rules };
-  return { version, accepted: rules.length, rejected };
-}
-function serverRulePackVersion() {
-  return serverPack ? serverPack.version || "unversioned" : null;
-}
-function activeRules() {
-  const base2 = settingsView().rules;
-  return serverPack && serverPack.rules.length > 0 ? [...base2, ...serverPack.rules] : base2;
-}
-function isRedactionEnabled() {
-  const env = isEnvRedactionRequested();
-  if (env !== null)
-    return env;
-  return settingsView().enabled;
-}
-function redactSecrets(text, opts = {}) {
-  if (!opts.force && !isRedactionEnabled())
-    return text;
-  if (!text)
-    return text;
-  const rules = opts.rules || activeRules();
-  let out = text;
-  for (const r of rules) {
-    out = out.replace(r.pattern, (...args) => {
-      const whole = args[0];
-      const m = args.slice(0, args.length);
-      const secret = secretOf(r, m);
-      if (secret == null)
-        return whole;
-      if (opts.count)
-        opts.count.redactions++;
-      return whole.slice(0, whole.length - secret.length) + `[REDACTED:${r.label}]`;
-    });
-  }
-  const ctx = findContextualSecrets(out);
-  for (let i = ctx.length - 1; i >= 0; i--) {
-    const { start, end } = ctx[i];
-    if (opts.count)
-      opts.count.redactions++;
-    out = out.slice(0, start) + "[REDACTED:secret-context]" + out.slice(end);
   }
-  return out;
-}
-function maskSecret(s) {
-  if (!s)
-    return "";
-  if (s.length <= 4)
-    return "*".repeat(s.length);
-  return "*".repeat(Math.min(s.length - 4, 60)) + s.slice(-4);
+  if (!best)
+    return null;
+  const nonCachedInput = Math.max(0, tokens.inputTokens - tokens.cacheReadTokens - tokens.cacheCreationTokens);
+  const cost = nonCachedInput / 1e6 * best.input + tokens.outputTokens / 1e6 * best.output + tokens.cacheReadTokens / 1e6 * best.cacheRead + tokens.cacheCreationTokens / 1e6 * best.cacheCreate;
+  return Math.round(cost * 100) / 100;
 }
-function globalRegexFor(pattern) {
-  const flags = pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g";
-  const key2 = pattern.source + "\0" + flags;
-  let re = globalRegexCache.get(key2);
-  if (!re) {
-    re = new RegExp(pattern.source, flags);
-    globalRegexCache.set(key2, re);
-  }
-  return re;
+function estimateCostUsd(modelsUsed, tokens) {
+  return estimateCostUsdOrNull(modelsUsed, tokens) ?? 0;
 }
-function makeLineResolver(text) {
-  const starts = [];
-  for (let i = text.indexOf("\n"); i !== -1; i = text.indexOf("\n", i + 1))
-    starts.push(i);
-  return (index) => {
-    let lo = 0, hi = starts.length;
-    while (lo < hi) {
-      const mid = lo + hi >> 1;
-      if (starts[mid] < index)
-        lo = mid + 1;
-      else
-        hi = mid;
-    }
-    return lo + 1;
-  };
-}
-function scanTextForFindings(text, opts = {}) {
-  if (!text)
-    return [];
-  const rules = opts.rules || activeRules();
-  const findings = [];
-  const seenSpans = /* @__PURE__ */ new Set();
-  const lineAt = makeLineResolver(text);
-  for (const r of rules) {
-    const re = globalRegexFor(r.pattern);
-    re.lastIndex = 0;
-    let m;
-    while ((m = re.exec(text)) !== null) {
-      const secret = secretOf(r, m);
-      if (secret == null) {
-        if (re.lastIndex === m.index)
-          re.lastIndex++;
-        continue;
-      }
-      const at = m.index + (m[0].length - secret.length);
-      const span = `${at}:${secret.length}`;
-      if (!seenSpans.has(span)) {
-        seenSpans.add(span);
-        findings.push({ rule: r.label, line: lineAt(at), preview: maskSecret(secret) });
+var TABLE, METADATA_VERSION;
+var init_model_pricing = __esm({
+  "../engine/dist/core/model-pricing.js"() {
+    "use strict";
+    TABLE = {
+      // Anthropic — Claude 4.x family
+      "claude-opus-4-7": {
+        input: 15,
+        output: 75,
+        cacheRead: 1.5,
+        cacheCreate: 18.75,
+        lastReviewed: "2026-01-15",
+        source: "Anthropic public pricing (Opus 4.x)"
+      },
+      "claude-opus-4-6": {
+        input: 15,
+        output: 75,
+        cacheRead: 1.5,
+        cacheCreate: 18.75,
+        lastReviewed: "2026-01-15",
+        source: "Anthropic public pricing (Opus 4.x)"
+      },
+      "claude-opus-4": {
+        input: 15,
+        output: 75,
+        cacheRead: 1.5,
+        cacheCreate: 18.75,
+        lastReviewed: "2026-01-15",
+        source: "Anthropic public pricing (Opus 4.x)"
+      },
+      "claude-sonnet-4-6": {
+        input: 3,
+        output: 15,
+        cacheRead: 0.3,
+        cacheCreate: 3.75,
+        lastReviewed: "2026-01-15",
+        source: "Anthropic public pricing (Sonnet 4.x)"
+      },
+      "claude-sonnet-4": {
+        input: 3,
+        output: 15,
+        cacheRead: 0.3,
+        cacheCreate: 3.75,
+        lastReviewed: "2026-01-15",
+        source: "Anthropic public pricing (Sonnet 4.x)"
+      },
+      "claude-haiku-4-5": {
+        input: 1,
+        output: 5,
+        cacheRead: 0.1,
+        cacheCreate: 1.25,
+        lastReviewed: "2026-01-15",
+        source: "Anthropic public pricing (Haiku 4.5)"
+      },
+      // Anthropic — older Claude 3.x (kept for back-compat with historical transcripts)
+      "claude-3-7-sonnet": {
+        input: 3,
+        output: 15,
+        cacheRead: 0.3,
+        cacheCreate: 3.75,
+        lastReviewed: "2026-01-15",
+        source: "Anthropic public pricing"
+      },
+      "claude-3-5-sonnet": {
+        input: 3,
+        output: 15,
+        cacheRead: 0.3,
+        cacheCreate: 3.75,
+        lastReviewed: "2026-01-15",
+        source: "Anthropic public pricing"
+      },
+      "claude-3-5-haiku": {
+        input: 0.8,
+        output: 4,
+        cacheRead: 0.08,
+        cacheCreate: 1,
+        lastReviewed: "2026-01-15",
+        source: "Anthropic public pricing"
+      },
+      "claude-3-opus": {
+        input: 15,
+        output: 75,
+        cacheRead: 1.5,
+        cacheCreate: 18.75,
+        lastReviewed: "2026-01-15",
+        source: "Anthropic public pricing"
+      },
+      // OpenAI — current GPT-* (used by Codex CLI)
+      "gpt-5": {
+        input: 1.25,
+        output: 10,
+        cacheRead: 0.125,
+        cacheCreate: 1.25,
+        lastReviewed: "2026-01-15",
+        source: "OpenAI public pricing (GPT-5)"
+      },
+      "gpt-5-mini": {
+        input: 0.25,
+        output: 2,
+        cacheRead: 0.025,
+        cacheCreate: 0.25,
+        lastReviewed: "2026-01-15",
+        source: "OpenAI public pricing (GPT-5 Mini)"
+      },
+      "gpt-4o": {
+        input: 2.5,
+        output: 10,
+        cacheRead: 1.25,
+        cacheCreate: 2.5,
+        lastReviewed: "2026-01-15",
+        source: "OpenAI public pricing"
+      },
+      // Google Gemini — 2.x family (used by Gemini CLI)
+      "gemini-2.5-pro": {
+        input: 1.25,
+        output: 10,
+        cacheRead: 0.31,
+        cacheCreate: 1.25,
+        lastReviewed: "2026-01-15",
+        source: "Google AI Studio public pricing"
+      },
+      "gemini-2.5-flash": {
+        input: 0.3,
+        output: 2.5,
+        cacheRead: 0.075,
+        cacheCreate: 0.3,
+        lastReviewed: "2026-01-15",
+        source: "Google AI Studio public pricing"
       }
-      if (re.lastIndex === m.index)
-        re.lastIndex++;
-    }
+    };
+    METADATA_VERSION = 3;
   }
-  for (const { start, end } of findContextualSecrets(text)) {
-    const line = lineAt(start);
-    findings.push({ rule: "secret-context", line, preview: maskSecret(text.slice(start, end)) });
+});
+
+// ../engine/dist/parsers/session.js
+import { createReadStream, existsSync as existsSync5, readdirSync as readdirSync5, readFileSync as readFileSync2, statSync as statSync3, openSync, readSync, closeSync } from "fs";
+import { createInterface } from "readline";
+import { join as join5, basename as basename2 } from "path";
+function removeCodeBlocks(text) {
+  let result = text.replace(/```[\s\S]*?```/g, "[code block]");
+  result = result.replace(/`[^`]+`/g, "[code]");
+  return result;
+}
+function extractKeyText(text, maxLength = 800) {
+  let result = removeCodeBlocks(text);
+  const boilerplate = [
+    /^Let me /i,
+    /^I'll /i,
+    /^I will /i,
+    /^Now I'll /i,
+    /^Here's what /i
+  ];
+  for (const pattern of boilerplate) {
+    result = result.replace(pattern, "");
   }
-  return findings;
+  result = result.replace(/\s+/g, " ").trim();
+  return result.slice(0, maxLength);
 }
-function privacyView() {
-  let mtimeMs = -1;
-  try {
-    mtimeMs = statSync3(settingsFilePath()).mtimeMs;
-  } catch {
+function isValuableToolResult(content, toolName = "") {
+  if (!content || content.length < 20) {
+    return false;
   }
-  if (privacyCache && privacyCache.mtimeMs === mtimeMs)
-    return privacyCache;
-  let redactToolOutputs = false, redactFilePaths = false;
-  try {
-    const s = loadSettings();
-    redactToolOutputs = !!s.privacy?.redactToolOutputs;
-    redactFilePaths = !!s.privacy?.redactFilePaths;
-  } catch {
+  const skipPatterns = [
+    /^Tool ran without output/i,
+    /^No (?:matches|results) found/i,
+    /^File (?:created|updated|deleted)/i,
+    /^Command completed/i,
+    /^\s*$/
+  ];
+  for (const pattern of skipPatterns) {
+    if (pattern.test(content)) {
+      return false;
+    }
   }
-  privacyCache = { mtimeMs, redactToolOutputs, redactFilePaths };
-  return privacyCache;
+  if (["WebSearch", "WebFetch"].includes(toolName) || content.toLowerCase().includes("http")) {
+    return true;
+  }
+  if (content.length > 5e3) {
+    return false;
+  }
+  return true;
 }
-function isToolOutputRedactionEnabled() {
-  return privacyView().redactToolOutputs;
+function hasSubagentsDir(sessionPath) {
+  const dir = sessionPath.slice(0, -6);
+  return existsSync5(join5(dir, "subagents"));
 }
-function redactToolResultBody(toolName, body) {
-  if (!body)
-    return body;
-  return `[redacted: ${toolName} output, ${body.length} chars]`;
-}
-var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, globalRegexCache, privacyCache;
-var init_secret_redactor = __esm({
-  "../engine/dist/core/secret-redactor.js"() {
-    "use strict";
-    init_settings();
-    DEFAULT_REDACTION_RULES = [
-      // AWS access tokens. Prefix-anchored: AKIA, ASIA, ABIA (long-term,
-      // STS, EC2). Always exactly 16 hex/alphanumeric after the prefix.
-      // NOTE: this matches only the access-key-ID, NOT the secret key value —
-      // the `env-secret` rule below covers AWS_SECRET_ACCESS_KEY / AWS_SESSION_TOKEN.
-      { label: "aws-access-token", pattern: /\b(?:AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}\b/g },
-      // AWS STS session tokens. These are long base64 blobs with NO `NAME=` context
-      // when pasted bare into prose/code, so `env-secret` misses them — but they
-      // reliably start with one of a handful of base64 prefixes (the encoded
-      // `{"...` JSON header). Prefix-anchored → low false-positive. This is the
-      // bare-value form that leaked (`search('IQoJEXAMPLEfakeSESSIONtokenNOTreal01234567890abcDEF==...')`).
-      { label: "aws-session-token", pattern: /\b(?:IQoJ|FwoG|FwoH|FQoG|FQoH|FwoD)[A-Za-z0-9/+]{40,}={0,2}/g },
-      // Env/shell-assignment secrets — a VAR whose name ends in KEY/SECRET/TOKEN/
-      // PASSWORD/CREDENTIAL, then `=`/`:`, then the value. Zero-width lookbehind so
-      // only the VALUE is redacted (the var name stays for context). This is the
-      // dominant real-world leak vector (`export` dumps, .env files, `curl -H`,
-      // tool output) and is exactly what leaked AWS_SECRET_ACCESS_KEY and
-      // AWS_SESSION_TOKEN in cleartext while the access-key-ID rule above caught
-      // only the (least-sensitive) ID.
-      // Suffix list deliberately broad: DB_PASS (our own helm chart's name!),
-      // NPM_AUTH, SENTRY_DSN, SESSION/COOKIE secrets and BEARER vars all leaked
-      // past the original KEY/SECRET/TOKEN/PASSWORD-only list. Values under 12
-      // chars don't redact, so flag-ish vars (BYPASS=true) stay readable.
-      // Context CONSUMED, secret in group 1 — see RedactionRule.secret. As a
-      // lookbehind this was the second most expensive rule in the collector.
-      { label: "env-secret", secret: 1, pattern: /\b[A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASSWORD|PASSWD|PASS|PWD|CREDENTIAL|AUTH|DSN|SESSION|COOKIE|BEARER|SIGNATURE)S?["']?[ \t]{0,3}[:=][ \t]{0,3}["']?([A-Za-z0-9/+_.~=:@-]{12,})/g },
-      // Credentials embedded in a connection URL: scheme://user:PASSWORD@host.
-      // Redacts only the password segment (keeps scheme/user/host for context).
-      //
-      // Scheme-agnostic on purpose. The old rule allowlisted eight DB schemes, so
-      // `https://user:pass@host`, `ssh://`, `ftp://`, `smtp://` and every other
-      // userinfo URL walked through in cleartext — and a `jdbc:postgresql://…`
-      // prefix broke the \b anchor for the one family it did cover. Any scheme
-      // followed by userinfo is a credential, so match the shape, not a list.
-      { label: "url-password", secret: 1, pattern: /\b[a-zA-Z][a-zA-Z0-9+.-]{1,31}:\/\/[^:@\s/]{1,64}:([^@\s/]{1,256})(?=@)/g },
-      // Bare AWS secret-access-key VALUE: EXACTLY 40 base64 chars, word-bounded,
-      // containing upper+lower+digit. This is the gitleaks heuristic — the mixed-case
-      // requirement excludes 40-char lowercase-hex git SHAs, and the exact-40 bound
-      // excludes longer blobs/tokens. It catches the value when it appears bare in
-      // prose with NO `NAME=` and NO nearby context word (e.g. inside a markdown
-      // table or quoted in analysis) — the residual leak path the env-secret and
-      // contextual rules both miss. Placed AFTER env-secret/url-password so the
-      // keyed/URL forms keep their more-specific labels.
-      // The three stacked lookaheads each re-scanned the same 40 characters, which
-      // made this the MOST expensive rule of all 106 the collector runs (13.1% of a
-      // 29.5 MB scan). The mixed-case-plus-digit test is now one JS pass.
-      {
-        label: "aws-secret-key",
-        secret: 1,
-        pattern: /(?<![A-Za-z0-9/+])([A-Za-z0-9/+]{40})(?![A-Za-z0-9/+])/g,
-        where: (v) => /[a-z]/.test(v) && /[A-Z]/.test(v) && /[0-9]/.test(v)
-      },
-      // GitHub personal access tokens.
-      { label: "github-pat", pattern: /\bghp_[A-Za-z0-9]{36}\b/g },
-      // GitHub fine-grained PATs.
-      { label: "github-fine", pattern: /\bgithub_pat_[A-Za-z0-9_]{82}\b/g },
-      // GitHub OAuth.
-      { label: "github-oauth", pattern: /\bgho_[A-Za-z0-9]{36}\b/g },
-      // GitHub app + refresh.
-      { label: "github-app", pattern: /\b(?:ghs|ghu|ghr)_[A-Za-z0-9]{36}\b/g },
-      // Slack bot/user/app tokens.
-      { label: "slack-token", pattern: /\bxox[abopr]-[A-Za-z0-9-]{10,}\b/g },
-      // Slack incoming webhook URL.
-      { label: "slack-webhook", pattern: /\bhttps:\/\/hooks\.slack\.com\/services\/T[A-Z0-9]+\/B[A-Z0-9]+\/[A-Za-z0-9]+\b/g },
-      // Stripe live + test keys.
-      { label: "stripe-key", pattern: /\b(?:sk|pk|rk)_(?:live|test)_[A-Za-z0-9]{24,}\b/g },
-      // Anthropic.
-      { label: "anthropic-key", pattern: /\bsk-ant-[a-zA-Z0-9_-]{40,}\b/g },
-      // OpenAI. Two shapes, deliberately kept apart. The classic key is
-      // `sk-` + base62 with NO hyphens; the modern scoped keys carry an explicit
-      // proj/svcacct/admin segment first. Allowing hyphens after a bare `sk-`
-      // (which is what admitted sk-proj- in the first place) also matches ordinary
-      // kebab-case text — `sk-fix-the-login-redirect-bug`, `.sk-button-primary`,
-      // `sk-2024-01-01-backup` — and this corpus is full of branch names and CSS
-      // classes. Requiring the segment keeps sk-proj- coverage without that.
-      { label: "openai-key", pattern: /\bsk-(?:proj|svcacct|admin)-[A-Za-z0-9_-]{20,}\b|\bsk-[A-Za-z0-9]{20,}\b/g },
-      // Google API key (AIza…).
-      { label: "google-api-key", pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g },
-      // Generic JWT — three base64url segments.
-      { label: "jwt", pattern: /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g },
-      // Private key blocks (PEM). The label is a free word run rather than a fixed
-      // list, so ENCRYPTED PRIVATE KEY and PGP PRIVATE KEY BLOCK are covered
-      // without another enumeration, and \1 forces END to name the same kind as
-      // BEGIN.
-      //
-      // The body is [^-], NOT [\s\S]*?. That is a performance boundary, not a
-      // style choice. An unanchored prefix with an unbounded lazy gap re-scans to
-      // end-of-input from every candidate start, so text carrying many BEGIN
-      // markers and no matching END costs O(n^2): 500KB of that measured 810ms
-      // here, and this runs synchronously on the server's event loop over
-      // tenant-supplied text (services/secret-rescan.ts). A PEM body is base64
-      // plus headers and contains no '-', so excluding it makes the scan stop at
-      // the next delimiter instead of at EOF — same matches, linear cost.
-      { label: "private-key", pattern: /-----BEGIN ([A-Z0-9 ]{0,32})PRIVATE KEY(?: BLOCK)?-----[^-]{0,10000}?-----END \1PRIVATE KEY(?: BLOCK)?-----/g },
-      // PuTTY keys are not PEM. Match the Private-Lines payload — the actual key
-      // material — rather than spanning the whole file, which would need the same
-      // unbounded gap the rule above just removed. Line-anchored and base64-only,
-      // so it cannot run away.
-      { label: "putty-key", pattern: /^Private-Lines:[ \t]*\d{1,4}[\r\n]+(?:[A-Za-z0-9+/=]{8,120}[\r\n]+){1,400}/gm },
-      // npm tokens (uuid-shaped — overlap with our UUID filter; intentional).
-      { label: "npm-token", pattern: /\bnpm_[A-Za-z0-9]{36}\b/g },
-      // .npmrc auth lines: //registry.npmjs.org/:_authToken=VALUE (the key is not
-      // ALL-CAPS, so the env-secret rule above never matched it). The leading `:`
-      // is required — it is what makes this npmrc syntax rather than any shell var
-      // ending in _AUTH, which env-secret already owns and labels better.
-      // [^\s"'`]+ so the closing quote is not swallowed, and a ${VAR} placeholder
-      // is left alone — redacting it destroys a config example and hides nothing.
-      // The rule the perf profile caught the wedged daemon inside: 98.94% of samples.
-      { label: "npmrc-auth", secret: 1, pattern: /:_(?:authToken|password|auth)[ \t]*=[ \t]*(?!\$\{)([^\s"'`]{12,})/gi },
-      // HTTP Authorization headers. env-secret requires an ALL-CAPS name, and
-      // `Authorization` is mixed case, so both Bearer and Basic walked straight
-      // through — including short opaque tokens the contextual pass also misses
-      // (it needs 32+ chars AND mixed-case-plus-digit).
-      // Same two guards as npmrc-auth: stop at a quote, and skip the obvious
-      // placeholders that fill documentation (<YOUR_TOKEN>, ${TOKEN}, xxx…).
-      { label: "auth-header", secret: 1, pattern: /\bauthorization[ \t]*:[ \t]*(?:bearer|basic|token)[ \t]+(?![<$])([^\s"'`<]{8,})/gi },
-      // Vendor tokens with unambiguous prefixes. Each is a fixed literal, so a
-      // false positive is essentially impossible and the cost of listing is low.
-      { label: "gitlab-pat", pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g },
-      { label: "slack-app-token", pattern: /\bxapp-\d-[A-Z0-9]{8,}-\d{10,}-[a-f0-9]{32,}\b/g },
-      { label: "sendgrid-key", pattern: /\bSG\.[A-Za-z0-9_-]{20,24}\.[A-Za-z0-9_-]{40,50}\b/g },
-      // (?<![-\w]) so `cache-key-<md5>` is not read as a mailgun key.
-      { label: "mailgun-key", pattern: /(?<![-\w])key-[a-f0-9]{32}\b/g },
-      { label: "digitalocean-pat", pattern: /\bdop_v1_[a-f0-9]{64}\b/g },
-      { label: "huggingface-token", pattern: /\bhf_[A-Za-z0-9]{30,}\b/g },
-      { label: "shopify-token", pattern: /\bshp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}\b/g },
-      { label: "pypi-token", pattern: /\bpypi-AgEIcHlwaS5vcmc[A-Za-z0-9_-]{50,}\b/g },
-      // No twilio-sid rule: AC…/SK… are Twilio SIDs, which are public account and
-      // key identifiers, not the auth token. Redacting them hid nothing and
-      // collided with 32-hex etags and MD5 sums.
-      // No discord-bot-token rule either: the shape (word.word.word) matched
-      // ordinary dotted symbols such as a.b.ApplicationContextProviderImpl.
-      { label: "telegram-bot-token", pattern: /\b\d{8,10}:AA[A-Za-z0-9_-]{32,}\b/g },
-      { label: "doppler-token", pattern: /\bdp\.(?:pt|st|sa|ct)\.[A-Za-z0-9_-]{20,}\b/g },
-      // Azure Storage SAS signature — the `sig=` parameter is the actual secret.
-      { label: "azure-sas", secret: 1, pattern: /[?&]sig=([A-Za-z0-9%/+=]{20,})/g }
-    ];
-    SECRET_CONTEXT_RE = /\b(?:secret|password|passwd|credential|access[ _-]?key|private[ _-]?key|api[ _-]?key|auth(?:oriz\w*)?|bearer|token)\b/gi;
-    HIGH_ENTROPY_TOKEN_RE = /[A-Za-z0-9/+_-]{32,}/g;
-    cache = null;
-    CANARY = "the quick brown fox jumps over the lazy dog 0123456789 commit 8ba1f109551bd432803012645ac136ddd475d0fb src/index.ts:42";
-    MAX_PACK_RULES = 200;
-    MAX_PATTERN_LEN = 512;
-    serverPack = null;
-    globalRegexCache = /* @__PURE__ */ new Map();
-    privacyCache = null;
-  }
-});
-
-// ../engine/dist/parsers/chunker.js
-function stripInjectedBanners(text) {
-  let result = text;
-  for (const re of INJECTED_BANNERS)
-    result = result.replace(re, " ");
-  return result;
-}
-function cleanText(text) {
-  let result = text.replace(/<system-reminder>.*?<\/system-reminder>/gs, "");
-  result = stripInjectedBanners(result);
-  result = result.replace(/\x1b\[[0-9;]*m/g, "");
-  result = result.replace(/\s+/g, " ");
-  return result.trim();
-}
-function windowText(text, maxChars, maxWindows = 12) {
-  const clean = cleanText(text);
-  if (clean.length <= maxChars)
-    return clean ? [clean] : [];
-  const out = [];
-  const overlap = 80;
-  const step = Math.max(1, maxChars - overlap);
-  for (let i = 0; i < clean.length && out.length < maxWindows; i += step) {
-    out.push(clean.slice(i, i + maxChars));
-  }
-  return out;
-}
-function chunkSession(entry, content, maxChunks = 80, maxTokensPerChunk = 500) {
-  const chunks = [];
-  const maxChars = maxTokensPerChunk * 4;
-  const baseData = {
-    sessionId: entry.sessionId,
-    projectPath: entry.projectPath,
-    created: entry.created,
-    modified: entry.modified,
-    mtime: entry.fileMtime,
-    firstPrompt: entry.firstPrompt || content.firstPrompt,
-    sourceFile: content.sessionPath
-  };
-  for (let i = 0; i < Math.min(2, content.summaries.length); i++) {
-    const summary = content.summaries[i];
-    if (!summary?.trim())
-      continue;
-    const chunkText = cleanText(summary.slice(0, maxChars));
-    if (chunkText.length > 8e3) {
-      chunks.push({
-        chunkId: `${entry.sessionId}_summary_${i}`,
-        chunkType: "summary",
-        text: chunkText.slice(0, 8e3),
-        sourceLine: 0,
-        ...baseData
-      });
-    } else {
-      chunks.push({
-        chunkId: `${entry.sessionId}_summary_${i}`,
-        chunkType: "summary",
-        text: chunkText,
-        sourceLine: 0,
-        ...baseData
-      });
-    }
-  }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
-  }
-  const firstPrompt = entry.firstPrompt || content.firstPrompt;
-  if (firstPrompt?.trim()) {
-    const firstLine = content.userMessages[0]?.lineNumber || 0;
-    chunks.push({
-      chunkId: `${entry.sessionId}_first_prompt`,
-      chunkType: "first_prompt",
-      text: cleanText(firstPrompt.slice(0, maxChars)),
-      sourceLine: firstLine,
-      ...baseData
-    });
-  }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
-  }
-  const userStart = firstPrompt ? 1 : 0;
-  for (let i = userStart; i < content.userMessages.length; i++) {
-    if (chunks.length >= maxChunks)
-      break;
-    const msg = content.userMessages[i];
-    if (!msg.text.trim())
-      continue;
-    const windows = windowText(msg.text, maxChars);
-    for (let w = 0; w < windows.length; w++) {
-      if (chunks.length >= maxChunks)
-        break;
-      chunks.push({
-        chunkId: `${entry.sessionId}_user_${i}_${w}`,
-        chunkType: "user_context",
-        text: windows[w],
-        sourceLine: msg.lineNumber,
-        ...baseData
-      });
-    }
-  }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
-  }
-  for (let i = 0; i < content.assistantMessages.length; i++) {
-    if (chunks.length >= maxChunks)
-      break;
-    const msg = content.assistantMessages[i];
-    if (!msg.text.trim() || msg.text.length <= 50)
-      continue;
-    const windows = windowText(msg.text, maxChars);
-    for (let w = 0; w < windows.length; w++) {
-      if (chunks.length >= maxChunks)
-        break;
-      chunks.push({
-        chunkId: `${entry.sessionId}_assistant_${i}_${w}`,
-        chunkType: "assistant",
-        text: windows[w],
-        sourceLine: msg.lineNumber,
-        ...baseData
-      });
-    }
-  }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
-  }
-  if (content.toolResults.length > 0) {
-    const webSearches = content.toolResults.filter((r) => r.contentType === "web_search");
-    const otherResults = content.toolResults.filter((r) => r.contentType !== "web_search");
-    const resultsToProcess = [...webSearches.slice(0, 5), ...otherResults.slice(0, 10)];
-    const stripBodies = isToolOutputRedactionEnabled();
-    for (let i = 0; i < resultsToProcess.length; i++) {
-      if (chunks.length >= maxChunks)
-        break;
-      const result = resultsToProcess[i];
-      if (result.text.trim()) {
-        const body = stripBodies && result.contentType !== "web_search" ? redactToolResultBody(result.contentType, result.text) : result.text.slice(0, maxChars);
-        chunks.push({
-          chunkId: `${entry.sessionId}_${result.contentType}_${i}`,
-          chunkType: result.contentType,
-          text: cleanText(body),
-          sourceLine: result.lineNumber,
-          ...baseData
-        });
-      }
-    }
-  }
-  return chunks.slice(0, maxChunks);
-}
-var INJECTED_BANNERS;
-var init_chunker = __esm({
-  "../engine/dist/parsers/chunker.js"() {
-    "use strict";
-    init_secret_redactor();
-    INJECTED_BANNERS = [
-      /MCP issues detected\. ?Run \/mcp list for status\.?/g,
-      /Context low[^\n]*Run \/compact[^\n]*/g,
-      /API Error:[^\n]{0,120}/g
-    ];
-  }
-});
-
-// ../engine/dist/core/project-dir-name.js
-import { readdirSync as readdirSync4 } from "node:fs";
-function looksWindowsEncoded(dirName) {
-  return /^[A-Za-z]--/.test(dirName);
-}
-function decodeProjectDirName(dirName) {
-  if (!dirName)
-    return "";
-  if (looksWindowsEncoded(dirName)) {
-    const drive = dirName[0].toUpperCase();
-    const rest = dirName.slice(3).replace(/-/g, "\\");
-    return `${drive}:\\${rest}`;
-  }
-  return "/" + dirName.replace(/^-/, "").replace(/-/g, "/");
-}
-function resolveProjectDirName(dirName, deps = {}) {
-  const structural = decodeProjectDirName(dirName);
-  if (!dirName)
-    return structural;
-  if (looksWindowsEncoded(dirName))
-    return structural;
-  const readdir3 = deps.readdir ?? ((p) => readdirSync4(p, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name));
-  const encodeName = (name) => name.replace(/[-_.]/g, "-");
-  let remaining = dirName.replace(/^-/, "");
-  let current = "/";
-  while (remaining) {
-    let children;
-    try {
-      children = readdir3(current);
-    } catch {
-      break;
-    }
-    let best = "";
-    for (const child of children) {
-      const encoded = encodeName(child);
-      if (!encoded || encoded.length < best.length)
-        continue;
-      if (!remaining.startsWith(encoded))
-        continue;
-      const next = remaining[encoded.length];
-      if (next !== void 0 && next !== "-")
-        continue;
-      if (encoded.length > best.length)
-        best = child;
-    }
-    if (!best)
-      break;
-    current = current === "/" ? `/${best}` : `${current}/${best}`;
-    remaining = remaining.slice(encodeName(best).length).replace(/^-/, "");
-  }
-  return remaining ? structural : current;
-}
-var init_project_dir_name = __esm({
-  "../engine/dist/core/project-dir-name.js"() {
-    "use strict";
-  }
-});
-
-// ../engine/dist/core/model-pricing.js
-function pricingFor(modelId) {
-  if (!modelId)
-    return null;
-  const lower = modelId.toLowerCase();
-  let best = null;
-  let bestLen = -1;
-  for (const [prefix, entry] of Object.entries(TABLE)) {
-    if (lower.startsWith(prefix.toLowerCase()) && prefix.length > bestLen) {
-      best = entry;
-      bestLen = prefix.length;
-    }
-  }
-  return best;
-}
-function estimateCostUsdOrNull(modelsUsed, tokens) {
-  let best = null;
-  let bestRate = -1;
-  for (const m of modelsUsed) {
-    if (!m || m === "<synthetic>")
-      continue;
-    const p = pricingFor(m);
-    if (p && p.output > bestRate) {
-      best = p;
-      bestRate = p.output;
-    }
-  }
-  if (!best)
-    return null;
-  const nonCachedInput = Math.max(0, tokens.inputTokens - tokens.cacheReadTokens - tokens.cacheCreationTokens);
-  const cost = nonCachedInput / 1e6 * best.input + tokens.outputTokens / 1e6 * best.output + tokens.cacheReadTokens / 1e6 * best.cacheRead + tokens.cacheCreationTokens / 1e6 * best.cacheCreate;
-  return Math.round(cost * 100) / 100;
-}
-function estimateCostUsd(modelsUsed, tokens) {
-  return estimateCostUsdOrNull(modelsUsed, tokens) ?? 0;
-}
-var TABLE, METADATA_VERSION;
-var init_model_pricing = __esm({
-  "../engine/dist/core/model-pricing.js"() {
-    "use strict";
-    TABLE = {
-      // Anthropic — Claude 4.x family
-      "claude-opus-4-7": {
-        input: 15,
-        output: 75,
-        cacheRead: 1.5,
-        cacheCreate: 18.75,
-        lastReviewed: "2026-01-15",
-        source: "Anthropic public pricing (Opus 4.x)"
-      },
-      "claude-opus-4-6": {
-        input: 15,
-        output: 75,
-        cacheRead: 1.5,
-        cacheCreate: 18.75,
-        lastReviewed: "2026-01-15",
-        source: "Anthropic public pricing (Opus 4.x)"
-      },
-      "claude-opus-4": {
-        input: 15,
-        output: 75,
-        cacheRead: 1.5,
-        cacheCreate: 18.75,
-        lastReviewed: "2026-01-15",
-        source: "Anthropic public pricing (Opus 4.x)"
-      },
-      "claude-sonnet-4-6": {
-        input: 3,
-        output: 15,
-        cacheRead: 0.3,
-        cacheCreate: 3.75,
-        lastReviewed: "2026-01-15",
-        source: "Anthropic public pricing (Sonnet 4.x)"
-      },
-      "claude-sonnet-4": {
-        input: 3,
-        output: 15,
-        cacheRead: 0.3,
-        cacheCreate: 3.75,
-        lastReviewed: "2026-01-15",
-        source: "Anthropic public pricing (Sonnet 4.x)"
-      },
-      "claude-haiku-4-5": {
-        input: 1,
-        output: 5,
-        cacheRead: 0.1,
-        cacheCreate: 1.25,
-        lastReviewed: "2026-01-15",
-        source: "Anthropic public pricing (Haiku 4.5)"
-      },
-      // Anthropic — older Claude 3.x (kept for back-compat with historical transcripts)
-      "claude-3-7-sonnet": {
-        input: 3,
-        output: 15,
-        cacheRead: 0.3,
-        cacheCreate: 3.75,
-        lastReviewed: "2026-01-15",
-        source: "Anthropic public pricing"
-      },
-      "claude-3-5-sonnet": {
-        input: 3,
-        output: 15,
-        cacheRead: 0.3,
-        cacheCreate: 3.75,
-        lastReviewed: "2026-01-15",
-        source: "Anthropic public pricing"
-      },
-      "claude-3-5-haiku": {
-        input: 0.8,
-        output: 4,
-        cacheRead: 0.08,
-        cacheCreate: 1,
-        lastReviewed: "2026-01-15",
-        source: "Anthropic public pricing"
-      },
-      "claude-3-opus": {
-        input: 15,
-        output: 75,
-        cacheRead: 1.5,
-        cacheCreate: 18.75,
-        lastReviewed: "2026-01-15",
-        source: "Anthropic public pricing"
-      },
-      // OpenAI — current GPT-* (used by Codex CLI)
-      "gpt-5": {
-        input: 1.25,
-        output: 10,
-        cacheRead: 0.125,
-        cacheCreate: 1.25,
-        lastReviewed: "2026-01-15",
-        source: "OpenAI public pricing (GPT-5)"
-      },
-      "gpt-5-mini": {
-        input: 0.25,
-        output: 2,
-        cacheRead: 0.025,
-        cacheCreate: 0.25,
-        lastReviewed: "2026-01-15",
-        source: "OpenAI public pricing (GPT-5 Mini)"
-      },
-      "gpt-4o": {
-        input: 2.5,
-        output: 10,
-        cacheRead: 1.25,
-        cacheCreate: 2.5,
-        lastReviewed: "2026-01-15",
-        source: "OpenAI public pricing"
-      },
-      // Google Gemini — 2.x family (used by Gemini CLI)
-      "gemini-2.5-pro": {
-        input: 1.25,
-        output: 10,
-        cacheRead: 0.31,
-        cacheCreate: 1.25,
-        lastReviewed: "2026-01-15",
-        source: "Google AI Studio public pricing"
-      },
-      "gemini-2.5-flash": {
-        input: 0.3,
-        output: 2.5,
-        cacheRead: 0.075,
-        cacheCreate: 0.3,
-        lastReviewed: "2026-01-15",
-        source: "Google AI Studio public pricing"
-      }
-    };
-    METADATA_VERSION = 3;
-  }
-});
-
-// ../engine/dist/parsers/session.js
-import { createReadStream, existsSync as existsSync5, readdirSync as readdirSync5, readFileSync as readFileSync2, statSync as statSync4, openSync, readSync, closeSync } from "fs";
-import { createInterface } from "readline";
-import { join as join5, basename as basename2 } from "path";
-function removeCodeBlocks(text) {
-  let result = text.replace(/```[\s\S]*?```/g, "[code block]");
-  result = result.replace(/`[^`]+`/g, "[code]");
-  return result;
-}
-function extractKeyText(text, maxLength = 800) {
-  let result = removeCodeBlocks(text);
-  const boilerplate = [
-    /^Let me /i,
-    /^I'll /i,
-    /^I will /i,
-    /^Now I'll /i,
-    /^Here's what /i
-  ];
-  for (const pattern of boilerplate) {
-    result = result.replace(pattern, "");
-  }
-  result = result.replace(/\s+/g, " ").trim();
-  return result.slice(0, maxLength);
-}
-function isValuableToolResult(content, toolName = "") {
-  if (!content || content.length < 20) {
-    return false;
-  }
-  const skipPatterns = [
-    /^Tool ran without output/i,
-    /^No (?:matches|results) found/i,
-    /^File (?:created|updated|deleted)/i,
-    /^Command completed/i,
-    /^\s*$/
-  ];
-  for (const pattern of skipPatterns) {
-    if (pattern.test(content)) {
-      return false;
-    }
-  }
-  if (["WebSearch", "WebFetch"].includes(toolName) || content.toLowerCase().includes("http")) {
-    return true;
-  }
-  if (content.length > 5e3) {
-    return false;
-  }
-  return true;
-}
-function parseSessionsIndex(indexPath) {
-  if (!existsSync5(indexPath)) {
-    return [];
-  }
-  const data = JSON.parse(readFileSync2(indexPath, "utf-8"));
-  const entries = data.entries || [];
-  return entries.map((e) => ({
-    sessionId: e.sessionId || "",
-    fullPath: e.fullPath || "",
-    fileMtime: e.fileMtime || 0,
-    firstPrompt: e.firstPrompt || "",
-    messageCount: e.messageCount || 0,
-    created: e.created || "",
-    modified: e.modified || "",
-    gitBranch: e.gitBranch || "",
-    projectPath: e.projectPath || "",
-    isSidechain: e.isSidechain || false
-  }));
-}
-function* iterAllSessionIndices(claudeDir) {
-  const dir = claudeDir || claudeBackend.projectsDir();
-  if (!existsSync5(dir)) {
-    return;
-  }
-  const entries = readdirSync5(dir, { withFileTypes: true });
-  for (const entry of entries) {
-    if (!entry.isDirectory())
-      continue;
-    const projectDir = join5(dir, entry.name);
-    const indexPath = join5(projectDir, "sessions-index.json");
-    if (existsSync5(indexPath)) {
-      const sessions = parseSessionsIndex(indexPath);
-      if (sessions.length > 0) {
-        yield [projectDir, sessions];
-      }
-    }
-  }
-}
-function hasSubagentsDir(sessionPath) {
-  const dir = sessionPath.slice(0, -6);
-  return existsSync5(join5(dir, "subagents"));
-}
-function getSubagentPaths(sessionPath) {
-  const subagentsDir = join5(sessionPath.slice(0, -6), "subagents");
-  if (!existsSync5(subagentsDir))
-    return [];
-  return readdirSync5(subagentsDir).filter((f) => f.endsWith(".jsonl")).sort().map((f) => join5(subagentsDir, f));
-}
-function getSubagentProjectPath(sessionPath, folderDerivedPath) {
-  const subagentPaths = getSubagentPaths(sessionPath);
-  if (subagentPaths.length === 0)
-    return folderDerivedPath;
-  const cwdCounts = /* @__PURE__ */ new Map();
-  for (const filePath of subagentPaths) {
-    try {
-      const lines = readFileSync2(filePath, "utf-8").split("\n");
-      for (const line of lines) {
-        if (!line.trim())
-          continue;
-        try {
-          const entry = JSON.parse(line);
-          if (entry.type === "user" && typeof entry.cwd === "string" && entry.cwd) {
-            cwdCounts.set(entry.cwd, (cwdCounts.get(entry.cwd) ?? 0) + 1);
-          }
-        } catch {
-        }
-      }
-    } catch {
-    }
-  }
-  if (cwdCounts.size === 0)
-    return folderDerivedPath;
-  let best = folderDerivedPath;
-  let bestCount = 0;
-  for (const [cwd, count] of cwdCounts) {
-    if (count > bestCount) {
-      best = cwd;
-      bestCount = count;
-    }
-  }
-  return best;
+function getSubagentPaths(sessionPath) {
+  const subagentsDir = join5(sessionPath.slice(0, -6), "subagents");
+  if (!existsSync5(subagentsDir))
+    return [];
+  return readdirSync5(subagentsDir).filter((f) => f.endsWith(".jsonl")).sort().map((f) => join5(subagentsDir, f));
 }
 function readCwdFromJsonl(sessionPath) {
   try {
@@ -6298,22 +5679,6 @@ function readCwdFromJsonl(sessionPath) {
   }
   return "";
 }
-function getSessionMtime(sessionPath) {
-  const subagentPaths = getSubagentPaths(sessionPath);
-  if (subagentPaths.length === 0) {
-    return statSync4(sessionPath).mtimeMs;
-  }
-  let maxMtime = statSync4(sessionPath).mtimeMs;
-  for (const p of subagentPaths) {
-    try {
-      const m = statSync4(p).mtimeMs;
-      if (m > maxMtime)
-        maxMtime = m;
-    } catch {
-    }
-  }
-  return maxMtime;
-}
 async function parseSessionFile(sessionPath, maxMessages = 50) {
   const sessionId = basename2(sessionPath, ".jsonl");
   const content = {
@@ -6551,76 +5916,10 @@ ${resultText}` : resultText;
   });
   return content;
 }
-function* getAllSessions(claudeDir) {
-  const seenSessionIds = /* @__PURE__ */ new Set();
-  const projectDirs = claudeDir ? [claudeDir] : claudeProjectDirs();
-  for (const dir of projectDirs) {
-    for (const [, entries] of iterAllSessionIndices(dir)) {
-      for (const entry of entries) {
-        if (!seenSessionIds.has(entry.sessionId) && existsSync5(entry.fullPath)) {
-          seenSessionIds.add(entry.sessionId);
-          yield [entry, entry.fullPath];
-        }
-      }
-    }
-    if (!existsSync5(dir))
-      continue;
-    const dirEntries = readdirSync5(dir, { withFileTypes: true });
-    for (const projDirEntry of dirEntries) {
-      if (!projDirEntry.isDirectory())
-        continue;
-      const projectPath = join5(dir, projDirEntry.name);
-      const files = readdirSync5(projectPath);
-      for (const file of files) {
-        if (!file.endsWith(".jsonl"))
-          continue;
-        if (file.startsWith("agent-"))
-          continue;
-        if (file === "sessions-index.json")
-          continue;
-        const sessionId = basename2(file, ".jsonl");
-        if (seenSessionIds.has(sessionId))
-          continue;
-        const fullPath = join5(projectPath, file);
-        try {
-          const stat3 = statSync4(fullPath);
-          const derivedProjectPath = resolveProjectDirName(projDirEntry.name);
-          const effectiveMtime = getSessionMtime(fullPath);
-          let projectPath2 = "";
-          if (hasSubagentsDir(fullPath)) {
-            projectPath2 = getSubagentProjectPath(fullPath, derivedProjectPath);
-          } else {
-            const fromJsonl = readCwdFromJsonl(fullPath);
-            if (fromJsonl)
-              projectPath2 = fromJsonl;
-          }
-          if (!projectPath2)
-            projectPath2 = derivedProjectPath;
-          const entry = {
-            sessionId,
-            fullPath,
-            fileMtime: effectiveMtime,
-            firstPrompt: "",
-            messageCount: 0,
-            created: stat3.birthtime.toISOString(),
-            modified: new Date(effectiveMtime).toISOString(),
-            gitBranch: "",
-            projectPath: projectPath2,
-            isSidechain: false
-          };
-          seenSessionIds.add(sessionId);
-          yield [entry, fullPath];
-        } catch {
-          continue;
-        }
-      }
-    }
-  }
-}
 var init_session = __esm({
   "../engine/dist/parsers/session.js"() {
     "use strict";
-    init_chunker();
+    init_banners();
     init_claude2();
     init_tool_paths();
     init_project_dir_name();
@@ -7286,7 +6585,7 @@ var init_raw = __esm({
 // ../engine/dist/transcript/shadow.js
 import { gzipSync as gzipSync2, gunzipSync as gunzipSync2 } from "zlib";
 import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2, renameSync as renameSync2, statSync as statSync5 } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2, renameSync as renameSync2, statSync as statSync4 } from "fs";
 import { dirname as dirname7, join as join8 } from "path";
 function shadowRoot() {
   return join8(getDataDir(), "shadow");
@@ -7494,7 +6793,7 @@ function liveFingerprint(backend, rawId) {
     const loc = backend.findSession(rawId);
     if (!loc?.path)
       return "";
-    const st = statSync5(loc.path);
+    const st = statSync4(loc.path);
     return `${st.mtimeMs}:${st.size}`;
   } catch {
     return "";
@@ -7512,7 +6811,7 @@ function seedShadow(sessionId, container) {
 }
 function shadowSizeOnDisk(tool, rawId) {
   try {
-    return statSync5(shadowFileFor(tool, rawId)).size;
+    return statSync4(shadowFileFor(tool, rawId)).size;
   } catch {
     return 0;
   }
@@ -7530,7 +6829,7 @@ var init_shadow = __esm({
 });
 
 // ../engine/dist/core/live-session-scan.js
-import { existsSync as existsSync7, readdirSync as readdirSync6, readFileSync as readFileSync4, statSync as statSync6, openSync as openSync2, readSync as readSync2, closeSync as closeSync2 } from "fs";
+import { existsSync as existsSync7, readdirSync as readdirSync6, readFileSync as readFileSync4, statSync as statSync5, openSync as openSync2, readSync as readSync2, closeSync as closeSync2 } from "fs";
 import { join as join9, basename as basename5 } from "path";
 function detectTool(sessionId) {
   return getBackendForId(sessionId)?.id ?? "claude";
@@ -7622,20 +6921,33 @@ function resolveSessionContentGroups(sessionId) {
 }
 function withSessionReadCache(fn) {
   readScopeDepth++;
+  if (readScopeDepth === 1)
+    derivedScope = /* @__PURE__ */ new Map();
   try {
     return fn();
   } finally {
-    if (--readScopeDepth === 0)
+    if (--readScopeDepth === 0) {
       readScope = null;
+      derivedScope = null;
+    }
   }
 }
+function memoInSessionScope(key2, compute) {
+  if (!derivedScope)
+    return compute();
+  if (derivedScope.has(key2))
+    return derivedScope.get(key2);
+  const value = compute();
+  derivedScope.set(key2, value);
+  return value;
+}
 function readSessionGroupText(group) {
   let key2 = "";
   if (readScopeDepth > 0) {
     const parts = [];
     for (const p of group.paths) {
       try {
-        const st = statSync6(p);
+        const st = statSync5(p);
         parts.push(`${p}:${st.mtimeMs}:${st.size}`);
       } catch {
         parts.push(`${p}:missing`);
@@ -7655,7 +6967,7 @@ function readSessionGroupText(group) {
       continue;
     }
     try {
-      mtime = Math.max(mtime, statSync6(p).mtimeMs);
+      mtime = Math.max(mtime, statSync5(p).mtimeMs);
     } catch {
     }
     text = text ? mergeLineText(text, raw).text : raw;
@@ -7740,7 +7052,7 @@ function findCodexSessionFileIn(root, sessionId) {
   }
   return scanDir(root);
 }
-var scanScopeDepth, indexCache, readScope, readScopeDepth, geminiCache, MAX_EVENT_LINE_BYTES;
+var scanScopeDepth, indexCache, readScope, readScopeDepth, derivedScope, geminiCache, MAX_EVENT_LINE_BYTES;
 var init_live_session_scan = __esm({
   "../engine/dist/core/live-session-scan.js"() {
     "use strict";
@@ -7754,6 +7066,7 @@ var init_live_session_scan = __esm({
     indexCache = null;
     readScope = null;
     readScopeDepth = 0;
+    derivedScope = null;
     geminiCache = null;
     MAX_EVENT_LINE_BYTES = 8 * 1024 * 1024;
   }
@@ -8031,6 +7344,28 @@ var init_session_git = __esm({
   }
 });
 
+// ../engine/dist/core/session-multi-tool.js
+function extractTurnsAny(sessionId, opts = {}) {
+  const backend = getBackendForId(sessionId);
+  if (!backend)
+    return { sessionId, found: false, turns: [], startMs: 0, endMs: 0 };
+  return memoInSessionScope(`turns:${sessionId}:${opts.maxTurns ?? ""}:${opts.assistantMax ?? ""}`, () => backend.extractTurns(sessionId, opts));
+}
+function replaySessionAny(sessionId) {
+  const backend = getBackendForId(sessionId);
+  if (!backend)
+    return { sessionId, found: false, projectPath: "", files: [], totalLinesAdded: 0, totalLinesRemoved: 0 };
+  return memoInSessionScope(`replay:${sessionId}`, () => backend.replay(sessionId));
+}
+var init_session_multi_tool = __esm({
+  "../engine/dist/core/session-multi-tool.js"() {
+    "use strict";
+    init_tool_backend();
+    init_live_session_scan();
+    init_backends();
+  }
+});
+
 // ../engine/dist/core/session-outcome.js
 function extractDecisionsFromTurn(turn) {
   if (turn.kind !== "assistant_text" || !turn.text)
@@ -8127,7 +7462,7 @@ function computeOutcome(sessionId, opts = {}) {
   };
   if (!backend)
     return notFound;
-  const turnsRes = backend.extractTurns(sessionId, { assistantMax: 2e3 });
+  const turnsRes = extractTurnsAny(sessionId, { assistantMax: 2e3 });
   if (!turnsRes.found)
     return notFound;
   const decisions = [];
@@ -8166,7 +7501,7 @@ function computeOutcome(sessionId, opts = {}) {
     totalLinesAdded = fast.totalLinesAdded;
     totalLinesRemoved = fast.totalLinesRemoved;
   } else {
-    const replay = backend.replay(sessionId);
+    const replay = replaySessionAny(sessionId);
     filesChanged = replay.files.map((f) => f.file);
     totalLinesAdded = replay.totalLinesAdded;
     totalLinesRemoved = replay.totalLinesRemoved;
@@ -8205,6 +7540,7 @@ var init_session_outcome = __esm({
     init_session_sentiment();
     init_session_git();
     init_tool_backend();
+    init_session_multi_tool();
     init_backends();
     DECISION_PATTERNS = [
       /\b(?:I'?ll|I will|I'?m going to|Going to|Let me|We'?ll|We will|We should|Let'?s|I'?m about to|I'?m going to)\b[^\n.!?]*[.!?]/i,
@@ -8340,11 +7676,11 @@ var init_first_prompt = __esm({
 });
 
 // ../engine/dist/core/backends/tail-read.js
-import { openSync as openSync4, readSync as readSync4, closeSync as closeSync4, statSync as statSync7 } from "node:fs";
+import { openSync as openSync4, readSync as readSync4, closeSync as closeSync4, statSync as statSync6 } from "node:fs";
 function readTailFromOffset(path, offset) {
   let size = 0;
   try {
-    size = statSync7(path).size;
+    size = statSync6(path).size;
   } catch {
     return { text: "", newOffset: offset };
   }
@@ -8661,7 +7997,7 @@ var init_generic_engine = __esm({
 });
 
 // ../engine/dist/core/backends/claude.js
-import { existsSync as existsSync10, readdirSync as readdirSync7, readFileSync as readFileSync5, statSync as statSync8, openSync as openSync5, readSync as readSync5, closeSync as closeSync5 } from "fs";
+import { existsSync as existsSync10, readdirSync as readdirSync7, readFileSync as readFileSync5, statSync as statSync7, openSync as openSync5, readSync as readSync5, closeSync as closeSync5 } from "fs";
 import { join as join10, basename as basename8 } from "path";
 function stripReminders(text) {
   return text.replace(/<system-reminder>[\s\S]*?<\/system-reminder>/g, "").trim();
@@ -8674,6 +8010,7 @@ var UUID_RE, ClaudeBackend, claudeBackend;
 var init_claude2 = __esm({
   "../engine/dist/core/backends/claude.js"() {
     "use strict";
+    init_live_session_scan();
     init_tool_paths();
     init_live_session_scan();
     init_session_outcome();
@@ -8790,7 +8127,7 @@ var init_claude2 = __esm({
         let mtime = 0;
         for (const c of copies) {
           try {
-            mtime = Math.max(mtime, statSync8(c.path).mtimeMs);
+            mtime = Math.max(mtime, statSync7(c.path).mtimeMs);
           } catch {
           }
         }
@@ -8866,7 +8203,7 @@ var init_claude2 = __esm({
             const fullPath = join10(projPath, f);
             let stat3;
             try {
-              stat3 = statSync8(fullPath);
+              stat3 = statSync7(fullPath);
             } catch {
               continue;
             }
@@ -8936,6 +8273,9 @@ var init_claude2 = __esm({
        * splits show up alongside the parent.
        */
       readEvents(rawId) {
+        return memoInSessionScope(`events:claude:${rawId}`, () => this.#readEventsUncached(rawId));
+      }
+      #readEventsUncached(rawId) {
         const groups = resolveSessionContentGroups(rawId);
         if (groups.length === 0)
           return [];
@@ -9084,7 +8424,7 @@ var init_claude2 = __esm({
         const events = this.readEvents(rawId);
         let fileMtime = 0;
         try {
-          fileMtime = statSync8(located.path).mtimeMs;
+          fileMtime = statSync7(located.path).mtimeMs;
         } catch {
         }
         return liveScanEditsFromEvents(events, this.fileToolMap, {
@@ -9139,13 +8479,13 @@ var init_claude2 = __esm({
                 continue;
               const fp = join10(projPath, f);
               try {
-                const st = statSync8(fp);
+                const st = statSync7(fp);
                 let mtime = st.mtimeMs;
                 const subDir = join10(projPath, f.slice(0, -6), "subagents");
                 if (existsSync10(subDir)) {
                   for (const sub of readdirSync7(subDir)) {
                     try {
-                      const subSt = statSync8(join10(subDir, sub));
+                      const subSt = statSync7(join10(subDir, sub));
                       if (subSt.mtimeMs > mtime)
                         mtime = subSt.mtimeMs;
                     } catch {
@@ -9210,7 +8550,7 @@ var init_claude2 = __esm({
         let total = 0;
         for (const located of findSessionFiles(this.toRawId(prefixedId))) {
           try {
-            total += statSync8(located.path).size;
+            total += statSync7(located.path).size;
           } catch {
           }
         }
@@ -9823,7 +9163,7 @@ var init_opencode = __esm({
 });
 
 // ../engine/dist/core/backends/codex.js
-import { readdirSync as readdirSync8, readFileSync as readFileSync6, statSync as statSync9, openSync as openSync6, readSync as readSync6, closeSync as closeSync6 } from "fs";
+import { readdirSync as readdirSync8, readFileSync as readFileSync6, statSync as statSync8, openSync as openSync6, readSync as readSync6, closeSync as closeSync6 } from "fs";
 import { basename as basename9, dirname as dirname10, join as join12 } from "path";
 function parseShellWrites(cmd) {
   const out = [];
@@ -10031,7 +9371,7 @@ var init_codex2 = __esm({
           return null;
         let mtime = 0;
         try {
-          mtime = statSync9(located.path).mtimeMs;
+          mtime = statSync8(located.path).mtimeMs;
         } catch {
         }
         return {
@@ -10051,7 +9391,7 @@ var init_codex2 = __esm({
           for (const filePath of walkRollouts(root)) {
             let stat3;
             try {
-              stat3 = statSync9(filePath);
+              stat3 = statSync8(filePath);
             } catch {
               continue;
             }
@@ -10247,7 +9587,7 @@ var init_codex2 = __esm({
         let mtime = 0;
         try {
           raw = readFileSync6(path, "utf-8");
-          mtime = statSync9(path).mtimeMs;
+          mtime = statSync8(path).mtimeMs;
         } catch {
           return [];
         }
@@ -10347,7 +9687,7 @@ var init_codex2 = __esm({
         const events = this.readEvents(this.toRawId(id));
         let fileMtime = 0;
         try {
-          fileMtime = statSync9(located.path).mtimeMs;
+          fileMtime = statSync8(located.path).mtimeMs;
         } catch {
         }
         return liveScanEditsFromEvents(events, this.fileToolMap, {
@@ -10411,7 +9751,7 @@ var init_codex2 = __esm({
             const p = join12(dir, entry.name);
             let st;
             try {
-              st = statSync9(p);
+              st = statSync8(p);
             } catch {
               continue;
             }
@@ -10478,7 +9818,7 @@ var init_codex2 = __esm({
         let mtime = 0;
         const push = (path, name) => {
           try {
-            const st = statSync9(path);
+            const st = statSync8(path);
             files.push({ name, bytes: readFileSync6(path) });
             if (st.mtimeMs > mtime)
               mtime = st.mtimeMs;
@@ -10520,7 +9860,7 @@ var init_codex2 = __esm({
         if (!loc)
           return 0;
         try {
-          return statSync9(loc.path).size;
+          return statSync8(loc.path).size;
         } catch {
           return 0;
         }
@@ -10537,7 +9877,7 @@ var init_codex2 = __esm({
 });
 
 // ../engine/dist/core/backends/agy.js
-import { existsSync as existsSync12, readdirSync as readdirSync9, readFileSync as readFileSync7, statSync as statSync10 } from "fs";
+import { existsSync as existsSync12, readdirSync as readdirSync9, readFileSync as readFileSync7, statSync as statSync9 } from "fs";
 import { basename as basename10, dirname as dirname11, join as join13 } from "path";
 function agyTranscriptPath(logsDir) {
   const full = join13(logsDir, "transcript_full.jsonl");
@@ -10730,7 +10070,7 @@ var init_agy = __esm({
           return null;
         let mtime = 0;
         try {
-          mtime = statSync10(path).mtimeMs;
+          mtime = statSync9(path).mtimeMs;
         } catch {
         }
         const projectPath = resolveAgyProject(dirname11(path), this.homeDir());
@@ -10758,7 +10098,7 @@ var init_agy = __esm({
           for (const rawId of sessionDirs) {
             const sessionPath = join13(brainDir, rawId);
             try {
-              if (!statSync10(sessionPath).isDirectory())
+              if (!statSync9(sessionPath).isDirectory())
                 continue;
             } catch {
               continue;
@@ -10768,7 +10108,7 @@ var init_agy = __esm({
               continue;
             let stat3;
             try {
-              stat3 = statSync10(filePath);
+              stat3 = statSync9(filePath);
             } catch {
               continue;
             }
@@ -11033,7 +10373,7 @@ var init_agy = __esm({
         for (const rawId of sessionDirs) {
           const sessionPath = join13(brainDir, rawId);
           try {
-            if (!statSync10(sessionPath).isDirectory())
+            if (!statSync9(sessionPath).isDirectory())
               continue;
           } catch {
             continue;
@@ -11042,7 +10382,7 @@ var init_agy = __esm({
           if (!filePath)
             continue;
           try {
-            const st = statSync10(filePath);
+            const st = statSync9(filePath);
             if (st.mtimeMs < opts.sinceMs)
               continue;
             candidates2.push({ rawId, mtime: st.mtimeMs });
@@ -11070,7 +10410,7 @@ var init_agy = __esm({
         try {
           return {
             tool: "agy",
-            mtime: statSync10(loc.path).mtimeMs,
+            mtime: statSync9(loc.path).mtimeMs,
             files: [{ name: basename10(loc.path), bytes: readFileSync7(loc.path) }]
           };
         } catch {
@@ -11085,7 +10425,7 @@ var init_agy = __esm({
         if (!loc)
           return 0;
         try {
-          return statSync10(loc.path).size;
+          return statSync9(loc.path).size;
         } catch {
           return 0;
         }
@@ -11102,7 +10442,7 @@ var init_agy = __esm({
 });
 
 // ../engine/dist/core/backends/cursor-store.js
-import { existsSync as existsSync13, readdirSync as readdirSync10, readFileSync as readFileSync8, statSync as statSync11 } from "fs";
+import { existsSync as existsSync13, readdirSync as readdirSync10, readFileSync as readFileSync8, statSync as statSync10 } from "fs";
 import { join as join14 } from "path";
 function cursorProjectSlug(absPath) {
   return absPath.replace(/[^a-zA-Z0-9]/g, "-").replace(/-+/g, "-").replace(/^-+|-+$/g, "");
@@ -11119,7 +10459,7 @@ function listChatsIn(chatsRoot) {
     const hashPath3 = join14(chatsRoot, workspaceHash);
     let chatIds;
     try {
-      if (!statSync11(hashPath3).isDirectory())
+      if (!statSync10(hashPath3).isDirectory())
         continue;
       chatIds = readdirSync10(hashPath3);
     } catch {
@@ -11141,7 +10481,7 @@ function listChatsIn(chatsRoot) {
       let created = meta.createdAtMs ?? 0;
       if (!mtime || !created) {
         try {
-          const st = statSync11(dbPath);
+          const st = statSync10(dbPath);
           mtime = mtime || st.mtimeMs;
           created = created || st.birthtimeMs || st.mtimeMs;
         } catch {
@@ -11184,7 +10524,7 @@ function findChat(chatsRoots, chatId) {
       let created = meta.createdAtMs ?? 0;
       if (!mtime || !created) {
         try {
-          const st = statSync11(dbPath);
+          const st = statSync10(dbPath);
           mtime = mtime || st.mtimeMs;
           created = created || st.birthtimeMs || st.mtimeMs;
         } catch {
@@ -11487,7 +10827,7 @@ var init_cursor_store = __esm({
 });
 
 // ../engine/dist/core/backends/cursor-ide.js
-import { existsSync as existsSync14, readFileSync as readFileSync9, readdirSync as readdirSync11, statSync as statSync12 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync9, readdirSync as readdirSync11, statSync as statSync11 } from "fs";
 import { dirname as dirname12, join as join15 } from "path";
 function jsonOf(value) {
   if (value == null)
@@ -11557,7 +10897,7 @@ function workspaceIndex(workspaceRoots) {
     for (const id of entries) {
       const dir = join15(root, id);
       try {
-        if (!statSync12(dir).isDirectory())
+        if (!statSync11(dir).isDirectory())
           continue;
       } catch {
         continue;
@@ -11903,7 +11243,7 @@ var init_cursor_ide = __esm({
 });
 
 // ../engine/dist/core/backends/cursor.js
-import { existsSync as existsSync15, readFileSync as readFileSync10, statSync as statSync13 } from "fs";
+import { existsSync as existsSync15, readFileSync as readFileSync10, statSync as statSync12 } from "fs";
 import { join as join16 } from "path";
 var PREFIX4, CursorBackend, cursorBackend;
 var init_cursor = __esm({
@@ -11956,7 +11296,7 @@ var init_cursor = __esm({
         if (r.surface === "cli") {
           let mtime2 = r.chat.updatedAtMs;
           try {
-            mtime2 = statSync13(r.chat.dbPath).mtimeMs || mtime2;
+            mtime2 = statSync12(r.chat.dbPath).mtimeMs || mtime2;
           } catch {
           }
           return {
@@ -11969,7 +11309,7 @@ var init_cursor = __esm({
         }
         let mtime = r.composer.updatedAtMs;
         try {
-          mtime = statSync13(r.composer.globalDbPath).mtimeMs || mtime;
+          mtime = statSync12(r.composer.globalDbPath).mtimeMs || mtime;
         } catch {
         }
         return {
@@ -12215,7 +11555,7 @@ var init_cursor = __esm({
             if (existsSync15(metaPath)) {
               files.push({ name: "meta.json", bytes: readFileSync10(metaPath) });
             }
-            return { tool: "cursor", mtime: statSync13(r.chat.dbPath).mtimeMs, files };
+            return { tool: "cursor", mtime: statSync12(r.chat.dbPath).mtimeMs, files };
           }
           const events = readComposerEvents(r.composer);
           if (events.length === 0)
@@ -12223,7 +11563,7 @@ var init_cursor = __esm({
           const body = events.map((e) => JSON.stringify(e)).join("\n") + "\n";
           return {
             tool: "cursor",
-            mtime: statSync13(r.composer.globalDbPath).mtimeMs,
+            mtime: statSync12(r.composer.globalDbPath).mtimeMs,
             files: [{ name: `${r.composer.composerId}.jsonl`, bytes: Buffer.from(body, "utf8") }]
           };
         } catch {
@@ -12240,75 +11580,525 @@ var init_cursor = __esm({
           return "";
         }
       }
-    };
-    cursorBackend = new CursorBackend();
+    };
+    cursorBackend = new CursorBackend();
+  }
+});
+
+// ../engine/dist/core/backends/index.js
+var backends_exports = {};
+__export(backends_exports, {
+  AgyBackend: () => AgyBackend,
+  ClaudeBackend: () => ClaudeBackend,
+  CodexBackend: () => CodexBackend,
+  CursorBackend: () => CursorBackend,
+  OpencodeBackend: () => OpencodeBackend,
+  agyBackend: () => agyBackend,
+  bootstrapBackends: () => bootstrapBackends,
+  claudeBackend: () => claudeBackend,
+  codexBackend: () => codexBackend,
+  cursorBackend: () => cursorBackend,
+  getBackend: () => getBackend,
+  getBackendForId: () => getBackendForId,
+  listAllBackends: () => listAllBackends,
+  listAvailableBackends: () => listAvailableBackends,
+  opencodeBackend: () => opencodeBackend,
+  registerBackend: () => registerBackend,
+  tryGetBackend: () => tryGetBackend
+});
+function bootstrapBackends() {
+  registerBackend(claudeBackend);
+  registerBackend(opencodeBackend);
+  registerBackend(codexBackend);
+  registerBackend(agyBackend);
+  registerBackend(cursorBackend);
+}
+var init_backends = __esm({
+  "../engine/dist/core/backends/index.js"() {
+    "use strict";
+    init_tool_backend();
+    init_claude2();
+    init_opencode();
+    init_codex2();
+    init_agy();
+    init_cursor();
+    init_tool_backend();
+    _setRegistryBootstrapper(bootstrapBackends);
+  }
+});
+
+// ../engine/dist/core/collector-health.js
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync3, mkdirSync as mkdirSync4 } from "node:fs";
+import { join as join17, dirname as dirname13 } from "node:path";
+function applySyncOutcome(prior, outcome, now = Date.now()) {
+  const t = { lastOkAt: prior?.lastOkAt ?? null, failures: prior?.failures ?? 0 };
+  if (prior?.lastError !== void 0)
+    t.lastError = prior.lastError;
+  if (outcome.ok) {
+    t.lastOkAt = now;
+    t.failures = 0;
+    delete t.lastError;
+    return t;
+  }
+  if ((outcome.accepted ?? 0) > 0)
+    t.lastOkAt = now;
+  t.failures += 1;
+  t.lastError = (outcome.error ?? "unknown error").slice(0, 160);
+  return t;
+}
+function collectorHealthPath() {
+  return healthPath();
+}
+function readCollectorHealth() {
+  try {
+    const h = JSON.parse(readFileSync11(healthPath(), "utf-8"));
+    return h && h.v === 1 && typeof h.updatedAt === "number" ? h : null;
+  } catch {
+    return null;
+  }
+}
+function writeCollectorHealth(h) {
+  try {
+    const p = healthPath();
+    mkdirSync4(dirname13(p), { recursive: true });
+    writeFileSync3(p, JSON.stringify(h));
+  } catch {
+  }
+}
+function updateCollectorHealth(patch) {
+  const prior = readCollectorHealth();
+  writeCollectorHealth({
+    ...prior,
+    v: 1,
+    updatedAt: Date.now(),
+    startedAt: prior?.startedAt ?? Date.now(),
+    restartsLastHour: prior?.restartsLastHour ?? 0,
+    targets: prior?.targets ?? {},
+    ...patch
+  });
+}
+function reportWalkProgress(p) {
+  const now = Date.now();
+  const boundary = p.complete || p.done === 0;
+  if (!boundary && now - lastProgressWrite < PROGRESS_WRITE_INTERVAL_MS)
+    return;
+  lastProgressWrite = now;
+  updateCollectorHealth({ progress: p });
+}
+var healthPath, PROGRESS_WRITE_INTERVAL_MS, lastProgressWrite, STALE_AFTER_MS;
+var init_collector_health = __esm({
+  "../engine/dist/core/collector-health.js"() {
+    "use strict";
+    init_paths();
+    healthPath = () => join17(getDataDir(), "collector-health.json");
+    PROGRESS_WRITE_INTERVAL_MS = 2e3;
+    lastProgressWrite = 0;
+    STALE_AFTER_MS = 30 * 6e4;
+  }
+});
+
+// ../engine/dist/core/credentials-env.js
+function envCredentials(env = process.env) {
+  const token = (env.CHAT_RECALL_TOKEN || "").trim();
+  const server = (env.CHAT_RECALL_SERVER || "").trim();
+  if (!token || !server)
+    return null;
+  if (!/^https?:\/\//i.test(server))
+    return null;
+  return { serverUrl: normalise(server), token };
+}
+var normalise;
+var init_credentials_env = __esm({
+  "../engine/dist/core/credentials-env.js"() {
+    "use strict";
+    normalise = (u) => u.trim().replace(/\/+$/, "");
+  }
+});
+
+// ../engine/dist/core/secret-redactor.js
+import { statSync as statSync13 } from "fs";
+function secretOf(rule, m) {
+  const raw = rule.secret != null ? m[rule.secret] : m[0];
+  if (raw == null)
+    return null;
+  if (rule.where && !rule.where(raw))
+    return null;
+  return raw;
+}
+function looksLikeSecretToken(t) {
+  if (t.length < 32)
+    return false;
+  if (/^[a-f0-9]+$/i.test(t))
+    return true;
+  return /[A-Z]/.test(t) && /[a-z]/.test(t) && /[0-9]/.test(t);
+}
+function findContextualSecrets(text) {
+  if (!text)
+    return [];
+  const ranges = [];
+  let m;
+  SECRET_CONTEXT_RE.lastIndex = 0;
+  while ((m = SECRET_CONTEXT_RE.exec(text)) !== null) {
+    const winStart = m.index + m[0].length;
+    const window = text.slice(winStart, winStart + 80);
+    HIGH_ENTROPY_TOKEN_RE.lastIndex = 0;
+    let tm;
+    while ((tm = HIGH_ENTROPY_TOKEN_RE.exec(window)) !== null) {
+      if (!looksLikeSecretToken(tm[0]))
+        continue;
+      if (/^[a-f0-9]+$/i.test(tm[0]) && /\b(?:commit|sha-?\d*|hash|digest|checksum|uuid|guid|etag|blob|ref)\b/i.test(window.slice(0, tm.index))) {
+        continue;
+      }
+      ranges.push({ start: winStart + tm.index, end: winStart + tm.index + tm[0].length });
+      break;
+    }
+  }
+  ranges.sort((a, b) => a.start - b.start);
+  const out = [];
+  for (const r of ranges) {
+    const last = out[out.length - 1];
+    if (last && r.start < last.end) {
+      last.end = Math.max(last.end, r.end);
+      continue;
+    }
+    out.push({ ...r });
+  }
+  return out;
+}
+function isEnvRedactionRequested() {
+  const v = process.env.CHAT_RECALL_REDACT_INDEX;
+  if (v === void 0)
+    return null;
+  return v === "1" || v === "true" || v === "yes";
+}
+function settingsView() {
+  let mtimeMs = -1;
+  try {
+    mtimeMs = statSync13(settingsFilePath()).mtimeMs;
+  } catch {
+  }
+  if (cache && cache.mtimeMs === mtimeMs)
+    return cache;
+  let enabled = false;
+  const extra = [];
+  try {
+    const s = loadSettings();
+    enabled = !!s.privacy?.redactIndex;
+    for (const r of s.privacy?.redactionRules ?? []) {
+      try {
+        extra.push({ label: r.label, pattern: new RegExp(r.pattern, "g") });
+      } catch {
+      }
+    }
+  } catch {
   }
-});
-
-// ../engine/dist/core/backends/index.js
-var backends_exports = {};
-__export(backends_exports, {
-  AgyBackend: () => AgyBackend,
-  ClaudeBackend: () => ClaudeBackend,
-  CodexBackend: () => CodexBackend,
-  CursorBackend: () => CursorBackend,
-  OpencodeBackend: () => OpencodeBackend,
-  agyBackend: () => agyBackend,
-  bootstrapBackends: () => bootstrapBackends,
-  claudeBackend: () => claudeBackend,
-  codexBackend: () => codexBackend,
-  cursorBackend: () => cursorBackend,
-  getBackend: () => getBackend,
-  getBackendForId: () => getBackendForId,
-  listAllBackends: () => listAllBackends,
-  listAvailableBackends: () => listAvailableBackends,
-  opencodeBackend: () => opencodeBackend,
-  registerBackend: () => registerBackend,
-  tryGetBackend: () => tryGetBackend
-});
-function bootstrapBackends() {
-  registerBackend(claudeBackend);
-  registerBackend(opencodeBackend);
-  registerBackend(codexBackend);
-  registerBackend(agyBackend);
-  registerBackend(cursorBackend);
+  cache = { mtimeMs, enabled, rules: [...DEFAULT_REDACTION_RULES, ...extra] };
+  return cache;
 }
-var init_backends = __esm({
-  "../engine/dist/core/backends/index.js"() {
-    "use strict";
-    init_tool_backend();
-    init_claude2();
-    init_opencode();
-    init_codex2();
-    init_agy();
-    init_cursor();
-    init_tool_backend();
-    _setRegistryBootstrapper(bootstrapBackends);
+function compileServerRule(spec) {
+  const name = spec.name || "(unnamed)";
+  if (!spec.regex)
+    return { name, reason: "empty pattern" };
+  if (spec.regex.length > MAX_PATTERN_LEN)
+    return { name, reason: `pattern longer than ${MAX_PATTERN_LEN} chars` };
+  let re;
+  try {
+    const flags = "g" + (spec.flags || "").replace(/[^ims]/g, "");
+    re = new RegExp(spec.regex, flags);
+  } catch (e) {
+    return { name, reason: `invalid regex: ${e instanceof Error ? e.message : e}` };
   }
-});
-
-// ../engine/dist/core/credentials-env.js
-function envCredentials(env = process.env) {
-  const token = (env.CHAT_RECALL_TOKEN || "").trim();
-  const server = (env.CHAT_RECALL_SERVER || "").trim();
-  if (!token || !server)
-    return null;
-  if (!/^https?:\/\//i.test(server))
-    return null;
-  return { serverUrl: normalise(server), token };
+  if (re.test(""))
+    return { name, reason: "matches the empty string (would redact everything)" };
+  re.lastIndex = 0;
+  if (re.test(CANARY))
+    return { name, reason: "matches benign text \u2014 too broad" };
+  re.lastIndex = 0;
+  return { label: `${spec.source === "pack" ? "pack" : "tenant"}:${name}`, pattern: re };
 }
-var normalise;
-var init_credentials_env = __esm({
-  "../engine/dist/core/credentials-env.js"() {
+function installServerRulePack(pack) {
+  const rejected = [];
+  const rules = [];
+  for (const spec of pack.rules || []) {
+    if (rules.length >= MAX_PACK_RULES) {
+      rejected.push({ name: spec.name || "(unnamed)", reason: `pack exceeds ${MAX_PACK_RULES} rules` });
+      continue;
+    }
+    const out = compileServerRule(spec);
+    if ("reason" in out)
+      rejected.push(out);
+    else
+      rules.push(out);
+  }
+  const version = pack.version || "";
+  serverPack = { version, rules };
+  return { version, accepted: rules.length, rejected };
+}
+function serverRulePackVersion() {
+  return serverPack ? serverPack.version || "unversioned" : null;
+}
+function activeRules() {
+  const base2 = settingsView().rules;
+  return serverPack && serverPack.rules.length > 0 ? [...base2, ...serverPack.rules] : base2;
+}
+function isRedactionEnabled() {
+  const env = isEnvRedactionRequested();
+  if (env !== null)
+    return env;
+  return settingsView().enabled;
+}
+function redactSecrets(text, opts = {}) {
+  if (!opts.force && !isRedactionEnabled())
+    return text;
+  if (!text)
+    return text;
+  const rules = opts.rules || activeRules();
+  let out = text;
+  for (const r of rules) {
+    out = out.replace(r.pattern, (...args) => {
+      const whole = args[0];
+      const m = args.slice(0, args.length);
+      const secret = secretOf(r, m);
+      if (secret == null)
+        return whole;
+      if (opts.count)
+        opts.count.redactions++;
+      return whole.slice(0, whole.length - secret.length) + `[REDACTED:${r.label}]`;
+    });
+  }
+  const ctx = findContextualSecrets(out);
+  for (let i = ctx.length - 1; i >= 0; i--) {
+    const { start, end } = ctx[i];
+    if (opts.count)
+      opts.count.redactions++;
+    out = out.slice(0, start) + "[REDACTED:secret-context]" + out.slice(end);
+  }
+  return out;
+}
+function maskSecret(s) {
+  if (!s)
+    return "";
+  if (s.length <= 4)
+    return "*".repeat(s.length);
+  return "*".repeat(Math.min(s.length - 4, 60)) + s.slice(-4);
+}
+function globalRegexFor(pattern) {
+  const flags = pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g";
+  const key2 = pattern.source + "\0" + flags;
+  let re = globalRegexCache.get(key2);
+  if (!re) {
+    re = new RegExp(pattern.source, flags);
+    globalRegexCache.set(key2, re);
+  }
+  return re;
+}
+function makeLineResolver(text) {
+  const starts = [];
+  for (let i = text.indexOf("\n"); i !== -1; i = text.indexOf("\n", i + 1))
+    starts.push(i);
+  return (index) => {
+    let lo = 0, hi = starts.length;
+    while (lo < hi) {
+      const mid = lo + hi >> 1;
+      if (starts[mid] < index)
+        lo = mid + 1;
+      else
+        hi = mid;
+    }
+    return lo + 1;
+  };
+}
+function scanTextForFindings(text, opts = {}) {
+  if (!text)
+    return [];
+  const rules = opts.rules || activeRules();
+  const findings = [];
+  const seenSpans = /* @__PURE__ */ new Set();
+  const lineAt = makeLineResolver(text);
+  for (const r of rules) {
+    const re = globalRegexFor(r.pattern);
+    re.lastIndex = 0;
+    let m;
+    while ((m = re.exec(text)) !== null) {
+      const secret = secretOf(r, m);
+      if (secret == null) {
+        if (re.lastIndex === m.index)
+          re.lastIndex++;
+        continue;
+      }
+      const at = m.index + (m[0].length - secret.length);
+      const span = `${at}:${secret.length}`;
+      if (!seenSpans.has(span)) {
+        seenSpans.add(span);
+        findings.push({ rule: r.label, line: lineAt(at), preview: maskSecret(secret) });
+      }
+      if (re.lastIndex === m.index)
+        re.lastIndex++;
+    }
+  }
+  for (const { start, end } of findContextualSecrets(text)) {
+    const line = lineAt(start);
+    findings.push({ rule: "secret-context", line, preview: maskSecret(text.slice(start, end)) });
+  }
+  return findings;
+}
+var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, globalRegexCache;
+var init_secret_redactor = __esm({
+  "../engine/dist/core/secret-redactor.js"() {
     "use strict";
-    normalise = (u) => u.trim().replace(/\/+$/, "");
+    init_settings();
+    DEFAULT_REDACTION_RULES = [
+      // AWS access tokens. Prefix-anchored: AKIA, ASIA, ABIA (long-term,
+      // STS, EC2). Always exactly 16 hex/alphanumeric after the prefix.
+      // NOTE: this matches only the access-key-ID, NOT the secret key value —
+      // the `env-secret` rule below covers AWS_SECRET_ACCESS_KEY / AWS_SESSION_TOKEN.
+      { label: "aws-access-token", pattern: /\b(?:AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}\b/g },
+      // AWS STS session tokens. These are long base64 blobs with NO `NAME=` context
+      // when pasted bare into prose/code, so `env-secret` misses them — but they
+      // reliably start with one of a handful of base64 prefixes (the encoded
+      // `{"...` JSON header). Prefix-anchored → low false-positive. This is the
+      // bare-value form that leaked (`search('IQoJEXAMPLEfakeSESSIONtokenNOTreal01234567890abcDEF==...')`).
+      { label: "aws-session-token", pattern: /\b(?:IQoJ|FwoG|FwoH|FQoG|FQoH|FwoD)[A-Za-z0-9/+]{40,}={0,2}/g },
+      // Env/shell-assignment secrets — a VAR whose name ends in KEY/SECRET/TOKEN/
+      // PASSWORD/CREDENTIAL, then `=`/`:`, then the value. Zero-width lookbehind so
+      // only the VALUE is redacted (the var name stays for context). This is the
+      // dominant real-world leak vector (`export` dumps, .env files, `curl -H`,
+      // tool output) and is exactly what leaked AWS_SECRET_ACCESS_KEY and
+      // AWS_SESSION_TOKEN in cleartext while the access-key-ID rule above caught
+      // only the (least-sensitive) ID.
+      // Suffix list deliberately broad: DB_PASS (our own helm chart's name!),
+      // NPM_AUTH, SENTRY_DSN, SESSION/COOKIE secrets and BEARER vars all leaked
+      // past the original KEY/SECRET/TOKEN/PASSWORD-only list. Values under 12
+      // chars don't redact, so flag-ish vars (BYPASS=true) stay readable.
+      // Context CONSUMED, secret in group 1 — see RedactionRule.secret. As a
+      // lookbehind this was the second most expensive rule in the collector.
+      { label: "env-secret", secret: 1, pattern: /\b[A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASSWORD|PASSWD|PASS|PWD|CREDENTIAL|AUTH|DSN|SESSION|COOKIE|BEARER|SIGNATURE)S?["']?[ \t]{0,3}[:=][ \t]{0,3}["']?([A-Za-z0-9/+_.~=:@-]{12,})/g },
+      // Credentials embedded in a connection URL: scheme://user:PASSWORD@host.
+      // Redacts only the password segment (keeps scheme/user/host for context).
+      //
+      // Scheme-agnostic on purpose. The old rule allowlisted eight DB schemes, so
+      // `https://user:pass@host`, `ssh://`, `ftp://`, `smtp://` and every other
+      // userinfo URL walked through in cleartext — and a `jdbc:postgresql://…`
+      // prefix broke the \b anchor for the one family it did cover. Any scheme
+      // followed by userinfo is a credential, so match the shape, not a list.
+      { label: "url-password", secret: 1, pattern: /\b[a-zA-Z][a-zA-Z0-9+.-]{1,31}:\/\/[^:@\s/]{1,64}:([^@\s/]{1,256})(?=@)/g },
+      // Bare AWS secret-access-key VALUE: EXACTLY 40 base64 chars, word-bounded,
+      // containing upper+lower+digit. This is the gitleaks heuristic — the mixed-case
+      // requirement excludes 40-char lowercase-hex git SHAs, and the exact-40 bound
+      // excludes longer blobs/tokens. It catches the value when it appears bare in
+      // prose with NO `NAME=` and NO nearby context word (e.g. inside a markdown
+      // table or quoted in analysis) — the residual leak path the env-secret and
+      // contextual rules both miss. Placed AFTER env-secret/url-password so the
+      // keyed/URL forms keep their more-specific labels.
+      // The three stacked lookaheads each re-scanned the same 40 characters, which
+      // made this the MOST expensive rule of all 106 the collector runs (13.1% of a
+      // 29.5 MB scan). The mixed-case-plus-digit test is now one JS pass.
+      {
+        label: "aws-secret-key",
+        secret: 1,
+        pattern: /(?<![A-Za-z0-9/+])([A-Za-z0-9/+]{40})(?![A-Za-z0-9/+])/g,
+        where: (v) => /[a-z]/.test(v) && /[A-Z]/.test(v) && /[0-9]/.test(v)
+      },
+      // GitHub personal access tokens.
+      { label: "github-pat", pattern: /\bghp_[A-Za-z0-9]{36}\b/g },
+      // GitHub fine-grained PATs.
+      { label: "github-fine", pattern: /\bgithub_pat_[A-Za-z0-9_]{82}\b/g },
+      // GitHub OAuth.
+      { label: "github-oauth", pattern: /\bgho_[A-Za-z0-9]{36}\b/g },
+      // GitHub app + refresh.
+      { label: "github-app", pattern: /\b(?:ghs|ghu|ghr)_[A-Za-z0-9]{36}\b/g },
+      // Slack bot/user/app tokens.
+      { label: "slack-token", pattern: /\bxox[abopr]-[A-Za-z0-9-]{10,}\b/g },
+      // Slack incoming webhook URL.
+      { label: "slack-webhook", pattern: /\bhttps:\/\/hooks\.slack\.com\/services\/T[A-Z0-9]+\/B[A-Z0-9]+\/[A-Za-z0-9]+\b/g },
+      // Stripe live + test keys.
+      { label: "stripe-key", pattern: /\b(?:sk|pk|rk)_(?:live|test)_[A-Za-z0-9]{24,}\b/g },
+      // Anthropic.
+      { label: "anthropic-key", pattern: /\bsk-ant-[a-zA-Z0-9_-]{40,}\b/g },
+      // OpenAI. Two shapes, deliberately kept apart. The classic key is
+      // `sk-` + base62 with NO hyphens; the modern scoped keys carry an explicit
+      // proj/svcacct/admin segment first. Allowing hyphens after a bare `sk-`
+      // (which is what admitted sk-proj- in the first place) also matches ordinary
+      // kebab-case text — `sk-fix-the-login-redirect-bug`, `.sk-button-primary`,
+      // `sk-2024-01-01-backup` — and this corpus is full of branch names and CSS
+      // classes. Requiring the segment keeps sk-proj- coverage without that.
+      { label: "openai-key", pattern: /\bsk-(?:proj|svcacct|admin)-[A-Za-z0-9_-]{20,}\b|\bsk-[A-Za-z0-9]{20,}\b/g },
+      // Google API key (AIza…).
+      { label: "google-api-key", pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+      // Generic JWT — three base64url segments.
+      { label: "jwt", pattern: /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g },
+      // Private key blocks (PEM). The label is a free word run rather than a fixed
+      // list, so ENCRYPTED PRIVATE KEY and PGP PRIVATE KEY BLOCK are covered
+      // without another enumeration, and \1 forces END to name the same kind as
+      // BEGIN.
+      //
+      // The body is [^-], NOT [\s\S]*?. That is a performance boundary, not a
+      // style choice. An unanchored prefix with an unbounded lazy gap re-scans to
+      // end-of-input from every candidate start, so text carrying many BEGIN
+      // markers and no matching END costs O(n^2): 500KB of that measured 810ms
+      // here, and this runs synchronously on the server's event loop over
+      // tenant-supplied text (services/secret-rescan.ts). A PEM body is base64
+      // plus headers and contains no '-', so excluding it makes the scan stop at
+      // the next delimiter instead of at EOF — same matches, linear cost.
+      { label: "private-key", pattern: /-----BEGIN ([A-Z0-9 ]{0,32})PRIVATE KEY(?: BLOCK)?-----[^-]{0,10000}?-----END \1PRIVATE KEY(?: BLOCK)?-----/g },
+      // PuTTY keys are not PEM. Match the Private-Lines payload — the actual key
+      // material — rather than spanning the whole file, which would need the same
+      // unbounded gap the rule above just removed. Line-anchored and base64-only,
+      // so it cannot run away.
+      { label: "putty-key", pattern: /^Private-Lines:[ \t]*\d{1,4}[\r\n]+(?:[A-Za-z0-9+/=]{8,120}[\r\n]+){1,400}/gm },
+      // npm tokens (uuid-shaped — overlap with our UUID filter; intentional).
+      { label: "npm-token", pattern: /\bnpm_[A-Za-z0-9]{36}\b/g },
+      // .npmrc auth lines: //registry.npmjs.org/:_authToken=VALUE (the key is not
+      // ALL-CAPS, so the env-secret rule above never matched it). The leading `:`
+      // is required — it is what makes this npmrc syntax rather than any shell var
+      // ending in _AUTH, which env-secret already owns and labels better.
+      // [^\s"'`]+ so the closing quote is not swallowed, and a ${VAR} placeholder
+      // is left alone — redacting it destroys a config example and hides nothing.
+      // The rule the perf profile caught the wedged daemon inside: 98.94% of samples.
+      { label: "npmrc-auth", secret: 1, pattern: /:_(?:authToken|password|auth)[ \t]*=[ \t]*(?!\$\{)([^\s"'`]{12,})/gi },
+      // HTTP Authorization headers. env-secret requires an ALL-CAPS name, and
+      // `Authorization` is mixed case, so both Bearer and Basic walked straight
+      // through — including short opaque tokens the contextual pass also misses
+      // (it needs 32+ chars AND mixed-case-plus-digit).
+      // Same two guards as npmrc-auth: stop at a quote, and skip the obvious
+      // placeholders that fill documentation (<YOUR_TOKEN>, ${TOKEN}, xxx…).
+      { label: "auth-header", secret: 1, pattern: /\bauthorization[ \t]*:[ \t]*(?:bearer|basic|token)[ \t]+(?![<$])([^\s"'`<]{8,})/gi },
+      // Vendor tokens with unambiguous prefixes. Each is a fixed literal, so a
+      // false positive is essentially impossible and the cost of listing is low.
+      { label: "gitlab-pat", pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g },
+      { label: "slack-app-token", pattern: /\bxapp-\d-[A-Z0-9]{8,}-\d{10,}-[a-f0-9]{32,}\b/g },
+      { label: "sendgrid-key", pattern: /\bSG\.[A-Za-z0-9_-]{20,24}\.[A-Za-z0-9_-]{40,50}\b/g },
+      // (?<![-\w]) so `cache-key-<md5>` is not read as a mailgun key.
+      { label: "mailgun-key", pattern: /(?<![-\w])key-[a-f0-9]{32}\b/g },
+      { label: "digitalocean-pat", pattern: /\bdop_v1_[a-f0-9]{64}\b/g },
+      { label: "huggingface-token", pattern: /\bhf_[A-Za-z0-9]{30,}\b/g },
+      { label: "shopify-token", pattern: /\bshp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}\b/g },
+      { label: "pypi-token", pattern: /\bpypi-AgEIcHlwaS5vcmc[A-Za-z0-9_-]{50,}\b/g },
+      // No twilio-sid rule: AC…/SK… are Twilio SIDs, which are public account and
+      // key identifiers, not the auth token. Redacting them hid nothing and
+      // collided with 32-hex etags and MD5 sums.
+      // No discord-bot-token rule either: the shape (word.word.word) matched
+      // ordinary dotted symbols such as a.b.ApplicationContextProviderImpl.
+      { label: "telegram-bot-token", pattern: /\b\d{8,10}:AA[A-Za-z0-9_-]{32,}\b/g },
+      { label: "doppler-token", pattern: /\bdp\.(?:pt|st|sa|ct)\.[A-Za-z0-9_-]{20,}\b/g },
+      // Azure Storage SAS signature — the `sig=` parameter is the actual secret.
+      { label: "azure-sas", secret: 1, pattern: /[?&]sig=([A-Za-z0-9%/+=]{20,})/g }
+    ];
+    SECRET_CONTEXT_RE = /\b(?:secret|password|passwd|credential|access[ _-]?key|private[ _-]?key|api[ _-]?key|auth(?:oriz\w*)?|bearer|token)\b/gi;
+    HIGH_ENTROPY_TOKEN_RE = /[A-Za-z0-9/+_-]{32,}/g;
+    cache = null;
+    CANARY = "the quick brown fox jumps over the lazy dog 0123456789 commit 8ba1f109551bd432803012645ac136ddd475d0fb src/index.ts:42";
+    MAX_PACK_RULES = 200;
+    MAX_PATTERN_LEN = 512;
+    serverPack = null;
+    globalRegexCache = /* @__PURE__ */ new Map();
   }
 });
 
 // ../engine/dist/core/source-discovery.js
 import { createHash as createHash3 } from "crypto";
 import { existsSync as existsSync16, readdirSync as readdirSync12, statSync as statSync14 } from "fs";
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 function sourceId(path) {
   return "src_" + createHash3("sha256").update(path).digest("hex").slice(0, 12);
 }
@@ -12347,7 +12137,7 @@ function countTranscripts(root, tool) {
       return;
     }
     for (const e of entries) {
-      const full = join17(dir, e.name);
+      const full = join18(dir, e.name);
       if (e.isDirectory()) {
         walk(full, depth + 1);
         continue;
@@ -12411,9 +12201,9 @@ var init_source_discovery = __esm({
 
 // ../engine/dist/core/home-discovery.js
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync17, readdirSync as readdirSync13, readFileSync as readFileSync11, realpathSync as realpathSync2, statSync as statSync15 } from "fs";
+import { existsSync as existsSync17, readdirSync as readdirSync13, readFileSync as readFileSync12, realpathSync as realpathSync2, statSync as statSync15 } from "fs";
 import { homedir as homedir5, platform as osPlatform } from "os";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 function candidateRoots(plat = osPlatform(), env = process.env) {
   const home = homedir5();
   const roots = [home];
@@ -12426,23 +12216,23 @@ function candidateRoots(plat = osPlatform(), env = process.env) {
     add(env.LOCALAPPDATA);
     add(env.USERPROFILE);
   } else if (plat === "darwin") {
-    add(join18(home, "Library", "Application Support"));
+    add(join19(home, "Library", "Application Support"));
     add(env.XDG_CONFIG_HOME);
   } else {
-    add(env.XDG_CONFIG_HOME || join18(home, ".config"));
-    add(env.XDG_DATA_HOME || join18(home, ".local", "share"));
+    add(env.XDG_CONFIG_HOME || join19(home, ".config"));
+    add(env.XDG_DATA_HOME || join19(home, ".local", "share"));
   }
   return roots.filter((r) => existsSync17(r));
 }
 function identifyHome(dir) {
-  const has = (...parts) => existsSync17(join18(dir, ...parts));
-  if (has("projects") && dirHasTranscript(join18(dir, "projects"), (f) => f.endsWith(".jsonl"), 2))
+  const has = (...parts) => existsSync17(join19(dir, ...parts));
+  if (has("projects") && dirHasTranscript(join19(dir, "projects"), (f) => f.endsWith(".jsonl"), 2))
     return "claude";
-  if (has("sessions") && dirHasTranscript(join18(dir, "sessions"), (f) => f.startsWith("rollout-") && f.endsWith(".jsonl"), 4))
+  if (has("sessions") && dirHasTranscript(join19(dir, "sessions"), (f) => f.startsWith("rollout-") && f.endsWith(".jsonl"), 4))
     return "codex";
-  if (has("brain") && dirHasTranscript(join18(dir, "brain"), (f) => f.endsWith(".jsonl"), 4))
+  if (has("brain") && dirHasTranscript(join19(dir, "brain"), (f) => f.endsWith(".jsonl"), 4))
     return "agy";
-  if (has("chats") && dirHasTranscript(join18(dir, "chats"), (f) => f === "store.db", 3))
+  if (has("chats") && dirHasTranscript(join19(dir, "chats"), (f) => f === "store.db", 3))
     return "cursor";
   if (has("opencode.db"))
     return "opencode";
@@ -12462,7 +12252,7 @@ function dirHasTranscript(root, match, depth) {
       continue;
     if (e.isFile() && match(e.name))
       return true;
-    if (e.isDirectory() && dirHasTranscript(join18(root, e.name), match, depth - 1))
+    if (e.isDirectory() && dirHasTranscript(join19(root, e.name), match, depth - 1))
       return true;
   }
   return false;
@@ -12492,12 +12282,12 @@ function countSessions(dir, tool) {
       if (SKIP.has(e.name))
         continue;
       if (e.isDirectory())
-        walk(join18(d, e.name), depth - 1);
+        walk(join19(d, e.name), depth - 1);
       else if (s.match(e.name))
         n++;
     }
   };
-  walk(join18(dir, s.sub), s.depth);
+  walk(join19(dir, s.sub), s.depth);
   return n;
 }
 function declaredHomes(env = process.env, plat = osPlatform()) {
@@ -12531,11 +12321,11 @@ function declaredHomes(env = process.env, plat = osPlatform()) {
     return out;
   }
   const home = homedir5();
-  const rcs = [".bashrc", ".bash_profile", ".zshrc", ".zprofile", ".profile"].map((f) => join18(home, f)).concat([join18(home, ".config", "fish", "config.fish")]);
+  const rcs = [".bashrc", ".bash_profile", ".zshrc", ".zprofile", ".profile"].map((f) => join19(home, f)).concat([join19(home, ".config", "fish", "config.fish")]);
   for (const rc of rcs) {
     let text;
     try {
-      text = readFileSync11(rc, "utf-8");
+      text = readFileSync12(rc, "utf-8");
     } catch {
       continue;
     }
@@ -12546,7 +12336,7 @@ function declaredHomes(env = process.env, plat = osPlatform()) {
         add(d);
     }
   }
-  return out.map((p) => p.startsWith("~") ? join18(home, p.slice(1)) : p);
+  return out.map((p) => p.startsWith("~") ? join19(home, p.slice(1)) : p);
 }
 function runningToolHomes(plat = osPlatform()) {
   const out = [];
@@ -12560,7 +12350,7 @@ function runningToolHomes(plat = osPlatform()) {
     for (const pid of pids) {
       let env;
       try {
-        env = readFileSync11(`/proc/${pid}/environ`, "utf-8");
+        env = readFileSync12(`/proc/${pid}/environ`, "utf-8");
       } catch {
         continue;
       }
@@ -12640,7 +12430,7 @@ function walkForHomes(dir, depth, visit) {
   for (const e of entries) {
     if (!e.isDirectory() || SKIP.has(e.name))
       continue;
-    const child = join18(dir, e.name);
+    const child = join19(dir, e.name);
     visit(child);
     walkForHomes(child, depth - 1, visit);
   }
@@ -12681,20 +12471,20 @@ var init_home_discovery = __esm({
 
 // ../engine/dist/core/detector-install.js
 import { createHash as createHash4 } from "crypto";
-import { existsSync as existsSync18, mkdirSync as mkdirSync4, mkdtempSync, chmodSync as chmodSync2, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync3, readFileSync as readFileSync12, statSync as statSync16, copyFileSync as copyFileSync2 } from "fs";
-import { join as join19 } from "path";
+import { existsSync as existsSync18, mkdirSync as mkdirSync5, mkdtempSync, chmodSync as chmodSync2, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync4, readFileSync as readFileSync13, statSync as statSync16, copyFileSync as copyFileSync2 } from "fs";
+import { join as join20 } from "path";
 function managedDetectorPath(name) {
-  return join19(getDetectorBinDir(), name + exeSuffix());
+  return join20(getDetectorBinDir(), name + exeSuffix());
 }
 function receiptPath(name) {
-  return join19(getDetectorBinDir(), `${name}.receipt.json`);
+  return join20(getDetectorBinDir(), `${name}.receipt.json`);
 }
 function sha256File(path) {
-  return createHash4("sha256").update(readFileSync12(path)).digest("hex");
+  return createHash4("sha256").update(readFileSync13(path)).digest("hex");
 }
 function readReceipt(name) {
   try {
-    return JSON.parse(readFileSync12(receiptPath(name), "utf-8"));
+    return JSON.parse(readFileSync13(receiptPath(name), "utf-8"));
   } catch {
     return null;
   }
@@ -12720,7 +12510,7 @@ function configuredDir() {
 function resolveDetector(name) {
   const dir = configuredDir();
   if (dir) {
-    const p2 = join19(dir, name + exeSuffix());
+    const p2 = join20(dir, name + exeSuffix());
     if (existsSync18(p2))
       return { path: p2, version: "operator-supplied", source: "configured" };
     return { error: "not-installed" };
@@ -12785,9 +12575,9 @@ var init_detector_install = __esm({
 
 // ../engine/dist/core/secret-scanner.js
 import { spawnSync } from "child_process";
-import { existsSync as existsSync19, unlinkSync, readFileSync as readFileSync13, mkdtempSync as mkdtempSync2, rmSync as rmSync3 } from "fs";
+import { existsSync as existsSync19, unlinkSync, readFileSync as readFileSync14, mkdtempSync as mkdtempSync2, rmSync as rmSync3 } from "fs";
 import { tmpdir } from "os";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 function mask(s) {
   if (!s)
     return "";
@@ -12815,7 +12605,7 @@ function whichDetector(bin) {
   return null;
 }
 function spawnScoped(binary, args, opts) {
-  const scratch = mkdtempSync2(join20(tmpdir(), "cr-scan-tmp-"));
+  const scratch = mkdtempSync2(join21(tmpdir(), "cr-scan-tmp-"));
   try {
     return spawnSync(binary, args, {
       ...opts,
@@ -12846,7 +12636,7 @@ function runGitleaks(binary, filePath) {
     return [];
   let parsed = [];
   try {
-    parsed = JSON.parse(readFileSync13(reportPath, "utf-8")) || [];
+    parsed = JSON.parse(readFileSync14(reportPath, "utf-8")) || [];
   } catch {
   }
   try {
@@ -12910,7 +12700,7 @@ function runGitleaksDir(binary, dir) {
   }
   let parsed = [];
   try {
-    parsed = JSON.parse(readFileSync13(reportPath, "utf-8")) || [];
+    parsed = JSON.parse(readFileSync14(reportPath, "utf-8")) || [];
   } catch {
   }
   try {
@@ -13001,7 +12791,7 @@ function scanFileForSecrets(filePath, opts = {}) {
       out.push({ detector: "trufflehog", ...f });
   if (opts.tenantRules && opts.tenantRules.length > 0) {
     try {
-      const text = readFileSync13(filePath, "utf-8");
+      const text = readFileSync14(filePath, "utf-8");
       out.push(...scanTenantRules(text, opts.tenantRules));
     } catch {
     }
@@ -13377,10 +13167,10 @@ var init_transcript = __esm({
 // ../engine/dist/core/project-resolver.js
 import { execSync } from "child_process";
 import { createHash as createHash5 } from "crypto";
-import { existsSync as existsSync20, readFileSync as readFileSync14, realpathSync as realpathSync3, readdirSync as readdirSync14, statSync as statSync18 } from "fs";
-import { basename as basename11, dirname as dirname13, isAbsolute, join as join21, resolve, sep } from "path";
+import { existsSync as existsSync20, readFileSync as readFileSync15, realpathSync as realpathSync3, readdirSync as readdirSync14, statSync as statSync18 } from "fs";
+import { basename as basename11, dirname as dirname14, isAbsolute, join as join22, resolve, sep } from "path";
 function getProjectsConfigPath() {
-  return join21(getDataDir(), "projects.json");
+  return join22(getDataDir(), "projects.json");
 }
 function loadProjectsConfig() {
   if (cachedConfig && cachedConfig.mtime === Number.MAX_SAFE_INTEGER) {
@@ -13395,7 +13185,7 @@ function loadProjectsConfig() {
   if (cachedConfig && cachedConfig.mtime === mtime)
     return cachedConfig.cfg;
   try {
-    const raw = readFileSync14(path, "utf-8");
+    const raw = readFileSync15(path, "utf-8");
     const cfg = JSON.parse(raw);
     cachedConfig = { mtime, cfg };
     return cfg;
@@ -13491,7 +13281,7 @@ function matchDeclaredProject(realPath, projects) {
 function matchChild(realPath, parentRoot, children) {
   const sorted = [...children].sort((a, b) => b.path.length - a.path.length);
   for (const c of sorted) {
-    const childRoot = safeRealpath(join21(parentRoot, c.path));
+    const childRoot = safeRealpath(join22(parentRoot, c.path));
     if (isInside(realPath, childRoot))
       return c;
   }
@@ -13526,10 +13316,10 @@ function findGitToplevel(realPath) {
   let cur = realPath;
   let last = "";
   while (cur && cur !== last) {
-    if (existsSync20(join21(cur, ".git")))
+    if (existsSync20(join22(cur, ".git")))
       return cur;
     last = cur;
-    cur = dirname13(cur);
+    cur = dirname14(cur);
   }
   return null;
 }
@@ -13593,7 +13383,7 @@ function resolveAutoWorkspace(realPath, minRepos) {
   let last = "";
   let depth = 0;
   while (cur && cur !== last && depth < AUTO_WORKSPACE_MAX_DEPTH) {
-    if (!existsSync20(join21(cur, ".git"))) {
+    if (!existsSync20(join22(cur, ".git"))) {
       const cached = workspaceCache.get(cur);
       let qualifies;
       if (cached === void 0) {
@@ -13608,7 +13398,7 @@ function resolveAutoWorkspace(realPath, minRepos) {
       }
     }
     last = cur;
-    cur = dirname13(cur);
+    cur = dirname14(cur);
     depth++;
   }
   return null;
@@ -13624,12 +13414,12 @@ function countGitChildren(dir) {
   for (const name of entries) {
     if (name.startsWith("."))
       continue;
-    const child = join21(dir, name);
+    const child = join22(dir, name);
     try {
       const st = statSync18(child);
       if (!st.isDirectory())
         continue;
-      if (existsSync20(join21(child, ".git")))
+      if (existsSync20(join22(child, ".git")))
         count++;
     } catch {
     }
@@ -14335,115 +14125,10 @@ var init_source_registry = __esm({
   }
 });
 
-// ../engine/dist/parsers/session-source.js
-var SessionSource;
-var init_session_source = __esm({
-  "../engine/dist/parsers/session-source.js"() {
-    "use strict";
-    init_session();
-    init_chunker();
-    init_settings();
-    SessionSource = class {
-      sourceType = "session";
-      claudeDir;
-      constructor(claudeDir) {
-        this.claudeDir = claudeDir;
-      }
-      async *discover() {
-        if (!isSourceEnabled("claude", "sessions"))
-          return;
-        for (const [entry, sessionPath] of getAllSessions(this.claudeDir)) {
-          yield this.entryToItem(entry, sessionPath);
-        }
-      }
-      async parse(item) {
-        const content = await parseSessionFile(item.filePath);
-        const entry = this.itemToEntry(item);
-        const sessionChunks = chunkSession(entry, content);
-        item.extra = {
-          ...item.extra || {},
-          ...content.metadata
-        };
-        return sessionChunks.map((sc) => ({
-          chunkId: sc.chunkId,
-          itemId: sc.sessionId,
-          sourceType: "session",
-          // Empty title is preferable to "Session abc12345" placeholder text:
-          // the latter pollutes search results and gets surfaced in the UI as
-          // a misleading heading. Downstream renderers fall back to
-          // project path / time when title is empty.
-          title: sc.firstPrompt.slice(0, 100),
-          text: sc.text,
-          chunkType: sc.chunkType,
-          projectPath: sc.projectPath,
-          filePath: sc.sourceFile,
-          mtime: sc.mtime
-        }));
-      }
-      async extractLinks(item) {
-        if (item.filePath) {
-          try {
-            const { detectForkPredecessor: detectForkPredecessor2 } = await Promise.resolve().then(() => (init_raw(), raw_exports));
-            const predecessor = detectForkPredecessor2(item.filePath);
-            if (predecessor) {
-              return [{
-                sourceType: "session",
-                sourceId: item.id,
-                targetType: "session",
-                targetId: predecessor,
-                linkType: "forked_from",
-                confidence: 1
-              }];
-            }
-          } catch {
-          }
-        }
-        return [];
-      }
-      entryToItem(entry, sessionPath) {
-        return {
-          id: entry.sessionId,
-          sourceType: "session",
-          // Empty title when there's no first prompt — the UI then knows to
-          // fall back to summary or project path instead of rendering the
-          // useless "Session abc12345" placeholder as a heading.
-          title: entry.firstPrompt ? entry.firstPrompt.replace(/\n/g, " ").trim().slice(0, 100) : "",
-          projectPath: entry.projectPath,
-          filePath: sessionPath,
-          mtime: entry.fileMtime,
-          contentPreview: entry.firstPrompt?.slice(0, 200),
-          extra: {
-            messageCount: entry.messageCount,
-            gitBranch: entry.gitBranch,
-            created: entry.created,
-            modified: entry.modified,
-            isSidechain: entry.isSidechain
-          }
-        };
-      }
-      itemToEntry(item) {
-        const extra = item.extra || {};
-        return {
-          sessionId: item.id,
-          fullPath: item.filePath,
-          fileMtime: item.mtime,
-          firstPrompt: item.contentPreview || "",
-          messageCount: extra.messageCount || 0,
-          created: extra.created || "",
-          modified: extra.modified || "",
-          gitBranch: extra.gitBranch || "",
-          projectPath: item.projectPath,
-          isSidechain: extra.isSidechain || false
-        };
-      }
-    };
-  }
-});
-
 // ../engine/dist/core/utils.js
 import { existsSync as existsSync21, readdirSync as readdirSync15 } from "fs";
 import { homedir as homedir6 } from "os";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 function splitByHeaders(markdown) {
   const lines = markdown.split("\n");
   const sections = [];
@@ -14486,17 +14171,17 @@ function getClaudeDirs() {
     for (const d of process.env.CLAUDE_DIRS.split(",")) {
       const trimmed = d.trim();
       if (trimmed) {
-        add(trimmed.startsWith("~/") ? join22(home, trimmed.slice(2)) : trimmed);
+        add(trimmed.startsWith("~/") ? join23(home, trimmed.slice(2)) : trimmed);
       }
     }
   }
-  add(join22(home, ".claude"));
+  add(join23(home, ".claude"));
   try {
     const entries = readdirSync15(home, { withFileTypes: true });
     for (const entry of entries) {
       if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
-        const candidate = join22(home, entry.name);
-        if (existsSync21(join22(candidate, "projects"))) {
+        const candidate = join23(home, entry.name);
+        if (existsSync21(join23(candidate, "projects"))) {
           add(candidate);
         }
       }
@@ -14508,12 +14193,12 @@ function getClaudeDirs() {
 function discoverSubdirs(subdir) {
   const result = [];
   for (const claudeDir of getClaudeDirs()) {
-    const path = join22(claudeDir, subdir);
+    const path = join23(claudeDir, subdir);
     if (existsSync21(path)) {
       result.push(path);
     }
   }
-  return result.length > 0 ? result : [join22(homedir6(), ".claude", subdir)];
+  return result.length > 0 ? result : [join23(homedir6(), ".claude", subdir)];
 }
 var init_utils = __esm({
   "../engine/dist/core/utils.js"() {
@@ -14522,9 +14207,9 @@ var init_utils = __esm({
 });
 
 // ../engine/dist/parsers/plan-source.js
-import { existsSync as existsSync22, readdirSync as readdirSync16, readFileSync as readFileSync15, statSync as statSync20 } from "fs";
+import { existsSync as existsSync22, readdirSync as readdirSync16, readFileSync as readFileSync16, statSync as statSync20 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join23, basename as basename12 } from "path";
+import { join as join24, basename as basename12 } from "path";
 function parseFrontmatter(content) {
   if (!content.startsWith("---"))
     return { body: content };
@@ -14619,12 +14304,12 @@ var init_plan_source = __esm({
             if (seenClaude.has(file))
               continue;
             seenClaude.add(file);
-            const filePath = join23(plansDir, file);
+            const filePath = join24(plansDir, file);
             try {
               const stat3 = statSync20(filePath);
               const planName = basename12(file, ".md");
               const isAgentPlan = planName.includes("-agent-");
-              const content = readFileSync15(filePath, "utf-8");
+              const content = readFileSync16(filePath, "utf-8");
               const fm = parseFrontmatter(content);
               const body = fm.body;
               const firstLine = body.split("\n").find((l) => l.trim())?.replace(/^#+\s*/, "").trim() || planName;
@@ -14663,10 +14348,10 @@ var init_plan_source = __esm({
           return;
         }
         for (const file of files) {
-          const filePath = join23(plansDir, file);
+          const filePath = join24(plansDir, file);
           try {
             const stat3 = statSync20(filePath);
-            const content = readFileSync15(filePath, "utf-8");
+            const content = readFileSync16(filePath, "utf-8");
             const firstLine = content.split("\n").find((l) => l.trim())?.replace(/^#+\s*/, "").trim() || file;
             const planName = `${opencodeBackend.idPrefix}plan_${basename12(file, ".md")}`;
             const projectPath = this.extractProjectPath(content);
@@ -14694,7 +14379,7 @@ var init_plan_source = __esm({
         for (const match of content.matchAll(fullPathPattern)) {
           let path = (match[1] || "").trim();
           if (path.startsWith("~/")) {
-            path = join23(homedir7(), path.slice(2));
+            path = join24(homedir7(), path.slice(2));
           }
           for (const projectDir of knownProjects) {
             if (path.startsWith(projectDir)) {
@@ -14743,7 +14428,7 @@ var init_plan_source = __esm({
       async parse(item) {
         if (!existsSync22(item.filePath))
           return [];
-        const content = readFileSync15(item.filePath, "utf-8");
+        const content = readFileSync16(item.filePath, "utf-8");
         const chunks = [];
         const { body } = parseFrontmatter(content);
         const sections = splitByHeaders(body);
@@ -14779,9 +14464,9 @@ var init_plan_source = __esm({
         const map = /* @__PURE__ */ new Map();
         const root = claudeBackend.projectsDir();
         for (const proj of safeReaddir(root)) {
-          const projPath = join23(root, proj);
+          const projPath = join24(root, proj);
           for (const sessionEntry of safeReaddir(projPath)) {
-            const subDir = join23(projPath, sessionEntry, "subagents");
+            const subDir = join24(projPath, sessionEntry, "subagents");
             if (!existsSync22(subDir))
               continue;
             for (const f of safeReaddir(subDir)) {
@@ -14856,7 +14541,7 @@ var init_plan_source = __esm({
         return links;
       }
       async *discoverAgyPlans() {
-        const brainDir = join23(agyBackend.homeDir(), "brain");
+        const brainDir = join24(agyBackend.homeDir(), "brain");
         if (!existsSync22(brainDir))
           return;
         let sessionDirs;
@@ -14866,7 +14551,7 @@ var init_plan_source = __esm({
           return;
         }
         for (const rawId of sessionDirs) {
-          const sessionPath = join23(brainDir, rawId);
+          const sessionPath = join24(brainDir, rawId);
           try {
             if (!statSync20(sessionPath).isDirectory())
               continue;
@@ -14880,10 +14565,10 @@ var init_plan_source = __esm({
             continue;
           }
           for (const file of files) {
-            const filePath = join23(sessionPath, file);
+            const filePath = join24(sessionPath, file);
             try {
               const stat3 = statSync20(filePath);
-              const content = readFileSync15(filePath, "utf-8");
+              const content = readFileSync16(filePath, "utf-8");
               const firstLine = content.split("\n").find((l) => l.trim())?.replace(/^#+\s*/, "").trim() || file;
               const sessionLoc = agyBackend.findSession(rawId);
               const projectPath = sessionLoc?.projectPath || this.extractProjectPath(content);
@@ -14912,8 +14597,8 @@ var init_plan_source = __esm({
 });
 
 // ../engine/dist/parsers/task-source.js
-import { existsSync as existsSync23, readdirSync as readdirSync17, readFileSync as readFileSync16, statSync as statSync21 } from "fs";
-import { join as join24 } from "path";
+import { existsSync as existsSync23, readdirSync as readdirSync17, readFileSync as readFileSync17, statSync as statSync21 } from "fs";
+import { join as join25 } from "path";
 var MAX_CHUNK_CHARS2, TaskSource;
 var init_task_source = __esm({
   "../engine/dist/parsers/task-source.js"() {
@@ -14951,7 +14636,7 @@ var init_task_source = __esm({
           return;
         }
         for (const file of files) {
-          const filePath = join24(todosDir, file);
+          const filePath = join25(todosDir, file);
           let stat3;
           try {
             stat3 = statSync21(filePath);
@@ -14962,7 +14647,7 @@ var init_task_source = __esm({
             continue;
           let parsed;
           try {
-            const raw = readFileSync16(filePath, "utf-8");
+            const raw = readFileSync17(filePath, "utf-8");
             parsed = JSON.parse(raw);
             if (!Array.isArray(parsed) || parsed.length === 0)
               continue;
@@ -15000,7 +14685,7 @@ var init_task_source = __esm({
           if (!entry.isDirectory())
             continue;
           const sessionUuid = entry.name;
-          const taskDir = join24(tasksDir, sessionUuid);
+          const taskDir = join25(tasksDir, sessionUuid);
           try {
             const stat3 = statSync21(taskDir);
             const taskFiles = readdirSync17(taskDir).filter((f) => f.endsWith(".json"));
@@ -15075,7 +14760,7 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
             text,
             chunkType: "task_detail",
             projectPath: item.projectPath,
-            filePath: join24(taskDir, `${task.id}.json`),
+            filePath: join25(taskDir, `${task.id}.json`),
             mtime: item.mtime
           });
         }
@@ -15100,7 +14785,7 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
           return [];
         let parsed;
         try {
-          parsed = JSON.parse(readFileSync16(item.filePath, "utf-8"));
+          parsed = JSON.parse(readFileSync17(item.filePath, "utf-8"));
         } catch {
           return [];
         }
@@ -15132,7 +14817,7 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
         });
         for (const file of sorted) {
           try {
-            const content = readFileSync16(join24(taskDir, file), "utf-8");
+            const content = readFileSync17(join25(taskDir, file), "utf-8");
             const task = JSON.parse(content);
             if (task.subject) {
               tasks.push(task);
@@ -15148,9 +14833,9 @@ ${task.description}`.slice(0, MAX_CHUNK_CHARS2);
 });
 
 // ../engine/dist/parsers/claude-md-source.js
-import { existsSync as existsSync24, readFileSync as readFileSync17, readdirSync as readdirSync18, statSync as statSync22 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync18, readdirSync as readdirSync18, statSync as statSync22 } from "fs";
 import { homedir as homedir8 } from "os";
-import { join as join25, basename as basename13, dirname as dirname14 } from "path";
+import { join as join26, basename as basename13, dirname as dirname15 } from "path";
 import { createHash as createHash6 } from "crypto";
 function discoverProjectDirs(claudeDir) {
   const dirs = [];
@@ -15176,7 +14861,7 @@ function discoverProjectDirs(claudeDir) {
     }
   };
   if (claudeDir) {
-    scanProjectsDir(join25(claudeDir, "projects"));
+    scanProjectsDir(join26(claudeDir, "projects"));
     return dirs;
   }
   const home = homedir8();
@@ -15184,7 +14869,7 @@ function discoverProjectDirs(claudeDir) {
   try {
     for (const entry of readdirSync18(home, { withFileTypes: true })) {
       if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
-        scanProjectsDir(join25(home, entry.name, "projects"));
+        scanProjectsDir(join26(home, entry.name, "projects"));
       }
     }
   } catch {
@@ -15192,7 +14877,7 @@ function discoverProjectDirs(claudeDir) {
   const gemProjects = agyBackend.sharedProjectsJson();
   if (existsSync24(gemProjects)) {
     try {
-      const data = JSON.parse(readFileSync17(gemProjects, "utf-8"));
+      const data = JSON.parse(readFileSync18(gemProjects, "utf-8"));
       for (const path of Object.keys(data.projects || {}))
         addProject(path);
     } catch {
@@ -15248,7 +14933,7 @@ var init_claude_md_source = __esm({
         const seen = /* @__PURE__ */ new Set();
         const seenKey = (path, tool) => `${tool}:${path}`;
         for (const note of NOTE_FILES) {
-          const p = join25(homedir8(), note.filename);
+          const p = join26(homedir8(), note.filename);
           const key2 = seenKey(p, note.tool);
           if (existsSync24(p) && !seen.has(key2)) {
             seen.add(key2);
@@ -15260,7 +14945,7 @@ var init_claude_md_source = __esm({
         const projectDirs = discoverProjectDirs(this.claudeDir);
         for (const projectDir of projectDirs) {
           for (const note of NOTE_FILES) {
-            const p = join25(projectDir, note.filename);
+            const p = join26(projectDir, note.filename);
             const key2 = seenKey(p, note.tool);
             if (existsSync24(p) && !seen.has(key2)) {
               seen.add(key2);
@@ -15274,7 +14959,7 @@ var init_claude_md_source = __esm({
           if (!existsSync24(searchDir))
             continue;
           for (const note of NOTE_FILES) {
-            const directPath = join25(searchDir, note.filename);
+            const directPath = join26(searchDir, note.filename);
             const key2 = seenKey(directPath, note.tool);
             if (existsSync24(directPath) && !seen.has(key2)) {
               seen.add(key2);
@@ -15289,7 +14974,7 @@ var init_claude_md_source = __esm({
               if (!entry.isDirectory())
                 continue;
               for (const note of NOTE_FILES) {
-                const p = join25(searchDir, entry.name, note.filename);
+                const p = join26(searchDir, entry.name, note.filename);
                 const key2 = seenKey(p, note.tool);
                 if (existsSync24(p) && !seen.has(key2)) {
                   seen.add(key2);
@@ -15307,7 +14992,7 @@ var init_claude_md_source = __esm({
       async parse(item) {
         if (!existsSync24(item.filePath))
           return [];
-        const content = readFileSync17(item.filePath, "utf-8");
+        const content = readFileSync18(item.filePath, "utf-8");
         const chunks = [];
         const sections = splitByHeaders(content);
         for (let i = 0; i < sections.length; i++) {
@@ -15346,10 +15031,10 @@ var init_claude_md_source = __esm({
       fileToItem(filePath, filename, tool) {
         try {
           const stat3 = statSync22(filePath);
-          const projectDir = dirname14(filePath);
+          const projectDir = dirname15(filePath);
           const projectName = basename13(projectDir);
           const projectPath = projectDir;
-          const content = readFileSync17(filePath, "utf-8");
+          const content = readFileSync18(filePath, "utf-8");
           const firstLine = content.split("\n").find((l) => l.trim() && !l.startsWith("#"))?.trim()?.slice(0, 200) || `${filename} for ${projectName}`;
           const id = tool === "claude" ? projectName : `${projectName}_${tool}`;
           return {
@@ -15374,9 +15059,9 @@ var init_claude_md_source = __esm({
 });
 
 // ../engine/dist/parsers/agent-memory-source.js
-import { existsSync as existsSync25, readFileSync as readFileSync18, readdirSync as readdirSync19, statSync as statSync23 } from "fs";
+import { existsSync as existsSync25, readFileSync as readFileSync19, readdirSync as readdirSync19, statSync as statSync23 } from "fs";
 import { homedir as homedir9 } from "os";
-import { join as join26, basename as basename14 } from "path";
+import { join as join27, basename as basename14 } from "path";
 function parseFrontmatter2(content) {
   const fm = {};
   let body = content;
@@ -15418,7 +15103,7 @@ function discoverMemoryDirs() {
   try {
     for (const entry of readdirSync19(home, { withFileTypes: true })) {
       if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
-        claudeRoots.push(join26(home, entry.name, "projects"));
+        claudeRoots.push(join27(home, entry.name, "projects"));
       }
     }
   } catch {
@@ -15430,7 +15115,7 @@ function discoverMemoryDirs() {
       for (const entry of readdirSync19(projectsDir, { withFileTypes: true })) {
         if (!entry.isDirectory() || entry.name.startsWith("."))
           continue;
-        add(join26(projectsDir, entry.name, "memory"), entry.name);
+        add(join27(projectsDir, entry.name, "memory"), entry.name);
       }
     } catch {
     }
@@ -15459,7 +15144,7 @@ var init_agent_memory_source = __esm({
             for (const entry of readdirSync19(memoryDir, { withFileTypes: true })) {
               if (!entry.isFile() || !entry.name.endsWith(".md"))
                 continue;
-              const filePath = join26(memoryDir, entry.name);
+              const filePath = join27(memoryDir, entry.name);
               if (seen.has(filePath))
                 continue;
               seen.add(filePath);
@@ -15475,7 +15160,7 @@ var init_agent_memory_source = __esm({
       async parse(item) {
         if (!existsSync25(item.filePath))
           return [];
-        const content = readFileSync18(item.filePath, "utf-8");
+        const content = readFileSync19(item.filePath, "utf-8");
         const { body } = parseFrontmatter2(content);
         const chunks = [];
         const sections = splitByHeaders(body);
@@ -15528,7 +15213,7 @@ var init_agent_memory_source = __esm({
       fileToItem(filePath, filename, projectPath, _projectHash) {
         try {
           const stat3 = statSync23(filePath);
-          const content = readFileSync18(filePath, "utf-8");
+          const content = readFileSync19(filePath, "utf-8");
           const { fm } = parseFrontmatter2(content);
           const stem = filename.replace(/\.md$/, "");
           const idBase = fm.name || stem;
@@ -15563,7 +15248,7 @@ import { existsSync as existsSync26, readdirSync as readdirSync20, statSync as s
 import { createReadStream as createReadStream3 } from "fs";
 import { createInterface as createInterface2 } from "readline";
 import { homedir as homedir10 } from "os";
-import { join as join27 } from "path";
+import { join as join28 } from "path";
 var MAX_CHUNK_CHARS5, HistorySource;
 var init_history_source = __esm({
   "../engine/dist/parsers/history-source.js"() {
@@ -15588,12 +15273,12 @@ var init_history_source = __esm({
           try {
             for (const entry of readdirSync20(home, { withFileTypes: true })) {
               if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
-                tryAdd(join27(home, entry.name, "history.jsonl"));
+                tryAdd(join28(home, entry.name, "history.jsonl"));
               }
             }
           } catch {
           }
-          this.historyPaths = paths.length > 0 ? paths : [join27(home, ".claude", "history.jsonl")];
+          this.historyPaths = paths.length > 0 ? paths : [join28(home, ".claude", "history.jsonl")];
         }
       }
       async *discover() {
@@ -15743,9 +15428,9 @@ var init_history_source = __esm({
 });
 
 // ../engine/dist/parsers/paste-source.js
-import { existsSync as existsSync27, readdirSync as readdirSync21, readFileSync as readFileSync19, statSync as statSync25 } from "fs";
+import { existsSync as existsSync27, readdirSync as readdirSync21, readFileSync as readFileSync20, statSync as statSync25 } from "fs";
 import { homedir as homedir11 } from "os";
-import { join as join28, basename as basename15 } from "path";
+import { join as join29, basename as basename15 } from "path";
 var MAX_CHUNK_CHARS6, MAX_FILE_SIZE, PasteSource;
 var init_paste_source = __esm({
   "../engine/dist/parsers/paste-source.js"() {
@@ -15771,7 +15456,7 @@ var init_paste_source = __esm({
           try {
             for (const entry of readdirSync21(home, { withFileTypes: true })) {
               if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
-                tryAdd(join28(home, entry.name, "paste-cache"));
+                tryAdd(join29(home, entry.name, "paste-cache"));
               }
             }
           } catch {
@@ -15791,7 +15476,7 @@ var init_paste_source = __esm({
             if (seen.has(file))
               continue;
             seen.add(file);
-            const filePath = join28(cacheDir, file);
+            const filePath = join29(cacheDir, file);
             try {
               const stat3 = statSync25(filePath);
               if (stat3.size > MAX_FILE_SIZE)
@@ -15799,7 +15484,7 @@ var init_paste_source = __esm({
               if (stat3.size < 10)
                 continue;
               const hash = basename15(file, ".txt");
-              const content = readFileSync19(filePath, "utf-8");
+              const content = readFileSync20(filePath, "utf-8");
               const firstLine = content.split("\n").find((l) => l.trim().length > 5)?.trim()?.slice(0, 100) || `Paste ${hash.slice(0, 8)}`;
               yield {
                 id: hash,
@@ -15820,7 +15505,7 @@ var init_paste_source = __esm({
       async parse(item) {
         if (!existsSync27(item.filePath))
           return [];
-        const content = readFileSync19(item.filePath, "utf-8");
+        const content = readFileSync20(item.filePath, "utf-8");
         if (content.trim().length < 20)
           return [];
         return [{
@@ -15843,8 +15528,8 @@ var init_paste_source = __esm({
 });
 
 // ../engine/dist/parsers/antigravity-brain-source.js
-import { existsSync as existsSync28, readdirSync as readdirSync22, readFileSync as readFileSync20, statSync as statSync26 } from "fs";
-import { join as join29 } from "path";
+import { existsSync as existsSync28, readdirSync as readdirSync22, readFileSync as readFileSync21, statSync as statSync26 } from "fs";
+import { join as join30 } from "path";
 var MAX_CHUNK_CHARS7, AntigravityBrainSource;
 var init_antigravity_brain_source = __esm({
   "../engine/dist/parsers/antigravity-brain-source.js"() {
@@ -15868,22 +15553,22 @@ var init_antigravity_brain_source = __esm({
         for (const entry of sessions) {
           if (!entry.isDirectory())
             continue;
-          const sessionDir = join29(this.brainDir, entry.name);
+          const sessionDir = join30(this.brainDir, entry.name);
           const files = readdirSync22(sessionDir).filter((f) => f.endsWith(".md") && !f.includes(".resolved") && !f.includes(".metadata"));
           if (files.length === 0)
             continue;
           for (const file of files) {
-            const filePath = join29(sessionDir, file);
+            const filePath = join30(sessionDir, file);
             try {
               const stat3 = statSync26(filePath);
-              const content = readFileSync20(filePath, "utf-8");
+              const content = readFileSync21(filePath, "utf-8");
               const firstLine = content.split("\n").find((l) => l.trim() && !l.startsWith("#"))?.trim() || "";
               const heading = content.split("\n").find((l) => l.startsWith("#"))?.replace(/^#+\s*/, "").trim() || file;
               const metaPath = `${filePath}.metadata.json`;
               let metaSummary = "";
               if (existsSync28(metaPath)) {
                 try {
-                  const meta = JSON.parse(readFileSync20(metaPath, "utf-8"));
+                  const meta = JSON.parse(readFileSync21(metaPath, "utf-8"));
                   metaSummary = meta.summary || "";
                 } catch {
                 }
@@ -15914,7 +15599,7 @@ var init_antigravity_brain_source = __esm({
       async parse(item) {
         if (!existsSync28(item.filePath))
           return [];
-        const content = readFileSync20(item.filePath, "utf-8");
+        const content = readFileSync21(item.filePath, "utf-8");
         const chunks = [];
         const sections = splitByHeaders(content);
         for (let i = 0; i < sections.length; i++) {
@@ -16257,8 +15942,8 @@ var init_opencode_todo_source = __esm({
 });
 
 // ../engine/dist/parsers/codex-session-source.js
-import { existsSync as existsSync31, readdirSync as readdirSync23, readFileSync as readFileSync21, statSync as statSync27 } from "fs";
-import { join as join30, basename as basename16 } from "path";
+import { existsSync as existsSync31, readdirSync as readdirSync23, readFileSync as readFileSync22, statSync as statSync27 } from "fs";
+import { join as join31, basename as basename16 } from "path";
 function getCodexSessionsDir() {
   return codexBackend.sessionsDir();
 }
@@ -16285,7 +15970,7 @@ function extractReasoningText(event) {
   return "";
 }
 function readJsonlLines(filePath) {
-  const text = readFileSync21(filePath, "utf-8");
+  const text = readFileSync22(filePath, "utf-8");
   const lines = text.split("\n");
   const events = [];
   for (const line of lines) {
@@ -16320,7 +16005,7 @@ var init_codex_session_source = __esm({
         for (const filePath of jsonlFiles) {
           try {
             const stat3 = statSync27(filePath);
-            const lines = readFileSync21(filePath, "utf-8").split("\n");
+            const lines = readFileSync22(filePath, "utf-8").split("\n");
             const firstLine = lines.find((l) => l.trim());
             if (!firstLine)
               continue;
@@ -16479,7 +16164,7 @@ var init_codex_session_source = __esm({
         if (!existsSync31(dir))
           return results;
         for (const entry of readdirSync23(dir, { withFileTypes: true })) {
-          const fullPath = join30(dir, entry.name);
+          const fullPath = join31(dir, entry.name);
           if (entry.isDirectory()) {
             results.push(...this.collectJsonlFiles(fullPath));
           } else if (entry.isFile() && entry.name.startsWith("rollout-") && entry.name.endsWith(".jsonl")) {
@@ -16493,8 +16178,8 @@ var init_codex_session_source = __esm({
 });
 
 // ../engine/dist/parsers/diary-source.js
-import { existsSync as existsSync32, mkdirSync as mkdirSync5, readdirSync as readdirSync24, readFileSync as readFileSync22, writeFileSync as writeFileSync4, statSync as statSync28 } from "fs";
-import { join as join31, basename as basename17 } from "path";
+import { existsSync as existsSync32, mkdirSync as mkdirSync6, readdirSync as readdirSync24, readFileSync as readFileSync23, writeFileSync as writeFileSync5, statSync as statSync28 } from "fs";
+import { join as join32, basename as basename17 } from "path";
 var MAX_CHUNK_CHARS10, DiarySource;
 var init_diary_source = __esm({
   "../engine/dist/parsers/diary-source.js"() {
@@ -16513,13 +16198,13 @@ var init_diary_source = __esm({
           return;
         const agents = readdirSync24(this.diaryDir, { withFileTypes: true }).filter((d) => d.isDirectory());
         for (const agentDir of agents) {
-          const agentPath2 = join31(this.diaryDir, agentDir.name);
+          const agentPath2 = join32(this.diaryDir, agentDir.name);
           const files = readdirSync24(agentPath2).filter((f) => f.endsWith(".json"));
           for (const file of files) {
-            const filePath = join31(agentPath2, file);
+            const filePath = join32(agentPath2, file);
             try {
               const stat3 = statSync28(filePath);
-              const raw = readFileSync22(filePath, "utf-8");
+              const raw = readFileSync23(filePath, "utf-8");
               const entry = JSON.parse(raw);
               const entryId = basename17(file, ".json");
               const title = `[${entry.agent}] ${entry.topic}: ${entry.content.slice(0, 80)}`;
@@ -16546,7 +16231,7 @@ var init_diary_source = __esm({
       async parse(item) {
         if (!existsSync32(item.filePath))
           return [];
-        const raw = readFileSync22(item.filePath, "utf-8");
+        const raw = readFileSync23(item.filePath, "utf-8");
         const entry = JSON.parse(raw);
         if (!entry.content || entry.content.trim().length < 10)
           return [];
@@ -16583,18 +16268,18 @@ var init_diary_source = __esm({
        */
       static write(entry, diaryDir) {
         const dir = diaryDir || getDiaryDir();
-        const agentDir = join31(dir, entry.agent.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
+        const agentDir = join32(dir, entry.agent.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
         if (!existsSync32(agentDir)) {
-          mkdirSync5(agentDir, { recursive: true });
+          mkdirSync6(agentDir, { recursive: true });
         }
         const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
         const entryId = `diary_${entry.agent.toLowerCase()}_${ts}`;
-        const filePath = join31(agentDir, `${entryId}.json`);
+        const filePath = join32(agentDir, `${entryId}.json`);
         const full = {
           ...entry,
           timestamp: entry.timestamp || (/* @__PURE__ */ new Date()).toISOString()
         };
-        writeFileSync4(filePath, JSON.stringify(full, null, 2), "utf-8");
+        writeFileSync5(filePath, JSON.stringify(full, null, 2), "utf-8");
         return entryId;
       }
       /**
@@ -16602,14 +16287,14 @@ var init_diary_source = __esm({
        */
       static read(agentName, lastN = 10, diaryDir) {
         const dir = diaryDir || getDiaryDir();
-        const agentDir = join31(dir, agentName.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
+        const agentDir = join32(dir, agentName.toLowerCase().replace(/[^a-z0-9_-]/g, "_"));
         if (!existsSync32(agentDir))
           return [];
         const files = readdirSync24(agentDir).filter((f) => f.endsWith(".json")).sort().reverse().slice(0, lastN);
         const entries = [];
         for (const file of files) {
           try {
-            const raw = readFileSync22(join31(agentDir, file), "utf-8");
+            const raw = readFileSync23(join32(agentDir, file), "utf-8");
             entries.push(JSON.parse(raw));
           } catch {
             continue;
@@ -16654,9 +16339,9 @@ var init_redact_inline = __esm({
 });
 
 // ../engine/dist/parsers/skills-source.js
-import { existsSync as existsSync33, readdirSync as readdirSync25, readFileSync as readFileSync23, statSync as statSync29 } from "fs";
+import { existsSync as existsSync33, readdirSync as readdirSync25, readFileSync as readFileSync24, statSync as statSync29 } from "fs";
 import { homedir as homedir12 } from "os";
-import { join as join32 } from "path";
+import { join as join33 } from "path";
 function rebuildBody(content) {
   const { text, redacted } = redactInlineSecrets(content);
   const out = {};
@@ -16674,25 +16359,25 @@ function resolveRoots() {
   const home = homedir12();
   const all = [];
   if (isSourceEnabled("shared", "skills")) {
-    all.push({ path: join32(home, ".agents", "skills"), tool: "shared" });
+    all.push({ path: join33(home, ".agents", "skills"), tool: "shared" });
   }
   if (isSourceEnabled("claude", "skills")) {
     all.push({ path: claudeBackend.skillsDir(), tool: "claude" });
   }
   if (isSourceEnabled("agy", "skills")) {
-    all.push({ path: join32(agyBackend.homeDir(), "skills"), tool: "agy" });
+    all.push({ path: join33(agyBackend.homeDir(), "skills"), tool: "agy" });
     all.push({ path: agyBackend.sharedSkillsDir(), tool: "agy" });
   }
   if (isSourceEnabled("opencode", "skills")) {
-    all.push({ path: join32(home, ".config", "opencode", "skills"), tool: "opencode" }, { path: join32(home, ".config", "opencode", "skill"), tool: "opencode" }, { path: join32(home, ".opencode", "skill"), tool: "opencode" }, { path: join32(home, ".opencode", "skills"), tool: "opencode" });
+    all.push({ path: join33(home, ".config", "opencode", "skills"), tool: "opencode" }, { path: join33(home, ".config", "opencode", "skill"), tool: "opencode" }, { path: join33(home, ".opencode", "skill"), tool: "opencode" }, { path: join33(home, ".opencode", "skills"), tool: "opencode" });
   }
   if (isSourceEnabled("codex", "skills")) {
     all.push({ path: codexBackend.skillsDir(), tool: "codex", skipChildren: [".system"] });
     all.push({ path: codexBackend.skillsSystemDir(), tool: "codex", readonly: true });
   }
   if (isSourceEnabled("cursor", "skills")) {
-    all.push({ path: join32(cursorHomeDir(), "skills"), tool: "cursor" });
-    all.push({ path: join32(cursorHomeDir(), "skills-cursor"), tool: "cursor", readonly: true });
+    all.push({ path: join33(cursorHomeDir(), "skills"), tool: "cursor" });
+    all.push({ path: join33(cursorHomeDir(), "skills-cursor"), tool: "cursor", readonly: true });
   }
   return all.filter((r) => existsSync33(r.path));
 }
@@ -16737,7 +16422,7 @@ var init_skills_source = __esm({
         const codexPluginsDir = codexBackend.pluginsDir();
         if (existsSync33(codexPluginsDir)) {
           for (const pluginName of readdirSync25(codexPluginsDir)) {
-            const skillsDir = join32(codexPluginsDir, pluginName, "skills");
+            const skillsDir = join33(codexPluginsDir, pluginName, "skills");
             if (!existsSync33(skillsDir))
               continue;
             yield* this.fromSkillRoot({ path: skillsDir, tool: "codex" }, pluginName);
@@ -16754,7 +16439,7 @@ var init_skills_source = __esm({
         for (const name of entries) {
           if (root.skipChildren?.includes(name))
             continue;
-          const skillDir = join32(root.path, name);
+          const skillDir = join33(root.path, name);
           let st;
           try {
             st = statSync29(skillDir);
@@ -16763,12 +16448,12 @@ var init_skills_source = __esm({
           }
           if (!st.isDirectory())
             continue;
-          const skillMd = join32(skillDir, "SKILL.md");
+          const skillMd = join33(skillDir, "SKILL.md");
           if (!existsSync33(skillMd))
             continue;
           let content;
           try {
-            content = readFileSync23(skillMd, "utf-8");
+            content = readFileSync24(skillMd, "utf-8");
           } catch {
             continue;
           }
@@ -16782,7 +16467,7 @@ var init_skills_source = __esm({
           const subdirs = {};
           try {
             for (const sub of readdirSync25(skillDir)) {
-              const subPath = join32(skillDir, sub);
+              const subPath = join33(skillDir, sub);
               try {
                 const ss = statSync29(subPath);
                 if (ss.isDirectory()) {
@@ -16831,7 +16516,7 @@ var init_skills_source = __esm({
       async parse(item) {
         if (!existsSync33(item.filePath))
           return [];
-        const content = readFileSync23(item.filePath, "utf-8");
+        const content = readFileSync24(item.filePath, "utf-8");
         if (!content.trim())
           return [];
         return [{
@@ -16854,14 +16539,14 @@ var init_skills_source = __esm({
 });
 
 // ../engine/dist/parsers/mcps-source.js
-import { existsSync as existsSync34, readdirSync as readdirSync26, readFileSync as readFileSync24, statSync as statSync30 } from "fs";
+import { existsSync as existsSync34, readdirSync as readdirSync26, readFileSync as readFileSync25, statSync as statSync30 } from "fs";
 import { homedir as homedir13 } from "os";
-import { join as join33 } from "path";
+import { join as join34 } from "path";
 function readJson(path) {
   if (!existsSync34(path))
     return null;
   try {
-    const raw = readFileSync24(path, "utf-8");
+    const raw = readFileSync25(path, "utf-8");
     const stripped = path.endsWith(".jsonc") ? raw.replace(/\/\*[\s\S]*?\*\//g, "").replace(/(^|[^:])\/\/.*$/gm, "$1").replace(/,(\s*[}\]])/g, "$1") : raw;
     return JSON.parse(stripped);
   } catch {
@@ -16922,23 +16607,23 @@ var init_mcps_source = __esm({
         if (!isSourceEnabled("common", "mcps"))
           return;
         const home = homedir13();
-        yield* this.fromObject(readJson(join33(home, ".mcp.json"))?.mcpServers, {
+        yield* this.fromObject(readJson(join34(home, ".mcp.json"))?.mcpServers, {
           tool: "claude",
-          filePath: join33(home, ".mcp.json"),
+          filePath: join34(home, ".mcp.json"),
           scope: "global"
         });
-        yield* this.fromObject(readJson(join33(home, ".claude.json"))?.mcpServers, {
+        yield* this.fromObject(readJson(join34(home, ".claude.json"))?.mcpServers, {
           tool: "claude",
-          filePath: join33(home, ".claude.json"),
+          filePath: join34(home, ".claude.json"),
           scope: "user"
         });
         for (const path of [
-          join33(home, ".config", "opencode", "opencode.json"),
-          join33(home, ".config", "opencode", "opencode.jsonc"),
-          join33(home, ".config", "opencode", "config.json"),
-          join33(home, ".opencode", "opencode.json"),
-          join33(home, ".opencode", "opencode.jsonc"),
-          join33(home, ".opencode", "config.json")
+          join34(home, ".config", "opencode", "opencode.json"),
+          join34(home, ".config", "opencode", "opencode.jsonc"),
+          join34(home, ".config", "opencode", "config.json"),
+          join34(home, ".opencode", "opencode.json"),
+          join34(home, ".opencode", "opencode.jsonc"),
+          join34(home, ".opencode", "config.json")
         ]) {
           yield* this.fromObject(readJson(path)?.mcp, {
             tool: "opencode",
@@ -16953,13 +16638,13 @@ var init_mcps_source = __esm({
           filePath: geminiSettings,
           scope: "user"
         });
-        const cursorMcp = join33(cursorHomeDir(), "mcp.json");
+        const cursorMcp = join34(cursorHomeDir(), "mcp.json");
         yield* this.fromObject(readJson(cursorMcp)?.mcpServers, {
           tool: "cursor",
           filePath: cursorMcp,
           scope: "user"
         });
-        const agyMcp = join33(home, ".gemini", "config", "mcp_config.json");
+        const agyMcp = join34(home, ".gemini", "config", "mcp_config.json");
         yield* this.fromObject(readJson(agyMcp)?.mcpServers, {
           tool: "agy",
           filePath: agyMcp,
@@ -16969,7 +16654,7 @@ var init_mcps_source = __esm({
         const pluginsDir = codexBackend.pluginsDir();
         if (existsSync34(pluginsDir)) {
           for (const plugin of readdirSync26(pluginsDir)) {
-            const mcpPath = join33(pluginsDir, plugin, ".mcp.json");
+            const mcpPath = join34(pluginsDir, plugin, ".mcp.json");
             yield* this.fromObject(readJson(mcpPath)?.mcpServers, {
               tool: "codex",
               filePath: mcpPath,
@@ -17023,7 +16708,7 @@ var init_mcps_source = __esm({
           return;
         let content;
         try {
-          content = readFileSync24(path, "utf-8");
+          content = readFileSync25(path, "utf-8");
         } catch {
           return;
         }
@@ -17192,8 +16877,8 @@ var init_toolkit_format = __esm({
 });
 
 // ../engine/dist/parsers/slash-commands-source.js
-import { existsSync as existsSync35, readdirSync as readdirSync27, readFileSync as readFileSync25, statSync as statSync31 } from "fs";
-import { join as join34, basename as basename18 } from "path";
+import { existsSync as existsSync35, readdirSync as readdirSync27, readFileSync as readFileSync26, statSync as statSync31 } from "fs";
+import { join as join35, basename as basename18 } from "path";
 function rebuildBody2(content) {
   const { text, redacted } = redactInlineSecrets(content);
   const out = {};
@@ -17251,7 +16936,7 @@ var init_slash_commands_source = __esm({
                 if (!entry.isDirectory() || entry.name.startsWith("."))
                   continue;
                 const projectPath = resolveProjectDirName(entry.name);
-                const cmdDir = join34(projectPath, ".claude", "commands");
+                const cmdDir = join35(projectPath, ".claude", "commands");
                 if (existsSync35(cmdDir))
                   roots.push({ path: cmdDir, tool: "claude", scope: "project", projectPath, format: "md" });
               }
@@ -17260,7 +16945,7 @@ var init_slash_commands_source = __esm({
           }
         }
         if (isSourceEnabled("agy", "commands")) {
-          roots.push({ path: join34(agyBackend.homeDir(), "commands"), tool: "agy", scope: "user", projectPath: "", format: "toml" });
+          roots.push({ path: join35(agyBackend.homeDir(), "commands"), tool: "agy", scope: "user", projectPath: "", format: "toml" });
           roots.push({ path: agyBackend.sharedCommandsDir(), tool: "agy", scope: "user", projectPath: "", format: "toml" });
         }
         if (isSourceEnabled("opencode", "commands")) {
@@ -17270,7 +16955,7 @@ var init_slash_commands_source = __esm({
           roots.push({ path: codexBackend.promptsDir(), tool: "codex", scope: "user", projectPath: "", format: "md" });
         }
         if (isSourceEnabled("cursor", "commands")) {
-          roots.push({ path: join34(cursorHomeDir(), "commands"), tool: "cursor", scope: "user", projectPath: "", format: "md" });
+          roots.push({ path: join35(cursorHomeDir(), "commands"), tool: "cursor", scope: "user", projectPath: "", format: "md" });
         }
         return roots;
       }
@@ -17284,10 +16969,10 @@ var init_slash_commands_source = __esm({
             continue;
           }
           for (const file of files) {
-            const filePath = join34(root.path, file);
+            const filePath = join35(root.path, file);
             try {
               const stat3 = statSync31(filePath);
-              const content = readFileSync25(filePath, "utf-8");
+              const content = readFileSync26(filePath, "utf-8");
               const parsed = parseCommand(content, basename18(file, ext), root.format);
               yield {
                 id: `${root.tool}_cmd_${root.scope}_${parsed.name}`,
@@ -17316,7 +17001,7 @@ var init_slash_commands_source = __esm({
       async parse(item) {
         if (!existsSync35(item.filePath))
           return [];
-        const content = readFileSync25(item.filePath, "utf-8");
+        const content = readFileSync26(item.filePath, "utf-8");
         if (!content.trim())
           return [];
         return [{
@@ -17339,8 +17024,8 @@ var init_slash_commands_source = __esm({
 });
 
 // ../engine/dist/parsers/subagents-source.js
-import { existsSync as existsSync36, readdirSync as readdirSync28, readFileSync as readFileSync26, statSync as statSync32 } from "fs";
-import { join as join35, basename as basename19 } from "path";
+import { existsSync as existsSync36, readdirSync as readdirSync28, readFileSync as readFileSync27, statSync as statSync32 } from "fs";
+import { join as join36, basename as basename19 } from "path";
 function rebuildBody3(content) {
   const { text, redacted } = redactInlineSecrets(content);
   const out = {};
@@ -17400,7 +17085,7 @@ var init_subagents_source = __esm({
                 if (!entry.isDirectory() || entry.name.startsWith("."))
                   continue;
                 const projectPath = resolveProjectDirName(entry.name);
-                const agentDir = join35(projectPath, ".claude", "agents");
+                const agentDir = join36(projectPath, ".claude", "agents");
                 if (existsSync36(agentDir))
                   roots.push({ path: agentDir, tool: "claude", scope: "project", projectPath, format: "md" });
               }
@@ -17409,7 +17094,7 @@ var init_subagents_source = __esm({
           }
         }
         if (isSourceEnabled("agy", "agents")) {
-          roots.push({ path: join35(agyBackend.homeDir(), "agents"), tool: "agy", scope: "user", projectPath: "", format: "md" });
+          roots.push({ path: join36(agyBackend.homeDir(), "agents"), tool: "agy", scope: "user", projectPath: "", format: "md" });
           roots.push({ path: agyBackend.sharedAgentsDir(), tool: "agy", scope: "user", projectPath: "", format: "md" });
         }
         if (isSourceEnabled("opencode", "agents")) {
@@ -17419,7 +17104,7 @@ var init_subagents_source = __esm({
           roots.push({ path: codexBackend.agentsDir(), tool: "codex", scope: "user", projectPath: "", format: "toml" });
         }
         if (isSourceEnabled("cursor", "agents")) {
-          roots.push({ path: join35(cursorHomeDir(), "agents"), tool: "cursor", scope: "user", projectPath: "", format: "md" });
+          roots.push({ path: join36(cursorHomeDir(), "agents"), tool: "cursor", scope: "user", projectPath: "", format: "md" });
         }
         return roots;
       }
@@ -17433,10 +17118,10 @@ var init_subagents_source = __esm({
             continue;
           }
           for (const file of files) {
-            const filePath = join35(root.path, file);
+            const filePath = join36(root.path, file);
             try {
               const stat3 = statSync32(filePath);
-              const content = readFileSync26(filePath, "utf-8");
+              const content = readFileSync27(filePath, "utf-8");
               const parsed = parseAgent(content, basename19(file, ext), root.format);
               yield {
                 id: `${root.tool}_agent_${root.scope}_${parsed.name}`,
@@ -17466,7 +17151,7 @@ var init_subagents_source = __esm({
       async parse(item) {
         if (!existsSync36(item.filePath))
           return [];
-        const content = readFileSync26(item.filePath, "utf-8");
+        const content = readFileSync27(item.filePath, "utf-8");
         if (!content.trim())
           return [];
         return [{
@@ -17489,13 +17174,13 @@ var init_subagents_source = __esm({
 });
 
 // ../engine/dist/parsers/hooks-source.js
-import { existsSync as existsSync37, readFileSync as readFileSync27, readdirSync as readdirSync29, statSync as statSync33 } from "fs";
-import { join as join36 } from "path";
+import { existsSync as existsSync37, readFileSync as readFileSync28, readdirSync as readdirSync29, statSync as statSync33 } from "fs";
+import { join as join37 } from "path";
 function readJson2(path) {
   if (!existsSync37(path))
     return null;
   try {
-    return JSON.parse(readFileSync27(path, "utf-8"));
+    return JSON.parse(readFileSync28(path, "utf-8"));
   } catch {
     return null;
   }
@@ -17520,7 +17205,7 @@ var init_hooks_source = __esm({
               if (!entry.isDirectory() || entry.name.startsWith("."))
                 continue;
               const projectPath = resolveProjectDirName(entry.name);
-              const settingsPath2 = join36(projectPath, ".claude", "settings.json");
+              const settingsPath2 = join37(projectPath, ".claude", "settings.json");
               if (existsSync37(settingsPath2)) {
                 yield* this.fromSettings(settingsPath2, "project", projectPath);
               }
@@ -17612,14 +17297,14 @@ var init_hooks_source = __esm({
 });
 
 // ../engine/dist/parsers/plugins-source.js
-import { existsSync as existsSync38, readFileSync as readFileSync28, readdirSync as readdirSync30, statSync as statSync34 } from "fs";
+import { existsSync as existsSync38, readFileSync as readFileSync29, readdirSync as readdirSync30, statSync as statSync34 } from "fs";
 import { homedir as homedir14 } from "os";
-import { join as join37 } from "path";
+import { join as join38 } from "path";
 function readJson3(path) {
   if (!existsSync38(path))
     return null;
   try {
-    return JSON.parse(readFileSync28(path, "utf-8"));
+    return JSON.parse(readFileSync29(path, "utf-8"));
   } catch {
     return null;
   }
@@ -17679,7 +17364,7 @@ var init_plugins_source = __esm({
             entries = [];
           }
           for (const name of entries) {
-            const dir = join37(gemRoot, name);
+            const dir = join38(gemRoot, name);
             let st;
             try {
               st = statSync34(dir);
@@ -17688,7 +17373,7 @@ var init_plugins_source = __esm({
             }
             if (!st.isDirectory())
               continue;
-            const manifestPath = join37(dir, "gemini-extension.json");
+            const manifestPath = join38(dir, "gemini-extension.json");
             const manifest = readJson3(manifestPath);
             if (!manifest || typeof manifest !== "object")
               continue;
@@ -17727,7 +17412,7 @@ var init_plugins_source = __esm({
             entries = [];
           }
           for (const name of entries) {
-            const pluginDir = join37(codexPluginsRoot, name);
+            const pluginDir = join38(codexPluginsRoot, name);
             let st;
             try {
               st = statSync34(pluginDir);
@@ -17736,11 +17421,11 @@ var init_plugins_source = __esm({
             }
             if (!st.isDirectory())
               continue;
-            const appJson = readJson3(join37(pluginDir, ".codex-plugin", ".app.json"));
-            const pluginJson = readJson3(join37(pluginDir, ".codex-plugin", "plugin.json"));
+            const appJson = readJson3(join38(pluginDir, ".codex-plugin", ".app.json"));
+            const pluginJson = readJson3(join38(pluginDir, ".codex-plugin", "plugin.json"));
             const manifest = pluginJson || appJson || {};
             let mcpServers = [];
-            const mcpJson = readJson3(join37(pluginDir, ".mcp.json"));
+            const mcpJson = readJson3(join38(pluginDir, ".mcp.json"));
             if (mcpJson?.mcpServers)
               mcpServers = Object.keys(mcpJson.mcpServers);
             yield {
@@ -17748,7 +17433,7 @@ var init_plugins_source = __esm({
               sourceType: "plugin",
               title: manifest.name || name,
               projectPath: "",
-              filePath: join37(pluginDir, ".codex-plugin"),
+              filePath: join38(pluginDir, ".codex-plugin"),
               mtime: st.mtimeMs,
               contentPreview: (manifest.description || "").slice(0, 300),
               extra: {
@@ -17796,7 +17481,6 @@ var init_plugins_source = __esm({
 
 // ../engine/dist/parsers/all-sources.js
 function buildSourceRegistry(registry = new SourceRegistry()) {
-  registry.register(new SessionSource());
   registry.register(new PlanSource());
   registry.register(new TaskSource());
   registry.register(new ClaudeMdSource());
@@ -17820,7 +17504,6 @@ var init_all_sources = __esm({
   "../engine/dist/parsers/all-sources.js"() {
     "use strict";
     init_source_registry();
-    init_session_source();
     init_plan_source();
     init_task_source();
     init_claude_md_source();
@@ -17908,8 +17591,8 @@ __export(sync_ledger_exports, {
   syncMode: () => syncMode,
   unackedCursorAttemptCount: () => unackedCursorAttemptCount
 });
-import { readFileSync as readFileSync29, writeFileSync as writeFileSync5, renameSync as renameSync4, mkdirSync as mkdirSync6 } from "node:fs";
-import { join as join38, dirname as dirname15 } from "node:path";
+import { readFileSync as readFileSync30, writeFileSync as writeFileSync6, renameSync as renameSync4, mkdirSync as mkdirSync7 } from "node:fs";
+import { join as join39, dirname as dirname16 } from "node:path";
 function toRow(entry) {
   if (entry === void 0) return void 0;
   return typeof entry === "number" ? { m: entry, v: 0 } : entry;
@@ -17920,7 +17603,7 @@ function ledgerFilePath() {
 function load() {
   if (cache3) return cache3;
   try {
-    const parsed = JSON.parse(readFileSync29(ledgerPath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync30(ledgerPath(), "utf-8"));
     cache3 = parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     cache3 = {};
@@ -17929,9 +17612,9 @@ function load() {
 }
 function persistNow(data) {
   const path = ledgerPath();
-  mkdirSync6(dirname15(path), { recursive: true });
+  mkdirSync7(dirname16(path), { recursive: true });
   const tmp = `${path}.tmp`;
-  writeFileSync5(tmp, JSON.stringify(data));
+  writeFileSync6(tmp, JSON.stringify(data));
   renameSync4(tmp, path);
   pendingWrite = false;
 }
@@ -17966,10 +17649,10 @@ function pruneLedgerTargets(configuredServers) {
   try {
     let prior = {};
     try {
-      prior = JSON.parse(readFileSync29(side, "utf-8"));
+      prior = JSON.parse(readFileSync30(side, "utf-8"));
     } catch {
     }
-    writeFileSync5(side, JSON.stringify({ ...prior, ...orphans }));
+    writeFileSync6(side, JSON.stringify({ ...prior, ...orphans }));
   } catch {
     for (const n of names) data[n] = orphans[n];
     return 0;
@@ -17990,7 +17673,7 @@ function flushLedger() {
 function loadItemVersionsAll() {
   if (itemVersionsCache) return itemVersionsCache;
   try {
-    const parsed = JSON.parse(readFileSync29(itemVersionsPath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync30(itemVersionsPath(), "utf-8"));
     itemVersionsCache = parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     itemVersionsCache = {};
@@ -18004,9 +17687,9 @@ function saveItemVersions(server, versions) {
   const all = loadItemVersionsAll();
   all[server] = { ...all[server] || {}, ...versions };
   const path = itemVersionsPath();
-  mkdirSync6(dirname15(path), { recursive: true });
+  mkdirSync7(dirname16(path), { recursive: true });
   const tmp = `${path}.tmp`;
-  writeFileSync5(tmp, JSON.stringify(all));
+  writeFileSync6(tmp, JSON.stringify(all));
   renameSync4(tmp, path);
 }
 function getSyncedMtimes(server) {
@@ -18084,7 +17767,7 @@ function markFieldCoverage(server, field, rows) {
 function loadReconcile() {
   if (reconcileCache) return reconcileCache;
   try {
-    const parsed = JSON.parse(readFileSync29(reconcilePath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync30(reconcilePath(), "utf-8"));
     reconcileCache = parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     reconcileCache = {};
@@ -18093,9 +17776,9 @@ function loadReconcile() {
 }
 function persistReconcile(data) {
   const path = reconcilePath();
-  mkdirSync6(dirname15(path), { recursive: true });
+  mkdirSync7(dirname16(path), { recursive: true });
   const tmp = `${path}.tmp`;
-  writeFileSync5(tmp, JSON.stringify(data));
+  writeFileSync6(tmp, JSON.stringify(data));
   renameSync4(tmp, path);
 }
 function stateFor(server) {
@@ -18153,15 +17836,15 @@ var init_sync_ledger = __esm({
     "use strict";
     init_paths();
     init_extractor_version();
-    ledgerPath = () => join38(getDataDir(), "sync-ledger.json");
+    ledgerPath = () => join39(getDataDir(), "sync-ledger.json");
     cache3 = null;
     LEDGER_FLUSH_MS = 2e3;
     pendingWrite = false;
     flushTimer = null;
-    itemVersionsPath = () => join38(getDataDir(), "item-versions.json");
+    itemVersionsPath = () => join39(getDataDir(), "item-versions.json");
     itemVersionsCache = null;
     unackedCursorAttempts = 0;
-    reconcilePath = () => join38(getDataDir(), "sync-field-reconcile.json");
+    reconcilePath = () => join39(getDataDir(), "sync-field-reconcile.json");
     reconcileCache = null;
   }
 });
@@ -18192,11 +17875,11 @@ var init_sync_fields = __esm({
 });
 
 // ../engine/dist/core/index-lock.js
-import { existsSync as existsSync39, mkdirSync as mkdirSync7, openSync as openSync7, writeFileSync as writeFileSync6, readFileSync as readFileSync30, rmSync as rmSync4, statSync as statSync35, closeSync as closeSync7 } from "fs";
-import { dirname as dirname16, join as join39 } from "path";
+import { existsSync as existsSync39, mkdirSync as mkdirSync8, openSync as openSync7, writeFileSync as writeFileSync7, readFileSync as readFileSync31, rmSync as rmSync4, statSync as statSync35, closeSync as closeSync7 } from "fs";
+import { dirname as dirname17, join as join40 } from "path";
 function acquireIndexLock(opts) {
   const lockPath = lockFilePath();
-  mkdirSync7(dirname16(lockPath), { recursive: true });
+  mkdirSync8(dirname17(lockPath), { recursive: true });
   if (existsSync39(lockPath)) {
     if (!stealStaleLock(lockPath, opts.staleAfterMs ?? 10 * 6e4)) {
       return null;
@@ -18212,7 +17895,7 @@ function acquireIndexLock(opts) {
   }
   const holder = { pid: process.pid, kind: opts.kind, startedAt: Date.now() };
   try {
-    writeFileSync6(fd, JSON.stringify(holder));
+    writeFileSync7(fd, JSON.stringify(holder));
   } finally {
     closeSync7(fd);
   }
@@ -18224,7 +17907,7 @@ function acquireIndexLock(opts) {
         return;
       released = true;
       try {
-        const current = JSON.parse(readFileSync30(lockPath, "utf-8"));
+        const current = JSON.parse(readFileSync31(lockPath, "utf-8"));
         if (current.pid !== holder.pid || current.startedAt !== holder.startedAt)
           return;
       } catch {
@@ -18238,7 +17921,7 @@ function acquireIndexLock(opts) {
   };
 }
 function lockFilePath() {
-  return join39(getIndexDir(), ".compact.lock");
+  return join40(getIndexDir(), ".compact.lock");
 }
 function stealStaleLock(lockPath, staleAfterMs) {
   try {
@@ -18246,7 +17929,7 @@ function stealStaleLock(lockPath, staleAfterMs) {
     const age = Date.now() - s.mtimeMs;
     let payload;
     try {
-      payload = JSON.parse(readFileSync30(lockPath, "utf-8"));
+      payload = JSON.parse(readFileSync31(lockPath, "utf-8"));
     } catch {
       rmSync4(lockPath, { force: true });
       return true;
@@ -18284,7 +17967,7 @@ var init_index_lock = __esm({
 });
 
 // src/http.ts
-import { readFileSync as readFileSync31 } from "node:fs";
+import { readFileSync as readFileSync32 } from "node:fs";
 function clientHeaders() {
   return {
     "x-chat-recall-cli": CLI_VERSION,
@@ -18302,10 +17985,10 @@ var init_http = __esm({
     "use strict";
     CLI_VERSION = "0.0.0";
     try {
-      CLI_VERSION = JSON.parse(readFileSync31(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
+      CLI_VERSION = JSON.parse(readFileSync32(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.6.8";
+        if (true) CLI_VERSION = "0.7.0";
       } catch {
       }
     }
@@ -18330,27 +18013,6 @@ var init_redact_deep = __esm({
   }
 });
 
-// ../engine/dist/core/session-multi-tool.js
-function extractTurnsAny(sessionId, opts = {}) {
-  const backend = getBackendForId(sessionId);
-  if (!backend)
-    return { sessionId, found: false, turns: [], startMs: 0, endMs: 0 };
-  return backend.extractTurns(sessionId, opts);
-}
-function replaySessionAny(sessionId) {
-  const backend = getBackendForId(sessionId);
-  if (!backend)
-    return { sessionId, found: false, projectPath: "", files: [], totalLinesAdded: 0, totalLinesRemoved: 0 };
-  return backend.replay(sessionId);
-}
-var init_session_multi_tool = __esm({
-  "../engine/dist/core/session-multi-tool.js"() {
-    "use strict";
-    init_tool_backend();
-    init_backends();
-  }
-});
-
 // src/derived.ts
 function collectDerivedRows(ref, mtime, count, maxRowBytes) {
   const id = ref.prefixedId;
@@ -18821,7 +18483,7 @@ var init_telemetry = __esm({
     init_sync_client();
     cliVersion = () => {
       try {
-        return true ? "0.6.8" : "dev";
+        return true ? "0.7.0" : "dev";
       } catch {
         return "dev";
       }
@@ -18831,60 +18493,6 @@ var init_telemetry = __esm({
   }
 });
 
-// ../engine/dist/core/collector-health.js
-import { readFileSync as readFileSync32, writeFileSync as writeFileSync7, mkdirSync as mkdirSync8 } from "node:fs";
-import { join as join40, dirname as dirname17 } from "node:path";
-function collectorHealthPath() {
-  return healthPath();
-}
-function readCollectorHealth() {
-  try {
-    const h = JSON.parse(readFileSync32(healthPath(), "utf-8"));
-    return h && h.v === 1 && typeof h.updatedAt === "number" ? h : null;
-  } catch {
-    return null;
-  }
-}
-function writeCollectorHealth(h) {
-  try {
-    const p = healthPath();
-    mkdirSync8(dirname17(p), { recursive: true });
-    writeFileSync7(p, JSON.stringify(h));
-  } catch {
-  }
-}
-function updateCollectorHealth(patch) {
-  const prior = readCollectorHealth();
-  writeCollectorHealth({
-    ...prior,
-    v: 1,
-    updatedAt: Date.now(),
-    startedAt: prior?.startedAt ?? Date.now(),
-    restartsLastHour: prior?.restartsLastHour ?? 0,
-    targets: prior?.targets ?? {},
-    ...patch
-  });
-}
-function reportWalkProgress(p) {
-  const now = Date.now();
-  const boundary = p.complete || p.done === 0;
-  if (!boundary && now - lastProgressWrite < PROGRESS_WRITE_INTERVAL_MS)
-    return;
-  lastProgressWrite = now;
-  updateCollectorHealth({ progress: p });
-}
-var healthPath, PROGRESS_WRITE_INTERVAL_MS, lastProgressWrite, STALE_AFTER_MS;
-var init_collector_health = __esm({
-  "../engine/dist/core/collector-health.js"() {
-    "use strict";
-    init_paths();
-    healthPath = () => join40(getDataDir(), "collector-health.json");
-    PROGRESS_WRITE_INTERVAL_MS = 2e3;
-    lastProgressWrite = 0;
-    STALE_AFTER_MS = 30 * 6e4;
-  }
-});
-
 // src/server-probe.ts
 var server_probe_exports = {};
 __export(server_probe_exports, {
@@ -19571,10 +19179,11 @@ async function syncSessions(opts = {}) {
       };
       continue;
     }
+    acceptedUploads.set(cred.serverUrl, 0);
     try {
       const r = await syncToTarget(cred, opts);
       noteTargetSuccess(cred.serverUrl);
-      perTarget[cred.serverUrl] = { ok: true };
+      perTarget[cred.serverUrl] = { ok: true, accepted: acceptedUploads.get(cred.serverUrl) ?? 0 };
       agg = agg ? {
         uploaded: agg.uploaded + r.uploaded,
         skipped: agg.skipped + r.skipped,
@@ -19591,7 +19200,7 @@ async function syncSessions(opts = {}) {
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       errors.push(`${cred.serverUrl}: ${msg}`);
-      perTarget[cred.serverUrl] = { ok: false, error: msg };
+      perTarget[cred.serverUrl] = { ok: false, error: msg, accepted: acceptedUploads.get(cred.serverUrl) ?? 0 };
       const next = noteTargetFailure(cred.serverUrl, msg);
       const notice = breakerNotice(cred.serverUrl, next);
       if (notice) console.error(`[sync] ${notice}`);
@@ -19830,7 +19439,7 @@ async function syncToTargetInScope(cred, opts = {}) {
       return [];
     }
   });
-  const MAX_BATCH_BYTES = 4 * 1024 * 1024;
+  const MAX_BATCH_BYTES = Number(process.env.CHAT_RECALL_MAX_BATCH_BYTES) || (isLocalHost(cred.serverUrl) ? 4 * 1024 * 1024 : 1024 * 1024);
   const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
   const explicitThrottle = typeof opts.throttleMs === "number" && opts.throttleMs > 0;
   const throttleMs = explicitThrottle ? opts.throttleMs : 0;
@@ -19865,6 +19474,7 @@ async function syncToTargetInScope(cred, opts = {}) {
           signal: ac.signal
         });
         if (res.ok) {
+          acceptedUploads.set(cred.serverUrl, (acceptedUploads.get(cred.serverUrl) ?? 0) + 1);
           const body2 = await res.json().catch(() => ({}));
           if (typeof body2.telemetry === "boolean") {
             setTelemetryEligible(base2, body2.telemetry);
@@ -19915,7 +19525,8 @@ async function syncToTargetInScope(cred, opts = {}) {
         if (attempt >= RETRY_DELAYS_MS.length) throw new Error(`sync failed after ${attempt + 1} attempts: HTTP ${res.status} ${text}`);
         const retryAfterS = Number(res.headers.get("retry-after"));
         const waitMs = res.status === 429 && retryAfterS > 0 ? retryAfterS * 1e3 : RETRY_DELAYS_MS[attempt];
-        console.error(`[sync] HTTP ${res.status} from ${base2} \u2014 backing off ${Math.round(waitMs / 1e3)}s (attempt ${attempt + 1})`);
+        const why = res.status === 524 ? ` \u2014 the proxy cut the request at its time limit; the batch is too big for one request` : "";
+        console.error(`[sync] HTTP ${res.status} from ${base2}${why} \u2014 backing off ${Math.round(waitMs / 1e3)}s (attempt ${attempt + 1})`);
         await sleep(waitMs);
         continue;
       } catch (err) {
@@ -20774,7 +20385,7 @@ async function syncIncremental(opts = {}) {
     lock.release();
   }
 }
-var ownVersion, ERROR_CLASS, STANDING_FAILURE, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, EMPTY_SYNC_CONFIG, SYNC_RULES_REFUSAL, hashPath, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
+var ownVersion, ERROR_CLASS, STANDING_FAILURE, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, EMPTY_SYNC_CONFIG, SYNC_RULES_REFUSAL, hashPath, acceptedUploads, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
 var init_sync_client = __esm({
   "src/sync-client.ts"() {
     "use strict";
@@ -20819,7 +20430,7 @@ var init_sync_client = __esm({
       ownVersion = JSON.parse(readFileSync35(join42(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.6.8";
+        if (true) ownVersion = "0.7.0";
       } catch {
       }
     }
@@ -20838,6 +20449,7 @@ var init_sync_client = __esm({
     EMPTY_SYNC_CONFIG = { excludeTools: [], excludeProjects: [], excludeSources: [], approveSources: [] };
     SYNC_RULES_REFUSAL = /* @__PURE__ */ Symbol.for("chat-recall.syncRulesRefusal");
     hashPath = (p) => p ? "p_" + createHash8("sha256").update(p).digest("hex").slice(0, 12) : "";
+    acceptedUploads = /* @__PURE__ */ new Map();
     MAX_DERIVED_ROW_BYTES = 2 * 1024 * 1024;
     isLocalHost = isPrivateHost;
     CAPS_TTL_MS = 60 * 6e4;
@@ -23582,6 +23194,7 @@ var init_service_installer = __esm({
 // auto-indexer/indexer.ts
 init_backends();
 init_paths();
+init_collector_health();
 init_settings();
 init_sync_client();
 init_http();
@@ -23903,7 +23516,7 @@ try {
   ownVersion2 = JSON.parse(readFileSync39(join48(dir, "../package.json"), "utf-8")).version || ownVersion2;
 } catch {
   try {
-    if (true) ownVersion2 = "0.6.8";
+    if (true) ownVersion2 = "0.7.0";
   } catch {
   }
 }
@@ -24251,7 +23864,7 @@ async function runCollectorMigration(opts) {
 init_sync_ledger();
 init_collector_health();
 import { existsSync as existsSync49, readFileSync as readFileSync45, statSync as statSync44 } from "fs";
-var CLI_VERSION3 = true ? "0.6.8" : "0.0.0";
+var CLI_VERSION3 = true ? "0.7.0" : "0.0.0";
 var DEBOUNCE_MS = 5e3;
 var CLAUDE_DIR = claudeBackend.projectsDir();
 var PLANS_DIR = claudeBackend.plansDir();
@@ -24288,7 +23901,7 @@ async function shipToServer(trigger) {
       );
     }
     for (const [server, outcome] of Object.entries(result.perTarget ?? {})) {
-      noteSyncOutcome(server, outcome.ok, outcome.error);
+      noteSyncOutcome(server, outcome.ok, outcome.error, outcome.accepted ?? 0);
     }
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -24556,6 +24169,9 @@ setTimeout(() => {
 setInterval(() => {
   ticks.request("housekeeping", TICK_PRIORITY.housekeeping, shadowPruneTick);
 }, SHADOW_PRUNE_MS).unref();
+function _targetHealth() {
+  return targetHealth;
+}
 function syncTargetUrls() {
   try {
     return loadAllCredentials().map((c) => c.serverUrl);
@@ -24563,17 +24179,8 @@ function syncTargetUrls() {
     return [];
   }
 }
-function noteSyncOutcome(server, ok, err) {
-  const t = targetHealth[server] ?? { lastOkAt: null, failures: 0 };
-  if (ok) {
-    t.lastOkAt = Date.now();
-    t.failures = 0;
-    delete t.lastError;
-  } else {
-    t.failures += 1;
-    t.lastError = (err ?? "unknown error").slice(0, 160);
-  }
-  targetHealth[server] = t;
+function noteSyncOutcome(server, ok, err, accepted = 0) {
+  targetHealth[server] = applySyncOutcome(targetHealth[server], { ok, accepted, error: err });
   publishHealth();
 }
 publishHealth();
@@ -24834,3 +24441,7 @@ process.on("exit", () => {
   } catch {
   }
 });
+export {
+  _targetHealth,
+  noteSyncOutcome
+};