chat-recall 0.6.9 → 0.7.1

package/dist/cli.js

@@ -4549,6 +4549,25 @@ var init_paths = __esm({
   }
 });
 
+// ../engine/dist/parsers/banners.js
+function stripInjectedBanners(text) {
+  let result = text;
+  for (const re of INJECTED_BANNERS)
+    result = result.replace(re, " ");
+  return result;
+}
+var INJECTED_BANNERS;
+var init_banners = __esm({
+  "../engine/dist/parsers/banners.js"() {
+    "use strict";
+    INJECTED_BANNERS = [
+      /MCP issues detected\. ?Run \/mcp list for status\.?/g,
+      /Context low[^\n]*Run \/compact[^\n]*/g,
+      /API Error:[^\n]{0,120}/g
+    ];
+  }
+});
+
 // ../engine/dist/core/project-path-match.js
 function canonicalProjectPath(p) {
   return (p || "").trim().replace(/\\/g, "/").replace(/[-_]/g, "/").replace(/\/{2,}/g, "/").replace(/\/+$/, "").toLowerCase();
@@ -5083,866 +5102,247 @@ var init_settings = __esm({
   }
 });
 
-// ../engine/dist/core/secret-redactor.js
-var secret_redactor_exports = {};
-__export(secret_redactor_exports, {
-  DEFAULT_REDACTION_RULES: () => DEFAULT_REDACTION_RULES,
-  _clearServerRulePack: () => _clearServerRulePack,
-  _resetPrivacyCache: () => _resetPrivacyCache,
-  _resetRedactorCache: () => _resetRedactorCache,
-  applyChunkPrivacy: () => applyChunkPrivacy,
-  findContextualSecrets: () => findContextualSecrets,
-  installServerRulePack: () => installServerRulePack,
-  isFilePathRedactionEnabled: () => isFilePathRedactionEnabled,
-  isRedactionEnabled: () => isRedactionEnabled,
-  isToolOutputRedactionEnabled: () => isToolOutputRedactionEnabled,
-  redactFilePaths: () => redactFilePaths,
-  redactSecrets: () => redactSecrets,
-  redactToolResultBody: () => redactToolResultBody,
-  scanTextForFindings: () => scanTextForFindings,
-  serverRulePackVersion: () => serverRulePackVersion,
-  validateRedactionRule: () => validateRedactionRule
+// ../engine/dist/core/home-approval.js
+var home_approval_exports = {};
+__export(home_approval_exports, {
+  approveHome: () => approveHome,
+  declineHome: () => declineHome,
+  grandfatherLegacyHomes: () => grandfatherLegacyHomes,
+  homeDecision: () => homeDecision,
+  isHomeSynced: () => isHomeSynced,
+  normalizeHomePath: () => normalizeHomePath,
+  resetHomeDecision: () => resetHomeDecision
 });
-import { statSync as statSync3 } from "fs";
-import { createHash } from "crypto";
-function secretOf(rule, m) {
-  const raw = rule.secret != null ? m[rule.secret] : m[0];
-  if (raw == null)
-    return null;
-  if (rule.where && !rule.where(raw))
-    return null;
-  return raw;
-}
-function looksLikeSecretToken(t) {
-  if (t.length < 32)
-    return false;
-  if (/^[a-f0-9]+$/i.test(t))
-    return true;
-  return /[A-Z]/.test(t) && /[a-z]/.test(t) && /[0-9]/.test(t);
-}
-function findContextualSecrets(text) {
-  if (!text)
-    return [];
-  const ranges = [];
-  let m;
-  SECRET_CONTEXT_RE.lastIndex = 0;
-  while ((m = SECRET_CONTEXT_RE.exec(text)) !== null) {
-    const winStart = m.index + m[0].length;
-    const window = text.slice(winStart, winStart + 80);
-    HIGH_ENTROPY_TOKEN_RE.lastIndex = 0;
-    let tm;
-    while ((tm = HIGH_ENTROPY_TOKEN_RE.exec(window)) !== null) {
-      if (!looksLikeSecretToken(tm[0]))
-        continue;
-      if (/^[a-f0-9]+$/i.test(tm[0]) && /\b(?:commit|sha-?\d*|hash|digest|checksum|uuid|guid|etag|blob|ref)\b/i.test(window.slice(0, tm.index))) {
-        continue;
-      }
-      ranges.push({ start: winStart + tm.index, end: winStart + tm.index + tm[0].length });
-      break;
-    }
+import { existsSync as existsSync3, readdirSync as readdirSync2, realpathSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join3, dirname as dirname3 } from "path";
+function normalizeHomePath(p) {
+  const expanded = p.startsWith("~") ? join3(homedir2(), p.slice(1)) : p;
+  const trimmed = expanded.replace(/[/\\]+$/, "");
+  try {
+    return realpathSync(trimmed);
+  } catch {
+    return trimmed;
   }
-  ranges.sort((a, b) => a.start - b.start);
+}
+function legacyAutoSyncedHomes() {
+  const home = homedir2();
   const out = [];
-  for (const r of ranges) {
-    const last = out[out.length - 1];
-    if (last && r.start < last.end) {
-      last.end = Math.max(last.end, r.end);
-      continue;
+  const add = (dir, marker) => {
+    if (!existsSync3(join3(dir, marker)))
+      return;
+    const n = normalizeHomePath(dir);
+    if (!out.includes(n))
+      out.push(n);
+  };
+  const bases = [
+    { base: join3(home, ".claude"), marker: "projects" },
+    { base: join3(home, ".gemini"), marker: "tmp" },
+    { base: join3(home, ".codex"), marker: "sessions" },
+    { base: join3(home, ".gemini", "antigravity-cli"), marker: "brain" },
+    { base: join3(home, ".local", "share", "opencode"), marker: "opencode.db" },
+    { base: join3(home, ".cursor"), marker: "chats" }
+  ];
+  for (const { base: base3, marker } of bases) {
+    add(base3, marker);
+    const parent = dirname3(base3);
+    const leaf = base3.slice(parent.length + 1);
+    try {
+      for (const e of readdirSync2(parent, { withFileTypes: true })) {
+        if (!e.isDirectory())
+          continue;
+        if (e.name === leaf || !e.name.startsWith(leaf + "-"))
+          continue;
+        if (e.name === ".claude-code")
+          continue;
+        add(join3(parent, e.name), marker);
+      }
+    } catch {
     }
-    out.push({ ...r });
   }
   return out;
 }
-function isEnvRedactionRequested() {
-  const v = process.env.CHAT_RECALL_REDACT_INDEX;
-  if (v === void 0)
-    return null;
-  return v === "1" || v === "true" || v === "yes";
-}
-function settingsView() {
-  let mtimeMs = -1;
+function grandfatherLegacyHomes() {
+  let s;
   try {
-    mtimeMs = statSync3(settingsFilePath()).mtimeMs;
+    s = loadSettings();
   } catch {
+    return { seeded: [] };
   }
-  if (cache && cache.mtimeMs === mtimeMs)
-    return cache;
-  let enabled = false;
-  const extra = [];
-  try {
-    const s = loadSettings();
-    enabled = !!s.privacy?.redactIndex;
-    for (const r of s.privacy?.redactionRules ?? []) {
-      try {
-        extra.push({ label: r.label, pattern: new RegExp(r.pattern, "g") });
-      } catch {
-      }
+  if (s.sources.homesGrandfathered)
+    return { seeded: [] };
+  const legacy = legacyAutoSyncedHomes();
+  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
+  const seeded = [];
+  for (const p of legacy) {
+    if (!approved.has(p)) {
+      approved.add(p);
+      seeded.push(p);
     }
+  }
+  s.sources.approvedHomes = [...approved];
+  s.sources.homesGrandfathered = true;
+  try {
+    saveSettings(s);
   } catch {
+    return { seeded: [] };
   }
-  cache = { mtimeMs, enabled, rules: [...DEFAULT_REDACTION_RULES, ...extra] };
-  return cache;
+  return { seeded };
 }
-function compileServerRule(spec) {
-  const name = spec.name || "(unnamed)";
-  if (!spec.regex)
-    return { name, reason: "empty pattern" };
-  if (spec.regex.length > MAX_PATTERN_LEN)
-    return { name, reason: `pattern longer than ${MAX_PATTERN_LEN} chars` };
-  let re;
+function primaryHomes() {
+  const home = homedir2();
+  const env = process.env;
+  let s;
   try {
-    const flags = "g" + (spec.flags || "").replace(/[^ims]/g, "");
-    re = new RegExp(spec.regex, flags);
-  } catch (e) {
-    return { name, reason: `invalid regex: ${e instanceof Error ? e.message : e}` };
+    s = loadSettings().sources;
+  } catch {
+    s = void 0;
   }
-  if (re.test(""))
-    return { name, reason: "matches the empty string (would redact everything)" };
-  re.lastIndex = 0;
-  if (re.test(CANARY))
-    return { name, reason: "matches benign text \u2014 too broad" };
-  re.lastIndex = 0;
-  return { label: `${spec.source === "pack" ? "pack" : "tenant"}:${name}`, pattern: re };
-}
-function validateRedactionRule(spec) {
-  const out = compileServerRule(spec);
-  return "reason" in out ? { ok: false, reason: out.reason } : { ok: true };
+  const opencodeDb = env.CHAT_RECALL_OPENCODE_DB || s?.opencodeDbPath || join3(home, ".local", "share", "opencode", "opencode.db");
+  const candidates2 = [
+    env.CHAT_RECALL_CLAUDE_HOME || s?.claudeHome || join3(home, ".claude"),
+    env.CHAT_RECALL_GEMINI_HOME || s?.geminiHome || join3(home, ".gemini"),
+    env.CHAT_RECALL_CODEX_HOME || s?.codexHome || join3(home, ".codex"),
+    env.CHAT_RECALL_AGY_HOME || s?.agyHome || join3(home, ".gemini", "antigravity-cli"),
+    env.CHAT_RECALL_CURSOR_HOME || s?.cursorHome || join3(home, ".cursor"),
+    dirOf(opencodeDb)
+  ];
+  return candidates2.map(normalizeHomePath);
 }
-function installServerRulePack(pack) {
-  const rejected = [];
-  const rules = [];
-  for (const spec of pack.rules || []) {
-    if (rules.length >= MAX_PACK_RULES) {
-      rejected.push({ name: spec.name || "(unnamed)", reason: `pack exceeds ${MAX_PACK_RULES} rules` });
-      continue;
-    }
-    const out = compileServerRule(spec);
-    if ("reason" in out)
-      rejected.push(out);
-    else
-      rules.push(out);
+function homeDecision(path) {
+  const p = normalizeHomePath(path);
+  if (primaryHomes().includes(p))
+    return "primary";
+  let s;
+  try {
+    s = loadSettings().sources;
+  } catch {
+    return "pending";
   }
-  const version2 = pack.version || "";
-  serverPack = { version: version2, rules };
-  return { version: version2, accepted: rules.length, rejected };
-}
-function serverRulePackVersion() {
-  return serverPack ? serverPack.version || "unversioned" : null;
-}
-function _clearServerRulePack() {
-  serverPack = null;
+  if ((s.declinedHomes ?? []).map(normalizeHomePath).includes(p))
+    return "declined";
+  if ((s.approvedHomes ?? []).map(normalizeHomePath).includes(p))
+    return "approved";
+  if ((s.extraClaudeHomes ?? []).map(normalizeHomePath).includes(p))
+    return "approved";
+  return "pending";
 }
-function activeRules() {
-  const base3 = settingsView().rules;
-  return serverPack && serverPack.rules.length > 0 ? [...base3, ...serverPack.rules] : base3;
+function isHomeSynced(path) {
+  const d = homeDecision(path);
+  return d === "primary" || d === "approved";
 }
-function isRedactionEnabled() {
-  const env = isEnvRedactionRequested();
-  if (env !== null)
-    return env;
-  return settingsView().enabled;
+function setDecision(path, decision) {
+  const p = normalizeHomePath(path);
+  let s;
+  try {
+    s = loadSettings();
+  } catch {
+    return false;
+  }
+  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
+  const declined = new Set((s.sources.declinedHomes ?? []).map(normalizeHomePath));
+  approved.delete(p);
+  declined.delete(p);
+  (decision === "approved" ? approved : declined).add(p);
+  s.sources.approvedHomes = [...approved];
+  s.sources.declinedHomes = [...declined];
+  try {
+    saveSettings(s);
+  } catch {
+    return false;
+  }
+  return true;
 }
-function _resetRedactorCache() {
-  cache = null;
+function approveHome(path) {
+  return setDecision(path, "approved");
 }
-function redactSecrets(text, opts = {}) {
-  if (!opts.force && !isRedactionEnabled())
-    return text;
-  if (!text)
-    return text;
-  const rules = opts.rules || activeRules();
-  let out = text;
-  for (const r of rules) {
-    out = out.replace(r.pattern, (...args) => {
-      const whole = args[0];
-      const m = args.slice(0, args.length);
-      const secret = secretOf(r, m);
-      if (secret == null)
-        return whole;
-      if (opts.count)
-        opts.count.redactions++;
-      return whole.slice(0, whole.length - secret.length) + `[REDACTED:${r.label}]`;
-    });
+function declineHome(path) {
+  return setDecision(path, "declined");
+}
+function resetHomeDecision(path) {
+  const p = normalizeHomePath(path);
+  let s;
+  try {
+    s = loadSettings();
+  } catch {
+    return false;
   }
-  const ctx = findContextualSecrets(out);
-  for (let i = ctx.length - 1; i >= 0; i--) {
-    const { start, end } = ctx[i];
-    if (opts.count)
-      opts.count.redactions++;
-    out = out.slice(0, start) + "[REDACTED:secret-context]" + out.slice(end);
+  s.sources.approvedHomes = (s.sources.approvedHomes ?? []).filter((x) => normalizeHomePath(x) !== p);
+  s.sources.declinedHomes = (s.sources.declinedHomes ?? []).filter((x) => normalizeHomePath(x) !== p);
+  try {
+    saveSettings(s);
+  } catch {
+    return false;
   }
-  return out;
-}
-function maskSecret(s) {
-  if (!s)
-    return "";
-  if (s.length <= 4)
-    return "*".repeat(s.length);
-  return "*".repeat(Math.min(s.length - 4, 60)) + s.slice(-4);
+  return true;
 }
-function globalRegexFor(pattern) {
-  const flags = pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g";
-  const key2 = pattern.source + "\0" + flags;
-  let re = globalRegexCache.get(key2);
-  if (!re) {
-    re = new RegExp(pattern.source, flags);
-    globalRegexCache.set(key2, re);
+var dirOf;
+var init_home_approval = __esm({
+  "../engine/dist/core/home-approval.js"() {
+    "use strict";
+    init_settings();
+    dirOf = (filePath) => dirname3(filePath);
   }
-  return re;
+});
+
+// ../engine/dist/core/tool-paths.js
+import { existsSync as existsSync4, readdirSync as readdirSync3 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join4, dirname as dirname4, basename } from "path";
+function claudeHomeDir() {
+  return process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome || join4(homedir3(), ".claude");
 }
-function makeLineResolver(text) {
-  const starts = [];
-  for (let i = text.indexOf("\n"); i !== -1; i = text.indexOf("\n", i + 1))
-    starts.push(i);
-  return (index) => {
-    let lo = 0, hi = starts.length;
-    while (lo < hi) {
-      const mid = lo + hi >> 1;
-      if (starts[mid] < index)
-        lo = mid + 1;
-      else
-        hi = mid;
-    }
-    return lo + 1;
+function claudeProjectDirs(opts = {}) {
+  const home = homedir3();
+  const dirs = [];
+  const addHome = (d) => {
+    const p = join4(d, "projects");
+    if (existsSync4(p) && !dirs.includes(p))
+      dirs.push(p);
   };
-}
-function scanTextForFindings(text, opts = {}) {
-  if (!text)
-    return [];
-  const rules = opts.rules || activeRules();
-  const findings = [];
-  const seenSpans = /* @__PURE__ */ new Set();
-  const lineAt = makeLineResolver(text);
-  for (const r of rules) {
-    const re = globalRegexFor(r.pattern);
-    re.lastIndex = 0;
-    let m;
-    while ((m = re.exec(text)) !== null) {
-      const secret = secretOf(r, m);
-      if (secret == null) {
-        if (re.lastIndex === m.index)
-          re.lastIndex++;
-        continue;
-      }
-      const at = m.index + (m[0].length - secret.length);
-      const span = `${at}:${secret.length}`;
-      if (!seenSpans.has(span)) {
-        seenSpans.add(span);
-        findings.push({ rule: r.label, line: lineAt(at), preview: maskSecret(secret) });
+  addHome(claudeHomeDir());
+  const homeOverridden = !!(process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome);
+  if (!homeOverridden) {
+    try {
+      for (const entry of readdirSync3(home, { withFileTypes: true })) {
+        if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
+          addHome(join4(home, entry.name));
+        }
       }
-      if (re.lastIndex === m.index)
-        re.lastIndex++;
+    } catch {
     }
   }
-  for (const { start, end } of findContextualSecrets(text)) {
-    const line = lineAt(start);
-    findings.push({ rule: "secret-context", line, preview: maskSecret(text.slice(start, end)) });
+  if (process.env.CLAUDE_DIRS) {
+    for (const d of process.env.CLAUDE_DIRS.split(",")) {
+      const t = d.trim();
+      if (t)
+        addHome(t.startsWith("~/") ? join4(home, t.slice(2)) : t);
+    }
   }
-  return findings;
+  if (dirs.length === 0)
+    dirs.push(join4(claudeHomeDir(), "projects"));
+  return applyDecisions(dirs, opts.includeExcluded);
 }
-function privacyView() {
-  let mtimeMs = -1;
-  try {
-    mtimeMs = statSync3(settingsFilePath()).mtimeMs;
-  } catch {
-  }
-  if (privacyCache && privacyCache.mtimeMs === mtimeMs)
-    return privacyCache;
-  let redactToolOutputs = false, redactFilePaths2 = false;
-  try {
-    const s = loadSettings();
-    redactToolOutputs = !!s.privacy?.redactToolOutputs;
-    redactFilePaths2 = !!s.privacy?.redactFilePaths;
-  } catch {
-  }
-  privacyCache = { mtimeMs, redactToolOutputs, redactFilePaths: redactFilePaths2 };
-  return privacyCache;
+function _setSourceExclusionFilter(fn) {
+  _sourceExclusionFilter = fn;
 }
-function _resetPrivacyCache() {
-  privacyCache = null;
+function geminiHomeDir() {
+  return process.env.CHAT_RECALL_GEMINI_HOME || sources().geminiHome || join4(homedir3(), ".gemini");
 }
-function isToolOutputRedactionEnabled() {
-  return privacyView().redactToolOutputs;
+function opencodeDbPath() {
+  return process.env.CHAT_RECALL_OPENCODE_DB || sources().opencodeDbPath || join4(homedir3(), ".local", "share", "opencode", "opencode.db");
 }
-function isFilePathRedactionEnabled() {
-  return privacyView().redactFilePaths;
+function codexHomeDir() {
+  return process.env.CHAT_RECALL_CODEX_HOME || sources().codexHome || join4(homedir3(), ".codex");
 }
-function redactFilePaths(text) {
-  if (!text)
-    return text;
-  return text.replace(PATH_REGEX, (m) => {
-    if (m.startsWith("[REDACTED:"))
-      return m;
-    const h = createHash("sha256").update(m).digest("hex").slice(0, 12);
-    return `[path:${h}]`;
-  });
+function agyHomeDir() {
+  return process.env.CHAT_RECALL_AGY_HOME || sources().agyHome || join4(homedir3(), ".gemini", "antigravity-cli");
 }
-function applyChunkPrivacy(text) {
-  let out = redactSecrets(text);
-  if (privacyView().redactFilePaths)
-    out = redactFilePaths(out);
-  return out;
+function cursorHomeDir() {
+  return process.env.CHAT_RECALL_CURSOR_HOME || sources().cursorHome || join4(homedir3(), ".cursor");
 }
-function redactToolResultBody(toolName, body) {
-  if (!body)
-    return body;
-  return `[redacted: ${toolName} output, ${body.length} chars]`;
-}
-var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, globalRegexCache, privacyCache, PATH_REGEX;
-var init_secret_redactor = __esm({
-  "../engine/dist/core/secret-redactor.js"() {
-    "use strict";
-    init_settings();
-    DEFAULT_REDACTION_RULES = [
-      // AWS access tokens. Prefix-anchored: AKIA, ASIA, ABIA (long-term,
-      // STS, EC2). Always exactly 16 hex/alphanumeric after the prefix.
-      // NOTE: this matches only the access-key-ID, NOT the secret key value —
-      // the `env-secret` rule below covers AWS_SECRET_ACCESS_KEY / AWS_SESSION_TOKEN.
-      { label: "aws-access-token", pattern: /\b(?:AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}\b/g },
-      // AWS STS session tokens. These are long base64 blobs with NO `NAME=` context
-      // when pasted bare into prose/code, so `env-secret` misses them — but they
-      // reliably start with one of a handful of base64 prefixes (the encoded
-      // `{"...` JSON header). Prefix-anchored → low false-positive. This is the
-      // bare-value form that leaked (`search('IQoJEXAMPLEfakeSESSIONtokenNOTreal01234567890abcDEF==...')`).
-      { label: "aws-session-token", pattern: /\b(?:IQoJ|FwoG|FwoH|FQoG|FQoH|FwoD)[A-Za-z0-9/+]{40,}={0,2}/g },
-      // Env/shell-assignment secrets — a VAR whose name ends in KEY/SECRET/TOKEN/
-      // PASSWORD/CREDENTIAL, then `=`/`:`, then the value. Zero-width lookbehind so
-      // only the VALUE is redacted (the var name stays for context). This is the
-      // dominant real-world leak vector (`export` dumps, .env files, `curl -H`,
-      // tool output) and is exactly what leaked AWS_SECRET_ACCESS_KEY and
-      // AWS_SESSION_TOKEN in cleartext while the access-key-ID rule above caught
-      // only the (least-sensitive) ID.
-      // Suffix list deliberately broad: DB_PASS (our own helm chart's name!),
-      // NPM_AUTH, SENTRY_DSN, SESSION/COOKIE secrets and BEARER vars all leaked
-      // past the original KEY/SECRET/TOKEN/PASSWORD-only list. Values under 12
-      // chars don't redact, so flag-ish vars (BYPASS=true) stay readable.
-      // Context CONSUMED, secret in group 1 — see RedactionRule.secret. As a
-      // lookbehind this was the second most expensive rule in the collector.
-      { label: "env-secret", secret: 1, pattern: /\b[A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASSWORD|PASSWD|PASS|PWD|CREDENTIAL|AUTH|DSN|SESSION|COOKIE|BEARER|SIGNATURE)S?["']?[ \t]{0,3}[:=][ \t]{0,3}["']?([A-Za-z0-9/+_.~=:@-]{12,})/g },
-      // Credentials embedded in a connection URL: scheme://user:PASSWORD@host.
-      // Redacts only the password segment (keeps scheme/user/host for context).
-      //
-      // Scheme-agnostic on purpose. The old rule allowlisted eight DB schemes, so
-      // `https://user:pass@host`, `ssh://`, `ftp://`, `smtp://` and every other
-      // userinfo URL walked through in cleartext — and a `jdbc:postgresql://…`
-      // prefix broke the \b anchor for the one family it did cover. Any scheme
-      // followed by userinfo is a credential, so match the shape, not a list.
-      { label: "url-password", secret: 1, pattern: /\b[a-zA-Z][a-zA-Z0-9+.-]{1,31}:\/\/[^:@\s/]{1,64}:([^@\s/]{1,256})(?=@)/g },
-      // Bare AWS secret-access-key VALUE: EXACTLY 40 base64 chars, word-bounded,
-      // containing upper+lower+digit. This is the gitleaks heuristic — the mixed-case
-      // requirement excludes 40-char lowercase-hex git SHAs, and the exact-40 bound
-      // excludes longer blobs/tokens. It catches the value when it appears bare in
-      // prose with NO `NAME=` and NO nearby context word (e.g. inside a markdown
-      // table or quoted in analysis) — the residual leak path the env-secret and
-      // contextual rules both miss. Placed AFTER env-secret/url-password so the
-      // keyed/URL forms keep their more-specific labels.
-      // The three stacked lookaheads each re-scanned the same 40 characters, which
-      // made this the MOST expensive rule of all 106 the collector runs (13.1% of a
-      // 29.5 MB scan). The mixed-case-plus-digit test is now one JS pass.
-      {
-        label: "aws-secret-key",
-        secret: 1,
-        pattern: /(?<![A-Za-z0-9/+])([A-Za-z0-9/+]{40})(?![A-Za-z0-9/+])/g,
-        where: (v) => /[a-z]/.test(v) && /[A-Z]/.test(v) && /[0-9]/.test(v)
-      },
-      // GitHub personal access tokens.
-      { label: "github-pat", pattern: /\bghp_[A-Za-z0-9]{36}\b/g },
-      // GitHub fine-grained PATs.
-      { label: "github-fine", pattern: /\bgithub_pat_[A-Za-z0-9_]{82}\b/g },
-      // GitHub OAuth.
-      { label: "github-oauth", pattern: /\bgho_[A-Za-z0-9]{36}\b/g },
-      // GitHub app + refresh.
-      { label: "github-app", pattern: /\b(?:ghs|ghu|ghr)_[A-Za-z0-9]{36}\b/g },
-      // Slack bot/user/app tokens.
-      { label: "slack-token", pattern: /\bxox[abopr]-[A-Za-z0-9-]{10,}\b/g },
-      // Slack incoming webhook URL.
-      { label: "slack-webhook", pattern: /\bhttps:\/\/hooks\.slack\.com\/services\/T[A-Z0-9]+\/B[A-Z0-9]+\/[A-Za-z0-9]+\b/g },
-      // Stripe live + test keys.
-      { label: "stripe-key", pattern: /\b(?:sk|pk|rk)_(?:live|test)_[A-Za-z0-9]{24,}\b/g },
-      // Anthropic.
-      { label: "anthropic-key", pattern: /\bsk-ant-[a-zA-Z0-9_-]{40,}\b/g },
-      // OpenAI. Two shapes, deliberately kept apart. The classic key is
-      // `sk-` + base62 with NO hyphens; the modern scoped keys carry an explicit
-      // proj/svcacct/admin segment first. Allowing hyphens after a bare `sk-`
-      // (which is what admitted sk-proj- in the first place) also matches ordinary
-      // kebab-case text — `sk-fix-the-login-redirect-bug`, `.sk-button-primary`,
-      // `sk-2024-01-01-backup` — and this corpus is full of branch names and CSS
-      // classes. Requiring the segment keeps sk-proj- coverage without that.
-      { label: "openai-key", pattern: /\bsk-(?:proj|svcacct|admin)-[A-Za-z0-9_-]{20,}\b|\bsk-[A-Za-z0-9]{20,}\b/g },
-      // Google API key (AIza…).
-      { label: "google-api-key", pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g },
-      // Generic JWT — three base64url segments.
-      { label: "jwt", pattern: /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g },
-      // Private key blocks (PEM). The label is a free word run rather than a fixed
-      // list, so ENCRYPTED PRIVATE KEY and PGP PRIVATE KEY BLOCK are covered
-      // without another enumeration, and \1 forces END to name the same kind as
-      // BEGIN.
-      //
-      // The body is [^-], NOT [\s\S]*?. That is a performance boundary, not a
-      // style choice. An unanchored prefix with an unbounded lazy gap re-scans to
-      // end-of-input from every candidate start, so text carrying many BEGIN
-      // markers and no matching END costs O(n^2): 500KB of that measured 810ms
-      // here, and this runs synchronously on the server's event loop over
-      // tenant-supplied text (services/secret-rescan.ts). A PEM body is base64
-      // plus headers and contains no '-', so excluding it makes the scan stop at
-      // the next delimiter instead of at EOF — same matches, linear cost.
-      { label: "private-key", pattern: /-----BEGIN ([A-Z0-9 ]{0,32})PRIVATE KEY(?: BLOCK)?-----[^-]{0,10000}?-----END \1PRIVATE KEY(?: BLOCK)?-----/g },
-      // PuTTY keys are not PEM. Match the Private-Lines payload — the actual key
-      // material — rather than spanning the whole file, which would need the same
-      // unbounded gap the rule above just removed. Line-anchored and base64-only,
-      // so it cannot run away.
-      { label: "putty-key", pattern: /^Private-Lines:[ \t]*\d{1,4}[\r\n]+(?:[A-Za-z0-9+/=]{8,120}[\r\n]+){1,400}/gm },
-      // npm tokens (uuid-shaped — overlap with our UUID filter; intentional).
-      { label: "npm-token", pattern: /\bnpm_[A-Za-z0-9]{36}\b/g },
-      // .npmrc auth lines: //registry.npmjs.org/:_authToken=VALUE (the key is not
-      // ALL-CAPS, so the env-secret rule above never matched it). The leading `:`
-      // is required — it is what makes this npmrc syntax rather than any shell var
-      // ending in _AUTH, which env-secret already owns and labels better.
-      // [^\s"'`]+ so the closing quote is not swallowed, and a ${VAR} placeholder
-      // is left alone — redacting it destroys a config example and hides nothing.
-      // The rule the perf profile caught the wedged daemon inside: 98.94% of samples.
-      { label: "npmrc-auth", secret: 1, pattern: /:_(?:authToken|password|auth)[ \t]*=[ \t]*(?!\$\{)([^\s"'`]{12,})/gi },
-      // HTTP Authorization headers. env-secret requires an ALL-CAPS name, and
-      // `Authorization` is mixed case, so both Bearer and Basic walked straight
-      // through — including short opaque tokens the contextual pass also misses
-      // (it needs 32+ chars AND mixed-case-plus-digit).
-      // Same two guards as npmrc-auth: stop at a quote, and skip the obvious
-      // placeholders that fill documentation (<YOUR_TOKEN>, ${TOKEN}, xxx…).
-      { label: "auth-header", secret: 1, pattern: /\bauthorization[ \t]*:[ \t]*(?:bearer|basic|token)[ \t]+(?![<$])([^\s"'`<]{8,})/gi },
-      // Vendor tokens with unambiguous prefixes. Each is a fixed literal, so a
-      // false positive is essentially impossible and the cost of listing is low.
-      { label: "gitlab-pat", pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g },
-      { label: "slack-app-token", pattern: /\bxapp-\d-[A-Z0-9]{8,}-\d{10,}-[a-f0-9]{32,}\b/g },
-      { label: "sendgrid-key", pattern: /\bSG\.[A-Za-z0-9_-]{20,24}\.[A-Za-z0-9_-]{40,50}\b/g },
-      // (?<![-\w]) so `cache-key-<md5>` is not read as a mailgun key.
-      { label: "mailgun-key", pattern: /(?<![-\w])key-[a-f0-9]{32}\b/g },
-      { label: "digitalocean-pat", pattern: /\bdop_v1_[a-f0-9]{64}\b/g },
-      { label: "huggingface-token", pattern: /\bhf_[A-Za-z0-9]{30,}\b/g },
-      { label: "shopify-token", pattern: /\bshp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}\b/g },
-      { label: "pypi-token", pattern: /\bpypi-AgEIcHlwaS5vcmc[A-Za-z0-9_-]{50,}\b/g },
-      // No twilio-sid rule: AC…/SK… are Twilio SIDs, which are public account and
-      // key identifiers, not the auth token. Redacting them hid nothing and
-      // collided with 32-hex etags and MD5 sums.
-      // No discord-bot-token rule either: the shape (word.word.word) matched
-      // ordinary dotted symbols such as a.b.ApplicationContextProviderImpl.
-      { label: "telegram-bot-token", pattern: /\b\d{8,10}:AA[A-Za-z0-9_-]{32,}\b/g },
-      { label: "doppler-token", pattern: /\bdp\.(?:pt|st|sa|ct)\.[A-Za-z0-9_-]{20,}\b/g },
-      // Azure Storage SAS signature — the `sig=` parameter is the actual secret.
-      { label: "azure-sas", secret: 1, pattern: /[?&]sig=([A-Za-z0-9%/+=]{20,})/g }
-    ];
-    SECRET_CONTEXT_RE = /\b(?:secret|password|passwd|credential|access[ _-]?key|private[ _-]?key|api[ _-]?key|auth(?:oriz\w*)?|bearer|token)\b/gi;
-    HIGH_ENTROPY_TOKEN_RE = /[A-Za-z0-9/+_-]{32,}/g;
-    cache = null;
-    CANARY = "the quick brown fox jumps over the lazy dog 0123456789 commit 8ba1f109551bd432803012645ac136ddd475d0fb src/index.ts:42";
-    MAX_PACK_RULES = 200;
-    MAX_PATTERN_LEN = 512;
-    serverPack = null;
-    globalRegexCache = /* @__PURE__ */ new Map();
-    privacyCache = null;
-    PATH_REGEX = /(?<![A-Za-z0-9_])(?:\/[^\s'"`<>]+|[A-Za-z]:\\[^\s'"`<>]+)/g;
-  }
-});
-
-// ../engine/dist/parsers/chunker.js
-function stripInjectedBanners(text) {
-  let result = text;
-  for (const re of INJECTED_BANNERS)
-    result = result.replace(re, " ");
-  return result;
-}
-function cleanText(text) {
-  let result = text.replace(/<system-reminder>.*?<\/system-reminder>/gs, "");
-  result = stripInjectedBanners(result);
-  result = result.replace(/\x1b\[[0-9;]*m/g, "");
-  result = result.replace(/\s+/g, " ");
-  return result.trim();
-}
-function windowText(text, maxChars, maxWindows = 12) {
-  const clean = cleanText(text);
-  if (clean.length <= maxChars)
-    return clean ? [clean] : [];
-  const out = [];
-  const overlap = 80;
-  const step = Math.max(1, maxChars - overlap);
-  for (let i = 0; i < clean.length && out.length < maxWindows; i += step) {
-    out.push(clean.slice(i, i + maxChars));
-  }
-  return out;
-}
-function chunkSession(entry, content, maxChunks = 80, maxTokensPerChunk = 500) {
-  const chunks = [];
-  const maxChars = maxTokensPerChunk * 4;
-  const baseData = {
-    sessionId: entry.sessionId,
-    projectPath: entry.projectPath,
-    created: entry.created,
-    modified: entry.modified,
-    mtime: entry.fileMtime,
-    firstPrompt: entry.firstPrompt || content.firstPrompt,
-    sourceFile: content.sessionPath
-  };
-  for (let i = 0; i < Math.min(2, content.summaries.length); i++) {
-    const summary = content.summaries[i];
-    if (!summary?.trim())
-      continue;
-    const chunkText = cleanText(summary.slice(0, maxChars));
-    if (chunkText.length > 8e3) {
-      chunks.push({
-        chunkId: `${entry.sessionId}_summary_${i}`,
-        chunkType: "summary",
-        text: chunkText.slice(0, 8e3),
-        sourceLine: 0,
-        ...baseData
-      });
-    } else {
-      chunks.push({
-        chunkId: `${entry.sessionId}_summary_${i}`,
-        chunkType: "summary",
-        text: chunkText,
-        sourceLine: 0,
-        ...baseData
-      });
-    }
-  }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
-  }
-  const firstPrompt = entry.firstPrompt || content.firstPrompt;
-  if (firstPrompt?.trim()) {
-    const firstLine = content.userMessages[0]?.lineNumber || 0;
-    chunks.push({
-      chunkId: `${entry.sessionId}_first_prompt`,
-      chunkType: "first_prompt",
-      text: cleanText(firstPrompt.slice(0, maxChars)),
-      sourceLine: firstLine,
-      ...baseData
-    });
-  }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
-  }
-  const userStart = firstPrompt ? 1 : 0;
-  for (let i = userStart; i < content.userMessages.length; i++) {
-    if (chunks.length >= maxChunks)
-      break;
-    const msg = content.userMessages[i];
-    if (!msg.text.trim())
-      continue;
-    const windows = windowText(msg.text, maxChars);
-    for (let w = 0; w < windows.length; w++) {
-      if (chunks.length >= maxChunks)
-        break;
-      chunks.push({
-        chunkId: `${entry.sessionId}_user_${i}_${w}`,
-        chunkType: "user_context",
-        text: windows[w],
-        sourceLine: msg.lineNumber,
-        ...baseData
-      });
-    }
-  }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
-  }
-  for (let i = 0; i < content.assistantMessages.length; i++) {
-    if (chunks.length >= maxChunks)
-      break;
-    const msg = content.assistantMessages[i];
-    if (!msg.text.trim() || msg.text.length <= 50)
-      continue;
-    const windows = windowText(msg.text, maxChars);
-    for (let w = 0; w < windows.length; w++) {
-      if (chunks.length >= maxChunks)
-        break;
-      chunks.push({
-        chunkId: `${entry.sessionId}_assistant_${i}_${w}`,
-        chunkType: "assistant",
-        text: windows[w],
-        sourceLine: msg.lineNumber,
-        ...baseData
-      });
-    }
-  }
-  if (chunks.length >= maxChunks) {
-    return chunks.slice(0, maxChunks);
-  }
-  if (content.toolResults.length > 0) {
-    const webSearches = content.toolResults.filter((r) => r.contentType === "web_search");
-    const otherResults = content.toolResults.filter((r) => r.contentType !== "web_search");
-    const resultsToProcess = [...webSearches.slice(0, 5), ...otherResults.slice(0, 10)];
-    const stripBodies = isToolOutputRedactionEnabled();
-    for (let i = 0; i < resultsToProcess.length; i++) {
-      if (chunks.length >= maxChunks)
-        break;
-      const result = resultsToProcess[i];
-      if (result.text.trim()) {
-        const body = stripBodies && result.contentType !== "web_search" ? redactToolResultBody(result.contentType, result.text) : result.text.slice(0, maxChars);
-        chunks.push({
-          chunkId: `${entry.sessionId}_${result.contentType}_${i}`,
-          chunkType: result.contentType,
-          text: cleanText(body),
-          sourceLine: result.lineNumber,
-          ...baseData
-        });
-      }
-    }
-  }
-  return chunks.slice(0, maxChunks);
-}
-var INJECTED_BANNERS;
-var init_chunker = __esm({
-  "../engine/dist/parsers/chunker.js"() {
-    "use strict";
-    init_secret_redactor();
-    INJECTED_BANNERS = [
-      /MCP issues detected\. ?Run \/mcp list for status\.?/g,
-      /Context low[^\n]*Run \/compact[^\n]*/g,
-      /API Error:[^\n]{0,120}/g
-    ];
-  }
-});
-
-// ../engine/dist/core/home-approval.js
-var home_approval_exports = {};
-__export(home_approval_exports, {
-  approveHome: () => approveHome,
-  declineHome: () => declineHome,
-  grandfatherLegacyHomes: () => grandfatherLegacyHomes,
-  homeDecision: () => homeDecision,
-  isHomeSynced: () => isHomeSynced,
-  normalizeHomePath: () => normalizeHomePath,
-  resetHomeDecision: () => resetHomeDecision
-});
-import { existsSync as existsSync3, readdirSync as readdirSync2, realpathSync } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join3, dirname as dirname3 } from "path";
-function normalizeHomePath(p) {
-  const expanded = p.startsWith("~") ? join3(homedir2(), p.slice(1)) : p;
-  const trimmed = expanded.replace(/[/\\]+$/, "");
-  try {
-    return realpathSync(trimmed);
-  } catch {
-    return trimmed;
-  }
-}
-function legacyAutoSyncedHomes() {
-  const home = homedir2();
-  const out = [];
-  const add = (dir, marker) => {
-    if (!existsSync3(join3(dir, marker)))
-      return;
-    const n = normalizeHomePath(dir);
-    if (!out.includes(n))
-      out.push(n);
-  };
-  const bases = [
-    { base: join3(home, ".claude"), marker: "projects" },
-    { base: join3(home, ".gemini"), marker: "tmp" },
-    { base: join3(home, ".codex"), marker: "sessions" },
-    { base: join3(home, ".gemini", "antigravity-cli"), marker: "brain" },
-    { base: join3(home, ".local", "share", "opencode"), marker: "opencode.db" },
-    { base: join3(home, ".cursor"), marker: "chats" }
-  ];
-  for (const { base: base3, marker } of bases) {
-    add(base3, marker);
-    const parent = dirname3(base3);
-    const leaf = base3.slice(parent.length + 1);
-    try {
-      for (const e of readdirSync2(parent, { withFileTypes: true })) {
-        if (!e.isDirectory())
-          continue;
-        if (e.name === leaf || !e.name.startsWith(leaf + "-"))
-          continue;
-        if (e.name === ".claude-code")
-          continue;
-        add(join3(parent, e.name), marker);
-      }
-    } catch {
-    }
-  }
-  return out;
-}
-function grandfatherLegacyHomes() {
-  let s;
-  try {
-    s = loadSettings();
-  } catch {
-    return { seeded: [] };
-  }
-  if (s.sources.homesGrandfathered)
-    return { seeded: [] };
-  const legacy = legacyAutoSyncedHomes();
-  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
-  const seeded = [];
-  for (const p of legacy) {
-    if (!approved.has(p)) {
-      approved.add(p);
-      seeded.push(p);
-    }
-  }
-  s.sources.approvedHomes = [...approved];
-  s.sources.homesGrandfathered = true;
-  try {
-    saveSettings(s);
-  } catch {
-    return { seeded: [] };
-  }
-  return { seeded };
-}
-function primaryHomes() {
-  const home = homedir2();
-  const env = process.env;
-  let s;
-  try {
-    s = loadSettings().sources;
-  } catch {
-    s = void 0;
-  }
-  const opencodeDb = env.CHAT_RECALL_OPENCODE_DB || s?.opencodeDbPath || join3(home, ".local", "share", "opencode", "opencode.db");
-  const candidates2 = [
-    env.CHAT_RECALL_CLAUDE_HOME || s?.claudeHome || join3(home, ".claude"),
-    env.CHAT_RECALL_GEMINI_HOME || s?.geminiHome || join3(home, ".gemini"),
-    env.CHAT_RECALL_CODEX_HOME || s?.codexHome || join3(home, ".codex"),
-    env.CHAT_RECALL_AGY_HOME || s?.agyHome || join3(home, ".gemini", "antigravity-cli"),
-    env.CHAT_RECALL_CURSOR_HOME || s?.cursorHome || join3(home, ".cursor"),
-    dirOf(opencodeDb)
-  ];
-  return candidates2.map(normalizeHomePath);
-}
-function homeDecision(path) {
-  const p = normalizeHomePath(path);
-  if (primaryHomes().includes(p))
-    return "primary";
-  let s;
-  try {
-    s = loadSettings().sources;
-  } catch {
-    return "pending";
-  }
-  if ((s.declinedHomes ?? []).map(normalizeHomePath).includes(p))
-    return "declined";
-  if ((s.approvedHomes ?? []).map(normalizeHomePath).includes(p))
-    return "approved";
-  if ((s.extraClaudeHomes ?? []).map(normalizeHomePath).includes(p))
-    return "approved";
-  return "pending";
-}
-function isHomeSynced(path) {
-  const d = homeDecision(path);
-  return d === "primary" || d === "approved";
-}
-function setDecision(path, decision) {
-  const p = normalizeHomePath(path);
-  let s;
-  try {
-    s = loadSettings();
-  } catch {
-    return false;
-  }
-  const approved = new Set((s.sources.approvedHomes ?? []).map(normalizeHomePath));
-  const declined = new Set((s.sources.declinedHomes ?? []).map(normalizeHomePath));
-  approved.delete(p);
-  declined.delete(p);
-  (decision === "approved" ? approved : declined).add(p);
-  s.sources.approvedHomes = [...approved];
-  s.sources.declinedHomes = [...declined];
-  try {
-    saveSettings(s);
-  } catch {
-    return false;
-  }
-  return true;
-}
-function approveHome(path) {
-  return setDecision(path, "approved");
-}
-function declineHome(path) {
-  return setDecision(path, "declined");
-}
-function resetHomeDecision(path) {
-  const p = normalizeHomePath(path);
-  let s;
-  try {
-    s = loadSettings();
-  } catch {
-    return false;
-  }
-  s.sources.approvedHomes = (s.sources.approvedHomes ?? []).filter((x) => normalizeHomePath(x) !== p);
-  s.sources.declinedHomes = (s.sources.declinedHomes ?? []).filter((x) => normalizeHomePath(x) !== p);
-  try {
-    saveSettings(s);
-  } catch {
-    return false;
-  }
-  return true;
-}
-var dirOf;
-var init_home_approval = __esm({
-  "../engine/dist/core/home-approval.js"() {
-    "use strict";
-    init_settings();
-    dirOf = (filePath) => dirname3(filePath);
-  }
-});
-
-// ../engine/dist/core/tool-paths.js
-import { existsSync as existsSync4, readdirSync as readdirSync3 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join4, dirname as dirname4, basename } from "path";
-function claudeHomeDir() {
-  return process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome || join4(homedir3(), ".claude");
-}
-function claudeProjectDirs(opts = {}) {
-  const home = homedir3();
-  const dirs = [];
-  const addHome = (d) => {
-    const p = join4(d, "projects");
-    if (existsSync4(p) && !dirs.includes(p))
-      dirs.push(p);
-  };
-  addHome(claudeHomeDir());
-  const homeOverridden = !!(process.env.CHAT_RECALL_CLAUDE_HOME || sources().claudeHome);
-  if (!homeOverridden) {
-    try {
-      for (const entry of readdirSync3(home, { withFileTypes: true })) {
-        if (entry.isDirectory() && entry.name.startsWith(".claude-") && entry.name !== ".claude-code") {
-          addHome(join4(home, entry.name));
-        }
-      }
-    } catch {
-    }
-  }
-  if (process.env.CLAUDE_DIRS) {
-    for (const d of process.env.CLAUDE_DIRS.split(",")) {
-      const t = d.trim();
-      if (t)
-        addHome(t.startsWith("~/") ? join4(home, t.slice(2)) : t);
-    }
-  }
-  if (dirs.length === 0)
-    dirs.push(join4(claudeHomeDir(), "projects"));
-  return applyDecisions(dirs, opts.includeExcluded);
-}
-function _setSourceExclusionFilter(fn) {
-  _sourceExclusionFilter = fn;
-}
-function geminiHomeDir() {
-  return process.env.CHAT_RECALL_GEMINI_HOME || sources().geminiHome || join4(homedir3(), ".gemini");
-}
-function opencodeDbPath() {
-  return process.env.CHAT_RECALL_OPENCODE_DB || sources().opencodeDbPath || join4(homedir3(), ".local", "share", "opencode", "opencode.db");
-}
-function codexHomeDir() {
-  return process.env.CHAT_RECALL_CODEX_HOME || sources().codexHome || join4(homedir3(), ".codex");
-}
-function agyHomeDir() {
-  return process.env.CHAT_RECALL_AGY_HOME || sources().agyHome || join4(homedir3(), ".gemini", "antigravity-cli");
-}
-function cursorHomeDir() {
-  return process.env.CHAT_RECALL_CURSOR_HOME || sources().cursorHome || join4(homedir3(), ".cursor");
-}
-function cursorIdeHomeDir() {
-  return process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome || (process.platform === "darwin" ? join4(homedir3(), "Library", "Application Support", "Cursor") : join4(homedir3(), ".config", "Cursor"));
+function cursorIdeHomeDir() {
+  return process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome || (process.platform === "darwin" ? join4(homedir3(), "Library", "Application Support", "Cursor") : join4(homedir3(), ".config", "Cursor"));
 }
 function siblingHomes(base3, overridden, suffix) {
   const roots = [];
@@ -6287,7 +5687,7 @@ var init_model_pricing = __esm({
 });
 
 // ../engine/dist/parsers/session.js
-import { createReadStream, existsSync as existsSync5, readdirSync as readdirSync5, readFileSync as readFileSync2, statSync as statSync4, openSync, readSync, closeSync } from "fs";
+import { createReadStream, existsSync as existsSync5, readdirSync as readdirSync5, readFileSync as readFileSync2, statSync as statSync3, openSync, readSync, closeSync } from "fs";
 import { createInterface } from "readline";
 import { join as join5, basename as basename2 } from "path";
 function removeCodeBlocks(text) {
@@ -6334,44 +5734,6 @@ function isValuableToolResult(content, toolName = "") {
   }
   return true;
 }
-function parseSessionsIndex(indexPath) {
-  if (!existsSync5(indexPath)) {
-    return [];
-  }
-  const data = JSON.parse(readFileSync2(indexPath, "utf-8"));
-  const entries = data.entries || [];
-  return entries.map((e) => ({
-    sessionId: e.sessionId || "",
-    fullPath: e.fullPath || "",
-    fileMtime: e.fileMtime || 0,
-    firstPrompt: e.firstPrompt || "",
-    messageCount: e.messageCount || 0,
-    created: e.created || "",
-    modified: e.modified || "",
-    gitBranch: e.gitBranch || "",
-    projectPath: e.projectPath || "",
-    isSidechain: e.isSidechain || false
-  }));
-}
-function* iterAllSessionIndices(claudeDir) {
-  const dir = claudeDir || claudeBackend.projectsDir();
-  if (!existsSync5(dir)) {
-    return;
-  }
-  const entries = readdirSync5(dir, { withFileTypes: true });
-  for (const entry of entries) {
-    if (!entry.isDirectory())
-      continue;
-    const projectDir = join5(dir, entry.name);
-    const indexPath = join5(projectDir, "sessions-index.json");
-    if (existsSync5(indexPath)) {
-      const sessions = parseSessionsIndex(indexPath);
-      if (sessions.length > 0) {
-        yield [projectDir, sessions];
-      }
-    }
-  }
-}
 function hasSubagentsDir(sessionPath) {
   const dir = sessionPath.slice(0, -6);
   return existsSync5(join5(dir, "subagents"));
@@ -6382,40 +5744,6 @@ function getSubagentPaths(sessionPath) {
     return [];
   return readdirSync5(subagentsDir).filter((f) => f.endsWith(".jsonl")).sort().map((f) => join5(subagentsDir, f));
 }
-function getSubagentProjectPath(sessionPath, folderDerivedPath) {
-  const subagentPaths = getSubagentPaths(sessionPath);
-  if (subagentPaths.length === 0)
-    return folderDerivedPath;
-  const cwdCounts = /* @__PURE__ */ new Map();
-  for (const filePath of subagentPaths) {
-    try {
-      const lines = readFileSync2(filePath, "utf-8").split("\n");
-      for (const line of lines) {
-        if (!line.trim())
-          continue;
-        try {
-          const entry = JSON.parse(line);
-          if (entry.type === "user" && typeof entry.cwd === "string" && entry.cwd) {
-            cwdCounts.set(entry.cwd, (cwdCounts.get(entry.cwd) ?? 0) + 1);
-          }
-        } catch {
-        }
-      }
-    } catch {
-    }
-  }
-  if (cwdCounts.size === 0)
-    return folderDerivedPath;
-  let best = folderDerivedPath;
-  let bestCount = 0;
-  for (const [cwd, count] of cwdCounts) {
-    if (count > bestCount) {
-      best = cwd;
-      bestCount = count;
-    }
-  }
-  return best;
-}
 function readCwdFromJsonl(sessionPath) {
   try {
     if (!existsSync5(sessionPath))
@@ -6444,22 +5772,6 @@ function readCwdFromJsonl(sessionPath) {
   }
   return "";
 }
-function getSessionMtime(sessionPath) {
-  const subagentPaths = getSubagentPaths(sessionPath);
-  if (subagentPaths.length === 0) {
-    return statSync4(sessionPath).mtimeMs;
-  }
-  let maxMtime = statSync4(sessionPath).mtimeMs;
-  for (const p of subagentPaths) {
-    try {
-      const m = statSync4(p).mtimeMs;
-      if (m > maxMtime)
-        maxMtime = m;
-    } catch {
-    }
-  }
-  return maxMtime;
-}
 async function parseSessionFile(sessionPath, maxMessages = 50) {
   const sessionId = basename2(sessionPath, ".jsonl");
   const content = {
@@ -6697,76 +6009,10 @@ ${resultText}` : resultText;
   });
   return content;
 }
-function* getAllSessions(claudeDir) {
-  const seenSessionIds = /* @__PURE__ */ new Set();
-  const projectDirs = claudeDir ? [claudeDir] : claudeProjectDirs();
-  for (const dir of projectDirs) {
-    for (const [, entries] of iterAllSessionIndices(dir)) {
-      for (const entry of entries) {
-        if (!seenSessionIds.has(entry.sessionId) && existsSync5(entry.fullPath)) {
-          seenSessionIds.add(entry.sessionId);
-          yield [entry, entry.fullPath];
-        }
-      }
-    }
-    if (!existsSync5(dir))
-      continue;
-    const dirEntries = readdirSync5(dir, { withFileTypes: true });
-    for (const projDirEntry of dirEntries) {
-      if (!projDirEntry.isDirectory())
-        continue;
-      const projectPath = join5(dir, projDirEntry.name);
-      const files = readdirSync5(projectPath);
-      for (const file of files) {
-        if (!file.endsWith(".jsonl"))
-          continue;
-        if (file.startsWith("agent-"))
-          continue;
-        if (file === "sessions-index.json")
-          continue;
-        const sessionId = basename2(file, ".jsonl");
-        if (seenSessionIds.has(sessionId))
-          continue;
-        const fullPath = join5(projectPath, file);
-        try {
-          const stat3 = statSync4(fullPath);
-          const derivedProjectPath = resolveProjectDirName(projDirEntry.name);
-          const effectiveMtime = getSessionMtime(fullPath);
-          let projectPath2 = "";
-          if (hasSubagentsDir(fullPath)) {
-            projectPath2 = getSubagentProjectPath(fullPath, derivedProjectPath);
-          } else {
-            const fromJsonl = readCwdFromJsonl(fullPath);
-            if (fromJsonl)
-              projectPath2 = fromJsonl;
-          }
-          if (!projectPath2)
-            projectPath2 = derivedProjectPath;
-          const entry = {
-            sessionId,
-            fullPath,
-            fileMtime: effectiveMtime,
-            firstPrompt: "",
-            messageCount: 0,
-            created: stat3.birthtime.toISOString(),
-            modified: new Date(effectiveMtime).toISOString(),
-            gitBranch: "",
-            projectPath: projectPath2,
-            isSidechain: false
-          };
-          seenSessionIds.add(sessionId);
-          yield [entry, fullPath];
-        } catch {
-          continue;
-        }
-      }
-    }
-  }
-}
 var init_session = __esm({
   "../engine/dist/parsers/session.js"() {
     "use strict";
-    init_chunker();
+    init_banners();
     init_claude2();
     init_tool_paths();
     init_project_dir_name();
@@ -7287,7 +6533,7 @@ __export(raw_exports, {
   parseTranscriptFromContainer: () => parseTranscriptFromContainer
 });
 import { gzipSync, gunzipSync } from "zlib";
-import { createHash as createHash2 } from "crypto";
+import { createHash } from "crypto";
 import * as fsMod from "fs";
 import * as pathMod from "path";
 function buildRawContainer(exp) {
@@ -7299,7 +6545,7 @@ function buildRawContainer(exp) {
   };
 }
 function containerSrcHash(c) {
-  const h = createHash2("sha1");
+  const h = createHash("sha1");
   h.update(c.tool);
   for (const f of c.files) {
     h.update("\0");
@@ -8846,17 +8092,17 @@ var init_opencode = __esm({
 });
 
 // ../engine/dist/core/backends/tail-read.js
-import { openSync as openSync2, readSync as readSync2, closeSync as closeSync2, statSync as statSync5 } from "node:fs";
-function readTailFromOffset(path, offset) {
+import { openSync as openSync2, readSync as readSync2, closeSync as closeSync2, statSync as statSync4 } from "node:fs";
+function readTailFromOffset(path, offset, maxBytes = TAIL_READ_MAX_BYTES) {
   let size = 0;
   try {
-    size = statSync5(path).size;
+    size = statSync4(path).size;
   } catch {
     return { text: "", newOffset: offset };
   }
   if (size <= offset)
     return { text: "", newOffset: offset };
-  const len = Math.min(size - offset, 16 * 1024 * 1024);
+  const len = Math.min(size - offset, Math.max(1, maxBytes));
   const buf = Buffer.allocUnsafe(len);
   let fd = null;
   try {
@@ -8872,11 +8118,16 @@ function readTailFromOffset(path, offset) {
       return { text: "", newOffset: offset };
     const slice = got < len ? buf.subarray(0, got) : buf;
     const lastNl = slice.lastIndexOf(10);
-    if (lastNl < 0) {
-      return { text: "", newOffset: offset };
+    if (lastNl >= 0) {
+      const text = slice.subarray(0, lastNl + 1).toString("utf-8");
+      return { text, newOffset: offset + lastNl + 1 };
     }
-    const text = slice.subarray(0, lastNl + 1).toString("utf-8");
-    return { text, newOffset: offset + lastNl + 1 };
+    if (offset + got >= size)
+      return { text: "", newOffset: offset };
+    const end = findNewline(fd, offset + got, size);
+    if (end < 0)
+      return { text: "", newOffset: offset };
+    return { text: "", newOffset: end + 1, skippedBytes: end + 1 - offset };
   } catch {
     return { text: "", newOffset: offset };
   } finally {
@@ -8888,14 +8139,31 @@ function readTailFromOffset(path, offset) {
     }
   }
 }
+function findNewline(fd, from, size) {
+  const block = Buffer.allocUnsafe(SKIP_SCAN_BYTES);
+  let pos = from;
+  while (pos < size) {
+    const n = readSync2(fd, block, 0, Math.min(SKIP_SCAN_BYTES, size - pos), pos);
+    if (n <= 0)
+      return -1;
+    const i = block.subarray(0, n).indexOf(10);
+    if (i >= 0)
+      return pos + i;
+    pos += n;
+  }
+  return -1;
+}
+var TAIL_READ_MAX_BYTES, SKIP_SCAN_BYTES;
 var init_tail_read = __esm({
   "../engine/dist/core/backends/tail-read.js"() {
     "use strict";
+    TAIL_READ_MAX_BYTES = 16 * 1024 * 1024;
+    SKIP_SCAN_BYTES = 1024 * 1024;
   }
 });
 
 // ../engine/dist/core/backends/codex.js
-import { readdirSync as readdirSync6, readFileSync as readFileSync3, statSync as statSync6, openSync as openSync3, readSync as readSync3, closeSync as closeSync3 } from "fs";
+import { readdirSync as readdirSync6, readFileSync as readFileSync3, statSync as statSync5, openSync as openSync3, readSync as readSync3, closeSync as closeSync3 } from "fs";
 import { basename as basename7, dirname as dirname9, join as join9 } from "path";
 function parseShellWrites(cmd) {
   const out = [];
@@ -9103,7 +8371,7 @@ var init_codex2 = __esm({
           return null;
         let mtime = 0;
         try {
-          mtime = statSync6(located.path).mtimeMs;
+          mtime = statSync5(located.path).mtimeMs;
         } catch {
         }
         return {
@@ -9123,7 +8391,7 @@ var init_codex2 = __esm({
           for (const filePath of walkRollouts(root)) {
             let stat3;
             try {
-              stat3 = statSync6(filePath);
+              stat3 = statSync5(filePath);
             } catch {
               continue;
             }
@@ -9319,7 +8587,7 @@ var init_codex2 = __esm({
         let mtime = 0;
         try {
           raw = readFileSync3(path, "utf-8");
-          mtime = statSync6(path).mtimeMs;
+          mtime = statSync5(path).mtimeMs;
         } catch {
           return [];
         }
@@ -9419,7 +8687,7 @@ var init_codex2 = __esm({
         const events = this.readEvents(this.toRawId(id));
         let fileMtime = 0;
         try {
-          fileMtime = statSync6(located.path).mtimeMs;
+          fileMtime = statSync5(located.path).mtimeMs;
         } catch {
         }
         return liveScanEditsFromEvents(events, this.fileToolMap, {
@@ -9483,7 +8751,7 @@ var init_codex2 = __esm({
             const p = join9(dir, entry.name);
             let st;
             try {
-              st = statSync6(p);
+              st = statSync5(p);
             } catch {
               continue;
             }
@@ -9550,7 +8818,7 @@ var init_codex2 = __esm({
         let mtime = 0;
         const push = (path, name) => {
           try {
-            const st = statSync6(path);
+            const st = statSync5(path);
             files.push({ name, bytes: readFileSync3(path) });
             if (st.mtimeMs > mtime)
               mtime = st.mtimeMs;
@@ -9592,16 +8860,16 @@ var init_codex2 = __esm({
         if (!loc)
           return 0;
         try {
-          return statSync6(loc.path).size;
+          return statSync5(loc.path).size;
         } catch {
           return 0;
         }
       }
-      async readFromOffset(prefixedId, offset) {
+      async readFromOffset(prefixedId, offset, maxBytes) {
         const loc = this.findSession(prefixedId);
         if (!loc)
           return { text: "", newOffset: offset };
-        return readTailFromOffset(loc.path, offset);
+        return readTailFromOffset(loc.path, offset, maxBytes);
       }
     };
     codexBackend = new CodexBackend();
@@ -9609,7 +8877,7 @@ var init_codex2 = __esm({
 });
 
 // ../engine/dist/core/backends/agy.js
-import { existsSync as existsSync8, readdirSync as readdirSync7, readFileSync as readFileSync4, statSync as statSync7 } from "fs";
+import { existsSync as existsSync8, readdirSync as readdirSync7, readFileSync as readFileSync4, statSync as statSync6 } from "fs";
 import { basename as basename8, dirname as dirname10, join as join10 } from "path";
 function agyTranscriptPath(logsDir) {
   const full = join10(logsDir, "transcript_full.jsonl");
@@ -9802,7 +9070,7 @@ var init_agy = __esm({
           return null;
         let mtime = 0;
         try {
-          mtime = statSync7(path).mtimeMs;
+          mtime = statSync6(path).mtimeMs;
         } catch {
         }
         const projectPath = resolveAgyProject(dirname10(path), this.homeDir());
@@ -9830,7 +9098,7 @@ var init_agy = __esm({
           for (const rawId of sessionDirs) {
             const sessionPath = join10(brainDir, rawId);
             try {
-              if (!statSync7(sessionPath).isDirectory())
+              if (!statSync6(sessionPath).isDirectory())
                 continue;
             } catch {
               continue;
@@ -9840,7 +9108,7 @@ var init_agy = __esm({
               continue;
             let stat3;
             try {
-              stat3 = statSync7(filePath);
+              stat3 = statSync6(filePath);
             } catch {
               continue;
             }
@@ -10105,7 +9373,7 @@ var init_agy = __esm({
         for (const rawId of sessionDirs) {
           const sessionPath = join10(brainDir, rawId);
           try {
-            if (!statSync7(sessionPath).isDirectory())
+            if (!statSync6(sessionPath).isDirectory())
               continue;
           } catch {
             continue;
@@ -10114,7 +9382,7 @@ var init_agy = __esm({
           if (!filePath)
             continue;
           try {
-            const st = statSync7(filePath);
+            const st = statSync6(filePath);
             if (st.mtimeMs < opts.sinceMs)
               continue;
             candidates2.push({ rawId, mtime: st.mtimeMs });
@@ -10142,7 +9410,7 @@ var init_agy = __esm({
         try {
           return {
             tool: "agy",
-            mtime: statSync7(loc.path).mtimeMs,
+            mtime: statSync6(loc.path).mtimeMs,
             files: [{ name: basename8(loc.path), bytes: readFileSync4(loc.path) }]
           };
         } catch {
@@ -10157,16 +9425,16 @@ var init_agy = __esm({
         if (!loc)
           return 0;
         try {
-          return statSync7(loc.path).size;
+          return statSync6(loc.path).size;
         } catch {
           return 0;
         }
       }
-      async readFromOffset(prefixedId, offset) {
+      async readFromOffset(prefixedId, offset, maxBytes) {
         const loc = this.findSession(prefixedId);
         if (!loc)
           return { text: "", newOffset: offset };
-        return readTailFromOffset(loc.path, offset);
+        return readTailFromOffset(loc.path, offset, maxBytes);
       }
     };
     agyBackend = new AgyBackend();
@@ -10174,7 +9442,7 @@ var init_agy = __esm({
 });
 
 // ../engine/dist/core/backends/cursor-store.js
-import { existsSync as existsSync9, readdirSync as readdirSync8, readFileSync as readFileSync5, statSync as statSync8 } from "fs";
+import { existsSync as existsSync9, readdirSync as readdirSync8, readFileSync as readFileSync5, statSync as statSync7 } from "fs";
 import { join as join11 } from "path";
 function cursorProjectSlug(absPath) {
   return absPath.replace(/[^a-zA-Z0-9]/g, "-").replace(/-+/g, "-").replace(/^-+|-+$/g, "");
@@ -10191,7 +9459,7 @@ function listChatsIn(chatsRoot) {
     const hashPath3 = join11(chatsRoot, workspaceHash);
     let chatIds;
     try {
-      if (!statSync8(hashPath3).isDirectory())
+      if (!statSync7(hashPath3).isDirectory())
         continue;
       chatIds = readdirSync8(hashPath3);
     } catch {
@@ -10213,7 +9481,7 @@ function listChatsIn(chatsRoot) {
       let created = meta.createdAtMs ?? 0;
       if (!mtime || !created) {
         try {
-          const st = statSync8(dbPath);
+          const st = statSync7(dbPath);
           mtime = mtime || st.mtimeMs;
           created = created || st.birthtimeMs || st.mtimeMs;
         } catch {
@@ -10256,7 +9524,7 @@ function findChat(chatsRoots, chatId) {
       let created = meta.createdAtMs ?? 0;
       if (!mtime || !created) {
         try {
-          const st = statSync8(dbPath);
+          const st = statSync7(dbPath);
           mtime = mtime || st.mtimeMs;
           created = created || st.birthtimeMs || st.mtimeMs;
         } catch {
@@ -10559,7 +9827,7 @@ var init_cursor_store = __esm({
 });
 
 // ../engine/dist/core/backends/cursor-ide.js
-import { existsSync as existsSync10, readFileSync as readFileSync6, readdirSync as readdirSync9, statSync as statSync9 } from "fs";
+import { existsSync as existsSync10, readFileSync as readFileSync6, readdirSync as readdirSync9, statSync as statSync8 } from "fs";
 import { dirname as dirname11, join as join12 } from "path";
 function jsonOf(value) {
   if (value == null)
@@ -10629,7 +9897,7 @@ function workspaceIndex(workspaceRoots) {
     for (const id of entries) {
       const dir = join12(root, id);
       try {
-        if (!statSync9(dir).isDirectory())
+        if (!statSync8(dir).isDirectory())
           continue;
       } catch {
         continue;
@@ -10975,7 +10243,7 @@ var init_cursor_ide = __esm({
 });
 
 // ../engine/dist/core/backends/cursor.js
-import { existsSync as existsSync11, readFileSync as readFileSync7, statSync as statSync10 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync7, statSync as statSync9 } from "fs";
 import { join as join13 } from "path";
 var PREFIX4, CursorBackend, cursorBackend;
 var init_cursor = __esm({
@@ -11028,7 +10296,7 @@ var init_cursor = __esm({
         if (r.surface === "cli") {
           let mtime2 = r.chat.updatedAtMs;
           try {
-            mtime2 = statSync10(r.chat.dbPath).mtimeMs || mtime2;
+            mtime2 = statSync9(r.chat.dbPath).mtimeMs || mtime2;
           } catch {
           }
           return {
@@ -11041,7 +10309,7 @@ var init_cursor = __esm({
         }
         let mtime = r.composer.updatedAtMs;
         try {
-          mtime = statSync10(r.composer.globalDbPath).mtimeMs || mtime;
+          mtime = statSync9(r.composer.globalDbPath).mtimeMs || mtime;
         } catch {
         }
         return {
@@ -11287,7 +10555,7 @@ var init_cursor = __esm({
             if (existsSync11(metaPath)) {
               files.push({ name: "meta.json", bytes: readFileSync7(metaPath) });
             }
-            return { tool: "cursor", mtime: statSync10(r.chat.dbPath).mtimeMs, files };
+            return { tool: "cursor", mtime: statSync9(r.chat.dbPath).mtimeMs, files };
           }
           const events = readComposerEvents(r.composer);
           if (events.length === 0)
@@ -11295,7 +10563,7 @@ var init_cursor = __esm({
           const body = events.map((e) => JSON.stringify(e)).join("\n") + "\n";
           return {
             tool: "cursor",
-            mtime: statSync10(r.composer.globalDbPath).mtimeMs,
+            mtime: statSync9(r.composer.globalDbPath).mtimeMs,
             files: [{ name: `${r.composer.composerId}.jsonl`, bytes: Buffer.from(body, "utf8") }]
           };
         } catch {
@@ -11361,8 +10629,8 @@ var init_backends = __esm({
 
 // ../engine/dist/transcript/shadow.js
 import { gzipSync as gzipSync2, gunzipSync as gunzipSync2 } from "zlib";
-import { createHash as createHash3 } from "crypto";
-import { existsSync as existsSync12, mkdirSync as mkdirSync3, readFileSync as readFileSync8, writeFileSync as writeFileSync2, renameSync as renameSync2, statSync as statSync11 } from "fs";
+import { createHash as createHash2 } from "crypto";
+import { existsSync as existsSync12, mkdirSync as mkdirSync3, readFileSync as readFileSync8, writeFileSync as writeFileSync2, renameSync as renameSync2, statSync as statSync10, openSync as openSync4, readSync as readSync4, closeSync as closeSync4 } from "fs";
 import { dirname as dirname12, join as join14 } from "path";
 function shadowRoot() {
   return join14(getDataDir(), "shadow");
@@ -11392,7 +10660,7 @@ function writeShadowContainer(tool, rawId, container) {
   renameSync2(tmp, path);
 }
 function sha1(s) {
-  return createHash3("sha1").update(s).digest("hex");
+  return createHash2("sha1").update(s).digest("hex");
 }
 function lineKey(line) {
   try {
@@ -11570,7 +10838,7 @@ function liveFingerprint(backend, rawId) {
     const loc = backend.findSession(rawId);
     if (!loc?.path)
       return "";
-    const st = statSync11(loc.path);
+    const st = statSync10(loc.path);
     return `${st.mtimeMs}:${st.size}`;
   } catch {
     return "";
@@ -11586,9 +10854,32 @@ function seedShadow(sessionId, container) {
   }
   return fullest;
 }
+function shadowUncompressedBytes(tool, rawId) {
+  const path = shadowFileFor(tool, rawId);
+  let fd = null;
+  try {
+    const size = statSync10(path).size;
+    if (size < 18)
+      return 0;
+    fd = openSync4(path, "r");
+    const tail = Buffer.alloc(4);
+    if (readSync4(fd, tail, 0, 4, size - 4) !== 4)
+      return 0;
+    return tail.readUInt32LE(0);
+  } catch {
+    return 0;
+  } finally {
+    if (fd !== null) {
+      try {
+        closeSync4(fd);
+      } catch {
+      }
+    }
+  }
+}
 function shadowSizeOnDisk(tool, rawId) {
   try {
-    return statSync11(shadowFileFor(tool, rawId)).size;
+    return statSync10(shadowFileFor(tool, rawId)).size;
   } catch {
     return 0;
   }
@@ -11606,7 +10897,7 @@ var init_shadow = __esm({
 });
 
 // ../engine/dist/core/live-session-scan.js
-import { existsSync as existsSync13, readdirSync as readdirSync10, readFileSync as readFileSync9, statSync as statSync12, openSync as openSync4, readSync as readSync4, closeSync as closeSync4 } from "fs";
+import { existsSync as existsSync13, readdirSync as readdirSync10, readFileSync as readFileSync9, statSync as statSync11, openSync as openSync5, readSync as readSync5, closeSync as closeSync5 } from "fs";
 import { join as join15, basename as basename9 } from "path";
 function detectTool(sessionId) {
   return getBackendForId(sessionId)?.id ?? "claude";
@@ -11633,6 +10924,15 @@ function sessionFileIndex() {
     return indexCache;
   const byId = /* @__PURE__ */ new Map();
   const seenRoots = /* @__PURE__ */ new Set();
+  const projectPaths = /* @__PURE__ */ new Map();
+  const projectPathOf = (dirName) => {
+    let p = projectPaths.get(dirName);
+    if (p === void 0) {
+      p = resolveProjectDirName(dirName);
+      projectPaths.set(dirName, p);
+    }
+    return p;
+  };
   for (const root of claudeProjectDirs()) {
     if (seenRoots.has(root) || !existsSync13(root))
       continue;
@@ -11660,7 +10960,7 @@ function sessionFileIndex() {
         const located = {
           path: join15(dir, name),
           projectDir: entry.name,
-          projectPath: resolveProjectDirName(entry.name)
+          projectPath: projectPathOf(entry.name)
         };
         const prior = byId.get(id);
         if (prior)
@@ -11724,7 +11024,7 @@ function readSessionGroupText(group) {
     const parts = [];
     for (const p of group.paths) {
       try {
-        const st = statSync12(p);
+        const st = statSync11(p);
         parts.push(`${p}:${st.mtimeMs}:${st.size}`);
       } catch {
         parts.push(`${p}:missing`);
@@ -11744,7 +11044,7 @@ function readSessionGroupText(group) {
       continue;
     }
     try {
-      mtime = Math.max(mtime, statSync12(p).mtimeMs);
+      mtime = Math.max(mtime, statSync11(p).mtimeMs);
     } catch {
     }
     text = text ? mergeLineText(text, raw).text : raw;
@@ -11850,7 +11150,7 @@ var init_live_session_scan = __esm({
 });
 
 // ../engine/dist/core/first-prompt.js
-import { createReadStream as createReadStream2, existsSync as existsSync14, openSync as openSync5, readSync as readSync5, closeSync as closeSync5 } from "fs";
+import { createReadStream as createReadStream2, existsSync as existsSync14, openSync as openSync6, readSync as readSync6, closeSync as closeSync6 } from "fs";
 import { StringDecoder } from "string_decoder";
 function stripBanners2(s) {
   let out = s;
@@ -11904,7 +11204,7 @@ function extractFirstUserPromptSync(filePath, options = {}) {
   const maxBytes = options.maxBytes ?? 4 * 1024 * 1024;
   let fd;
   try {
-    fd = openSync5(filePath, "r");
+    fd = openSync6(filePath, "r");
   } catch {
     return "";
   }
@@ -11916,7 +11216,7 @@ function extractFirstUserPromptSync(filePath, options = {}) {
     let pos = 0;
     let lineNo = 0;
     for (; ; ) {
-      const n = readSync5(fd, buf, 0, CHUNK, pos);
+      const n = readSync6(fd, buf, 0, CHUNK, pos);
       if (n <= 0)
         break;
       pos += n;
@@ -11942,7 +11242,7 @@ function extractFirstUserPromptSync(filePath, options = {}) {
     return "";
   } finally {
     try {
-      closeSync5(fd);
+      closeSync6(fd);
     } catch {
     }
   }
@@ -11961,7 +11261,7 @@ var init_first_prompt = __esm({
 });
 
 // ../engine/dist/core/backends/claude.js
-import { existsSync as existsSync15, readdirSync as readdirSync11, readFileSync as readFileSync10, statSync as statSync13, openSync as openSync6, readSync as readSync6, closeSync as closeSync6 } from "fs";
+import { existsSync as existsSync15, readdirSync as readdirSync11, readFileSync as readFileSync10, statSync as statSync12, openSync as openSync7, readSync as readSync7, closeSync as closeSync7 } from "fs";
 import { join as join16, basename as basename10 } from "path";
 function stripReminders(text) {
   return text.replace(/<system-reminder>[\s\S]*?<\/system-reminder>/g, "").trim();
@@ -12058,13 +11358,13 @@ var init_claude2 = __esm({
           return null;
         let head;
         try {
-          const fd = openSync6(located.path, "r");
+          const fd = openSync7(located.path, "r");
           try {
             const buf = Buffer.alloc(65536);
-            const n = readSync6(fd, buf, 0, buf.length, 0);
+            const n = readSync7(fd, buf, 0, buf.length, 0);
             head = buf.toString("utf-8", 0, n);
           } finally {
-            closeSync6(fd);
+            closeSync7(fd);
           }
         } catch {
           return null;
@@ -12091,7 +11391,7 @@ var init_claude2 = __esm({
         let mtime = 0;
         for (const c of copies) {
           try {
-            mtime = Math.max(mtime, statSync13(c.path).mtimeMs);
+            mtime = Math.max(mtime, statSync12(c.path).mtimeMs);
           } catch {
           }
         }
@@ -12167,7 +11467,7 @@ var init_claude2 = __esm({
             const fullPath = join16(projPath, f);
             let stat3;
             try {
-              stat3 = statSync13(fullPath);
+              stat3 = statSync12(fullPath);
             } catch {
               continue;
             }
@@ -12388,7 +11688,7 @@ var init_claude2 = __esm({
         const events = this.readEvents(rawId);
         let fileMtime = 0;
         try {
-          fileMtime = statSync13(located.path).mtimeMs;
+          fileMtime = statSync12(located.path).mtimeMs;
         } catch {
         }
         return liveScanEditsFromEvents(events, this.fileToolMap, {
@@ -12443,13 +11743,13 @@ var init_claude2 = __esm({
                 continue;
               const fp = join16(projPath, f);
               try {
-                const st = statSync13(fp);
+                const st = statSync12(fp);
                 let mtime = st.mtimeMs;
                 const subDir = join16(projPath, f.slice(0, -6), "subagents");
                 if (existsSync15(subDir)) {
                   for (const sub of readdirSync11(subDir)) {
                     try {
-                      const subSt = statSync13(join16(subDir, sub));
+                      const subSt = statSync12(join16(subDir, sub));
                       if (subSt.mtimeMs > mtime)
                         mtime = subSt.mtimeMs;
                     } catch {
@@ -12514,7 +11814,7 @@ var init_claude2 = __esm({
         let total = 0;
         for (const located of findSessionFiles(this.toRawId(prefixedId))) {
           try {
-            total += statSync13(located.path).size;
+            total += statSync12(located.path).size;
           } catch {
           }
         }
@@ -12536,417 +11836,877 @@ var init_claude2 = __esm({
       spansMultipleSources(prefixedId) {
         return findSessionFiles(this.toRawId(prefixedId)).length > 1;
       }
-      async readFromOffset(prefixedId, offset) {
-        const rawId = this.toRawId(prefixedId);
-        const copies = findSessionFiles(rawId);
-        if (copies.length === 0)
-          return { text: "", newOffset: offset };
-        if (copies.length > 1)
-          return { text: "", newOffset: offset };
-        return readTailFromOffset(copies[0].path, offset);
+      async readFromOffset(prefixedId, offset, maxBytes) {
+        const rawId = this.toRawId(prefixedId);
+        const copies = findSessionFiles(rawId);
+        if (copies.length === 0)
+          return { text: "", newOffset: offset };
+        if (copies.length > 1)
+          return { text: "", newOffset: offset };
+        return readTailFromOffset(copies[0].path, offset, maxBytes);
+      }
+    };
+    claudeBackend = new ClaudeBackend();
+  }
+});
+
+// ../engine/dist/core/project-resolver.js
+var project_resolver_exports = {};
+__export(project_resolver_exports, {
+  _setProjectsConfigForTests: () => _setProjectsConfigForTests,
+  getProjectsConfigPath: () => getProjectsConfigPath,
+  globMatch: () => globMatch,
+  loadProjectsConfig: () => loadProjectsConfig,
+  parseGitRemote: () => parseGitRemote,
+  resetProjectResolverCache: () => resetProjectResolverCache,
+  resolveProjectId: () => resolveProjectId,
+  resolveWorkspaceId: () => resolveWorkspaceId
+});
+import { execSync } from "child_process";
+import { createHash as createHash3 } from "crypto";
+import { existsSync as existsSync16, readFileSync as readFileSync11, realpathSync as realpathSync2, readdirSync as readdirSync12, statSync as statSync13 } from "fs";
+import { basename as basename11, dirname as dirname13, isAbsolute, join as join17, resolve, sep } from "path";
+function getProjectsConfigPath() {
+  return join17(getDataDir(), "projects.json");
+}
+function loadProjectsConfig() {
+  if (cachedConfig && cachedConfig.mtime === Number.MAX_SAFE_INTEGER) {
+    return cachedConfig.cfg;
+  }
+  const path = getProjectsConfigPath();
+  if (!existsSync16(path)) {
+    cachedConfig = { mtime: 0, cfg: {} };
+    return cachedConfig.cfg;
+  }
+  const mtime = statSync13(path).mtimeMs;
+  if (cachedConfig && cachedConfig.mtime === mtime)
+    return cachedConfig.cfg;
+  try {
+    const raw = readFileSync11(path, "utf-8");
+    const cfg = JSON.parse(raw);
+    cachedConfig = { mtime, cfg };
+    return cfg;
+  } catch {
+    cachedConfig = { mtime, cfg: {} };
+    return cachedConfig.cfg;
+  }
+}
+function resetProjectResolverCache() {
+  resolveCache.clear();
+  gitCache.clear();
+  workspaceCache.clear();
+  wsIdCache.clear();
+  cachedConfig = null;
+}
+function _setProjectsConfigForTests(cfg) {
+  resetProjectResolverCache();
+  cachedConfig = cfg === null ? null : { mtime: Number.MAX_SAFE_INTEGER, cfg };
+}
+function resolveProjectId(inputPath) {
+  if (!inputPath) {
+    return { id: "", displayName: "", source: "path" };
+  }
+  if (!isAbsolute(inputPath)) {
+    return { id: `path:${inputPath}`, displayName: inputPath, source: "path" };
+  }
+  const realPath = safeRealpath(inputPath);
+  const cached = resolveCache.get(realPath);
+  if (cached)
+    return cached;
+  const result = doResolve(realPath);
+  resolveCache.set(realPath, result);
+  return result;
+}
+function resolveWorkspaceId(inputPath) {
+  if (!inputPath || !isAbsolute(inputPath))
+    return null;
+  const realPath = safeRealpath(inputPath);
+  const cached = wsIdCache.get(realPath);
+  if (cached !== void 0)
+    return cached;
+  const result = doResolveWorkspace(realPath);
+  wsIdCache.set(realPath, result);
+  return result;
+}
+function doResolveWorkspace(realPath) {
+  const cfg = loadProjectsConfig();
+  const declaredWorkspaces = (cfg.projects || []).filter((p) => p.workspace).sort((a, b) => b.root.length - a.root.length);
+  for (const proj of declaredWorkspaces) {
+    if (isInside(realPath, safeRealpath(proj.root)))
+      return proj.id;
+  }
+  const anchor = findGitToplevel(realPath) ?? realPath;
+  const ws = resolveAutoWorkspace(anchor, cfg.autoWorkspaceMinRepos ?? DEFAULT_AUTO_WORKSPACE_MIN_REPOS);
+  return ws ? ws.id : null;
+}
+function doResolve(realPath) {
+  const cfg = loadProjectsConfig();
+  if (matchesIgnore(realPath, cfg)) {
+    return { id: `ignored:${realPath}`, displayName: basename11(realPath), source: "ignored" };
+  }
+  const declared = matchDeclaredProject(realPath, cfg.projects || []);
+  if (declared)
+    return declared;
+  const bot = resolveBotWorktree(realPath);
+  if (bot)
+    return bot;
+  const git2 = resolveGit(realPath);
+  if (git2)
+    return git2;
+  const ws = resolveAutoWorkspace(realPath, cfg.autoWorkspaceMinRepos ?? DEFAULT_AUTO_WORKSPACE_MIN_REPOS);
+  if (ws)
+    return ws;
+  return {
+    id: `path:${realPath}`,
+    displayName: basename11(realPath) || realPath,
+    source: "path"
+  };
+}
+function matchesIgnore(realPath, cfg) {
+  const rules = cfg.ignore || [];
+  for (const r of rules) {
+    if (globMatch(r.match, realPath))
+      return true;
+  }
+  return false;
+}
+function resolveBotWorktree(realPath) {
+  const parts = realPath.split(sep);
+  const idx = parts.findIndex((p) => BOT_WORKTREE_MARKERS.includes(p));
+  if (idx === -1)
+    return null;
+  const botRoot = parts.slice(0, idx + 1).join(sep);
+  return {
+    id: `path:${botRoot}`,
+    displayName: parts[idx],
+    source: "path"
+  };
+}
+function matchDeclaredProject(realPath, projects) {
+  const candidates2 = [...projects].sort((a, b) => b.root.length - a.root.length);
+  for (const proj of candidates2) {
+    const root = safeRealpath(proj.root);
+    if (!isInside(realPath, root))
+      continue;
+    if (!proj.workspace && proj.children?.length) {
+      const child = matchChild(realPath, root, proj.children);
+      if (child) {
+        return {
+          id: `${proj.id}/${child.id}`,
+          displayName: child.name || child.id,
+          source: "user",
+          workspaceId: proj.id
+        };
+      }
+    }
+    return {
+      id: proj.id,
+      displayName: proj.name || proj.id,
+      source: "user",
+      workspaceId: proj.workspace ? void 0 : void 0
+    };
+  }
+  return null;
+}
+function matchChild(realPath, parentRoot, children) {
+  const sorted = [...children].sort((a, b) => b.path.length - a.path.length);
+  for (const c of sorted) {
+    const childRoot = safeRealpath(join17(parentRoot, c.path));
+    if (isInside(realPath, childRoot))
+      return c;
+  }
+  return null;
+}
+function resolveGit(realPath) {
+  const toplevel = findGitToplevel(realPath);
+  if (!toplevel)
+    return null;
+  const probe = getGitRemote(toplevel);
+  if (probe.kind === "remote") {
+    const parsed = parseGitRemote(probe.url);
+    if (parsed) {
+      return {
+        id: `git:${parsed.host}/${parsed.owner}/${parsed.repo}`,
+        displayName: parsed.repo,
+        source: "git-remote"
+      };
+    }
+  }
+  if (probe.kind === "failed") {
+    console.error(`[project] could not read git remotes in ${toplevel} \u2014 filing it as a local-only repo for now, which is probably wrong: ${probe.reason}`);
+  }
+  const hash = createHash3("sha1").update(toplevel).digest("hex").slice(0, 12);
+  return {
+    id: `git-local:${hash}`,
+    displayName: basename11(toplevel),
+    source: "git-local"
+  };
+}
+function findGitToplevel(realPath) {
+  let cur = realPath;
+  let last = "";
+  while (cur && cur !== last) {
+    if (existsSync16(join17(cur, ".git")))
+      return cur;
+    last = cur;
+    cur = dirname13(cur);
+  }
+  return null;
+}
+function git(toplevel, args) {
+  return execSync(`git ${args}`, {
+    cwd: toplevel,
+    stdio: ["ignore", "pipe", "ignore"],
+    encoding: "utf-8",
+    timeout: GIT_TIMEOUT_MS
+  });
+}
+function probeGitRemote(toplevel) {
+  let names;
+  try {
+    names = git(toplevel, "remote").split("\n").map((n) => n.trim()).filter(Boolean);
+  } catch (err) {
+    return { kind: "failed", reason: err instanceof Error ? err.message : String(err) };
+  }
+  if (names.length === 0)
+    return { kind: "none" };
+  const pick = names.includes("origin") ? "origin" : names[0];
+  try {
+    const url = git(toplevel, `remote get-url ${pick}`).trim();
+    return url ? { kind: "remote", url } : { kind: "none" };
+  } catch (err) {
+    return { kind: "failed", reason: err instanceof Error ? err.message : String(err) };
+  }
+}
+function getGitRemote(toplevel) {
+  const cached = gitCache.get(toplevel);
+  if (cached)
+    return cached;
+  const probe = probeGitRemote(toplevel);
+  if (probe.kind !== "failed")
+    gitCache.set(toplevel, probe);
+  return probe;
+}
+function parseGitRemote(url) {
+  const trimmed = url.trim().replace(/\.git$/, "");
+  if (!trimmed)
+    return null;
+  const ssh = /^[^@]+@([^:]+):(.+?)\/([^/]+)$/.exec(trimmed);
+  if (ssh)
+    return { host: normaliseHost(ssh[1]), owner: ssh[2], repo: ssh[3] };
+  const url1 = /^[a-z+]+:\/\/(?:[^@]+@)?([^/:]+)(?::\d+)?\/(.+?)\/([^/]+)$/.exec(trimmed);
+  if (url1)
+    return { host: normaliseHost(url1[1]), owner: url1[2], repo: url1[3] };
+  return null;
+}
+function normaliseHost(host) {
+  for (const known of ["github.com", "gitlab.com", "bitbucket.org", "codeberg.org", "gitea.com"]) {
+    if (host === known)
+      return known;
+    if (host.startsWith(known + "-") || host.startsWith(known + "."))
+      return known;
+  }
+  return host;
+}
+function resolveAutoWorkspace(realPath, minRepos) {
+  let cur = realPath;
+  let last = "";
+  let depth = 0;
+  while (cur && cur !== last && depth < AUTO_WORKSPACE_MAX_DEPTH) {
+    if (!existsSync16(join17(cur, ".git"))) {
+      const cached = workspaceCache.get(cur);
+      let qualifies;
+      if (cached === void 0) {
+        qualifies = countGitChildren(cur) >= minRepos;
+        workspaceCache.set(cur, qualifies ? cur : null);
+      } else {
+        qualifies = cached !== null;
+      }
+      if (qualifies) {
+        const name = basename11(cur);
+        return { id: `ws:${name}`, displayName: name, source: "auto-workspace" };
       }
-    };
-    claudeBackend = new ClaudeBackend();
+    }
+    last = cur;
+    cur = dirname13(cur);
+    depth++;
   }
-});
-
-// ../engine/dist/core/project-resolver.js
-var project_resolver_exports = {};
-__export(project_resolver_exports, {
-  _setProjectsConfigForTests: () => _setProjectsConfigForTests,
-  getProjectsConfigPath: () => getProjectsConfigPath,
-  globMatch: () => globMatch,
-  loadProjectsConfig: () => loadProjectsConfig,
-  parseGitRemote: () => parseGitRemote,
-  resetProjectResolverCache: () => resetProjectResolverCache,
-  resolveProjectId: () => resolveProjectId,
-  resolveWorkspaceId: () => resolveWorkspaceId
-});
-import { execSync } from "child_process";
-import { createHash as createHash4 } from "crypto";
-import { existsSync as existsSync16, readFileSync as readFileSync11, realpathSync as realpathSync2, readdirSync as readdirSync12, statSync as statSync14 } from "fs";
-import { basename as basename11, dirname as dirname13, isAbsolute, join as join17, resolve, sep } from "path";
-function getProjectsConfigPath() {
-  return join17(getDataDir(), "projects.json");
+  return null;
 }
-function loadProjectsConfig() {
-  if (cachedConfig && cachedConfig.mtime === Number.MAX_SAFE_INTEGER) {
-    return cachedConfig.cfg;
+function countGitChildren(dir) {
+  let count = 0;
+  let entries;
+  try {
+    entries = readdirSync12(dir);
+  } catch {
+    return 0;
   }
-  const path = getProjectsConfigPath();
-  if (!existsSync16(path)) {
-    cachedConfig = { mtime: 0, cfg: {} };
-    return cachedConfig.cfg;
+  for (const name of entries) {
+    if (name.startsWith("."))
+      continue;
+    const child = join17(dir, name);
+    try {
+      const st = statSync13(child);
+      if (!st.isDirectory())
+        continue;
+      if (existsSync16(join17(child, ".git")))
+        count++;
+    } catch {
+    }
   }
-  const mtime = statSync14(path).mtimeMs;
-  if (cachedConfig && cachedConfig.mtime === mtime)
-    return cachedConfig.cfg;
+  return count;
+}
+function safeRealpath(p) {
   try {
-    const raw = readFileSync11(path, "utf-8");
-    const cfg = JSON.parse(raw);
-    cachedConfig = { mtime, cfg };
-    return cfg;
+    return realpathSync2(p);
   } catch {
-    cachedConfig = { mtime, cfg: {} };
-    return cachedConfig.cfg;
+    return resolve(p);
   }
 }
-function resetProjectResolverCache() {
-  resolveCache.clear();
-  gitCache.clear();
-  workspaceCache.clear();
-  wsIdCache.clear();
-  cachedConfig = null;
+function isInside(child, parent) {
+  if (!parent)
+    return false;
+  if (child === parent)
+    return true;
+  const c = child.endsWith(sep) ? child : child + sep;
+  const p = parent.endsWith(sep) ? parent : parent + sep;
+  return c.startsWith(p);
 }
-function _setProjectsConfigForTests(cfg) {
-  resetProjectResolverCache();
-  cachedConfig = cfg === null ? null : { mtime: Number.MAX_SAFE_INTEGER, cfg };
+function globMatch(pattern, path) {
+  const re = new RegExp("^" + globToRegex(toPosix(pattern)) + "$");
+  return re.test(toPosix(path));
 }
-function resolveProjectId(inputPath) {
-  if (!inputPath) {
-    return { id: "", displayName: "", source: "path" };
+function toPosix(p) {
+  return p.replace(/\\/g, "/");
+}
+function globToRegex(glob) {
+  let out = "";
+  let i = 0;
+  while (i < glob.length) {
+    const c = glob[i];
+    if (c === "*" && glob[i + 1] === "*") {
+      out += ".*";
+      i += 2;
+      if (glob[i] === "/")
+        i++;
+    } else if (c === "*") {
+      out += "[^/]*";
+      i++;
+    } else if (c === "?") {
+      out += "[^/]";
+      i++;
+    } else if (c === "{") {
+      const end = glob.indexOf("}", i);
+      if (end === -1) {
+        out += "\\{";
+        i++;
+        continue;
+      }
+      const opts = glob.slice(i + 1, end).split(",").map(escapeRe).join("|");
+      out += "(?:" + opts + ")";
+      i = end + 1;
+    } else {
+      out += escapeRe(c);
+      i++;
+    }
   }
-  if (!isAbsolute(inputPath)) {
-    return { id: `path:${inputPath}`, displayName: inputPath, source: "path" };
+  return out;
+}
+function escapeRe(s) {
+  return s.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+}
+var DEFAULT_AUTO_WORKSPACE_MIN_REPOS, BOT_WORKTREE_MARKERS, resolveCache, gitCache, workspaceCache, wsIdCache, cachedConfig, GIT_TIMEOUT_MS, AUTO_WORKSPACE_MAX_DEPTH;
+var init_project_resolver = __esm({
+  "../engine/dist/core/project-resolver.js"() {
+    "use strict";
+    init_paths();
+    DEFAULT_AUTO_WORKSPACE_MIN_REPOS = 3;
+    BOT_WORKTREE_MARKERS = [".claude-pr-bot"];
+    resolveCache = /* @__PURE__ */ new Map();
+    gitCache = /* @__PURE__ */ new Map();
+    workspaceCache = /* @__PURE__ */ new Map();
+    wsIdCache = /* @__PURE__ */ new Map();
+    cachedConfig = null;
+    GIT_TIMEOUT_MS = 1e4;
+    AUTO_WORKSPACE_MAX_DEPTH = 2;
   }
-  const realPath = safeRealpath(inputPath);
-  const cached = resolveCache.get(realPath);
-  if (cached)
-    return cached;
-  const result = doResolve(realPath);
-  resolveCache.set(realPath, result);
-  return result;
+});
+
+// ../engine/dist/core/credentials-env.js
+function envCredentials(env = process.env) {
+  const token = (env.CHAT_RECALL_TOKEN || "").trim();
+  const server = (env.CHAT_RECALL_SERVER || "").trim();
+  if (!token || !server)
+    return null;
+  if (!/^https?:\/\//i.test(server))
+    return null;
+  return { serverUrl: normalise(server), token };
 }
-function resolveWorkspaceId(inputPath) {
-  if (!inputPath || !isAbsolute(inputPath))
+var normalise;
+var init_credentials_env = __esm({
+  "../engine/dist/core/credentials-env.js"() {
+    "use strict";
+    normalise = (u) => u.trim().replace(/\/+$/, "");
+  }
+});
+
+// ../engine/dist/core/secret-redactor.js
+var secret_redactor_exports = {};
+__export(secret_redactor_exports, {
+  DEFAULT_REDACTION_RULES: () => DEFAULT_REDACTION_RULES,
+  _clearServerRulePack: () => _clearServerRulePack,
+  _resetPrivacyCache: () => _resetPrivacyCache,
+  _resetRedactorCache: () => _resetRedactorCache,
+  applyChunkPrivacy: () => applyChunkPrivacy,
+  findContextualSecrets: () => findContextualSecrets,
+  installServerRulePack: () => installServerRulePack,
+  isFilePathRedactionEnabled: () => isFilePathRedactionEnabled,
+  isRedactionEnabled: () => isRedactionEnabled,
+  isToolOutputRedactionEnabled: () => isToolOutputRedactionEnabled,
+  redactFilePaths: () => redactFilePaths,
+  redactSecrets: () => redactSecrets,
+  redactToolResultBody: () => redactToolResultBody,
+  scanTextForFindings: () => scanTextForFindings,
+  serverRulePackVersion: () => serverRulePackVersion,
+  validateRedactionRule: () => validateRedactionRule
+});
+import { statSync as statSync14 } from "fs";
+import { createHash as createHash4 } from "crypto";
+function secretOf(rule, m) {
+  const raw = rule.secret != null ? m[rule.secret] : m[0];
+  if (raw == null)
     return null;
-  const realPath = safeRealpath(inputPath);
-  const cached = wsIdCache.get(realPath);
-  if (cached !== void 0)
-    return cached;
-  const result = doResolveWorkspace(realPath);
-  wsIdCache.set(realPath, result);
-  return result;
+  if (rule.where && !rule.where(raw))
+    return null;
+  return raw;
 }
-function doResolveWorkspace(realPath) {
-  const cfg = loadProjectsConfig();
-  const declaredWorkspaces = (cfg.projects || []).filter((p) => p.workspace).sort((a, b) => b.root.length - a.root.length);
-  for (const proj of declaredWorkspaces) {
-    if (isInside(realPath, safeRealpath(proj.root)))
-      return proj.id;
-  }
-  const anchor = findGitToplevel(realPath) ?? realPath;
-  const ws = resolveAutoWorkspace(anchor, cfg.autoWorkspaceMinRepos ?? DEFAULT_AUTO_WORKSPACE_MIN_REPOS);
-  return ws ? ws.id : null;
+function looksLikeSecretToken(t) {
+  if (t.length < 32)
+    return false;
+  if (/^[a-f0-9]+$/i.test(t))
+    return true;
+  return /[A-Z]/.test(t) && /[a-z]/.test(t) && /[0-9]/.test(t);
 }
-function doResolve(realPath) {
-  const cfg = loadProjectsConfig();
-  if (matchesIgnore(realPath, cfg)) {
-    return { id: `ignored:${realPath}`, displayName: basename11(realPath), source: "ignored" };
+function findContextualSecrets(text) {
+  if (!text)
+    return [];
+  const ranges = [];
+  let m;
+  SECRET_CONTEXT_RE.lastIndex = 0;
+  while ((m = SECRET_CONTEXT_RE.exec(text)) !== null) {
+    const winStart = m.index + m[0].length;
+    const window = text.slice(winStart, winStart + 80);
+    HIGH_ENTROPY_TOKEN_RE.lastIndex = 0;
+    let tm;
+    while ((tm = HIGH_ENTROPY_TOKEN_RE.exec(window)) !== null) {
+      if (!looksLikeSecretToken(tm[0]))
+        continue;
+      if (/^[a-f0-9]+$/i.test(tm[0]) && /\b(?:commit|sha-?\d*|hash|digest|checksum|uuid|guid|etag|blob|ref)\b/i.test(window.slice(0, tm.index))) {
+        continue;
+      }
+      ranges.push({ start: winStart + tm.index, end: winStart + tm.index + tm[0].length });
+      break;
+    }
   }
-  const declared = matchDeclaredProject(realPath, cfg.projects || []);
-  if (declared)
-    return declared;
-  const bot = resolveBotWorktree(realPath);
-  if (bot)
-    return bot;
-  const git2 = resolveGit(realPath);
-  if (git2)
-    return git2;
-  const ws = resolveAutoWorkspace(realPath, cfg.autoWorkspaceMinRepos ?? DEFAULT_AUTO_WORKSPACE_MIN_REPOS);
-  if (ws)
-    return ws;
-  return {
-    id: `path:${realPath}`,
-    displayName: basename11(realPath) || realPath,
-    source: "path"
-  };
-}
-function matchesIgnore(realPath, cfg) {
-  const rules = cfg.ignore || [];
-  for (const r of rules) {
-    if (globMatch(r.match, realPath))
-      return true;
+  ranges.sort((a, b) => a.start - b.start);
+  const out = [];
+  for (const r of ranges) {
+    const last = out[out.length - 1];
+    if (last && r.start < last.end) {
+      last.end = Math.max(last.end, r.end);
+      continue;
+    }
+    out.push({ ...r });
   }
-  return false;
+  return out;
 }
-function resolveBotWorktree(realPath) {
-  const parts = realPath.split(sep);
-  const idx = parts.findIndex((p) => BOT_WORKTREE_MARKERS.includes(p));
-  if (idx === -1)
+function isEnvRedactionRequested() {
+  const v = process.env.CHAT_RECALL_REDACT_INDEX;
+  if (v === void 0)
     return null;
-  const botRoot = parts.slice(0, idx + 1).join(sep);
-  return {
-    id: `path:${botRoot}`,
-    displayName: parts[idx],
-    source: "path"
-  };
+  return v === "1" || v === "true" || v === "yes";
 }
-function matchDeclaredProject(realPath, projects) {
-  const candidates2 = [...projects].sort((a, b) => b.root.length - a.root.length);
-  for (const proj of candidates2) {
-    const root = safeRealpath(proj.root);
-    if (!isInside(realPath, root))
-      continue;
-    if (!proj.workspace && proj.children?.length) {
-      const child = matchChild(realPath, root, proj.children);
-      if (child) {
-        return {
-          id: `${proj.id}/${child.id}`,
-          displayName: child.name || child.id,
-          source: "user",
-          workspaceId: proj.id
-        };
+function settingsView() {
+  let mtimeMs = -1;
+  try {
+    mtimeMs = statSync14(settingsFilePath()).mtimeMs;
+  } catch {
+  }
+  if (cache && cache.mtimeMs === mtimeMs)
+    return cache;
+  let enabled = false;
+  const extra = [];
+  try {
+    const s = loadSettings();
+    enabled = !!s.privacy?.redactIndex;
+    for (const r of s.privacy?.redactionRules ?? []) {
+      try {
+        extra.push({ label: r.label, pattern: new RegExp(r.pattern, "g") });
+      } catch {
       }
     }
-    return {
-      id: proj.id,
-      displayName: proj.name || proj.id,
-      source: "user",
-      workspaceId: proj.workspace ? void 0 : void 0
-    };
+  } catch {
   }
-  return null;
+  cache = { mtimeMs, enabled, rules: [...DEFAULT_REDACTION_RULES, ...extra] };
+  return cache;
 }
-function matchChild(realPath, parentRoot, children) {
-  const sorted = [...children].sort((a, b) => b.path.length - a.path.length);
-  for (const c of sorted) {
-    const childRoot = safeRealpath(join17(parentRoot, c.path));
-    if (isInside(realPath, childRoot))
-      return c;
+function compileServerRule(spec) {
+  const name = spec.name || "(unnamed)";
+  if (!spec.regex)
+    return { name, reason: "empty pattern" };
+  if (spec.regex.length > MAX_PATTERN_LEN)
+    return { name, reason: `pattern longer than ${MAX_PATTERN_LEN} chars` };
+  let re;
+  try {
+    const flags = "g" + (spec.flags || "").replace(/[^ims]/g, "");
+    re = new RegExp(spec.regex, flags);
+  } catch (e) {
+    return { name, reason: `invalid regex: ${e instanceof Error ? e.message : e}` };
   }
-  return null;
+  if (re.test(""))
+    return { name, reason: "matches the empty string (would redact everything)" };
+  re.lastIndex = 0;
+  if (re.test(CANARY))
+    return { name, reason: "matches benign text \u2014 too broad" };
+  re.lastIndex = 0;
+  return { label: `${spec.source === "pack" ? "pack" : "tenant"}:${name}`, pattern: re };
 }
-function resolveGit(realPath) {
-  const toplevel = findGitToplevel(realPath);
-  if (!toplevel)
-    return null;
-  const probe = getGitRemote(toplevel);
-  if (probe.kind === "remote") {
-    const parsed = parseGitRemote(probe.url);
-    if (parsed) {
-      return {
-        id: `git:${parsed.host}/${parsed.owner}/${parsed.repo}`,
-        displayName: parsed.repo,
-        source: "git-remote"
-      };
+function validateRedactionRule(spec) {
+  const out = compileServerRule(spec);
+  return "reason" in out ? { ok: false, reason: out.reason } : { ok: true };
+}
+function installServerRulePack(pack) {
+  const rejected = [];
+  const rules = [];
+  for (const spec of pack.rules || []) {
+    if (rules.length >= MAX_PACK_RULES) {
+      rejected.push({ name: spec.name || "(unnamed)", reason: `pack exceeds ${MAX_PACK_RULES} rules` });
+      continue;
     }
+    const out = compileServerRule(spec);
+    if ("reason" in out)
+      rejected.push(out);
+    else
+      rules.push(out);
   }
-  if (probe.kind === "failed") {
-    console.error(`[project] could not read git remotes in ${toplevel} \u2014 filing it as a local-only repo for now, which is probably wrong: ${probe.reason}`);
-  }
-  const hash = createHash4("sha1").update(toplevel).digest("hex").slice(0, 12);
-  return {
-    id: `git-local:${hash}`,
-    displayName: basename11(toplevel),
-    source: "git-local"
-  };
+  const version2 = pack.version || "";
+  serverPack = { version: version2, rules };
+  return { version: version2, accepted: rules.length, rejected };
 }
-function findGitToplevel(realPath) {
-  let cur = realPath;
-  let last = "";
-  while (cur && cur !== last) {
-    if (existsSync16(join17(cur, ".git")))
-      return cur;
-    last = cur;
-    cur = dirname13(cur);
-  }
-  return null;
+function serverRulePackVersion() {
+  return serverPack ? serverPack.version || "unversioned" : null;
 }
-function git(toplevel, args) {
-  return execSync(`git ${args}`, {
-    cwd: toplevel,
-    stdio: ["ignore", "pipe", "ignore"],
-    encoding: "utf-8",
-    timeout: GIT_TIMEOUT_MS
-  });
+function _clearServerRulePack() {
+  serverPack = null;
 }
-function probeGitRemote(toplevel) {
-  let names;
-  try {
-    names = git(toplevel, "remote").split("\n").map((n) => n.trim()).filter(Boolean);
-  } catch (err) {
-    return { kind: "failed", reason: err instanceof Error ? err.message : String(err) };
+function activeRules() {
+  const base3 = settingsView().rules;
+  return serverPack && serverPack.rules.length > 0 ? [...base3, ...serverPack.rules] : base3;
+}
+function isRedactionEnabled() {
+  const env = isEnvRedactionRequested();
+  if (env !== null)
+    return env;
+  return settingsView().enabled;
+}
+function _resetRedactorCache() {
+  cache = null;
+}
+function redactSecrets(text, opts = {}) {
+  if (!opts.force && !isRedactionEnabled())
+    return text;
+  if (!text)
+    return text;
+  const rules = opts.rules || activeRules();
+  let out = text;
+  for (const r of rules) {
+    out = out.replace(r.pattern, (...args) => {
+      const whole = args[0];
+      const m = args.slice(0, args.length);
+      const secret = secretOf(r, m);
+      if (secret == null)
+        return whole;
+      if (opts.count)
+        opts.count.redactions++;
+      return whole.slice(0, whole.length - secret.length) + `[REDACTED:${r.label}]`;
+    });
   }
-  if (names.length === 0)
-    return { kind: "none" };
-  const pick = names.includes("origin") ? "origin" : names[0];
-  try {
-    const url = git(toplevel, `remote get-url ${pick}`).trim();
-    return url ? { kind: "remote", url } : { kind: "none" };
-  } catch (err) {
-    return { kind: "failed", reason: err instanceof Error ? err.message : String(err) };
+  const ctx = findContextualSecrets(out);
+  for (let i = ctx.length - 1; i >= 0; i--) {
+    const { start, end } = ctx[i];
+    if (opts.count)
+      opts.count.redactions++;
+    out = out.slice(0, start) + "[REDACTED:secret-context]" + out.slice(end);
   }
+  return out;
 }
-function getGitRemote(toplevel) {
-  const cached = gitCache.get(toplevel);
-  if (cached)
-    return cached;
-  const probe = probeGitRemote(toplevel);
-  if (probe.kind !== "failed")
-    gitCache.set(toplevel, probe);
-  return probe;
-}
-function parseGitRemote(url) {
-  const trimmed = url.trim().replace(/\.git$/, "");
-  if (!trimmed)
-    return null;
-  const ssh = /^[^@]+@([^:]+):(.+?)\/([^/]+)$/.exec(trimmed);
-  if (ssh)
-    return { host: normaliseHost(ssh[1]), owner: ssh[2], repo: ssh[3] };
-  const url1 = /^[a-z+]+:\/\/(?:[^@]+@)?([^/:]+)(?::\d+)?\/(.+?)\/([^/]+)$/.exec(trimmed);
-  if (url1)
-    return { host: normaliseHost(url1[1]), owner: url1[2], repo: url1[3] };
-  return null;
+function maskSecret(s) {
+  if (!s)
+    return "";
+  if (s.length <= 4)
+    return "*".repeat(s.length);
+  return "*".repeat(Math.min(s.length - 4, 60)) + s.slice(-4);
 }
-function normaliseHost(host) {
-  for (const known of ["github.com", "gitlab.com", "bitbucket.org", "codeberg.org", "gitea.com"]) {
-    if (host === known)
-      return known;
-    if (host.startsWith(known + "-") || host.startsWith(known + "."))
-      return known;
+function globalRegexFor(pattern) {
+  const flags = pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g";
+  const key2 = pattern.source + "\0" + flags;
+  let re = globalRegexCache.get(key2);
+  if (!re) {
+    re = new RegExp(pattern.source, flags);
+    globalRegexCache.set(key2, re);
   }
-  return host;
+  return re;
 }
-function resolveAutoWorkspace(realPath, minRepos) {
-  let cur = realPath;
-  let last = "";
-  let depth = 0;
-  while (cur && cur !== last && depth < AUTO_WORKSPACE_MAX_DEPTH) {
-    if (!existsSync16(join17(cur, ".git"))) {
-      const cached = workspaceCache.get(cur);
-      let qualifies;
-      if (cached === void 0) {
-        qualifies = countGitChildren(cur) >= minRepos;
-        workspaceCache.set(cur, qualifies ? cur : null);
-      } else {
-        qualifies = cached !== null;
+function makeLineResolver(text) {
+  const starts = [];
+  for (let i = text.indexOf("\n"); i !== -1; i = text.indexOf("\n", i + 1))
+    starts.push(i);
+  return (index) => {
+    let lo = 0, hi = starts.length;
+    while (lo < hi) {
+      const mid = lo + hi >> 1;
+      if (starts[mid] < index)
+        lo = mid + 1;
+      else
+        hi = mid;
+    }
+    return lo + 1;
+  };
+}
+function scanTextForFindings(text, opts = {}) {
+  if (!text)
+    return [];
+  const rules = opts.rules || activeRules();
+  const findings = [];
+  const seenSpans = /* @__PURE__ */ new Set();
+  const lineAt = makeLineResolver(text);
+  for (const r of rules) {
+    const re = globalRegexFor(r.pattern);
+    re.lastIndex = 0;
+    let m;
+    while ((m = re.exec(text)) !== null) {
+      const secret = secretOf(r, m);
+      if (secret == null) {
+        if (re.lastIndex === m.index)
+          re.lastIndex++;
+        continue;
       }
-      if (qualifies) {
-        const name = basename11(cur);
-        return { id: `ws:${name}`, displayName: name, source: "auto-workspace" };
+      const at = m.index + (m[0].length - secret.length);
+      const span = `${at}:${secret.length}`;
+      if (!seenSpans.has(span)) {
+        seenSpans.add(span);
+        findings.push({ rule: r.label, line: lineAt(at), preview: maskSecret(secret) });
       }
+      if (re.lastIndex === m.index)
+        re.lastIndex++;
     }
-    last = cur;
-    cur = dirname13(cur);
-    depth++;
   }
-  return null;
+  for (const { start, end } of findContextualSecrets(text)) {
+    const line = lineAt(start);
+    findings.push({ rule: "secret-context", line, preview: maskSecret(text.slice(start, end)) });
+  }
+  return findings;
 }
-function countGitChildren(dir) {
-  let count = 0;
-  let entries;
+function privacyView() {
+  let mtimeMs = -1;
   try {
-    entries = readdirSync12(dir);
+    mtimeMs = statSync14(settingsFilePath()).mtimeMs;
   } catch {
-    return 0;
-  }
-  for (const name of entries) {
-    if (name.startsWith("."))
-      continue;
-    const child = join17(dir, name);
-    try {
-      const st = statSync14(child);
-      if (!st.isDirectory())
-        continue;
-      if (existsSync16(join17(child, ".git")))
-        count++;
-    } catch {
-    }
   }
-  return count;
-}
-function safeRealpath(p) {
+  if (privacyCache && privacyCache.mtimeMs === mtimeMs)
+    return privacyCache;
+  let redactToolOutputs = false, redactFilePaths2 = false;
   try {
-    return realpathSync2(p);
+    const s = loadSettings();
+    redactToolOutputs = !!s.privacy?.redactToolOutputs;
+    redactFilePaths2 = !!s.privacy?.redactFilePaths;
   } catch {
-    return resolve(p);
   }
+  privacyCache = { mtimeMs, redactToolOutputs, redactFilePaths: redactFilePaths2 };
+  return privacyCache;
 }
-function isInside(child, parent) {
-  if (!parent)
-    return false;
-  if (child === parent)
-    return true;
-  const c = child.endsWith(sep) ? child : child + sep;
-  const p = parent.endsWith(sep) ? parent : parent + sep;
-  return c.startsWith(p);
+function _resetPrivacyCache() {
+  privacyCache = null;
 }
-function globMatch(pattern, path) {
-  const re = new RegExp("^" + globToRegex(toPosix(pattern)) + "$");
-  return re.test(toPosix(path));
+function isToolOutputRedactionEnabled() {
+  return privacyView().redactToolOutputs;
 }
-function toPosix(p) {
-  return p.replace(/\\/g, "/");
+function isFilePathRedactionEnabled() {
+  return privacyView().redactFilePaths;
 }
-function globToRegex(glob) {
-  let out = "";
-  let i = 0;
-  while (i < glob.length) {
-    const c = glob[i];
-    if (c === "*" && glob[i + 1] === "*") {
-      out += ".*";
-      i += 2;
-      if (glob[i] === "/")
-        i++;
-    } else if (c === "*") {
-      out += "[^/]*";
-      i++;
-    } else if (c === "?") {
-      out += "[^/]";
-      i++;
-    } else if (c === "{") {
-      const end = glob.indexOf("}", i);
-      if (end === -1) {
-        out += "\\{";
-        i++;
-        continue;
-      }
-      const opts = glob.slice(i + 1, end).split(",").map(escapeRe).join("|");
-      out += "(?:" + opts + ")";
-      i = end + 1;
-    } else {
-      out += escapeRe(c);
-      i++;
-    }
-  }
-  return out;
+function redactFilePaths(text) {
+  if (!text)
+    return text;
+  return text.replace(PATH_REGEX, (m) => {
+    if (m.startsWith("[REDACTED:"))
+      return m;
+    const h = createHash4("sha256").update(m).digest("hex").slice(0, 12);
+    return `[path:${h}]`;
+  });
 }
-function escapeRe(s) {
-  return s.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+function applyChunkPrivacy(text) {
+  let out = redactSecrets(text);
+  if (privacyView().redactFilePaths)
+    out = redactFilePaths(out);
+  return out;
 }
-var DEFAULT_AUTO_WORKSPACE_MIN_REPOS, BOT_WORKTREE_MARKERS, resolveCache, gitCache, workspaceCache, wsIdCache, cachedConfig, GIT_TIMEOUT_MS, AUTO_WORKSPACE_MAX_DEPTH;
-var init_project_resolver = __esm({
-  "../engine/dist/core/project-resolver.js"() {
-    "use strict";
-    init_paths();
-    DEFAULT_AUTO_WORKSPACE_MIN_REPOS = 3;
-    BOT_WORKTREE_MARKERS = [".claude-pr-bot"];
-    resolveCache = /* @__PURE__ */ new Map();
-    gitCache = /* @__PURE__ */ new Map();
-    workspaceCache = /* @__PURE__ */ new Map();
-    wsIdCache = /* @__PURE__ */ new Map();
-    cachedConfig = null;
-    GIT_TIMEOUT_MS = 1e4;
-    AUTO_WORKSPACE_MAX_DEPTH = 2;
-  }
-});
-
-// ../engine/dist/core/credentials-env.js
-function envCredentials(env = process.env) {
-  const token = (env.CHAT_RECALL_TOKEN || "").trim();
-  const server = (env.CHAT_RECALL_SERVER || "").trim();
-  if (!token || !server)
-    return null;
-  if (!/^https?:\/\//i.test(server))
-    return null;
-  return { serverUrl: normalise(server), token };
+function redactToolResultBody(toolName, body) {
+  if (!body)
+    return body;
+  return `[redacted: ${toolName} output, ${body.length} chars]`;
 }
-var normalise;
-var init_credentials_env = __esm({
-  "../engine/dist/core/credentials-env.js"() {
+var DEFAULT_REDACTION_RULES, SECRET_CONTEXT_RE, HIGH_ENTROPY_TOKEN_RE, cache, CANARY, MAX_PACK_RULES, MAX_PATTERN_LEN, serverPack, globalRegexCache, privacyCache, PATH_REGEX;
+var init_secret_redactor = __esm({
+  "../engine/dist/core/secret-redactor.js"() {
     "use strict";
-    normalise = (u) => u.trim().replace(/\/+$/, "");
+    init_settings();
+    DEFAULT_REDACTION_RULES = [
+      // AWS access tokens. Prefix-anchored: AKIA, ASIA, ABIA (long-term,
+      // STS, EC2). Always exactly 16 hex/alphanumeric after the prefix.
+      // NOTE: this matches only the access-key-ID, NOT the secret key value —
+      // the `env-secret` rule below covers AWS_SECRET_ACCESS_KEY / AWS_SESSION_TOKEN.
+      { label: "aws-access-token", pattern: /\b(?:AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}\b/g },
+      // AWS STS session tokens. These are long base64 blobs with NO `NAME=` context
+      // when pasted bare into prose/code, so `env-secret` misses them — but they
+      // reliably start with one of a handful of base64 prefixes (the encoded
+      // `{"...` JSON header). Prefix-anchored → low false-positive. This is the
+      // bare-value form that leaked (`search('IQoJEXAMPLEfakeSESSIONtokenNOTreal01234567890abcDEF==...')`).
+      { label: "aws-session-token", pattern: /\b(?:IQoJ|FwoG|FwoH|FQoG|FQoH|FwoD)[A-Za-z0-9/+]{40,}={0,2}/g },
+      // Env/shell-assignment secrets — a VAR whose name ends in KEY/SECRET/TOKEN/
+      // PASSWORD/CREDENTIAL, then `=`/`:`, then the value. Zero-width lookbehind so
+      // only the VALUE is redacted (the var name stays for context). This is the
+      // dominant real-world leak vector (`export` dumps, .env files, `curl -H`,
+      // tool output) and is exactly what leaked AWS_SECRET_ACCESS_KEY and
+      // AWS_SESSION_TOKEN in cleartext while the access-key-ID rule above caught
+      // only the (least-sensitive) ID.
+      // Suffix list deliberately broad: DB_PASS (our own helm chart's name!),
+      // NPM_AUTH, SENTRY_DSN, SESSION/COOKIE secrets and BEARER vars all leaked
+      // past the original KEY/SECRET/TOKEN/PASSWORD-only list. Values under 12
+      // chars don't redact, so flag-ish vars (BYPASS=true) stay readable.
+      // Context CONSUMED, secret in group 1 — see RedactionRule.secret. As a
+      // lookbehind this was the second most expensive rule in the collector.
+      { label: "env-secret", secret: 1, pattern: /\b[A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASSWORD|PASSWD|PASS|PWD|CREDENTIAL|AUTH|DSN|SESSION|COOKIE|BEARER|SIGNATURE)S?["']?[ \t]{0,3}[:=][ \t]{0,3}["']?([A-Za-z0-9/+_.~=:@-]{12,})/g },
+      // Credentials embedded in a connection URL: scheme://user:PASSWORD@host.
+      // Redacts only the password segment (keeps scheme/user/host for context).
+      //
+      // Scheme-agnostic on purpose. The old rule allowlisted eight DB schemes, so
+      // `https://user:pass@host`, `ssh://`, `ftp://`, `smtp://` and every other
+      // userinfo URL walked through in cleartext — and a `jdbc:postgresql://…`
+      // prefix broke the \b anchor for the one family it did cover. Any scheme
+      // followed by userinfo is a credential, so match the shape, not a list.
+      { label: "url-password", secret: 1, pattern: /\b[a-zA-Z][a-zA-Z0-9+.-]{1,31}:\/\/[^:@\s/]{1,64}:([^@\s/]{1,256})(?=@)/g },
+      // Bare AWS secret-access-key VALUE: EXACTLY 40 base64 chars, word-bounded,
+      // containing upper+lower+digit. This is the gitleaks heuristic — the mixed-case
+      // requirement excludes 40-char lowercase-hex git SHAs, and the exact-40 bound
+      // excludes longer blobs/tokens. It catches the value when it appears bare in
+      // prose with NO `NAME=` and NO nearby context word (e.g. inside a markdown
+      // table or quoted in analysis) — the residual leak path the env-secret and
+      // contextual rules both miss. Placed AFTER env-secret/url-password so the
+      // keyed/URL forms keep their more-specific labels.
+      // The three stacked lookaheads each re-scanned the same 40 characters, which
+      // made this the MOST expensive rule of all 106 the collector runs (13.1% of a
+      // 29.5 MB scan). The mixed-case-plus-digit test is now one JS pass.
+      {
+        label: "aws-secret-key",
+        secret: 1,
+        pattern: /(?<![A-Za-z0-9/+])([A-Za-z0-9/+]{40})(?![A-Za-z0-9/+])/g,
+        where: (v) => /[a-z]/.test(v) && /[A-Z]/.test(v) && /[0-9]/.test(v)
+      },
+      // GitHub personal access tokens.
+      { label: "github-pat", pattern: /\bghp_[A-Za-z0-9]{36}\b/g },
+      // GitHub fine-grained PATs.
+      { label: "github-fine", pattern: /\bgithub_pat_[A-Za-z0-9_]{82}\b/g },
+      // GitHub OAuth.
+      { label: "github-oauth", pattern: /\bgho_[A-Za-z0-9]{36}\b/g },
+      // GitHub app + refresh.
+      { label: "github-app", pattern: /\b(?:ghs|ghu|ghr)_[A-Za-z0-9]{36}\b/g },
+      // Slack bot/user/app tokens.
+      { label: "slack-token", pattern: /\bxox[abopr]-[A-Za-z0-9-]{10,}\b/g },
+      // Slack incoming webhook URL.
+      { label: "slack-webhook", pattern: /\bhttps:\/\/hooks\.slack\.com\/services\/T[A-Z0-9]+\/B[A-Z0-9]+\/[A-Za-z0-9]+\b/g },
+      // Stripe live + test keys.
+      { label: "stripe-key", pattern: /\b(?:sk|pk|rk)_(?:live|test)_[A-Za-z0-9]{24,}\b/g },
+      // Anthropic.
+      { label: "anthropic-key", pattern: /\bsk-ant-[a-zA-Z0-9_-]{40,}\b/g },
+      // OpenAI. Two shapes, deliberately kept apart. The classic key is
+      // `sk-` + base62 with NO hyphens; the modern scoped keys carry an explicit
+      // proj/svcacct/admin segment first. Allowing hyphens after a bare `sk-`
+      // (which is what admitted sk-proj- in the first place) also matches ordinary
+      // kebab-case text — `sk-fix-the-login-redirect-bug`, `.sk-button-primary`,
+      // `sk-2024-01-01-backup` — and this corpus is full of branch names and CSS
+      // classes. Requiring the segment keeps sk-proj- coverage without that.
+      { label: "openai-key", pattern: /\bsk-(?:proj|svcacct|admin)-[A-Za-z0-9_-]{20,}\b|\bsk-[A-Za-z0-9]{20,}\b/g },
+      // Google API key (AIza…).
+      { label: "google-api-key", pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+      // Generic JWT — three base64url segments.
+      { label: "jwt", pattern: /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g },
+      // Private key blocks (PEM). The label is a free word run rather than a fixed
+      // list, so ENCRYPTED PRIVATE KEY and PGP PRIVATE KEY BLOCK are covered
+      // without another enumeration, and \1 forces END to name the same kind as
+      // BEGIN.
+      //
+      // The body is [^-], NOT [\s\S]*?. That is a performance boundary, not a
+      // style choice. An unanchored prefix with an unbounded lazy gap re-scans to
+      // end-of-input from every candidate start, so text carrying many BEGIN
+      // markers and no matching END costs O(n^2): 500KB of that measured 810ms
+      // here, and this runs synchronously on the server's event loop over
+      // tenant-supplied text (services/secret-rescan.ts). A PEM body is base64
+      // plus headers and contains no '-', so excluding it makes the scan stop at
+      // the next delimiter instead of at EOF — same matches, linear cost.
+      { label: "private-key", pattern: /-----BEGIN ([A-Z0-9 ]{0,32})PRIVATE KEY(?: BLOCK)?-----[^-]{0,10000}?-----END \1PRIVATE KEY(?: BLOCK)?-----/g },
+      // PuTTY keys are not PEM. Match the Private-Lines payload — the actual key
+      // material — rather than spanning the whole file, which would need the same
+      // unbounded gap the rule above just removed. Line-anchored and base64-only,
+      // so it cannot run away.
+      { label: "putty-key", pattern: /^Private-Lines:[ \t]*\d{1,4}[\r\n]+(?:[A-Za-z0-9+/=]{8,120}[\r\n]+){1,400}/gm },
+      // npm tokens (uuid-shaped — overlap with our UUID filter; intentional).
+      { label: "npm-token", pattern: /\bnpm_[A-Za-z0-9]{36}\b/g },
+      // .npmrc auth lines: //registry.npmjs.org/:_authToken=VALUE (the key is not
+      // ALL-CAPS, so the env-secret rule above never matched it). The leading `:`
+      // is required — it is what makes this npmrc syntax rather than any shell var
+      // ending in _AUTH, which env-secret already owns and labels better.
+      // [^\s"'`]+ so the closing quote is not swallowed, and a ${VAR} placeholder
+      // is left alone — redacting it destroys a config example and hides nothing.
+      // The rule the perf profile caught the wedged daemon inside: 98.94% of samples.
+      { label: "npmrc-auth", secret: 1, pattern: /:_(?:authToken|password|auth)[ \t]*=[ \t]*(?!\$\{)([^\s"'`]{12,})/gi },
+      // HTTP Authorization headers. env-secret requires an ALL-CAPS name, and
+      // `Authorization` is mixed case, so both Bearer and Basic walked straight
+      // through — including short opaque tokens the contextual pass also misses
+      // (it needs 32+ chars AND mixed-case-plus-digit).
+      // Same two guards as npmrc-auth: stop at a quote, and skip the obvious
+      // placeholders that fill documentation (<YOUR_TOKEN>, ${TOKEN}, xxx…).
+      { label: "auth-header", secret: 1, pattern: /\bauthorization[ \t]*:[ \t]*(?:bearer|basic|token)[ \t]+(?![<$])([^\s"'`<]{8,})/gi },
+      // Vendor tokens with unambiguous prefixes. Each is a fixed literal, so a
+      // false positive is essentially impossible and the cost of listing is low.
+      { label: "gitlab-pat", pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g },
+      { label: "slack-app-token", pattern: /\bxapp-\d-[A-Z0-9]{8,}-\d{10,}-[a-f0-9]{32,}\b/g },
+      { label: "sendgrid-key", pattern: /\bSG\.[A-Za-z0-9_-]{20,24}\.[A-Za-z0-9_-]{40,50}\b/g },
+      // (?<![-\w]) so `cache-key-<md5>` is not read as a mailgun key.
+      { label: "mailgun-key", pattern: /(?<![-\w])key-[a-f0-9]{32}\b/g },
+      { label: "digitalocean-pat", pattern: /\bdop_v1_[a-f0-9]{64}\b/g },
+      { label: "huggingface-token", pattern: /\bhf_[A-Za-z0-9]{30,}\b/g },
+      { label: "shopify-token", pattern: /\bshp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}\b/g },
+      { label: "pypi-token", pattern: /\bpypi-AgEIcHlwaS5vcmc[A-Za-z0-9_-]{50,}\b/g },
+      // No twilio-sid rule: AC…/SK… are Twilio SIDs, which are public account and
+      // key identifiers, not the auth token. Redacting them hid nothing and
+      // collided with 32-hex etags and MD5 sums.
+      // No discord-bot-token rule either: the shape (word.word.word) matched
+      // ordinary dotted symbols such as a.b.ApplicationContextProviderImpl.
+      { label: "telegram-bot-token", pattern: /\b\d{8,10}:AA[A-Za-z0-9_-]{32,}\b/g },
+      { label: "doppler-token", pattern: /\bdp\.(?:pt|st|sa|ct)\.[A-Za-z0-9_-]{20,}\b/g },
+      // Azure Storage SAS signature — the `sig=` parameter is the actual secret.
+      { label: "azure-sas", secret: 1, pattern: /[?&]sig=([A-Za-z0-9%/+=]{20,})/g }
+    ];
+    SECRET_CONTEXT_RE = /\b(?:secret|password|passwd|credential|access[ _-]?key|private[ _-]?key|api[ _-]?key|auth(?:oriz\w*)?|bearer|token)\b/gi;
+    HIGH_ENTROPY_TOKEN_RE = /[A-Za-z0-9/+_-]{32,}/g;
+    cache = null;
+    CANARY = "the quick brown fox jumps over the lazy dog 0123456789 commit 8ba1f109551bd432803012645ac136ddd475d0fb src/index.ts:42";
+    MAX_PACK_RULES = 200;
+    MAX_PATTERN_LEN = 512;
+    serverPack = null;
+    globalRegexCache = /* @__PURE__ */ new Map();
+    privacyCache = null;
+    PATH_REGEX = /(?<![A-Za-z0-9_])(?:\/[^\s'"`<>]+|[A-Za-z]:\\[^\s'"`<>]+)/g;
   }
 });
 
@@ -14036,10 +13796,10 @@ var init_types = __esm({
 
 // ../engine/dist/transcript/opencode.js
 async function parseOpenCodeSubagents(parentSessionId) {
-  const { existsSync: existsSync57 } = await import("fs");
+  const { existsSync: existsSync58 } = await import("fs");
   const { opencodeBackend: opencodeBackend2 } = await Promise.resolve().then(() => (init_opencode(), opencode_exports));
   const dbPath = opencodeBackend2.dbPath();
-  if (!existsSync57(dbPath))
+  if (!existsSync58(dbPath))
     return [];
   const realParent = parentSessionId.replace("opencode_", "");
   const db = openSqliteReadonlyOrThrow(dbPath);
@@ -14080,10 +13840,10 @@ async function parseOpenCodeSubagents(parentSessionId) {
   }
 }
 async function parseOpenCodeTranscript(sessionId) {
-  const { existsSync: existsSync57 } = await import("fs");
+  const { existsSync: existsSync58 } = await import("fs");
   const { opencodeBackend: opencodeBackend2 } = await Promise.resolve().then(() => (init_opencode(), opencode_exports));
   const dbPath = opencodeBackend2.dbPath();
-  if (!existsSync57(dbPath))
+  if (!existsSync58(dbPath))
     return [];
   const realId = sessionId.replace("opencode_", "");
   const db = openSqliteReadonlyOrThrow(dbPath);
@@ -14160,6 +13920,7 @@ __export(transcript_exports, {
   shadowFileFor: () => shadowFileFor,
   shadowRoot: () => shadowRoot,
   shadowSizeOnDisk: () => shadowSizeOnDisk,
+  shadowUncompressedBytes: () => shadowUncompressedBytes,
   snapshotShadow: () => snapshotShadow,
   trimTranscriptForSync: () => trimTranscriptForSync,
   updateShadow: () => updateShadow,
@@ -14929,111 +14690,6 @@ var init_source_registry = __esm({
   }
 });
 
-// ../engine/dist/parsers/session-source.js
-var SessionSource;
-var init_session_source = __esm({
-  "../engine/dist/parsers/session-source.js"() {
-    "use strict";
-    init_session();
-    init_chunker();
-    init_settings();
-    SessionSource = class {
-      sourceType = "session";
-      claudeDir;
-      constructor(claudeDir) {
-        this.claudeDir = claudeDir;
-      }
-      async *discover() {
-        if (!isSourceEnabled("claude", "sessions"))
-          return;
-        for (const [entry, sessionPath] of getAllSessions(this.claudeDir)) {
-          yield this.entryToItem(entry, sessionPath);
-        }
-      }
-      async parse(item) {
-        const content = await parseSessionFile(item.filePath);
-        const entry = this.itemToEntry(item);
-        const sessionChunks = chunkSession(entry, content);
-        item.extra = {
-          ...item.extra || {},
-          ...content.metadata
-        };
-        return sessionChunks.map((sc) => ({
-          chunkId: sc.chunkId,
-          itemId: sc.sessionId,
-          sourceType: "session",
-          // Empty title is preferable to "Session abc12345" placeholder text:
-          // the latter pollutes search results and gets surfaced in the UI as
-          // a misleading heading. Downstream renderers fall back to
-          // project path / time when title is empty.
-          title: sc.firstPrompt.slice(0, 100),
-          text: sc.text,
-          chunkType: sc.chunkType,
-          projectPath: sc.projectPath,
-          filePath: sc.sourceFile,
-          mtime: sc.mtime
-        }));
-      }
-      async extractLinks(item) {
-        if (item.filePath) {
-          try {
-            const { detectForkPredecessor: detectForkPredecessor2 } = await Promise.resolve().then(() => (init_raw(), raw_exports));
-            const predecessor = detectForkPredecessor2(item.filePath);
-            if (predecessor) {
-              return [{
-                sourceType: "session",
-                sourceId: item.id,
-                targetType: "session",
-                targetId: predecessor,
-                linkType: "forked_from",
-                confidence: 1
-              }];
-            }
-          } catch {
-          }
-        }
-        return [];
-      }
-      entryToItem(entry, sessionPath) {
-        return {
-          id: entry.sessionId,
-          sourceType: "session",
-          // Empty title when there's no first prompt — the UI then knows to
-          // fall back to summary or project path instead of rendering the
-          // useless "Session abc12345" placeholder as a heading.
-          title: entry.firstPrompt ? entry.firstPrompt.replace(/\n/g, " ").trim().slice(0, 100) : "",
-          projectPath: entry.projectPath,
-          filePath: sessionPath,
-          mtime: entry.fileMtime,
-          contentPreview: entry.firstPrompt?.slice(0, 200),
-          extra: {
-            messageCount: entry.messageCount,
-            gitBranch: entry.gitBranch,
-            created: entry.created,
-            modified: entry.modified,
-            isSidechain: entry.isSidechain
-          }
-        };
-      }
-      itemToEntry(item) {
-        const extra = item.extra || {};
-        return {
-          sessionId: item.id,
-          fullPath: item.filePath,
-          fileMtime: item.mtime,
-          firstPrompt: item.contentPreview || "",
-          messageCount: extra.messageCount || 0,
-          created: extra.created || "",
-          modified: extra.modified || "",
-          gitBranch: extra.gitBranch || "",
-          projectPath: item.projectPath,
-          isSidechain: extra.isSidechain || false
-        };
-      }
-    };
-  }
-});
-
 // ../engine/dist/core/utils.js
 import { existsSync as existsSync21, readdirSync as readdirSync15 } from "fs";
 import { homedir as homedir6 } from "os";
@@ -18390,7 +18046,6 @@ var init_plugins_source = __esm({
 
 // ../engine/dist/parsers/all-sources.js
 function buildSourceRegistry(registry = new SourceRegistry()) {
-  registry.register(new SessionSource());
   registry.register(new PlanSource());
   registry.register(new TaskSource());
   registry.register(new ClaudeMdSource());
@@ -18414,7 +18069,6 @@ var init_all_sources = __esm({
   "../engine/dist/parsers/all-sources.js"() {
     "use strict";
     init_source_registry();
-    init_session_source();
     init_plan_source();
     init_task_source();
     init_claude_md_source();
@@ -18736,7 +18390,7 @@ var init_sync_fields = __esm({
 });
 
 // ../engine/dist/core/index-lock.js
-import { existsSync as existsSync39, mkdirSync as mkdirSync7, openSync as openSync7, writeFileSync as writeFileSync6, readFileSync as readFileSync30, rmSync as rmSync4, statSync as statSync35, closeSync as closeSync7 } from "fs";
+import { existsSync as existsSync39, mkdirSync as mkdirSync7, openSync as openSync8, writeFileSync as writeFileSync6, readFileSync as readFileSync30, rmSync as rmSync4, statSync as statSync35, closeSync as closeSync8 } from "fs";
 import { dirname as dirname16, join as join39 } from "path";
 function acquireIndexLock(opts) {
   const lockPath = lockFilePath();
@@ -18748,7 +18402,7 @@ function acquireIndexLock(opts) {
   }
   let fd;
   try {
-    fd = openSync7(lockPath, "wx", 384);
+    fd = openSync8(lockPath, "wx", 384);
   } catch (err) {
     if (err.code === "EEXIST")
       return null;
@@ -18758,7 +18412,7 @@ function acquireIndexLock(opts) {
   try {
     writeFileSync6(fd, JSON.stringify(holder));
   } finally {
-    closeSync7(fd);
+    closeSync8(fd);
   }
   let released = false;
   return {
@@ -18858,7 +18512,7 @@ var init_http = __esm({
       CLI_VERSION = JSON.parse(readFileSync31(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.6.9";
+        if (true) CLI_VERSION = "0.7.1";
       } catch {
       }
     }
@@ -19357,7 +19011,7 @@ var init_telemetry = __esm({
     init_sync_client();
     cliVersion2 = () => {
       try {
-        return true ? "0.6.9" : "dev";
+        return true ? "0.7.1" : "dev";
       } catch {
         return "dev";
       }
@@ -19713,16 +19367,17 @@ __export(auto_update_exports, {
   noteUpdateFailure: () => noteUpdateFailure,
   planAutoUpdate: () => planAutoUpdate,
   readUpdateState: () => readUpdateState,
+  resolveNpm: () => resolveNpm,
   runAutoUpdate: () => runAutoUpdate,
   runningPrefix: () => runningPrefix,
   sweepStaleStaging: () => sweepStaleStaging,
   tarballUrl: () => tarballUrl
 });
-import { execSync as execSync2 } from "node:child_process";
-import { readFileSync as readFileSync34 } from "node:fs";
+import { execSync as execSync2, execFileSync as execFileSync3 } from "node:child_process";
+import { readFileSync as readFileSync34, existsSync as existsSync41 } from "node:fs";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { writeFileSync as writeFileSync8, mkdtempSync as mkdtempSync3, rmSync as rmSync5, readdirSync as readdirSync31, statSync as statSync36, mkdirSync as mkdirSync9 } from "node:fs";
-import { join as join41, dirname as dirname18, sep as sep2 } from "node:path";
+import { join as join41, dirname as dirname18, sep as sep2, posix as pathPosix, win32 as pathWin32 } from "node:path";
 import { tmpdir as tmpdir2, homedir as homedir15 } from "node:os";
 import { createHash as createHash8 } from "node:crypto";
 function compareVersions(a, b) {
@@ -19837,25 +19492,46 @@ function runningPrefix(moduleUrl = import.meta.url) {
   const beforeNodeModules = here.slice(0, at);
   return beforeNodeModules.endsWith(`${sep2}lib`) ? beforeNodeModules.slice(0, -4) : beforeNodeModules;
 }
-function npmInstall(cmd) {
+function npmInstall(npm, args) {
   try {
-    execSync2(cmd, { stdio: ["ignore", "ignore", "pipe"] });
+    const opts = { stdio: ["ignore", "ignore", "pipe"], env: npm.env };
+    if (npm.shell) execSync2([npm.file, ...npm.args, ...args].map((a) => `"${a}"`).join(" "), opts);
+    else execFileSync3(npm.file, [...npm.args, ...args], opts);
   } catch (e) {
     const err = e;
     const detail = String(err.stderr ?? "").trim().split("\n").filter((l) => l.trim() && !/^npm (notice|warn)\b/i.test(l)).slice(-4).join(" | ").slice(0, 400);
     throw new Error(detail ? `${err.message ?? "install failed"} \u2014 ${detail}` : err.message ?? "install failed");
   }
 }
+function resolveNpm(loc) {
+  const win = loc.platform === "win32";
+  const p = win ? pathWin32 : pathPosix;
+  const nodeDir = p.dirname(loc.execPath);
+  const cliUnder = (root) => win ? p.join(root, "node_modules", "npm", "bin", "npm-cli.js") : p.join(root, "lib", "node_modules", "npm", "bin", "npm-cli.js");
+  const candidates2 = [
+    cliUnder(win ? nodeDir : p.join(nodeDir, "..")),
+    ...loc.prefix ? [cliUnder(loc.prefix)] : []
+  ];
+  const pathKey = Object.keys(loc.env).find((k) => k.toUpperCase() === "PATH") ?? "PATH";
+  const binDirs = [nodeDir, ...loc.prefix ? [win ? loc.prefix : p.join(loc.prefix, "bin")] : []];
+  const delimiter3 = win ? ";" : ":";
+  const current = loc.env[pathKey] ?? "";
+  const env = { ...loc.env, [pathKey]: [...binDirs, ...current ? [current] : []].join(delimiter3) };
+  const cli = candidates2.find((c) => loc.exists(c));
+  if (cli) return { file: loc.execPath, args: [cli], env, shell: false };
+  return { file: "npm", args: [], env, shell: true };
+}
 function realInstall(tgz) {
   const prefix = runningPrefix();
+  const npm = resolveNpm({ execPath: process.execPath, prefix, platform: process.platform, env: process.env, exists: existsSync41 });
   if (prefix) {
-    npmInstall(`npm install -g --prefix "${prefix}" "${tgz}"`);
+    npmInstall(npm, ["install", "-g", "--prefix", prefix, tgz]);
     return;
   }
   try {
-    npmInstall(`npm install -g "${tgz}"`);
+    npmInstall(npm, ["install", "-g", tgz]);
   } catch {
-    npmInstall(`npm install -g --prefix "${process.env.HOME}/.local" "${tgz}"`);
+    npmInstall(npm, ["install", "-g", "--prefix", join41(homedir15(), ".local"), tgz]);
   }
 }
 function realRestart(platform2) {
@@ -19956,7 +19632,9 @@ var init_auto_update = __esm({
 var sync_client_exports = {};
 __export(sync_client_exports, {
   BATCH_SCAN_MAX_BYTES: () => BATCH_SCAN_MAX_BYTES,
+  DERIVED_MAX_BYTES: () => DERIVED_MAX_BYTES,
   FULL_BUILD_MAX_BYTES: () => FULL_BUILD_MAX_BYTES,
+  SYNC_CHUNK_BYTES: () => SYNC_CHUNK_BYTES,
   _acceptedUploads: () => _acceptedUploads,
   _fetchTenantSyncConfigForTests: () => _fetchTenantSyncConfigForTests,
   _resetCapsCacheForTests: () => _resetCapsCacheForTests,
@@ -19975,8 +19653,10 @@ __export(sync_client_exports, {
   reconcileFields: () => reconcileFields,
   removeCredentials: () => removeCredentials,
   saveCredentials: () => saveCredentials,
+  scanTranscriptFindingsChunked: () => scanTranscriptFindingsChunked,
   serverAcceptsGzipBody: () => serverAcceptsGzipBody,
   serverIngestConcurrency: () => serverIngestConcurrency,
+  sessionBuildBytes: () => sessionBuildBytes,
   sessionFileBytes: () => sessionFileBytes,
   setServerIngestConcurrency: () => setServerIngestConcurrency,
   syncIncremental: () => syncIncremental,
@@ -20748,16 +20428,53 @@ async function syncToTargetInScope(cred, opts = {}) {
       clearTimeout(timer);
     }
   };
+  const postChunkedHead = async (conv, fileSize) => {
+    const headers = { "content-type": "application/json" };
+    if (cred.token) headers.authorization = `Bearer ${cred.token}`;
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(new Error(`upload timed out after ${UPLOAD_TIMEOUT_MS}ms`)), UPLOAD_TIMEOUT_MS);
+    try {
+      const res = await fetch(`${base3}/api/sync`, {
+        method: "POST",
+        headers,
+        body: JSON.stringify({ conversations: [conv] }),
+        signal: ac.signal
+      });
+      if (!res.ok) throw new Error(`chunked head sync failed: HTTP ${res.status} ${await res.text().catch(() => "")}`);
+      const body = await res.json().catch(() => ({}));
+      const id = conv.session_id;
+      const guarded = (body.shrink_guarded ?? []).find((g) => g.session_id === id);
+      const mtime = conv.mtime;
+      try {
+        if (!guarded) {
+          markSynced(base3, [{ id, mtime, offset: conv.from_offset, size: conv.from_offset, acked: true }]);
+        } else if (typeof guarded.o === "number" && guarded.o > 0 && guarded.o <= fileSize) {
+          markSynced(base3, [{ id, mtime, offset: guarded.o, size: guarded.o, acked: true }]);
+        } else {
+          markSynced(base3, [{ id, mtime }]);
+        }
+      } catch {
+      }
+      appendResults.uploaded++;
+    } finally {
+      clearTimeout(timer);
+    }
+  };
   let appendBatch = [];
+  let appendBatchBytes = 0;
   const APPEND_BATCH_SIZE = 50;
+  const APPEND_BATCH_MAX_BYTES = SYNC_CHUNK_BYTES;
   const appendFlush = async () => {
     if (appendBatch.length === 0) return;
     const batch = appendBatch;
     appendBatch = [];
+    appendBatchBytes = 0;
     await postAppend(batch);
   };
-  const appendAdd = async (conv) => {
+  const appendAdd = async (conv, bytes = 0) => {
+    if (appendBatch.length > 0 && appendBatchBytes + bytes > APPEND_BATCH_MAX_BYTES) await appendFlush();
     appendBatch.push(conv);
+    appendBatchBytes += bytes;
     if (appendBatch.length >= APPEND_BATCH_SIZE) await appendFlush();
   };
   const itemsBatch = makeBatcher("items", 100);
@@ -20836,7 +20553,7 @@ async function syncToTargetInScope(cred, opts = {}) {
   let externalFindings = null;
   if (scanSecrets) {
     externalFindings = /* @__PURE__ */ new Map();
-    const toScan = slice.filter((ref) => modeOf(ref) === "full" && sessionFileBytes(ref) <= FULL_BUILD_MAX_BYTES);
+    const toScan = slice.filter((ref) => modeOf(ref) === "full" && sessionBuildBytes(ref) <= FULL_BUILD_MAX_BYTES);
     trace?.(`batch secret scan start: ${toScan.length} session(s), \u2264${(BATCH_SCAN_MAX_BYTES / 1048576).toFixed(0)}MB per slice`);
     const batch = batchScanExternal(
       toScan.map((ref) => ({
@@ -20880,11 +20597,17 @@ async function syncToTargetInScope(cred, opts = {}) {
       const ack = ledger.get(ref.prefixedId);
       try {
         const tail = await buildConversationTail(ref, ack.o ?? 0, { mapPath, tenantRules });
-        if (tail && tail.findings.length > 0) {
+        const chunked = sessionBuildBytes(ref) > FULL_BUILD_MAX_BYTES;
+        if (tail && tail.findings.length > 0 && !chunked) {
           promotedForFindings = true;
         } else if (tail) {
           redactions += tail.redactions;
-          await appendAdd(tail.conv);
+          await appendAdd(tail.conv, tail.bytes);
+          if (tail.findings.length > 0) {
+            await appendFlush();
+            const all = await scanTranscriptFindingsChunked(ref, tenantRules);
+            if (all.length > 0) await findingsBatch.add(all);
+          }
           walked++;
           if (walked % 250 === 0) console.error(`[sync] ${walked}/${slice.length} sessions\u2026`);
           continue;
@@ -20932,12 +20655,13 @@ async function syncToTargetInScope(cred, opts = {}) {
     }
     redactions += built.redactions;
     if (built.srcHash) shippedHash.set(ref.prefixedId, built.srcHash);
-    await convBatch.add(built.conv);
+    if (built.conv.chunked) await postChunkedHead(built.conv, sessionFileBytes(ref));
+    else await convBatch.add(built.conv);
     if (built.findings.length > 0) await findingsBatch.add(built.findings);
     if (upload.sessionMeta) {
       await accumulateKg(extractEntities(built.kgText, { projectPath: built.projectPath, sourceType: "session", sessionId: ref.prefixedId, validFrom: ref.mtime ? new Date(ref.mtime).toISOString().slice(0, 10) : void 0 }), ref.prefixedId);
     }
-    if (upload.sessionMeta && sessionFileBytes(ref) <= FULL_BUILD_MAX_BYTES) {
+    if (upload.sessionMeta && sessionFileBytes(ref) <= DERIVED_MAX_BYTES) {
       try {
         const count = { redactions: 0 };
         const offloaded = await scanPool().runDerived({
@@ -21117,35 +20841,70 @@ async function syncToTargetInScope(cred, opts = {}) {
     scanMs: Math.round(scanMs)
   };
 }
+async function scanTranscriptFindingsChunked(ref, tenantRules) {
+  const backend = getBackendForId(ref.prefixedId);
+  const findings = [];
+  if (!backend?.readFromOffset) return findings;
+  let offset = 0;
+  let lineBase = 0;
+  for (; ; ) {
+    const chunk = await backend.readFromOffset(ref.prefixedId, offset, SYNC_CHUNK_BYTES);
+    if (chunk.newOffset <= offset) break;
+    offset = chunk.newOffset;
+    if (chunk.skippedBytes) {
+      lineBase += 1;
+      continue;
+    }
+    try {
+      for (const f of scanTextForFindings(chunk.text)) {
+        findings.push({ session_id: ref.prefixedId, detector: "builtin", rule: f.rule, line: lineBase + f.line, preview: f.preview });
+      }
+      if (tenantRules && tenantRules.length > 0) {
+        for (const f of scanTenantRules(chunk.text, tenantRules)) {
+          findings.push({ session_id: ref.prefixedId, detector: f.detector, rule: f.rule, line: lineBase + f.line, preview: f.preview });
+        }
+      }
+    } catch {
+    }
+    for (let i = chunk.text.indexOf("\n"); i >= 0; i = chunk.text.indexOf("\n", i + 1)) lineBase++;
+  }
+  return dropFuzzyFindings(findings, (f) => ({ detector: f.detector, rule: f.rule }));
+}
 function sessionFileBytes(ref) {
   const backend = getBackendForId(ref.prefixedId);
   if (!backend?.isAppendOnly?.()) return 0;
   return backend.fileSize?.(ref.prefixedId) ?? 0;
 }
+function sessionBuildBytes(ref) {
+  const main = sessionFileBytes(ref);
+  if (main === 0) return 0;
+  return Math.max(main, shadowUncompressedBytes(ref.toolId, ref.rawId));
+}
 async function buildConversationSync(ref, mtime, opts = {}) {
   const mapPath = opts.mapPath ?? ((p) => p);
   let includeRaw = opts.includeRaw !== false;
   let includeMeta = opts.includeMeta !== false;
   let srcHash;
-  const fileBytes = sessionFileBytes(ref);
-  const oversized = fileBytes > FULL_BUILD_MAX_BYTES;
-  let tailText = "";
-  let tailOffsetEnd = 0;
+  const oversized = sessionBuildBytes(ref) > FULL_BUILD_MAX_BYTES;
+  let headOffsetEnd = 0;
+  let oversizedFindings = null;
   let transcript = null;
   let fullestContainer = null;
   if (oversized) {
     const backend = getBackendForId(ref.prefixedId);
     if (!backend?.readFromOffset) return null;
     try {
-      const tail = await backend.readFromOffset(ref.prefixedId, fileBytes - FULL_BUILD_TAIL_BYTES);
-      tailText = tail.text;
-      tailOffsetEnd = tail.newOffset;
-      const messages = parseTailMessages(ref.toolId, tailText);
+      let head = await backend.readFromOffset(ref.prefixedId, 0, SYNC_CHUNK_BYTES);
+      for (let hops = 0; head.skippedBytes && hops < 8; hops++) {
+        head = await backend.readFromOffset(ref.prefixedId, head.newOffset, SYNC_CHUNK_BYTES);
+      }
+      headOffsetEnd = head.newOffset;
+      const messages = parseTailMessages(ref.toolId, head.text);
       if (messages.length > 0) transcript = { messages, subagents: [] };
     } catch {
     }
     includeRaw = false;
-    includeMeta = false;
+    oversizedFindings = await scanTranscriptFindingsChunked(ref, opts.tenantRules);
   } else {
     try {
       const backend = getBackendForId(ref.prefixedId) ?? getBackend("claude");
@@ -21206,7 +20965,6 @@ async function buildConversationSync(ref, mtime, opts = {}) {
   );
   let projectPath = ref.projectPath;
   const meta = { messageCount: textMessages.length };
-  if (oversized) meta.truncated = true;
   if (textMessages.filter((m) => m.role === "user").length <= 1) meta.oneShot = true;
   try {
     const cwd = ref.fullPath ? readCwdFromJsonl(ref.fullPath) : "";
@@ -21320,21 +21078,7 @@ async function buildConversationSync(ref, mtime, opts = {}) {
     }
     scanMs = performance.now() - t0;
   }
-  if (oversized && tailText) {
-    const t0 = performance.now();
-    try {
-      for (const f of scanTextForFindings(tailText)) {
-        findings.push({ session_id: ref.prefixedId, detector: "builtin", rule: f.rule, line: f.line, preview: f.preview });
-      }
-      if (opts.tenantRules && opts.tenantRules.length > 0) {
-        for (const f of scanTenantRules(tailText, opts.tenantRules)) {
-          findings.push({ session_id: ref.prefixedId, detector: f.detector, rule: f.rule, line: f.line, preview: f.preview });
-        }
-      }
-    } catch {
-    }
-    scanMs = performance.now() - t0;
-  }
+  if (oversizedFindings) findings.push(...oversizedFindings);
   const keptFindings = dropFuzzyFindings(findings, (f) => ({ detector: f.detector, rule: f.rule }));
   findings.length = 0;
   findings.push(...keptFindings);
@@ -21380,7 +21124,10 @@ async function buildConversationSync(ref, mtime, opts = {}) {
       // (convBatch onFlush uses this, not a recomputed size) so the next
       // append's base_offset matches exactly — no spurious continuity misses on
       // an actively-growing session. undefined for non-append-only backends.
-      from_offset: oversized ? tailOffsetEnd : getBackendForId(ref.prefixedId)?.fileSize?.(ref.rawId),
+      from_offset: oversized ? headOffsetEnd : getBackendForId(ref.prefixedId)?.fileSize?.(ref.rawId),
+      // The head of a chunked session. The server reports back when its shrink
+      // guard keeps a fuller stored copy, so the client appends from there.
+      ...oversized ? { chunked: true } : {},
       meta,
       mtime
     },
@@ -21402,12 +21149,30 @@ async function buildConversationTail(ref, fromOffset, opts = {}) {
   const backend = getBackendForId(ref.prefixedId);
   if (!backend?.readFromOffset) return null;
   const mapPath = opts.mapPath ?? ((p) => p);
-  const { text: tailText, newOffset } = await backend.readFromOffset(ref.prefixedId, fromOffset);
-  if (!tailText.trim()) return null;
-  const messages = parseTailMessages(ref.toolId, tailText);
-  if (messages.length === 0) return null;
+  const { text: tailText, newOffset, skippedBytes } = await backend.readFromOffset(ref.prefixedId, fromOffset, SYNC_CHUNK_BYTES);
+  if (newOffset <= fromOffset) return null;
+  const messages = skippedBytes ? [] : parseTailMessages(ref.toolId, tailText);
   const textMessages = messages.filter((m) => m.role !== "summary" && m.content?.trim());
-  if (textMessages.length === 0 && !messages.some((m) => m.toolCalls?.length)) return null;
+  const hasContent = textMessages.length > 0 || messages.some((m) => m.toolCalls?.length);
+  if (!hasContent) {
+    return {
+      conv: {
+        session_id: ref.prefixedId,
+        tool: ref.toolId,
+        project_path: mapPath(ref.projectPath),
+        append: true,
+        base_offset: fromOffset,
+        from_offset: newOffset,
+        redacted_text: "",
+        envelope: { v: TRANSCRIPT_VERSION, messages: [], subagents: [] },
+        mtime: Math.floor(ref.mtime) || 0
+      },
+      redactions: 0,
+      newOffset,
+      findings: [],
+      bytes: 0
+    };
+  }
   const firstUser = textMessages.find((m) => m.role === "user");
   if (isInternalToolPrompt(firstUser?.content)) return null;
   const count = { redactions: 0 };
@@ -21450,7 +21215,8 @@ async function buildConversationTail(ref, fromOffset, opts = {}) {
     },
     redactions: count.redactions,
     newOffset,
-    findings
+    findings,
+    bytes: Buffer.byteLength(tailText)
   };
 }
 function isSyncSkip(r) {
@@ -21480,7 +21246,7 @@ async function syncIncremental(opts = {}) {
     lock.release();
   }
 }
-var ownVersion, ERROR_CLASS, STANDING_FAILURE, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, EMPTY_SYNC_CONFIG, _fetchTenantSyncConfigForTests, SYNC_RULES_REFUSAL, hashPath, acceptedUploads, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, FULL_BUILD_TAIL_BYTES, BATCH_SCAN_MAX_BYTES;
+var ownVersion, ERROR_CLASS, STANDING_FAILURE, walkProgressForUpload, lastServerPackSpec, credPath, _securityConfigCache, SECURITY_CONFIG_TTL_MS, _syncConfigCache, EMPTY_SYNC_CONFIG, _fetchTenantSyncConfigForTests, SYNC_RULES_REFUSAL, hashPath, acceptedUploads, MAX_DERIVED_ROW_BYTES, isLocalHost, CAPS_TTL_MS, capsOk, advertisedIngestConc, advertisedGzipBody, FULL_BUILD_MAX_BYTES, DERIVED_MAX_BYTES, SYNC_CHUNK_BYTES, BATCH_SCAN_MAX_BYTES;
 var init_sync_client = __esm({
   "src/sync-client.ts"() {
     "use strict";
@@ -21525,7 +21291,7 @@ var init_sync_client = __esm({
       ownVersion = JSON.parse(readFileSync35(join42(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.6.9";
+        if (true) ownVersion = "0.7.1";
       } catch {
       }
     }
@@ -21552,8 +21318,9 @@ var init_sync_client = __esm({
     capsOk = /* @__PURE__ */ new Map();
     advertisedIngestConc = /* @__PURE__ */ new Map();
     advertisedGzipBody = /* @__PURE__ */ new Set();
-    FULL_BUILD_MAX_BYTES = Math.max(8, parseInt(process.env.CHAT_RECALL_FULL_BUILD_MAX_MB || "64", 10)) * 1024 * 1024;
-    FULL_BUILD_TAIL_BYTES = 16 * 1024 * 1024;
+    FULL_BUILD_MAX_BYTES = Math.max(8, parseInt(process.env.CHAT_RECALL_FULL_BUILD_MAX_MB || "24", 10)) * 1024 * 1024;
+    DERIVED_MAX_BYTES = Math.max(8, parseInt(process.env.CHAT_RECALL_DERIVED_MAX_MB || "64", 10)) * 1024 * 1024;
+    SYNC_CHUNK_BYTES = 8 * 1024 * 1024;
     BATCH_SCAN_MAX_BYTES = Math.max(1, parseInt(process.env.CHAT_RECALL_BATCHSCAN_MAX_MB || "64", 10)) * 1024 * 1024;
   }
 });
@@ -21674,7 +21441,7 @@ var init_update_notice = __esm({
 });
 
 // ../engine/dist/core/which.js
-import { existsSync as existsSync41, statSync as statSync38, accessSync, constants } from "node:fs";
+import { existsSync as existsSync42, statSync as statSync38, accessSync, constants } from "node:fs";
 import { join as join44, isAbsolute as isAbsolute2, delimiter as delimiter2, sep as sep3 } from "node:path";
 function executable(p) {
   try {
@@ -21715,7 +21482,7 @@ function resolveOnPath(name) {
       continue;
     for (const c of candidates(name)) {
       const full = join44(dir, c);
-      if (existsSync41(full) && executable(full))
+      if (existsSync42(full) && executable(full))
         return full;
     }
   }
@@ -21778,7 +21545,7 @@ __export(mcp_clients_exports, {
   inspectMcpClients: () => inspectMcpClients,
   registerMcpEverywhere: () => registerMcpEverywhere
 });
-import { existsSync as existsSync43, mkdirSync as mkdirSync12, readFileSync as readFileSync37, writeFileSync as writeFileSync12 } from "fs";
+import { existsSync as existsSync44, mkdirSync as mkdirSync12, readFileSync as readFileSync37, writeFileSync as writeFileSync12 } from "fs";
 import { homedir as homedir16 } from "os";
 import { dirname as dirname21, join as join46 } from "path";
 function envHome(varName, fallback) {
@@ -21797,7 +21564,7 @@ function readJsonObject(path) {
 }
 function registerMcpServersJson(target, path, spec) {
   let cfg = {};
-  if (existsSync43(path)) {
+  if (existsSync44(path)) {
     try {
       cfg = readJsonObject(path);
     } catch (err) {
@@ -21826,7 +21593,7 @@ function registerOpencodeJson(path, spec) {
   const id = "opencode";
   const label = "OpenCode";
   let cfg = {};
-  if (existsSync43(path)) {
+  if (existsSync44(path)) {
     try {
       cfg = readJsonObject(path);
     } catch (err) {
@@ -21865,7 +21632,7 @@ function registerCodexToml(path, spec) {
   const id = "codex";
   const label = "Codex";
   const block = codexBlock(spec);
-  const prev = existsSync43(path) ? readFileSync37(path, "utf-8") : "";
+  const prev = existsSync44(path) ? readFileSync37(path, "utf-8") : "";
   const lines = prev.length ? prev.split("\n") : [];
   const start = lines.findIndex((l) => l.trim() === CODEX_HEADER);
   if (start === -1) {
@@ -21906,7 +21673,7 @@ function inspectMcpClients(opts = {}) {
   return MCP_CLIENTS.map((c) => {
     const path = c.configPath(home);
     let registered = false;
-    if (existsSync43(path)) {
+    if (existsSync44(path)) {
       try {
         const raw = readFileSync37(path, "utf-8");
         registered = c.id === "codex" ? raw.includes(CODEX_HEADER) : !!(JSON.parse(raw).mcpServers?.[MCP_SERVER_NAME] ?? JSON.parse(raw).mcp?.[MCP_SERVER_NAME]);
@@ -21943,7 +21710,7 @@ var init_mcp_clients = __esm({
         configPath: (home) => join46(envHome("CHAT_RECALL_CODEX_HOME", join46(home, ".codex")), "config.toml"),
         isPresent(home) {
           const p = this.configPath(home);
-          return existsSync43(p) || existsSync43(dirname21(p));
+          return existsSync44(p) || existsSync44(dirname21(p));
         },
         register(spec, home) {
           return registerCodexToml(this.configPath(home), spec);
@@ -21956,7 +21723,7 @@ var init_mcp_clients = __esm({
         configPath: (home) => join46(envHome("XDG_CONFIG_HOME", join46(home, ".config")), "opencode", "opencode.json"),
         isPresent(home) {
           const p = this.configPath(home);
-          return existsSync43(p) || existsSync43(dirname21(p));
+          return existsSync44(p) || existsSync44(dirname21(p));
         },
         register(spec, home) {
           return registerOpencodeJson(this.configPath(home), spec);
@@ -21970,7 +21737,7 @@ var init_mcp_clients = __esm({
         bin: "agy",
         configPath: (home) => join46(home, ".gemini", "config", "mcp_config.json"),
         isPresent(home) {
-          return existsSync43(join46(home, ".gemini", "antigravity-cli")) || existsSync43(this.configPath(home));
+          return existsSync44(join46(home, ".gemini", "antigravity-cli")) || existsSync44(this.configPath(home));
         },
         register(spec, home) {
           return registerMcpServersJson(this, this.configPath(home), spec);
@@ -21983,7 +21750,7 @@ var init_mcp_clients = __esm({
         configPath: (home) => join46(home, ".cursor", "mcp.json"),
         isPresent(home) {
           const p = this.configPath(home);
-          return existsSync43(p) || existsSync43(dirname21(p));
+          return existsSync44(p) || existsSync44(dirname21(p));
         },
         register(spec, home) {
           return registerMcpServersJson(this, this.configPath(home), spec);
@@ -22007,7 +21774,7 @@ __export(companions_exports, {
   uninstallCodeindex: () => uninstallCodeindex,
   unregisterCodeindexMcp: () => unregisterCodeindexMcp
 });
-import { existsSync as existsSync44, mkdirSync as mkdirSync13, statSync as statSync39, chmodSync as chmodSync4, unlinkSync as unlinkSync3, renameSync as renameSync5, createWriteStream, readFileSync as readFileSync38, writeFileSync as writeFileSync13 } from "node:fs";
+import { existsSync as existsSync45, mkdirSync as mkdirSync13, statSync as statSync39, chmodSync as chmodSync4, unlinkSync as unlinkSync3, renameSync as renameSync5, createWriteStream, readFileSync as readFileSync38, writeFileSync as writeFileSync13 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
 import { join as join47 } from "node:path";
 import { execSync as execSync3 } from "node:child_process";
@@ -22130,7 +21897,7 @@ Refusing to install. The release may have been re-uploaded, or something is serv
     renameSync5(tmpPath, CODEINDEX_BIN_PATH);
   } catch (err) {
     try {
-      if (existsSync44(tmpPath))
+      if (existsSync45(tmpPath))
         unlinkSync3(tmpPath);
     } catch {
     }
@@ -22139,7 +21906,7 @@ Refusing to install. The release may have been re-uploaded, or something is serv
   return checkCodeindexStatus();
 }
 function uninstallCodeindex() {
-  if (existsSync44(CODEINDEX_BIN_PATH)) {
+  if (existsSync45(CODEINDEX_BIN_PATH)) {
     unlinkSync3(CODEINDEX_BIN_PATH);
     return { removed: true, path: CODEINDEX_BIN_PATH };
   }
@@ -22147,7 +21914,7 @@ function uninstallCodeindex() {
 }
 function registerCodeindexMcp(mcpJsonPath, binaryPath) {
   let cfg = {};
-  if (existsSync44(mcpJsonPath)) {
+  if (existsSync45(mcpJsonPath)) {
     try {
       cfg = JSON.parse(readFileSync38(mcpJsonPath, "utf-8"));
     } catch {
@@ -22162,7 +21929,7 @@ function registerCodeindexMcp(mcpJsonPath, binaryPath) {
   return { added: true };
 }
 function unregisterCodeindexMcp(mcpJsonPath) {
-  if (!existsSync44(mcpJsonPath))
+  if (!existsSync45(mcpJsonPath))
     return { removed: false };
   let cfg;
   try {
@@ -22208,7 +21975,7 @@ __export(install_skills_exports, {
   skillsSourceDir: () => skillsSourceDir,
   uninstallSkills: () => uninstallSkills
 });
-import { readdirSync as readdirSync33, existsSync as existsSync45, mkdirSync as mkdirSync14, rmSync as rmSync7, cpSync, writeFileSync as writeFileSync14, readFileSync as readFileSync39, statSync as statSync40, realpathSync as realpathSync4 } from "fs";
+import { readdirSync as readdirSync33, existsSync as existsSync46, mkdirSync as mkdirSync14, rmSync as rmSync7, cpSync, writeFileSync as writeFileSync14, readFileSync as readFileSync39, statSync as statSync40, realpathSync as realpathSync4 } from "fs";
 import { createHash as createHash11 } from "crypto";
 import { join as join48, basename as basename21 } from "path";
 function skillsSourceDir() {
@@ -22247,8 +22014,8 @@ function skillStamp() {
 }
 function bundledSkillNames() {
   const src = skillsSourceDir();
-  if (!existsSync45(src)) return [];
-  return readdirSync33(src, { withFileTypes: true }).filter((e) => e.isDirectory() && existsSync45(join48(src, e.name, "SKILL.md"))).map((e) => e.name).sort();
+  if (!existsSync46(src)) return [];
+  return readdirSync33(src, { withFileTypes: true }).filter((e) => e.isDirectory() && existsSync46(join48(src, e.name, "SKILL.md"))).map((e) => e.name).sort();
 }
 function realPathOrSelf(p) {
   try {
@@ -22272,7 +22039,7 @@ function claudeSkillTargets() {
       dir,
       // Judge each profile on ITS OWN transcripts, not the primary's: a home
       // with no projects/ is a directory someone made, not a Claude install.
-      available: existsSync45(join48(home, "projects"))
+      available: existsSync46(join48(home, "projects"))
     });
   }
   if (targets.length === 0) {
@@ -22296,7 +22063,7 @@ function skillTargets() {
   ];
 }
 function isManaged(dir) {
-  return existsSync45(join48(dir, MARKER));
+  return existsSync46(join48(dir, MARKER));
 }
 function installSkills(opts = {}) {
   const onlyAvailable = opts.onlyAvailable ?? true;
@@ -22314,7 +22081,7 @@ function installSkills(opts = {}) {
     }
     for (const name of names) {
       const dest = join48(t.dir, name);
-      if (existsSync45(dest) && !isManaged(dest)) {
+      if (existsSync46(dest) && !isManaged(dest)) {
         skippedUserOwned.push(name);
         continue;
       }
@@ -22334,7 +22101,7 @@ function uninstallSkills() {
   const perTarget = [];
   for (const t of skillTargets()) {
     const removed = [];
-    if (!existsSync45(t.dir)) {
+    if (!existsSync46(t.dir)) {
       perTarget.push({ id: t.id, label: t.label, removed });
       continue;
     }
@@ -22358,7 +22125,7 @@ function skillsNeedRefresh() {
     if (!t.available) continue;
     for (const name of names) {
       const marker = join48(t.dir, name, MARKER);
-      if (!existsSync45(marker)) return true;
+      if (!existsSync46(marker)) return true;
       try {
         if (readFileSync39(marker, "utf-8").trim() !== cur) return true;
       } catch {
@@ -22376,7 +22143,7 @@ function skillStatus() {
     let ver = null;
     for (const name of names) {
       const marker = join48(t.dir, name, MARKER);
-      if (existsSync45(marker)) {
+      if (existsSync46(marker)) {
         installed++;
         try {
           ver = readFileSync39(marker, "utf-8").trim();
@@ -22564,7 +22331,7 @@ __export(toolkit_sync_exports, {
   supportedTargetsFor: () => supportedTargetsFor,
   writeMcpEntry: () => writeMcpEntry
 });
-import { existsSync as existsSync46, mkdirSync as mkdirSync15, readFileSync as readFileSync41, writeFileSync as writeFileSync15, cpSync as cpSync2 } from "fs";
+import { existsSync as existsSync47, mkdirSync as mkdirSync15, readFileSync as readFileSync41, writeFileSync as writeFileSync15, cpSync as cpSync2 } from "fs";
 import { dirname as dirname22, join as join50, basename as basename23 } from "path";
 import { homedir as homedir19 } from "os";
 function supportedTargetsFor(type) {
@@ -22619,11 +22386,11 @@ function skillsDirFor(tool) {
 }
 function copySkill(row, toTool) {
   const skillDir = row.extra.skillDir || dirname22(row.filePath);
-  if (!existsSync46(skillDir))
+  if (!existsSync47(skillDir))
     return { ok: false, status: 404, error: `Source dir missing: ${skillDir}` };
   const name = row.extra.skillName || basename23(skillDir);
   const targetDir = join50(skillsDirFor(toTool), name);
-  if (existsSync46(targetDir))
+  if (existsSync47(targetDir))
     return { ok: false, status: 409, error: `Already exists: ${targetDir}` };
   try {
     mkdirSync15(dirname22(targetDir), { recursive: true });
@@ -22655,7 +22422,7 @@ function readMcpEntry(tool, name) {
       return entry;
   }
   for (const t of tries) {
-    if (!existsSync46(t.path))
+    if (!existsSync47(t.path))
       continue;
     try {
       const cfg = JSON.parse(readFileSync41(t.path, "utf-8"));
@@ -22668,7 +22435,7 @@ function readMcpEntry(tool, name) {
   return null;
 }
 function readCodexMcpEntry(path, target) {
-  if (!existsSync46(path))
+  if (!existsSync47(path))
     return null;
   let content;
   try {
@@ -22722,7 +22489,7 @@ function readCodexMcpEntry(path, target) {
 }
 function writeCodexMcpEntry(path, name, entry) {
   let content = "";
-  if (existsSync46(path))
+  if (existsSync47(path))
     content = readFileSync41(path, "utf-8");
   const header = `[mcp_servers.${name}]`;
   if (content.includes(header))
@@ -22780,7 +22547,7 @@ function writeMcpEntry(toTool, name, entry) {
     key2 = "mcp";
   }
   let cfg = {};
-  if (existsSync46(path)) {
+  if (existsSync47(path)) {
     try {
       cfg = JSON.parse(readFileSync41(path, "utf-8"));
     } catch {
@@ -22844,7 +22611,7 @@ function copyCommandOrAgent(type, row, toTool) {
     return { ok: false, status: 404, error: `Source unreadable: ${e instanceof Error ? e.message : "failed"}` };
   }
   const out = emit(type, art, toTool);
-  if (existsSync46(out.path))
+  if (existsSync47(out.path))
     return { ok: false, status: 409, error: `Already exists: ${out.path}` };
   try {
     mkdirSync15(dirname22(out.path), { recursive: true });
@@ -22864,7 +22631,7 @@ function copyInstructions(row, toTool) {
     return { ok: false, status: 404, error: `Source unreadable: ${e instanceof Error ? e.message : "failed"}` };
   }
   const out = emit("instructions", art, toTool, row.projectPath || void 0);
-  if (existsSync46(out.path))
+  if (existsSync47(out.path))
     return { ok: false, status: 409, error: `Already exists: ${out.path}` };
   try {
     mkdirSync15(dirname22(out.path), { recursive: true });
@@ -23014,7 +22781,7 @@ __export(toolkit_pull_exports, {
   planPull: () => planPull,
   portableCommand: () => portableCommand
 });
-import { existsSync as existsSync47, mkdirSync as mkdirSync16, statSync as statSync41, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync48, mkdirSync as mkdirSync16, statSync as statSync41, writeFileSync as writeFileSync16 } from "node:fs";
 import { dirname as dirname23, join as join51, basename as basename24, isAbsolute as isAbsolute3 } from "node:path";
 function isExecutableFile(p) {
   try {
@@ -23167,7 +22934,7 @@ function executePull(rows, opts = {}) {
     for (const tool of tools) {
       const dir = join51(skillsDirFor(tool), name);
       const file = join51(dir, "SKILL.md");
-      if (existsSync47(file)) {
+      if (existsSync48(file)) {
         outcomes.push({ type: "skill", name, tool, status: "present" });
         continue;
       }
@@ -23212,7 +22979,7 @@ function executePull(rows, opts = {}) {
         outcomes.push({ type, name, tool, status: "failed", reason: e instanceof Error ? e.message : "emit failed" });
         continue;
       }
-      if (existsSync47(out.path)) {
+      if (existsSync48(out.path)) {
         outcomes.push({ type, name, tool, status: "present" });
         continue;
       }
@@ -23370,7 +23137,7 @@ __export(board_hooks_exports, {
   removeBoardHooks: () => removeBoardHooks,
   resolveCliEntry: () => resolveCliEntry
 });
-import { existsSync as existsSync48, mkdirSync as mkdirSync17, readFileSync as readFileSync42, writeFileSync as writeFileSync17 } from "node:fs";
+import { existsSync as existsSync49, mkdirSync as mkdirSync17, readFileSync as readFileSync42, writeFileSync as writeFileSync17 } from "node:fs";
 import { dirname as dirname24, join as join52 } from "node:path";
 function boardHookCommand(execPath, cliEntry, mode) {
   return `"${execPath}" "${cliEntry}" task-hook --${mode}`;
@@ -23410,7 +23177,7 @@ function removeBoardHooks(config2) {
   return removed;
 }
 function readConfig(file) {
-  if (!existsSync48(file)) return { hooks: {} };
+  if (!existsSync49(file)) return { hooks: {} };
   try {
     const parsed = JSON.parse(readFileSync42(file, "utf-8"));
     if (!parsed.hooks || typeof parsed.hooks !== "object") parsed.hooks = {};
@@ -23422,7 +23189,7 @@ function readConfig(file) {
 function registerBoardHooks(files, execPath, cliEntry) {
   const written = [];
   for (const file of files) {
-    if (existsSync48(file)) {
+    if (existsSync49(file)) {
       try {
         JSON.parse(readFileSync42(file, "utf-8"));
       } catch {
@@ -23442,7 +23209,7 @@ function registerBoardHooks(files, execPath, cliEntry) {
 }
 function resolveCliEntry(distDir) {
   const bundled = join52(distDir, "cli.js");
-  return existsSync48(bundled) ? bundled : join52(distDir, "cli.ts");
+  return existsSync49(bundled) ? bundled : join52(distDir, "cli.ts");
 }
 var BOARD_HOOKS;
 var init_board_hooks = __esm({
@@ -23545,6 +23312,9 @@ async function repairSession(id, opts = {}) {
       note: "archive count is a lower bound; the rebuild also unions the on-disk tail"
     };
   }
+  if (!opts.force && endpoints.every((ep) => (currentOnServer.get(ep.url) ?? 0) >= fullest.messages)) {
+    return { sessionId: id, status: "already-full", fullestMessages: fullest.messages, fullestSource: fullest.source, pushed: [] };
+  }
   seedShadow(rawId, fullest.container);
   const located = backend.findSession(rawId);
   const projectPath = located?.projectPath || cwdFromContainer(fullest.container);
@@ -23587,7 +23357,7 @@ async function repairSession(id, opts = {}) {
     try {
       const res = await fetchWithTimeout(`${ep.url}/api/sync`, { method: "POST", headers, body: JSON.stringify({ conversations: [built.conv] }) }, 6e4);
       if (!res.ok) {
-        pushed.push({ server: ep.url, before, after: before });
+        pushed.push({ server: ep.url, before, after: before, error: `HTTP ${res.status}` });
         log6(`push to ${ep.url} FAILED: HTTP ${res.status}`);
         continue;
       }
@@ -23596,10 +23366,21 @@ async function repairSession(id, opts = {}) {
       pushed.push({ server: ep.url, before, after: afterN });
       log6(`pushed to ${ep.url}: ${before} \u2192 ${afterN} msg(s)`);
     } catch (e) {
-      pushed.push({ server: ep.url, before, after: before });
-      log6(`push to ${ep.url} errored: ${e instanceof Error ? e.message : e}`);
+      const error = e instanceof Error ? e.message : String(e);
+      pushed.push({ server: ep.url, before, after: before, error });
+      log6(`push to ${ep.url} errored: ${error}`);
     }
   }
+  if (pushed.every((p) => p.error)) {
+    return {
+      sessionId: id,
+      status: "error",
+      fullestMessages: builtCount,
+      fullestSource: fullest.source,
+      pushed,
+      note: `every push failed: ${pushed.map((p) => `${p.server}: ${p.error}`).join("; ")}`
+    };
+  }
   return { sessionId: id, status: "repaired", fullestMessages: builtCount, fullestSource: fullest.source, pushed };
 }
 async function repairSessions(ids, opts = {}) {
@@ -24094,11 +23875,11 @@ var verify_repair_exports = {};
 __export(verify_repair_exports, {
   forceFullResync: () => forceFullResync
 });
-import { copyFileSync as copyFileSync3, existsSync as existsSync49 } from "fs";
+import { copyFileSync as copyFileSync3, existsSync as existsSync50 } from "fs";
 function forceFullResync(server, sessionIds) {
   if (sessionIds.length === 0) return 0;
   const path = ledgerFilePath();
-  if (existsSync49(path)) {
+  if (existsSync50(path)) {
     const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "").replace(/-/g, "");
     try {
       copyFileSync3(path, `${path}.bak-${stamp}`);
@@ -25252,7 +25033,7 @@ __export(project_tasks_exports, {
   pushProjectTaskStatuses: () => pushProjectTaskStatuses,
   renderTeamTasksMd: () => renderTeamTasksMd
 });
-import { existsSync as existsSync50, readFileSync as readFileSync44, writeFileSync as writeFileSync18, mkdirSync as mkdirSync18, statSync as statSync42 } from "node:fs";
+import { existsSync as existsSync51, readFileSync as readFileSync44, writeFileSync as writeFileSync18, mkdirSync as mkdirSync18, statSync as statSync42 } from "node:fs";
 import { join as join55, dirname as dirname25 } from "node:path";
 import { homedir as homedir21 } from "node:os";
 function isTeamTaskStatus(v) {
@@ -25338,7 +25119,7 @@ async function pushProjectTaskStatuses(base3, authHeaders, opts = {}) {
     }
     for (const project of projects) {
       const file = join55(project, fk.filename);
-      if (!existsSync50(file)) continue;
+      if (!existsSync51(file)) continue;
       let mtime;
       try {
         mtime = statSync42(file).mtimeMs;
@@ -25420,7 +25201,7 @@ __export(intent_drain_exports, {
   drainSyncIntents: () => drainSyncIntents,
   instructionTargets: () => instructionTargets
 });
-import { existsSync as existsSync51, readFileSync as readFileSync45, writeFileSync as writeFileSync19, appendFileSync, mkdirSync as mkdirSync19 } from "node:fs";
+import { existsSync as existsSync52, readFileSync as readFileSync45, writeFileSync as writeFileSync19, appendFileSync, mkdirSync as mkdirSync19 } from "node:fs";
 import { join as join56 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 import { dirname as dirname26 } from "node:path";
@@ -25435,7 +25216,7 @@ function instructionTargets(rootPath, isGlobal) {
   const tools = installed.length ? installed : [INSTRUCTION_TOOLS[0]];
   if (isGlobal) return [...new Set(tools.map((t) => instructionsPath(t.id)))];
   if (!rootPath) return [];
-  const present = INSTRUCTION_FILENAMES.map((f) => join56(rootPath, f)).filter((p) => existsSync51(p));
+  const present = INSTRUCTION_FILENAMES.map((f) => join56(rootPath, f)).filter((p) => existsSync52(p));
   if (present.length) return present;
   return [...new Set(tools.map((t) => join56(rootPath, instructionsFilename(t.id))))];
 }
@@ -25463,7 +25244,7 @@ function applyCodeRecommendation(intent) {
           mkdirSync19(dir, { recursive: true });
         } catch {
         }
-        const existing = existsSync51(file) ? readFileSync45(file, "utf8") : "";
+        const existing = existsSync52(file) ? readFileSync45(file, "utf8") : "";
         if (existing.includes(text)) {
           skipped.push(file);
           continue;
@@ -25641,7 +25422,7 @@ var init_intent_drain = __esm({
       ownVersion2 = JSON.parse(readFileSync45(join56(dir, "../package.json"), "utf-8")).version || ownVersion2;
     } catch {
       try {
-        if (true) ownVersion2 = "0.6.9";
+        if (true) ownVersion2 = "0.7.1";
       } catch {
       }
     }
@@ -25842,7 +25623,7 @@ var team_merge_exports = {};
 __export(team_merge_exports, {
   mergePullResult: () => mergePullResult
 });
-import { existsSync as existsSync52, mkdirSync as mkdirSync20, readFileSync as readFileSync46, rmSync as rmSync8, writeFileSync as writeFileSync20, statSync as statSync43 } from "fs";
+import { existsSync as existsSync53, mkdirSync as mkdirSync20, readFileSync as readFileSync46, rmSync as rmSync8, writeFileSync as writeFileSync20, statSync as statSync43 } from "fs";
 import { dirname as dirname27, join as join57 } from "path";
 import { createHash as createHash14 } from "crypto";
 function installPathFor(art, tool) {
@@ -25959,7 +25740,7 @@ async function mergePullResult(opts) {
       if (!path)
         continue;
       try {
-        if (existsSync52(path))
+        if (existsSync53(path))
           rmSync8(path, { force: true });
         await teamInstallsForget(id, row.tool);
         report.removed.push({ artifactId: id, path });
@@ -25977,7 +25758,7 @@ async function mergePullResult(opts) {
 }
 function readFileIfExists(path) {
   try {
-    if (!existsSync52(path))
+    if (!existsSync53(path))
       return null;
     const s = statSync43(path);
     if (!s.isFile())
@@ -26063,7 +25844,7 @@ var init_vault_crypto = __esm({
 });
 
 // ../engine/dist/core/vault-source.js
-import { existsSync as existsSync53, readdirSync as readdirSync34, statSync as statSync44 } from "fs";
+import { existsSync as existsSync54, readdirSync as readdirSync34, statSync as statSync44 } from "fs";
 import { extname, join as join58 } from "path";
 function* walkVaultSources() {
   const t = loadSettings().team.vault;
@@ -26089,7 +25870,7 @@ function safeStat(path) {
 }
 function* walkClaude() {
   const root = claudeBackend.projectsDir();
-  if (!existsSync53(root))
+  if (!existsSync54(root))
     return;
   let projectDirs = [];
   try {
@@ -26142,7 +25923,7 @@ function* walkCursor() {
 }
 function* walkCodex() {
   const sessionsRoot = join58(codexBackend.homeDir(), "sessions");
-  if (!existsSync53(sessionsRoot))
+  if (!existsSync54(sessionsRoot))
     return;
   const stack = [sessionsRoot];
   while (stack.length) {
@@ -26171,7 +25952,7 @@ function* walkCodex() {
 }
 function* walkAgy() {
   const brainDir = join58(agyBackend.homeDir(), "brain");
-  if (!existsSync53(brainDir))
+  if (!existsSync54(brainDir))
     return;
   let sessionDirs = [];
   try {
@@ -26188,10 +25969,10 @@ function* walkAgy() {
       continue;
     }
     let filePath = join58(sessionPath, ".system_generated", "logs", "transcript.jsonl");
-    if (!existsSync53(filePath)) {
+    if (!existsSync54(filePath)) {
       filePath = join58(sessionPath, ".system_generated", "logs", "transcript_full.jsonl");
     }
-    if (!existsSync53(filePath))
+    if (!existsSync54(filePath))
       continue;
     const s = safeStat(filePath);
     if (!s)
@@ -26227,7 +26008,7 @@ __export(vault_client_exports, {
   vaultStatus: () => vaultStatus,
   vaultSync: () => vaultSync
 });
-import { mkdirSync as mkdirSync21, readFileSync as readFileSync47, writeFileSync as writeFileSync21, existsSync as existsSync54 } from "fs";
+import { mkdirSync as mkdirSync21, readFileSync as readFileSync47, writeFileSync as writeFileSync21, existsSync as existsSync55 } from "fs";
 import { dirname as dirname28, join as join59 } from "path";
 function context2() {
   const s = loadSettings().team;
@@ -26440,7 +26221,7 @@ async function vaultRestore(passphrase, opts = {}) {
     }
     try {
       const path = importedPathFor(blob.tool, blob.sessionId);
-      if (existsSync54(path)) {
+      if (existsSync55(path)) {
         const localStat = await import("fs").then((m) => m.statSync(path));
         if (Math.abs(localStat.mtimeMs - blob.mtimeSourceMs) < 1) {
           report.skipped.push({ sessionId: blob.sessionId, tool: blob.tool, reason: "unchanged" });
@@ -26523,7 +26304,7 @@ __export(keyring_exports, {
   psQuote: () => psQuote,
   shQuote: () => shQuote
 });
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 function probeKeyring(r = realRunner) {
   if (r.platform === "darwin") {
     try {
@@ -26635,7 +26416,7 @@ var init_keyring = __esm({
     ACCOUNT = "vault-passphrase";
     realRunner = {
       run(file, args, input) {
-        return execFileSync3(file, args, {
+        return execFileSync4(file, args, {
           input,
           encoding: "utf-8",
           stdio: input === void 0 ? ["ignore", "pipe", "pipe"] : ["pipe", "pipe", "pipe"]
@@ -27070,7 +26851,7 @@ __export(service_installer_exports, {
   uninstallService: () => uninstallService
 });
 import { execSync as execSync5 } from "child_process";
-import { existsSync as existsSync55, mkdirSync as mkdirSync22, readFileSync as readFileSync48, rmSync as rmSync9, writeFileSync as writeFileSync22 } from "fs";
+import { existsSync as existsSync56, mkdirSync as mkdirSync22, readFileSync as readFileSync48, rmSync as rmSync9, writeFileSync as writeFileSync22 } from "fs";
 import { homedir as homedir22 } from "os";
 import { join as join60 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
@@ -27097,7 +26878,7 @@ function isServiceRunning() {
     return /com\.chat-recall\.watch/.test(tryCmd("launchctl list 2>/dev/null"));
   }
   if (process.platform === "linux") {
-    return /active/.test(tryCmd("systemctl --user is-active chat-recall-watch.service 2>/dev/null"));
+    return /^active$/m.test(tryCmd("systemctl --user is-active chat-recall-watch.service 2>/dev/null"));
   }
   return false;
 }
@@ -27106,7 +26887,7 @@ function refreshServiceDefinition() {
   try {
     const { watchJs, node, logFile } = resolveDaemonPaths();
     const unitPath = join60(homedir22(), ".config", "systemd", "user", "chat-recall-watch.service");
-    if (!existsSync55(unitPath)) return false;
+    if (!existsSync56(unitPath)) return false;
     const current = readFileSync48(unitPath, "utf8");
     if (!current.includes(watchJs)) return false;
     const wanted = renderSystemdUnit(watchJs, node, logFile);
@@ -27173,7 +26954,12 @@ function renderSystemdUnit(watchJs, node, logFile) {
     // sawtooth. 1536MB keeps GC honest (768 OOMed on the largest subagent-fanout session) with plenty of headroom for the
     // largest transcripts.
     `ExecStart=${node} --max-old-space-size=1536 ${watchJs}`,
-    "Restart=on-failure",
+    // ALWAYS: the collector never ends its own work, so any exit systemd did
+    // not ask for is a fault. Under on-failure a clean exit left it dead: on
+    // 2026-09-16 the unit went "inactive (dead) … status=0/SUCCESS" and stayed
+    // down for 8 days, so nothing synced and the auto-update tick, which runs
+    // inside the daemon, never ran. `systemctl stop` still stops it.
+    "Restart=always",
     "RestartSec=10",
     "Nice=10",
     // NEVER STOP RETRYING. systemd's default start limiter gives up after a
@@ -27269,7 +27055,7 @@ function uninstallService() {
     } catch {
     }
     const unitPath = join60(homedir22(), ".config", "systemd", "user", "chat-recall-watch.service");
-    if (existsSync55(unitPath)) {
+    if (existsSync56(unitPath)) {
       rmSync9(unitPath, { force: true });
       removed = true;
     }
@@ -27286,7 +27072,7 @@ function uninstallService() {
     } catch {
     }
     let removed = false;
-    if (existsSync55(plistPath)) {
+    if (existsSync56(plistPath)) {
       rmSync9(plistPath, { force: true });
       removed = true;
     }
@@ -27699,7 +27485,7 @@ init_project_resolver();
 import { config } from "dotenv";
 import { Command } from "commander";
 import chalk2 from "chalk";
-import { existsSync as existsSync56, readFileSync as readFileSync49, writeFileSync as writeFileSync23, realpathSync as realpathSync5 } from "fs";
+import { existsSync as existsSync57, readFileSync as readFileSync49, writeFileSync as writeFileSync23, realpathSync as realpathSync5 } from "fs";
 import { homedir as homedir23 } from "os";
 import { join as join61, resolve as resolve2, dirname as dirname29, basename as basename27 } from "path";
 
@@ -27808,7 +27594,7 @@ function renderEnvNeeds(needs, installedCount) {
 
 // src/star-nudge.ts
 init_paths();
-import { existsSync as existsSync42, mkdirSync as mkdirSync11, writeFileSync as writeFileSync11 } from "node:fs";
+import { existsSync as existsSync43, mkdirSync as mkdirSync11, writeFileSync as writeFileSync11 } from "node:fs";
 import { dirname as dirname20, join as join45 } from "node:path";
 var REPO = "https://github.com/munhq/chat-recall";
 function markerPath() {
@@ -27824,7 +27610,7 @@ function shouldAskForStar(resultCount) {
   if (suppressed()) return false;
   if (!process.stderr.isTTY) return false;
   try {
-    return !existsSync42(markerPath());
+    return !existsSync43(markerPath());
   } catch {
     return false;
   }
@@ -27865,7 +27651,7 @@ function claudeHookConfigFiles() {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   for (const home of claudeHomeDirs()) {
-    if (!existsSync56(join61(home, "projects"))) continue;
+    if (!existsSync57(join61(home, "projects"))) continue;
     const file = join61(home, "hooks.json");
     let key2;
     try {
@@ -28013,6 +27799,7 @@ var DEFAULT_ALLOW = [
   "recall_user_prompts",
   "recall_decision_record",
   "recall_decisions",
+  "recall_decision_scan",
   "recall_analytics_summary",
   "recall_outcome_summary",
   "recall_regenerate_summary",
@@ -28650,7 +28437,7 @@ memory.command("wake-up").description("Generate wake-up context (high-importance
   try {
     const identityFile = getIdentityFilePath();
     let identity = "AI coding assistant";
-    if (existsSync56(identityFile)) {
+    if (existsSync57(identityFile)) {
       identity = readFileSync49(identityFile, "utf-8").trim();
     }
     const lines = [
@@ -28751,7 +28538,7 @@ program.command("feedback").argument("<message...>", "what you want to say \u201
   }
 });
 program.command("doctor").description("Quick health check across login, server, credentials, hooks, MCP server, and codeindex").option("--purge-local", "Remove the legacy local index (cache.db + vector/KG files) left by pre-thin-collector versions \u2014 storage is server-side now. Requires login; keeps credentials, sync ledger, identity, and the audit log.").action(async (opts) => {
-  const { existsSync: existsSync57, readFileSync: readFileSync50, statSync: statSync45 } = await import("fs");
+  const { existsSync: existsSync58, readFileSync: readFileSync50, statSync: statSync45 } = await import("fs");
   const { execSync: execSync6 } = await import("child_process");
   const rows = [];
   const note = (ok, label, detail) => rows.push({ ok, label, detail });
@@ -28815,7 +28602,7 @@ program.command("doctor").description("Quick health check across login, server,
     }
   }
   const credFile = join61(getDataDir(), "credentials.json");
-  if (!existsSync57(credFile)) {
+  if (!existsSync58(credFile)) {
     note(false, "Credentials file", `missing \u2014 run \`chat-recall login <server-url>\``);
   } else {
     try {
@@ -28830,13 +28617,13 @@ program.command("doctor").description("Quick health check across login, server,
   for (const hooksJson of claudeHookConfigFiles()) {
     const profile = basename27(dirname29(hooksJson));
     const label = `Claude hooks (${profile})`;
-    if (!existsSync57(hooksJson)) {
+    if (!existsSync58(hooksJson)) {
       note(false, label, `no ${hooksJson} \u2014 run \`chat-recall install-hooks\``);
       continue;
     }
     try {
       const readHooks = (file) => {
-        if (!existsSync57(file)) return {};
+        if (!existsSync58(file)) return {};
         try {
           return JSON.parse(readFileSync50(file, "utf-8")).hooks || {};
         } catch {
@@ -28879,9 +28666,9 @@ program.command("doctor").description("Quick health check across login, server,
   try {
     const reg = await Promise.resolve().then(() => (init_guard_registration(), guard_registration_exports));
     for (const target2 of reg.guardTargets()) {
-      if (!existsSync57(target2.homeDir)) continue;
+      if (!existsSync58(target2.homeDir)) continue;
       const label = `Decision guard \u2014 ${target2.label}`;
-      if (!existsSync57(target2.configPath)) {
+      if (!existsSync58(target2.configPath)) {
         note(false, label, `not registered \u2014 run \`chat-recall install-hooks\``);
         continue;
       }
@@ -28906,7 +28693,7 @@ program.command("doctor").description("Quick health check across login, server,
     const want = bundledSkillNames2().length;
     for (const t of skillTargets2()) {
       if (!t.available) continue;
-      const have = want === 0 ? 0 : bundledSkillNames2().filter((n) => existsSync57(join61(t.dir, n, ".chat-recall-managed"))).length;
+      const have = want === 0 ? 0 : bundledSkillNames2().filter((n) => existsSync58(join61(t.dir, n, ".chat-recall-managed"))).length;
       note(
         have === want,
         `Skills \u2014 ${t.label}`,
@@ -28976,7 +28763,7 @@ program.command("doctor").description("Quick health check across login, server,
   } else if (process.platform === "darwin") {
     watchRunning = /com\.chat-recall\.watch/.test(tryCmd2("launchctl list 2>/dev/null"));
   } else {
-    watchRunning = /active/.test(tryCmd2("systemctl --user is-active chat-recall-watch.service 2>/dev/null"));
+    watchRunning = /^active$/m.test(tryCmd2("systemctl --user is-active chat-recall-watch.service 2>/dev/null"));
   }
   note(watchRunning, "Watch daemon", watchRunning ? "running" : "not running (run `chat-recall watch --install-service` to keep collection running)");
   const dataDir = getDataDir();
@@ -28988,7 +28775,7 @@ program.command("doctor").description("Quick health check across login, server,
     join61(dataDir, "index", "knowledge_graph.db"),
     join61(dataDir, "index", "metadata.db")
   ];
-  const legacyPresent = legacyPaths.filter((p) => existsSync57(p));
+  const legacyPresent = legacyPaths.filter((p) => existsSync58(p));
   if (opts.purgeLocal) {
     if (!target) {
       note(false, "Purge legacy index", "refused \u2014 log in and `chat-recall sync` first, so your history is on the server before removing local copies");
@@ -29632,10 +29419,10 @@ tasks.command("pull [dir]").description("Write TEAM_TASKS.md for your tasks in t
   try {
     const { resolveProjectId: resolveProjectId2 } = await Promise.resolve().then(() => (init_project_resolver(), project_resolver_exports));
     const { renderTeamTasksMd: renderTeamTasksMd2, parseTeamTasksFile: parseTeamTasksFile2 } = await Promise.resolve().then(() => (init_project_tasks(), project_tasks_exports));
-    const { writeFileSync: writeFileSync24, readFileSync: readFileSync50, existsSync: existsSync57 } = await import("node:fs");
+    const { writeFileSync: writeFileSync24, readFileSync: readFileSync50, existsSync: existsSync58 } = await import("node:fs");
     const { join: join62 } = await import("node:path");
     const file = join62(cwd, "TEAM_TASKS.md");
-    if (!opts.force && existsSync57(file) && parseTeamTasksFile2(readFileSync50(file, "utf8")).length > 0) {
+    if (!opts.force && existsSync58(file) && parseTeamTasksFile2(readFileSync50(file, "utf8")).length > 0) {
       console.error(chalk2.red("TEAM_TASKS.md has unpushed edits."), "Run", chalk2.bold("chat-recall tasks push"), "first, or", chalk2.bold("tasks pull --force"), "to discard.");
       process.exit(1);
     }
@@ -29654,10 +29441,10 @@ tasks.command("push [dir]").description("Push TEAM_TASKS.md status edits back to
   const cwd = dir || process.cwd();
   try {
     const { parseTeamTasksFile: parseTeamTasksFile2 } = await Promise.resolve().then(() => (init_project_tasks(), project_tasks_exports));
-    const { readFileSync: readFileSync50, existsSync: existsSync57 } = await import("node:fs");
+    const { readFileSync: readFileSync50, existsSync: existsSync58 } = await import("node:fs");
     const { join: join62 } = await import("node:path");
     const file = join62(cwd, "TEAM_TASKS.md");
-    if (!existsSync57(file)) {
+    if (!existsSync58(file)) {
       console.error(chalk2.red("no TEAM_TASKS.md here \u2014"), "run", chalk2.bold("chat-recall tasks pull"), "first");
       process.exit(1);
     }
@@ -30099,10 +29886,10 @@ program.command("task-hook").description("Move a board card when a prompt or a c
       return;
     }
     if (!opts.close) return;
-    const { execFileSync: execFileSync4 } = await import("node:child_process");
+    const { execFileSync: execFileSync5 } = await import("node:child_process");
     const git2 = (args) => {
       try {
-        return execFileSync4("git", args, {
+        return execFileSync5("git", args, {
           cwd,
           encoding: "utf8",
           timeout: 5e3,
@@ -30144,7 +29931,7 @@ program.command("task-hook").description("Move a board card when a prompt or a c
   }
 });
 program.command("install-hooks").description("Install Claude Code hooks (Stop + PreCompact + UserPromptSubmit + SessionEnd + SessionStart) into every Claude profile").option("--uninstall", "Remove hooks instead of installing them").option("--no-resume-hint", "Don't install the UserPromptSubmit resume-hint hook").option("--no-escalate", "Don't install the SessionEnd learnings-escalation hook").option("--no-wakeup", "Don't install the SessionStart wake-up hook").option("--no-guard", "Don't install the PreToolUse decision guard").option("--no-task-board", "Don't install the hooks that claim and close board cards").action(async (opts) => {
-  const { mkdirSync: mkdirSync23, copyFileSync: copyFileSync4, chmodSync: chmodSync5, existsSync: existsSync57, readFileSync: readFileSync50, writeFileSync: writeFileSync24, statSync: statSync45, unlinkSync: unlinkSync4 } = await import("fs");
+  const { mkdirSync: mkdirSync23, copyFileSync: copyFileSync4, chmodSync: chmodSync5, existsSync: existsSync58, readFileSync: readFileSync50, writeFileSync: writeFileSync24, statSync: statSync45, unlinkSync: unlinkSync4 } = await import("fs");
   const { fileURLToPath: fileURLToPath6 } = await import("url");
   const { boardHookEntries: boardHookEntries2, isBoardHookEntry: isBoardHookEntry2, registerBoardHooks: registerBoardHooks2, resolveCliEntry: resolveCliEntry2 } = await Promise.resolve().then(() => (init_board_hooks(), board_hooks_exports));
   const here = fileURLToPath6(new URL(".", import.meta.url));
@@ -30157,7 +29944,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
       // freshly added script is only at the root until that build runs.
       join61(here, "..", "..", "..", "hooks", name)
     ];
-    return candidates2.find((p) => existsSync57(p));
+    return candidates2.find((p) => existsSync58(p));
   };
   const sourceSaveHook = findHook("chat_recall_save_hook.sh");
   const sourceGuardHook = findHook("chat_recall_guard_hook.sh");
@@ -30176,7 +29963,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
   const installedWakeupHook = join61(hooksDir, "chat_recall_wakeup_hook.sh");
   const wakeupWiredInSettings = (home) => {
     const settings2 = join61(home, "settings.json");
-    if (!existsSync57(settings2)) return false;
+    if (!existsSync58(settings2)) return false;
     try {
       const cfg = JSON.parse(readFileSync50(settings2, "utf-8"));
       const arr = Array.isArray(cfg.hooks?.SessionStart) ? cfg.hooks.SessionStart : [];
@@ -30187,7 +29974,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
   };
   const hookConfigFiles = claudeHookConfigFiles();
   const readHookConfig = (file) => {
-    if (!existsSync57(file)) return { hooks: {} };
+    if (!existsSync58(file)) return { hooks: {} };
     try {
       const c = JSON.parse(readFileSync50(file, "utf-8"));
       if (!c.hooks || typeof c.hooks !== "object") c.hooks = {};
@@ -30204,7 +29991,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
   };
   const HOOK_EVENTS = ["Stop", "PreCompact", "UserPromptSubmit", "SessionEnd", "SessionStart", "PreToolUse"];
   const readJson4 = (file) => {
-    if (!existsSync57(file)) return {};
+    if (!existsSync58(file)) return {};
     try {
       return JSON.parse(readFileSync50(file, "utf-8"));
     } catch {
@@ -30215,7 +30002,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
     const reg = await Promise.resolve().then(() => (init_guard_registration(), guard_registration_exports));
     const notes = [];
     for (const target of reg.guardTargets()) {
-      if (!existsSync57(target.homeDir)) continue;
+      if (!existsSync58(target.homeDir)) continue;
       const wrapper = join61(hooksDir, reg.guardWrapperName(target.tool));
       writeFileSync24(wrapper, reg.guardWrapperSource(target.tool, hookPath));
       chmodSync5(wrapper, 493);
@@ -30236,7 +30023,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
     const reg = await Promise.resolve().then(() => (init_guard_registration(), guard_registration_exports));
     let removed = 0;
     for (const target of reg.guardTargets()) {
-      if (!existsSync57(target.configPath)) continue;
+      if (!existsSync58(target.configPath)) continue;
       if (target.tool === "opencode") {
         const body = readFileSync50(target.configPath, "utf-8");
         if (!body.includes("chat-recall install-hooks")) continue;
@@ -30264,7 +30051,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
         if (filtered.length) config2.hooks[event] = filtered;
         else delete config2.hooks[event];
       }
-      if (removed === 0 && !existsSync57(hooksJson)) continue;
+      if (removed === 0 && !existsSync58(hooksJson)) continue;
       writeFileSync24(hooksJson, JSON.stringify(config2, null, 2) + "\n");
       total += removed;
       console.log(chalk2.green(`\u2713 Removed ${removed} chat-recall hook entr${removed === 1 ? "y" : "ies"} from ${hooksJson}`));
@@ -31137,8 +30924,8 @@ npm has ${version2}; the server you sync to still serves ${check.serverVersion}.
       console.log(chalk2.dim(`
 Installing ${version2} from npm\u2026`));
       try {
-        const { execFileSync: execFileSync4 } = await import("node:child_process");
-        execFileSync4("npm", ["install", "-g", `chat-recall@${version2}`], { stdio: "inherit" });
+        const { execFileSync: execFileSync5 } = await import("node:child_process");
+        execFileSync5("npm", ["install", "-g", `chat-recall@${version2}`], { stdio: "inherit" });
         const { installedVersion: installedVersion2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
         const landed = installedVersion2();
         if (landed && compareVersions2(landed, version2) >= 0) {