chat-recall 0.7.13 → 0.7.15

package/dist/cli.js

@@ -4259,7 +4259,7 @@ var require_pino = __commonJS({
         messageKey,
         errorKey,
         nestedKey,
-        base: base3,
+        base: base4,
         name,
         level: level2,
         customLevels,
@@ -4298,11 +4298,11 @@ var require_pino = __commonJS({
         [formattersSym]: allFormatters
       });
       let chindings = "";
-      if (base3 !== null) {
+      if (base4 !== null) {
         if (name === void 0) {
-          chindings = coreChindings(base3);
+          chindings = coreChindings(base4);
         } else {
-          chindings = coreChindings(Object.assign({}, base3, { name }));
+          chindings = coreChindings(Object.assign({}, base4, { name }));
         }
       }
       const time2 = timestamp instanceof Function ? timestamp : timestamp ? epochTime : nullTime;
@@ -4834,57 +4834,57 @@ function freshDefaults() {
     team: defaultTeam()
   };
 }
-function mergeSources(base3, partial) {
+function mergeSources(base4, partial) {
   if (!partial)
-    return base3;
+    return base4;
   const legacyGemini = partial.enabled?.gemini;
   const inherited = legacyGemini && typeof legacyGemini === "object" ? (({ sessions: _s, plans: _p, ...rest }) => rest)(legacyGemini) : {};
   const enabled = {
-    claude: { ...base3.enabled.claude, ...partial.enabled?.claude ?? {} },
-    opencode: { ...base3.enabled.opencode, ...partial.enabled?.opencode ?? {} },
-    codex: { ...base3.enabled.codex, ...partial.enabled?.codex ?? {} },
-    agy: { ...base3.enabled.agy, ...inherited, ...partial.enabled?.agy ?? {} },
-    cursor: { ...base3.enabled.cursor, ...partial.enabled?.cursor ?? {} },
-    shared: { ...base3.enabled.shared, ...partial.enabled?.shared ?? {} },
-    common: { ...base3.enabled.common, ...partial.enabled?.common ?? {} }
+    claude: { ...base4.enabled.claude, ...partial.enabled?.claude ?? {} },
+    opencode: { ...base4.enabled.opencode, ...partial.enabled?.opencode ?? {} },
+    codex: { ...base4.enabled.codex, ...partial.enabled?.codex ?? {} },
+    agy: { ...base4.enabled.agy, ...inherited, ...partial.enabled?.agy ?? {} },
+    cursor: { ...base4.enabled.cursor, ...partial.enabled?.cursor ?? {} },
+    shared: { ...base4.enabled.shared, ...partial.enabled?.shared ?? {} },
+    common: { ...base4.enabled.common, ...partial.enabled?.common ?? {} }
   };
   return {
-    claudeHome: partial.claudeHome ?? base3.claudeHome,
-    geminiHome: partial.geminiHome ?? base3.geminiHome,
-    codexHome: partial.codexHome ?? base3.codexHome,
-    opencodeDbPath: partial.opencodeDbPath ?? base3.opencodeDbPath,
-    agyHome: partial.agyHome ?? base3.agyHome,
-    cursorHome: partial.cursorHome ?? base3.cursorHome,
-    cursorIdeHome: partial.cursorIdeHome ?? base3.cursorIdeHome,
-    extraClaudeHomes: partial.extraClaudeHomes ?? base3.extraClaudeHomes,
-    approvedHomes: partial.approvedHomes ?? base3.approvedHomes,
-    declinedHomes: partial.declinedHomes ?? base3.declinedHomes,
-    homesGrandfathered: partial.homesGrandfathered ?? base3.homesGrandfathered,
+    claudeHome: partial.claudeHome ?? base4.claudeHome,
+    geminiHome: partial.geminiHome ?? base4.geminiHome,
+    codexHome: partial.codexHome ?? base4.codexHome,
+    opencodeDbPath: partial.opencodeDbPath ?? base4.opencodeDbPath,
+    agyHome: partial.agyHome ?? base4.agyHome,
+    cursorHome: partial.cursorHome ?? base4.cursorHome,
+    cursorIdeHome: partial.cursorIdeHome ?? base4.cursorIdeHome,
+    extraClaudeHomes: partial.extraClaudeHomes ?? base4.extraClaudeHomes,
+    approvedHomes: partial.approvedHomes ?? base4.approvedHomes,
+    declinedHomes: partial.declinedHomes ?? base4.declinedHomes,
+    homesGrandfathered: partial.homesGrandfathered ?? base4.homesGrandfathered,
     enabled
   };
 }
-function mergePrivacy(base3, partial) {
+function mergePrivacy(base4, partial) {
   if (!partial)
-    return base3;
-  return { ...base3, ...partial };
+    return base4;
+  return { ...base4, ...partial };
 }
-function mergeSync(base3, partial) {
+function mergeSync(base4, partial) {
   if (!partial)
-    return base3;
+    return base4;
   return {
-    ...base3,
+    ...base4,
     ...partial,
-    upload: { ...base3.upload, ...partial.upload ?? {} }
+    upload: { ...base4.upload, ...partial.upload ?? {} }
   };
 }
-function mergeTeam(base3, partial) {
+function mergeTeam(base4, partial) {
   if (!partial)
-    return base3;
+    return base4;
   return {
-    ...base3,
+    ...base4,
     ...partial,
-    publishAllowed: { ...base3.publishAllowed, ...partial.publishAllowed ?? {} },
-    vault: { ...base3.vault, ...partial.vault ?? {} }
+    publishAllowed: { ...base4.publishAllowed, ...partial.publishAllowed ?? {} },
+    vault: { ...base4.vault, ...partial.vault ?? {} }
   };
 }
 function settingsFilePath() {
@@ -5002,15 +5002,15 @@ function loadSettings() {
   }
   try {
     const parsed = JSON.parse(readFileSync(path, "utf-8"));
-    const base3 = freshDefaults();
+    const base4 = freshDefaults();
     const result = {
       v: SCHEMA_VERSION,
-      embedding: { ...base3.embedding, ...parsed.embedding ?? {} },
-      summary: { ...base3.summary, ...parsed.summary ?? {} },
-      sources: mergeSources(base3.sources, parsed.sources),
-      privacy: mergePrivacy(base3.privacy, parsed.privacy),
-      sync: mergeSync(base3.sync, parsed.sync),
-      team: mergeTeam(base3.team, parsed.team)
+      embedding: { ...base4.embedding, ...parsed.embedding ?? {} },
+      summary: { ...base4.summary, ...parsed.summary ?? {} },
+      sources: mergeSources(base4.sources, parsed.sources),
+      privacy: mergePrivacy(base4.privacy, parsed.privacy),
+      sync: mergeSync(base4.sync, parsed.sync),
+      team: mergeTeam(base4.team, parsed.team)
     };
     if (mtimeMs >= 0)
       _settingsCache = { mtimeMs, size, value: structuredClone(result) };
@@ -5216,10 +5216,10 @@ function legacyAutoSyncedHomes() {
     { base: join3(home, ".local", "share", "opencode"), marker: "opencode.db" },
     { base: join3(home, ".cursor"), marker: "chats" }
   ];
-  for (const { base: base3, marker } of bases) {
-    add(base3, marker);
-    const parent = dirname3(base3);
-    const leaf = base3.slice(parent.length + 1);
+  for (const { base: base4, marker } of bases) {
+    add(base4, marker);
+    const parent = dirname3(base4);
+    const leaf = base4.slice(parent.length + 1);
     try {
       for (const e of readdirSync2(parent, { withFileTypes: true })) {
         if (!e.isDirectory())
@@ -5417,17 +5417,17 @@ function cursorHomeDir() {
 function cursorIdeHomeDir() {
   return process.env.CHAT_RECALL_CURSOR_IDE_HOME || sources().cursorIdeHome || (process.platform === "darwin" ? join4(homedir3(), "Library", "Application Support", "Cursor") : join4(homedir3(), ".config", "Cursor"));
 }
-function siblingHomes(base3, overridden, suffix) {
+function siblingHomes(base4, overridden, suffix) {
   const roots = [];
   const add = (home) => {
     const root = suffix ? join4(home, suffix) : home;
     if (existsSync4(root) && !roots.includes(root))
       roots.push(root);
   };
-  add(base3);
+  add(base4);
   if (!overridden) {
-    const parent = dirname4(base3);
-    const leaf = basename(base3);
+    const parent = dirname4(base4);
+    const leaf = basename(base4);
     try {
       for (const entry of readdirSync3(parent, { withFileTypes: true })) {
         if (!entry.isDirectory())
@@ -5937,9 +5937,9 @@ async function parseSessionFile(sessionPath, maxMessages = 50) {
           content.metadata.durationMs += obj.durationMs;
         }
         if (msgType === "file-history-snapshot") {
-          const snapshot = obj.snapshot;
-          if (snapshot && typeof snapshot === "object") {
-            const backups = snapshot.trackedFileBackups;
+          const snapshot2 = obj.snapshot;
+          if (snapshot2 && typeof snapshot2 === "object") {
+            const backups = snapshot2.trackedFileBackups;
             if (backups && typeof backups === "object") {
               for (const filePath2 of Object.keys(backups)) {
                 filesModified.add(filePath2);
@@ -10956,12 +10956,14 @@ function lineKey(line) {
   try {
     const o = JSON.parse(line);
     if (typeof o?.uuid === "string" && o.uuid)
-      return { key: `u:${o.uuid}`, singleton: false };
-    if (typeof o?.type === "string" && SINGLETON_META.has(o.type))
-      return { key: `m:${o.type}`, singleton: true };
+      return { key: `u:${o.uuid}`, meta: false, json: true };
+    return { key: `h:${sha1(line)}`, meta: typeof o?.type === "string" && STATE_META.has(o.type), json: true };
   } catch {
   }
-  return { key: `h:${sha1(line)}`, singleton: false };
+  return { key: `h:${sha1(line)}`, meta: false, json: false };
+}
+function isHalfWritten(line, currentLines) {
+  return currentLines.some((c) => c.length > line.length && c.startsWith(line));
 }
 function mergeLineText(shadowText, currentText) {
   const shadowLines = shadowText.split("\n").filter((l) => l.trim());
@@ -10969,27 +10971,24 @@ function mergeLineText(shadowText, currentText) {
   const currentKeys = /* @__PURE__ */ new Set();
   for (const l of currentLines)
     currentKeys.add(lineKey(l).key);
-  const shadowKeys = /* @__PURE__ */ new Set();
-  for (const l of shadowLines)
-    shadowKeys.add(lineKey(l).key);
-  let recovered = 0;
-  for (const k of shadowKeys)
-    if (!currentKeys.has(k))
-      recovered++;
-  if (recovered === 0) {
-    return { text: currentText.endsWith("\n") ? currentText : currentText + "\n", recovered: 0, totalRecords: currentKeys.size };
-  }
-  const out = [];
-  const emitted = /* @__PURE__ */ new Set();
+  const kept = [];
+  const keptKeys = /* @__PURE__ */ new Set();
+  const counted = /* @__PURE__ */ new Set();
   for (const l of shadowLines) {
-    const { key: key2, singleton } = lineKey(l);
-    if (singleton && currentKeys.has(key2))
-      continue;
-    if (emitted.has(key2))
+    const { key: key2, meta, json } = lineKey(l);
+    if (!json && isHalfWritten(l, currentLines))
       continue;
-    out.push(l);
-    emitted.add(key2);
+    kept.push(l);
+    keptKeys.add(key2);
+    if (!meta && !currentKeys.has(key2))
+      counted.add(key2);
+  }
+  const recovered = counted.size;
+  if (recovered === 0) {
+    return { text: currentText.endsWith("\n") ? currentText : currentText + "\n", recovered: 0, totalRecords: currentKeys.size };
   }
+  const out = [...kept];
+  const emitted = keptKeys;
   for (const l of currentLines) {
     const { key: key2 } = lineKey(l);
     if (emitted.has(key2))
@@ -11174,14 +11173,14 @@ function shadowSizeOnDisk(tool, rawId) {
     return 0;
   }
 }
-var WHOLE_FILE_TOOLS, SINGLETON_META, lastLiveFingerprint;
+var WHOLE_FILE_TOOLS, STATE_META, lastLiveFingerprint;
 var init_shadow = __esm({
   "../engine/dist/transcript/shadow.js"() {
     "use strict";
     init_paths();
     init_raw();
     WHOLE_FILE_TOOLS = /* @__PURE__ */ new Set(["cursor"]);
-    SINGLETON_META = /* @__PURE__ */ new Set(["mode", "permission-mode", "ai-title", "last-prompt", "pr-link", "summary"]);
+    STATE_META = /* @__PURE__ */ new Set(["mode", "permission-mode", "ai-title", "last-prompt", "pr-link", "summary"]);
     lastLiveFingerprint = /* @__PURE__ */ new Map();
   }
 });
@@ -12777,8 +12776,8 @@ function _clearServerRulePack() {
   serverPack = null;
 }
 function activeRules() {
-  const base3 = settingsView().rules;
-  return serverPack && serverPack.rules.length > 0 ? [...base3, ...serverPack.rules] : base3;
+  const base4 = settingsView().rules;
+  return serverPack && serverPack.rules.length > 0 ? [...base4, ...serverPack.rules] : base4;
 }
 function isRedactionEnabled() {
   const env = isEnvRedactionRequested();
@@ -18536,7 +18535,7 @@ var init_extractor_version = __esm({
 });
 
 // src/sync-ledger.ts
-import { readFileSync as readFileSync29, writeFileSync as writeFileSync5, renameSync as renameSync4, mkdirSync as mkdirSync6 } from "node:fs";
+import { readFileSync as readFileSync29, writeFileSync as writeFileSync5, renameSync as renameSync4, mkdirSync as mkdirSync6, statSync as statSync35 } from "node:fs";
 import { join as join38, dirname as dirname15 } from "node:path";
 function toRow(entry) {
   if (entry === void 0) return void 0;
@@ -18545,32 +18544,94 @@ function toRow(entry) {
 function ledgerFilePath() {
   return ledgerPath();
 }
-function load() {
-  if (cache3) return cache3;
+function stampOf(path) {
+  try {
+    const st = statSync35(path);
+    return `${st.mtimeMs}:${st.size}`;
+  } catch {
+    return null;
+  }
+}
+function readDisk(path) {
   try {
-    const parsed = JSON.parse(readFileSync29(ledgerPath(), "utf-8"));
-    cache3 = parsed && typeof parsed === "object" ? parsed : {};
+    const parsed = JSON.parse(readFileSync29(path, "utf-8"));
+    return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
-    cache3 = {};
+    return {};
   }
+}
+function snapshot(data) {
+  const out = /* @__PURE__ */ new Map();
+  for (const [server, rows] of Object.entries(data)) {
+    for (const [id, entry] of Object.entries(rows)) out.set(rowKey(server, id), JSON.stringify(entry));
+  }
+  return out;
+}
+function mergeOnto(disk) {
+  const out = {};
+  const put = (server, id, entry) => {
+    (out[server] ??= {})[id] = entry;
+  };
+  const mine = cache3 ?? {};
+  for (const [server, rows] of Object.entries(disk)) {
+    for (const [id, entry] of Object.entries(rows)) {
+      const k = rowKey(server, id);
+      const own = mine[server]?.[id];
+      const was = base.get(k);
+      if (own === void 0) {
+        if (was === void 0) put(server, id, entry);
+      } else {
+        put(server, id, JSON.stringify(own) === was ? entry : own);
+      }
+    }
+  }
+  for (const [server, rows] of Object.entries(mine)) {
+    for (const [id, entry] of Object.entries(rows)) {
+      if (disk[server]?.[id] !== void 0) continue;
+      if (JSON.stringify(entry) !== base.get(rowKey(server, id))) put(server, id, entry);
+    }
+  }
+  return out;
+}
+function load() {
+  const path = ledgerPath();
+  const stamp = stampOf(path);
+  if (cache3 && stamp === diskStamp) return cache3;
+  const disk = readDisk(path);
+  const merged = cache3 ? mergeOnto(disk) : disk;
+  if (cache3) {
+    for (const server of Object.keys(cache3)) if (!(server in merged)) delete cache3[server];
+    for (const [server, rows] of Object.entries(merged)) {
+      const target = cache3[server] ?? (cache3[server] = {});
+      for (const id of Object.keys(target)) if (!(id in rows)) delete target[id];
+      Object.assign(target, rows);
+    }
+  } else {
+    cache3 = merged;
+  }
+  base = snapshot(disk);
+  diskStamp = stamp;
   return cache3;
 }
-function persistNow(data) {
+function persistNow() {
   const path = ledgerPath();
   mkdirSync6(dirname15(path), { recursive: true });
-  const tmp = `${path}.tmp`;
-  writeFileSync5(tmp, JSON.stringify(data));
+  load();
+  const tmp = `${path}.tmp-${process.pid}`;
+  writeFileSync5(tmp, JSON.stringify(cache3 ?? {}));
   renameSync4(tmp, path);
+  base = snapshot(cache3 ?? {});
+  diskStamp = stampOf(path);
   pendingWrite = false;
 }
-function persist(data) {
+function persist(_data) {
   pendingWrite = true;
   if (flushTimer) return;
   flushTimer = setTimeout(() => {
     flushTimer = null;
     if (pendingWrite) {
       try {
-        persistNow(data);
+        persistNow();
       } catch {
       }
     }
@@ -18604,7 +18665,7 @@ function pruneLedgerTargets(configuredServers) {
   }
   const rows = names.reduce((n, s) => n + Object.keys(orphans[s]).length, 0);
   console.error(`[sync] tidied local bookkeeping: ${rows} already-synced marker(s) for ${names.length} server(s) you no longer sync to (${names.join(", ")}) moved to ${side}. Nothing was uploaded there; the file is kept so logging back in re-ships nothing.`);
-  persistNow(data);
+  persistNow();
   return names.length;
 }
 function flushLedger() {
@@ -18613,7 +18674,7 @@ function flushLedger() {
     flushTimer = null;
   }
   if (!pendingWrite || !cache3) return;
-  persistNow(cache3);
+  persistNow();
 }
 function loadItemVersionsAll() {
   if (itemVersionsCache) return itemVersionsCache;
@@ -18689,13 +18750,13 @@ function markSynced(server, rows) {
     const o = (cursorFromCaller ? r.offset : void 0) ?? prevOS.o ?? 0;
     const s = (cursorFromCaller ? r.size : void 0) ?? prevOS.s ?? 0;
     const ev = extractorVersionForId(r.id);
-    const base3 = prevF ? { m: Math.floor(r.mtime), v: ev, f: prevF } : { m: Math.floor(r.mtime), v: ev };
+    const base4 = prevF ? { m: Math.floor(r.mtime), v: ev, f: prevF } : { m: Math.floor(r.mtime), v: ev };
     if (o > 0 || s > 0) {
-      base3.o = o;
-      base3.s = s;
+      base4.o = o;
+      base4.s = s;
     }
-    if (r.hash !== void 0) base3.h = r.hash;
-    forServer[r.id] = base3;
+    if (r.hash !== void 0) base4.h = r.hash;
+    forServer[r.id] = base4;
   }
   persist(data);
 }
@@ -18770,7 +18831,7 @@ function syncMode(row, mtime, fileSize, extractorVersion, isAppendOnly) {
   if (row.m >= Math.floor(mtime)) return "skip";
   return "full";
 }
-var ledgerPath, cache3, LEDGER_FLUSH_MS, pendingWrite, flushTimer, itemVersionsPath, itemVersionsCache, inventoryPath, unackedCursorAttempts, reconcilePath, reconcileCache;
+var ledgerPath, cache3, base, diskStamp, rowKey, LEDGER_FLUSH_MS, pendingWrite, flushTimer, itemVersionsPath, itemVersionsCache, inventoryPath, unackedCursorAttempts, reconcilePath, reconcileCache;
 var init_sync_ledger = __esm({
   "src/sync-ledger.ts"() {
     "use strict";
@@ -18778,6 +18839,9 @@ var init_sync_ledger = __esm({
     init_extractor_version();
     ledgerPath = () => join38(getDataDir(), "sync-ledger.json");
     cache3 = null;
+    base = /* @__PURE__ */ new Map();
+    diskStamp = null;
+    rowKey = (server, id) => `${server}\0${id}`;
     LEDGER_FLUSH_MS = 2e3;
     pendingWrite = false;
     flushTimer = null;
@@ -18816,7 +18880,7 @@ var init_sync_fields = __esm({
 });
 
 // ../engine/dist/core/index-lock.js
-import { existsSync as existsSync39, mkdirSync as mkdirSync7, openSync as openSync8, writeFileSync as writeFileSync6, readFileSync as readFileSync30, rmSync as rmSync4, statSync as statSync35, closeSync as closeSync8 } from "fs";
+import { existsSync as existsSync39, mkdirSync as mkdirSync7, openSync as openSync8, writeFileSync as writeFileSync6, readFileSync as readFileSync30, rmSync as rmSync4, statSync as statSync36, closeSync as closeSync8 } from "fs";
 import { dirname as dirname16, join as join39 } from "path";
 function acquireIndexLock(opts) {
   const lockPath = lockFilePath(opts.file);
@@ -18866,7 +18930,7 @@ function lockFilePath(file = ".compact.lock") {
 }
 function stealStaleLock(lockPath, staleAfterMs) {
   try {
-    const s = statSync35(lockPath);
+    const s = statSync36(lockPath);
     const age = Date.now() - s.mtimeMs;
     let payload;
     try {
@@ -18938,7 +19002,7 @@ var init_http = __esm({
       CLI_VERSION = JSON.parse(readFileSync31(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.7.13";
+        if (true) CLI_VERSION = "0.7.15";
       } catch {
       }
     }
@@ -19436,7 +19500,7 @@ var init_telemetry = __esm({
     init_sync_client();
     cliVersion2 = () => {
       try {
-        return true ? "0.7.13" : "dev";
+        return true ? "0.7.15" : "dev";
       } catch {
         return "dev";
       }
@@ -19612,11 +19676,11 @@ __export(server_probe_exports, {
 function probeOk(r) {
   return r.kind === "ok" && r.apiVersion >= 2;
 }
-async function probeServer(base3, opts = {}) {
+async function probeServer(base4, opts = {}) {
   const f = opts.fetchImpl || fetch;
   let res;
   try {
-    res = await f(`${base3.replace(/\/+$/, "")}/api/capabilities`, {
+    res = await f(`${base4.replace(/\/+$/, "")}/api/capabilities`, {
       signal: AbortSignal.timeout(opts.timeoutMs ?? 1e4)
     });
   } catch (err) {
@@ -19653,34 +19717,34 @@ async function probeServer(base3, opts = {}) {
     raw: parsed
   };
 }
-function probeAdvice(r, base3) {
+function probeAdvice(r, base4) {
   switch (r.kind) {
     case "ok":
       return r.apiVersion >= 2 ? `apiVersion ${r.apiVersion}${r.edition ? `, edition ${r.edition}` : ""}` : `apiVersion ${r.apiVersion} is too old for this CLI \u2014 upgrade the server`;
     case "moved":
-      return `HTTP ${r.status} \u2014 nothing is served at ${base3}. If the host moved, re-point it: \`chat-recall login <new-server-url>\``;
+      return `HTTP ${r.status} \u2014 nothing is served at ${base4}. If the host moved, re-point it: \`chat-recall login <new-server-url>\``;
     case "unauthorized":
-      return `HTTP ${r.status} \u2014 ${base3} rejected the credential. Re-login: \`chat-recall login ` + base3 + "`";
+      return `HTTP ${r.status} \u2014 ${base4} rejected the credential. Re-login: \`chat-recall login ` + base4 + "`";
     case "server_error":
-      return `HTTP ${r.status} \u2014 ${base3} is up but failing. Nothing to fix locally; check the server.`;
+      return `HTTP ${r.status} \u2014 ${base4} is up but failing. Nothing to fix locally; check the server.`;
     case "not_api":
-      return `${base3} answered ${r.status} with something that is not the chat-recall API (${JSON.stringify(r.snippet)}) \u2014 check the URL, a proxy or a captive portal`;
+      return `${base4} answered ${r.status} with something that is not the chat-recall API (${JSON.stringify(r.snippet)}) \u2014 check the URL, a proxy or a captive portal`;
     case "unreachable":
       switch (r.reason) {
         case "dns":
-          return `cannot resolve the host in ${base3} (${r.error}) \u2014 check the URL for a typo, and your DNS or VPN`;
+          return `cannot resolve the host in ${base4} (${r.error}) \u2014 check the URL for a typo, and your DNS or VPN`;
         case "refused":
-          return `${base3} resolves but refused the connection (${r.error}) \u2014 the server is not running, or the port is wrong`;
+          return `${base4} resolves but refused the connection (${r.error}) \u2014 the server is not running, or the port is wrong`;
         case "tls":
-          return `the TLS certificate at ${base3} was rejected (${r.error}) \u2014 expired, self-signed, or issued for another host. A corporate proxy that re-signs traffic does this.`;
+          return `the TLS certificate at ${base4} was rejected (${r.error}) \u2014 expired, self-signed, or issued for another host. A corporate proxy that re-signs traffic does this.`;
         case "timeout":
-          return `${base3} did not answer in time (${r.error}) \u2014 a firewall or proxy that drops traffic silently looks exactly like this`;
+          return `${base4} did not answer in time (${r.error}) \u2014 a firewall or proxy that drops traffic silently looks exactly like this`;
         case "reset":
-          return `the connection to ${base3} was cut (${r.error}) \u2014 often a proxy or a captive portal`;
+          return `the connection to ${base4} was cut (${r.error}) \u2014 often a proxy or a captive portal`;
         case "bad_port":
-          return `${base3} names a port that Node and every browser refuse to open (the WHATWG bad-port list) \u2014 use the server's real port`;
+          return `${base4} names a port that Node and every browser refuse to open (the WHATWG bad-port list) \u2014 use the server's real port`;
         default:
-          return `no HTTP response from ${base3} (${r.error}) \u2014 check the URL, DNS, or that the server is running`;
+          return `no HTTP response from ${base4} (${r.error}) \u2014 check the URL, DNS, or that the server is running`;
       }
   }
 }
@@ -19713,8 +19777,8 @@ function describeCause(err) {
     const code2 = e.code;
     if (typeof code2 === "string" && code2 && !parts.includes(code2)) parts.push(code2);
   }
-  const base3 = err instanceof Error ? err.message : String(err);
-  return parts.length ? `${base3}: ${parts.join(" \u2192 ")}` : base3;
+  const base4 = err instanceof Error ? err.message : String(err);
+  return parts.length ? `${base4}: ${parts.join(" \u2192 ")}` : base4;
 }
 function describeUnreachable(err) {
   const reason = classifyUnreachable(err);
@@ -19827,7 +19891,7 @@ __export(auto_update_exports, {
 import { execSync as execSync2, execFileSync as execFileSync3 } from "node:child_process";
 import { readFileSync as readFileSync34, existsSync as existsSync41 } from "node:fs";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-import { writeFileSync as writeFileSync8, mkdtempSync as mkdtempSync3, rmSync as rmSync5, readdirSync as readdirSync30, statSync as statSync36, mkdirSync as mkdirSync9 } from "node:fs";
+import { writeFileSync as writeFileSync8, mkdtempSync as mkdtempSync3, rmSync as rmSync5, readdirSync as readdirSync30, statSync as statSync37, mkdirSync as mkdirSync9 } from "node:fs";
 import { join as join41, dirname as dirname18, sep as sep2, posix as pathPosix, win32 as pathWin32 } from "node:path";
 import { tmpdir as tmpdir2, homedir as homedir15 } from "node:os";
 import { createHash as createHash8 } from "node:crypto";
@@ -19859,12 +19923,12 @@ function installedVersion() {
     return null;
   }
 }
-function planAutoUpdate(base3, caps, ownVersion3, flag) {
+function planAutoUpdate(base4, caps, ownVersion3, flag) {
   const rel = caps.cli;
   if (!rel || !rel.version || !rel.sha256) return { update: false, reason: "server advertises no CLI release" };
   if (!isAutoUpdateEnabled(caps.edition, flag)) return { update: false, reason: `auto-update disabled (edition ${caps.edition ?? "?"})` };
   if (compareVersions(rel.version, ownVersion3) <= 0) return { update: false, reason: `already current (own ${ownVersion3} >= server ${rel.version})` };
-  return { update: true, reason: `server ${rel.version} > own ${ownVersion3}`, url: tarballUrl(base3, rel.version), fallbackUrl: tarballUrl(base3), sha256: rel.sha256, from: ownVersion3, to: rel.version };
+  return { update: true, reason: `server ${rel.version} > own ${ownVersion3}`, url: tarballUrl(base4, rel.version), fallbackUrl: tarballUrl(base4), sha256: rel.sha256, from: ownVersion3, to: rel.version };
 }
 function sweepStaleStaging(root = tmpdir2(), now = Date.now()) {
   const MKDTEMP_SUFFIX = /^cr-update-.{6}$/s;
@@ -19880,7 +19944,7 @@ function sweepStaleStaging(root = tmpdir2(), now = Date.now()) {
     if (!MKDTEMP_SUFFIX.test(name)) continue;
     const dir = join41(root, name);
     try {
-      const st = statSync36(dir);
+      const st = statSync37(dir);
       if (!st.isDirectory() || now - st.mtimeMs < COLD_MS) continue;
       const inside = readdirSync30(dir);
       if (inside.length > 1 || inside.length === 1 && inside[0] !== "chat-recall.tgz") continue;
@@ -20044,20 +20108,20 @@ function clearUpdateFailures() {
 function stopAutoUpdates() {
   stopRequested = true;
 }
-async function runAutoUpdate(base3, authHeaders, ownVersion3, deps) {
+async function runAutoUpdate(base4, authHeaders, ownVersion3, deps) {
   let caps;
   try {
-    const res = await fetchWithTimeout(`${base3.replace(/\/+$/, "")}/api/capabilities`, { headers: authHeaders });
+    const res = await fetchWithTimeout(`${base4.replace(/\/+$/, "")}/api/capabilities`, { headers: authHeaders });
     if (!res.ok) return { updated: false, reason: `capabilities HTTP ${res.status}` };
     caps = await res.json();
   } catch (e) {
     return { updated: false, reason: `capabilities unreachable: ${e instanceof Error ? e.message : e}` };
   }
   const effectiveOwn = newerOf(ownVersion3, installedVersion());
-  const plan = planAutoUpdate(base3, caps, effectiveOwn, process.env.CHAT_RECALL_AUTO_UPDATE);
+  const plan = planAutoUpdate(base4, caps, effectiveOwn, process.env.CHAT_RECALL_AUTO_UPDATE);
   if (!plan.update) {
-    if (/disabled|no CLI release/.test(plan.reason) && !reportedStandingSkip.has(base3)) {
-      reportedStandingSkip.add(base3);
+    if (/disabled|no CLI release/.test(plan.reason) && !reportedStandingSkip.has(base4)) {
+      reportedStandingSkip.add(base4);
       try {
         const { reportClientEvent: reportClientEvent2 } = await Promise.resolve().then(() => (init_client_events(), client_events_exports));
         reportClientEvent2("auto_update_skipped", { message: `${plan.reason} (server offers ${caps.cli?.version ?? "?"}, this device runs ${effectiveOwn})` });
@@ -20113,7 +20177,7 @@ var init_auto_update = __esm({
     "use strict";
     init_http();
     init_index_lock();
-    tarballUrl = (base3, version2) => `${base3.replace(/\/+$/, "")}/install/${version2 ? `chat-recall-${version2}.tgz` : "chat-recall.tgz"}`;
+    tarballUrl = (base4, version2) => `${base4.replace(/\/+$/, "")}/install/${version2 ? `chat-recall-${version2}.tgz` : "chat-recall.tgz"}`;
     GIVE_UP_AFTER = 3;
     reportedStandingSkip = /* @__PURE__ */ new Set();
     STOPPING_REASON = "not installed: this process is shutting down";
@@ -20158,7 +20222,7 @@ __export(sync_client_exports, {
   syncSessions: () => syncSessions
 });
 import { join as join42, dirname as dirname19, basename as basename20 } from "node:path";
-import { readFileSync as readFileSync35, writeFileSync as writeFileSync9, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync4, rmSync as rmSync6, chmodSync as chmodSync3, unlinkSync as unlinkSync2, readdirSync as readdirSync31, statSync as statSync37 } from "node:fs";
+import { readFileSync as readFileSync35, writeFileSync as writeFileSync9, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync4, rmSync as rmSync6, chmodSync as chmodSync3, unlinkSync as unlinkSync2, readdirSync as readdirSync31, statSync as statSync38 } from "node:fs";
 import { tmpdir as tmpdir3, hostname as hostname2 } from "node:os";
 import { createHash as createHash9 } from "node:crypto";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
@@ -20221,15 +20285,15 @@ function loadAllCredentials() {
   return [];
 }
 async function fetchTenantSecurityConfig(cred) {
-  const base3 = cred.serverUrl.replace(/\/+$/, "");
-  const cached = _securityConfigCache.get(base3);
+  const base4 = cred.serverUrl.replace(/\/+$/, "");
+  const cached = _securityConfigCache.get(base4);
   if (cached && Date.now() - cached.fetchedAt < SECURITY_CONFIG_TTL_MS) return cached.config;
   const headers = { "content-type": "application/json" };
   if (cred.token) headers.authorization = `Bearer ${cred.token}`;
   try {
     const [rulesRes, settingsRes] = await Promise.all([
-      fetchWithTimeout(`${base3}/api/secrets/rules`, { headers }),
-      fetchWithTimeout(`${base3}/api/teams/security-config`, { headers }).catch(() => null)
+      fetchWithTimeout(`${base4}/api/secrets/rules`, { headers }),
+      fetchWithTimeout(`${base4}/api/teams/security-config`, { headers }).catch(() => null)
     ]);
     let tenantRules = [];
     let rulePackVersion = null;
@@ -20254,18 +20318,18 @@ async function fetchTenantSecurityConfig(cred) {
       const body2 = await settingsRes.json().catch(() => ({}));
       if (typeof body2.verifySecrets === "boolean") verifySecrets = body2.verifySecrets;
       if (typeof body2.telemetry === "boolean") {
-        setTelemetryEligible(base3, body2.telemetry);
+        setTelemetryEligible(base4, body2.telemetry);
         try {
           const prior = readCollectorHealth()?.telemetryEligible ?? {};
           updateCollectorHealth({
-            telemetryEligible: { ...prior, [base3]: { allowed: body2.telemetry, at: Date.now() } }
+            telemetryEligible: { ...prior, [base4]: { allowed: body2.telemetry, at: Date.now() } }
           });
         } catch {
         }
       }
     }
     const config2 = { tenantRules, verifySecrets, rulePackVersion };
-    _securityConfigCache.set(base3, { fetchedAt: Date.now(), config: config2 });
+    _securityConfigCache.set(base4, { fetchedAt: Date.now(), config: config2 });
     return config2;
   } catch {
     return { tenantRules: [], verifySecrets: true, rulePackVersion: null };
@@ -20284,18 +20348,18 @@ function readPersistedSyncConfigs() {
     return {};
   }
 }
-function persistSyncConfig(base3, config2) {
+function persistSyncConfig(base4, config2) {
   try {
     const all = readPersistedSyncConfigs();
-    all[base3] = { fetchedAt: Date.now(), config: config2 };
+    all[base4] = { fetchedAt: Date.now(), config: config2 };
     mkdirSync10(dirname19(syncConfigCachePath()), { recursive: true });
     writeFileSync9(syncConfigCachePath(), JSON.stringify(all, null, 2));
   } catch {
   }
 }
 async function fetchTenantSyncConfig(cred) {
-  const base3 = cred.serverUrl.replace(/\/+$/, "");
-  const cached = _syncConfigCache.get(base3);
+  const base4 = cred.serverUrl.replace(/\/+$/, "");
+  const cached = _syncConfigCache.get(base4);
   if (cached && Date.now() - cached.fetchedAt < SECURITY_CONFIG_TTL_MS) return cached.config;
   const headers = { "content-type": "application/json" };
   if (cred.token) headers.authorization = `Bearer ${cred.token}`;
@@ -20303,7 +20367,7 @@ async function fetchTenantSyncConfig(cred) {
     try {
       const sources3 = discoverSessionSources();
       if (sources3.length > 0) {
-        await fetchWithTimeout(`${base3}/api/sync-config/sources`, {
+        await fetchWithTimeout(`${base4}/api/sync-config/sources`, {
           method: "POST",
           headers,
           body: JSON.stringify({ device: deviceLabel(), sources: sources3 })
@@ -20311,12 +20375,12 @@ async function fetchTenantSyncConfig(cred) {
       }
     } catch {
     }
-    const res = await fetchWithTimeout(`${base3}/api/sync-config`, { headers });
+    const res = await fetchWithTimeout(`${base4}/api/sync-config`, { headers });
     if (res.status === 404) {
-      _syncConfigCache.set(base3, { fetchedAt: Date.now(), config: EMPTY_SYNC_CONFIG });
+      _syncConfigCache.set(base4, { fetchedAt: Date.now(), config: EMPTY_SYNC_CONFIG });
       return EMPTY_SYNC_CONFIG;
     }
-    if (!res.ok) return lastKnownSyncConfig(base3, `HTTP ${res.status}`);
+    if (!res.ok) return lastKnownSyncConfig(base4, `HTTP ${res.status}`);
     const body2 = await res.json().catch(() => ({}));
     const config2 = {
       excludeTools: Array.isArray(body2.excludeTools) ? body2.excludeTools.filter((t) => typeof t === "string") : [],
@@ -20353,22 +20417,22 @@ async function fetchTenantSyncConfig(cred) {
       if (decided > 0) console.error(`[sync] applied ${decided} folder decision(s) from the dashboard`);
     } catch {
     }
-    _syncConfigCache.set(base3, { fetchedAt: Date.now(), config: config2 });
-    persistSyncConfig(base3, config2);
+    _syncConfigCache.set(base4, { fetchedAt: Date.now(), config: config2 });
+    persistSyncConfig(base4, config2);
     return config2;
   } catch (err) {
     if (isSyncRulesRefusal(err)) throw err;
-    return lastKnownSyncConfig(base3, err instanceof Error ? err.message : "request failed");
+    return lastKnownSyncConfig(base4, err instanceof Error ? err.message : "request failed");
   }
 }
-function lastKnownSyncConfig(base3, reason) {
-  const remembered = _syncConfigCache.get(base3) ?? readPersistedSyncConfigs()[base3];
+function lastKnownSyncConfig(base4, reason) {
+  const remembered = _syncConfigCache.get(base4) ?? readPersistedSyncConfigs()[base4];
   if (remembered) {
     console.error(`[sync] could not read server-side sync rules (${reason}) \u2014 applying the last known set from ${new Date(remembered.fetchedAt).toISOString()}`);
     return remembered.config;
   }
   const refusal = new Error(
-    `Cannot read the server-side sync rules from ${base3} (${reason}), and this machine has never successfully read them. Refusing to sync: uploading without knowing your exclusions could ship a project you told the dashboard to hold back. Fix the server or retry.`
+    `Cannot read the server-side sync rules from ${base4} (${reason}), and this machine has never successfully read them. Refusing to sync: uploading without knowing your exclusions could ship a project you told the dashboard to hold back. Fix the server or retry.`
   );
   refusal[SYNC_RULES_REFUSAL] = true;
   throw refusal;
@@ -20489,25 +20553,25 @@ async function syncSessions(opts = {}) {
   ${errors.join("\n  ")}`);
   return { ...agg, perTarget };
 }
-async function postFieldBatch(base3, token, rows) {
+async function postFieldBatch(base4, token, rows) {
   const headers = { "content-type": "application/json" };
   if (token) headers.authorization = `Bearer ${token}`;
   const sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
   for (let attempt = 0; ; attempt++) {
-    const res = await fetchWithTimeout(`${base3}/api/sync`, { method: "POST", headers, body: JSON.stringify({ fields: rows }) }, 6e4);
+    const res = await fetchWithTimeout(`${base4}/api/sync`, { method: "POST", headers, body: JSON.stringify({ fields: rows }) }, 6e4);
     if (res.ok) return;
     const retryable = res.status === 429 || res.status >= 500;
-    if (!retryable || attempt >= 5) throw new Error(`${base3}: fields batch HTTP ${res.status} ${await res.text().catch(() => "")}`);
+    if (!retryable || attempt >= 5) throw new Error(`${base4}: fields batch HTTP ${res.status} ${await res.text().catch(() => "")}`);
     const ra = Number(res.headers.get("retry-after")) || 0;
     await sleep2(ra > 0 ? ra * 1e3 : [500, 1500, 4e3, 8e3, 15e3][Math.min(attempt, 4)]);
   }
 }
 async function reconcileFieldsForTarget(cred, fullRefs, opts = {}) {
-  const base3 = cred.serverUrl.replace(/\/+$/, "");
-  const ledger = getSyncedRows(base3);
+  const base4 = cred.serverUrl.replace(/\/+$/, "");
+  const ledger = getSyncedRows(base4);
   let pushed = 0, absent = 0, scanned = 0;
   for (const field of SYNC_FIELDS) {
-    const needFull = !!opts.force || fieldNeedsFullPass(base3, field);
+    const needFull = !!opts.force || fieldNeedsFullPass(base4, field);
     const candidates2 = needFull ? fullRefs() : opts.convRefs ?? fullRefs();
     const send = [];
     const mtimeById = /* @__PURE__ */ new Map();
@@ -20523,15 +20587,15 @@ async function reconcileFieldsForTarget(cred, fullRefs, opts = {}) {
     }
     for (let i = 0; i < send.length; i += 200) {
       const chunk = send.slice(i, i + 200);
-      await postFieldBatch(base3, cred.token, chunk);
-      markFieldCoverage(base3, field, chunk.map((r) => ({ id: r.session_id, present: true, mtime: mtimeById.get(r.session_id) ?? 0 })));
+      await postFieldBatch(base4, cred.token, chunk);
+      markFieldCoverage(base4, field, chunk.map((r) => ({ id: r.session_id, present: true, mtime: mtimeById.get(r.session_id) ?? 0 })));
       pushed += chunk.length;
     }
     if (absentIds.length) {
-      markFieldCoverage(base3, field, absentIds.map((id) => ({ id, present: false, mtime: mtimeById.get(id) ?? 0 })));
+      markFieldCoverage(base4, field, absentIds.map((id) => ({ id, present: false, mtime: mtimeById.get(id) ?? 0 })));
       absent += absentIds.length;
     }
-    if (needFull) markFieldFullPassDone(base3, field);
+    if (needFull) markFieldFullPassDone(base4, field);
   }
   return { pushed, absent, scanned };
 }
@@ -20569,7 +20633,7 @@ function reapStaleScanDirs(dir = tmpdir3(), maxAgeMs = 6 * 36e5, now = Date.now(
     if (!name.startsWith("cr-batchscan-")) continue;
     const p = join42(dir, name);
     try {
-      if (now - statSync37(p).mtimeMs < maxAgeMs) continue;
+      if (now - statSync38(p).mtimeMs < maxAgeMs) continue;
       rmSync6(p, { recursive: true, force: true });
       reaped++;
     } catch {
@@ -20648,25 +20712,25 @@ function serverIngestConcurrency(serverUrl) {
   return advertisedIngestConc.get(serverUrl.replace(/\/$/, "")) ?? null;
 }
 async function verifyServerApi(serverUrl, minApi) {
-  const base3 = serverUrl.replace(/\/$/, "");
-  const seen = capsOk.get(base3);
+  const base4 = serverUrl.replace(/\/$/, "");
+  const seen = capsOk.get(base4);
   if (seen !== void 0 && Date.now() - seen < CAPS_TTL_MS) return true;
   const { probeServer: probeServer2, probeAdvice: probeAdvice2 } = await Promise.resolve().then(() => (init_server_probe(), server_probe_exports));
-  const probe = await probeServer2(base3, {
+  const probe = await probeServer2(base4, {
     fetchImpl: ((url, init) => fetchWithTimeout(String(url), init ?? {}))
   });
-  if (probe.kind !== "ok") throw new Error(probeAdvice2(probe, base3));
+  if (probe.kind !== "ok") throw new Error(probeAdvice2(probe, base4));
   const caps = probe.raw;
   if ((caps.apiVersion ?? 0) < minApi) {
     throw new Error(`server too old: apiVersion ${caps.apiVersion ?? "none"} < required ${minApi} \u2014 update the server image before syncing`);
   }
   const adv = caps.limits?.ingestConcurrencyPerTenant;
   if (typeof adv === "number" && Number.isFinite(adv) && adv >= 1) {
-    advertisedIngestConc.set(base3, Math.floor(adv));
+    advertisedIngestConc.set(base4, Math.floor(adv));
   }
-  if (caps.limits?.acceptsGzipBody === true) advertisedGzipBody.add(base3);
-  else advertisedGzipBody.delete(base3);
-  capsOk.set(base3, Date.now());
+  if (caps.limits?.acceptsGzipBody === true) advertisedGzipBody.add(base4);
+  else advertisedGzipBody.delete(base4);
+  capsOk.set(base4, Date.now());
   return true;
 }
 async function syncToTarget(cred, opts = {}) {
@@ -20731,7 +20795,7 @@ async function syncToTargetInScope(cred, opts = {}) {
       const ac = new AbortController();
       const timer = setTimeout(() => ac.abort(new Error(`upload timed out after ${UPLOAD_TIMEOUT_MS}ms`)), UPLOAD_TIMEOUT_MS);
       try {
-        const res = await fetch(`${base3}/api/sync`, {
+        const res = await fetch(`${base4}/api/sync`, {
           method: "POST",
           // No token ⇒ no auth header: a no-auth local server (AUTH_PROVIDER=none)
           // accepts it as the single 'default' tenant.
@@ -20747,26 +20811,26 @@ async function syncToTargetInScope(cred, opts = {}) {
           acceptedUploads.set(cred.serverUrl, (acceptedUploads.get(cred.serverUrl) ?? 0) + 1);
           const body3 = await res.json().catch(() => ({}));
           if (typeof body3.telemetry === "boolean") {
-            setTelemetryEligible(base3, body3.telemetry);
+            setTelemetryEligible(base4, body3.telemetry);
             try {
               const prior = readCollectorHealth()?.telemetryEligible ?? {};
               updateCollectorHealth({
-                telemetryEligible: { ...prior, [base3]: { allowed: body3.telemetry, at: Date.now() } }
+                telemetryEligible: { ...prior, [base4]: { allowed: body3.telemetry, at: Date.now() } }
               });
             } catch {
             }
           }
           const adv = body3.limits?.ingestConcurrencyPerTenant;
           if (typeof adv === "number" && Number.isFinite(adv) && adv >= 1) {
-            setServerIngestConcurrency(base3, Math.floor(adv));
+            setServerIngestConcurrency(base4, Math.floor(adv));
           }
           if (body3.cli && body3.cli.version) {
             const { planAutoUpdate: planAutoUpdate2, runAutoUpdate: runAutoUpdate2, sweepStaleStaging: sweepStaleStaging2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
             const authHeaders = cred.token ? { authorization: `Bearer ${cred.token}` } : {};
-            const plan = planAutoUpdate2(base3, { cli: body3.cli }, ownVersion, process.env.CHAT_RECALL_AUTO_UPDATE);
+            const plan = planAutoUpdate2(base4, { cli: body3.cli }, ownVersion, process.env.CHAT_RECALL_AUTO_UPDATE);
             sweepStaleStaging2();
             if (plan.update) {
-              void runAutoUpdate2(base3, authHeaders, ownVersion).catch(() => {
+              void runAutoUpdate2(base4, authHeaders, ownVersion).catch(() => {
               });
             }
           }
@@ -20775,7 +20839,7 @@ async function syncToTargetInScope(cred, opts = {}) {
         const retryable = res.status === 429 || res.status >= 500;
         const text = await res.text().catch(() => "");
         if (res.status === 401 || res.status === 403) {
-          throw classedError("auth", `server rejected this machine's device token (HTTP ${res.status} \u2014 revoked?). Reconnect with: chat-recall login ${base3}`);
+          throw classedError("auth", `server rejected this machine's device token (HTTP ${res.status} \u2014 revoked?). Reconnect with: chat-recall login ${base4}`);
         }
         if (res.status === 402) {
           let detail = text;
@@ -20796,7 +20860,7 @@ async function syncToTargetInScope(cred, opts = {}) {
         const retryAfterS = Number(res.headers.get("retry-after"));
         const waitMs = res.status === 429 && retryAfterS > 0 ? retryAfterS * 1e3 : RETRY_DELAYS_MS[attempt];
         const why = res.status === 524 ? ` \u2014 the proxy cut the request at its time limit; the batch is too big for one request` : "";
-        console.error(`[sync] HTTP ${res.status} from ${base3}${why} \u2014 backing off ${Math.round(waitMs / 1e3)}s (attempt ${attempt + 1})`);
+        console.error(`[sync] HTTP ${res.status} from ${base4}${why} \u2014 backing off ${Math.round(waitMs / 1e3)}s (attempt ${attempt + 1})`);
         await sleep2(waitMs);
         continue;
       } catch (err) {
@@ -20864,11 +20928,11 @@ async function syncToTargetInScope(cred, opts = {}) {
       }
     };
   };
-  const base3 = cred.serverUrl.replace(/\/$/, "");
-  const ledger = opts.useLedger ? getSyncedRows(base3) : null;
+  const base4 = cred.serverUrl.replace(/\/$/, "");
+  const ledger = opts.useLedger ? getSyncedRows(base4) : null;
   const convBatch = makeBatcher("conversations", 25, false, (rows) => {
     try {
-      markSynced(base3, rows.map((r) => {
+      markSynced(base4, rows.map((r) => {
         const off = typeof r.from_offset === "number" ? r.from_offset : 0;
         const hash = shippedHash.get(r.session_id);
         return off > 0 ? { id: r.session_id, mtime: r.mtime, offset: off, size: off, hash, acked: true } : { id: r.session_id, mtime: r.mtime, hash };
@@ -20883,7 +20947,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     const ac = new AbortController();
     const timer = setTimeout(() => ac.abort(new Error(`upload timed out after ${UPLOAD_TIMEOUT_MS}ms`)), UPLOAD_TIMEOUT_MS);
     try {
-      const res = await fetch(`${base3}/api/sync`, {
+      const res = await fetch(`${base4}/api/sync`, {
         method: "POST",
         headers,
         body: JSON.stringify({ conversations: convs }),
@@ -20894,10 +20958,10 @@ async function syncToTargetInScope(cred, opts = {}) {
       if (body2.cli && body2.cli.version) {
         const { planAutoUpdate: planAutoUpdate2, runAutoUpdate: runAutoUpdate2, sweepStaleStaging: sweepStaleStaging2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
         const authHeaders = cred.token ? { authorization: `Bearer ${cred.token}` } : {};
-        const plan = planAutoUpdate2(base3, { cli: body2.cli }, ownVersion, process.env.CHAT_RECALL_AUTO_UPDATE);
+        const plan = planAutoUpdate2(base4, { cli: body2.cli }, ownVersion, process.env.CHAT_RECALL_AUTO_UPDATE);
         sweepStaleStaging2();
         if (plan.update) {
-          void runAutoUpdate2(base3, authHeaders, ownVersion).catch(() => {
+          void runAutoUpdate2(base4, authHeaders, ownVersion).catch(() => {
           });
         }
       }
@@ -20905,7 +20969,7 @@ async function syncToTargetInScope(cred, opts = {}) {
       const acked = convs.filter((c) => !fullNeeded.has(c.session_id));
       if (acked.length > 0) {
         try {
-          markSynced(base3, acked.map((c) => ({
+          markSynced(base4, acked.map((c) => ({
             id: c.session_id,
             mtime: c.mtime,
             offset: c.from_offset,
@@ -20929,7 +20993,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     const ac = new AbortController();
     const timer = setTimeout(() => ac.abort(new Error(`upload timed out after ${UPLOAD_TIMEOUT_MS}ms`)), UPLOAD_TIMEOUT_MS);
     try {
-      const res = await fetch(`${base3}/api/sync`, {
+      const res = await fetch(`${base4}/api/sync`, {
         method: "POST",
         headers,
         body: JSON.stringify({ conversations: [conv] }),
@@ -20942,11 +21006,11 @@ async function syncToTargetInScope(cred, opts = {}) {
       const mtime = conv.mtime;
       try {
         if (!guarded) {
-          markSynced(base3, [{ id, mtime, offset: conv.from_offset, size: conv.from_offset, acked: true }]);
+          markSynced(base4, [{ id, mtime, offset: conv.from_offset, size: conv.from_offset, acked: true }]);
         } else if (typeof guarded.o === "number" && guarded.o > 0 && guarded.o <= fileSize) {
-          markSynced(base3, [{ id, mtime, offset: guarded.o, size: guarded.o, acked: true }]);
+          markSynced(base4, [{ id, mtime, offset: guarded.o, size: guarded.o, acked: true }]);
         } else {
-          markSynced(base3, [{ id, mtime }]);
+          markSynced(base4, [{ id, mtime }]);
         }
       } catch {
       }
@@ -21012,7 +21076,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     const m = process.memoryUsage();
     console.error(`[sync-trace] ${msg} \xB7 heap=${(m.heapUsed / 1048576).toFixed(0)}MB rss=${(m.rss / 1048576).toFixed(0)}MB`);
   } : null;
-  trace?.(`walk start: ${slice.length} ref(s) \u2192 ${base3}`);
+  trace?.(`walk start: ${slice.length} ref(s) \u2192 ${base4}`);
   if (upload.sessionMeta) {
     try {
       await reconcileFieldsForTarget(
@@ -21027,7 +21091,7 @@ async function syncToTargetInScope(cred, opts = {}) {
         { convRefs: slice }
       );
     } catch (e) {
-      console.error(`[sync] field reconcile (${base3}): ${e instanceof Error ? e.message : e}`);
+      console.error(`[sync] field reconcile (${base4}): ${e instanceof Error ? e.message : e}`);
     }
   }
   trace?.("field reconcile done");
@@ -21069,7 +21133,7 @@ async function syncToTargetInScope(cred, opts = {}) {
   }
   trace?.("conversation walk start");
   const walkStartedAt = Date.now();
-  const firstWalk = (ledger ?? getSyncedRows(base3)).size === 0;
+  const firstWalk = (ledger ?? getSyncedRows(base4)).size === 0;
   reportWalkProgress({ done: 0, total: slice.length, startedAt: walkStartedAt, complete: false, first: firstWalk });
   walkProgressForUpload = { done: 0, total: slice.length, complete: false };
   let traceN = 0;
@@ -21109,7 +21173,7 @@ async function syncToTargetInScope(cred, opts = {}) {
           continue;
         } else {
           try {
-            markSynced(base3, [{ id: ref.prefixedId, mtime: ref.mtime }]);
+            markSynced(base4, [{ id: ref.prefixedId, mtime: ref.mtime }]);
           } catch {
           }
           skipped++;
@@ -21132,7 +21196,7 @@ async function syncToTargetInScope(cred, opts = {}) {
           const off = getBackendForId(ref.prefixedId)?.fileSize?.(ref.rawId) ?? 0;
           const priorCursor = ackRow?.s ?? 0;
           const safeToAck = off > 0 && off <= priorCursor;
-          markSynced(base3, [safeToAck ? { id: ref.prefixedId, mtime: ref.mtime, offset: off, size: off, hash: built.srcHash, acked: true } : { id: ref.prefixedId, mtime: ref.mtime, hash: built.srcHash }]);
+          markSynced(base4, [safeToAck ? { id: ref.prefixedId, mtime: ref.mtime, offset: off, size: off, hash: built.srcHash, acked: true } : { id: ref.prefixedId, mtime: ref.mtime, hash: built.srcHash }]);
         } catch {
         }
       }
@@ -21142,7 +21206,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     if (!built) {
       if (ledger) {
         try {
-          markSynced(base3, [{ id: ref.prefixedId, mtime: ref.mtime }]);
+          markSynced(base4, [{ id: ref.prefixedId, mtime: ref.mtime }]);
         } catch {
         }
       }
@@ -21199,7 +21263,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     walked++;
     if (walked % 250 === 0) console.error(`[sync] ${walked}/${slice.length} sessions\u2026`);
   }
-  const itemVersions = loadItemVersions(base3);
+  const itemVersions = loadItemVersions(base4);
   const seenTools = /* @__PURE__ */ new Set();
   const seenItemKeys = /* @__PURE__ */ new Map();
   const registry = buildSourceRegistry();
@@ -21293,7 +21357,7 @@ async function syncToTargetInScope(cred, opts = {}) {
   await appendFlush();
   for (const id of appendResults.fullResyncNeeded) {
     try {
-      markFullResync(base3, id);
+      markFullResync(base4, id);
     } catch {
     }
   }
@@ -21306,7 +21370,7 @@ async function syncToTargetInScope(cred, opts = {}) {
   await findingsBatch.drain();
   await drainInflight();
   {
-    const sentHashes = loadInventoryHashes(base3);
+    const sentHashes = loadInventoryHashes(base4);
     const entries = [];
     const hashes = {};
     for (const [sourceType, ids] of inventory) {
@@ -21320,7 +21384,7 @@ async function syncToTargetInScope(cred, opts = {}) {
     if (entries.length > 0) {
       try {
         await post({ inventory: entries });
-        saveInventoryHashes(base3, hashes);
+        saveInventoryHashes(base4, hashes);
       } catch (err) {
         console.error(`[sync] toolkit inventory not sent (it is retried next sync): ${err instanceof Error ? err.message : err}`);
       }
@@ -21331,7 +21395,7 @@ async function syncToTargetInScope(cred, opts = {}) {
       const rec = {};
       for (const t of seenTools) rec[t] = extractorVersionForTool(t);
       for (const [k, v] of seenItemKeys) rec[k] = v;
-      saveItemVersions(base3, rec);
+      saveItemVersions(base4, rec);
     } catch {
     }
   }
@@ -21344,9 +21408,9 @@ async function syncToTargetInScope(cred, opts = {}) {
     }
     if (tombstones.length > 0) {
       await post({ tombstones });
-      const data = getLedgerData(base3);
+      const data = getLedgerData(base4);
       for (const t of tombstones) delete data[t.session_id];
-      persistLedgerData(base3, data);
+      persistLedgerData(base4, data);
     }
   }
   if (opts.prune) await post({ prune_empty_sessions: true });
@@ -21817,7 +21881,7 @@ var init_sync_client = __esm({
       ownVersion = JSON.parse(readFileSync35(join42(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.7.13";
+        if (true) ownVersion = "0.7.15";
       } catch {
       }
     }
@@ -21911,9 +21975,9 @@ async function refreshUpdateCheck(force = false) {
     const { loadAllCredentials: loadAllCredentials2 } = await Promise.resolve().then(() => (init_sync_client(), sync_client_exports));
     for (const cred of loadAllCredentials2()) {
       if (!cred.serverUrl) continue;
-      const base3 = cred.serverUrl.replace(/\/+$/, "");
+      const base4 = cred.serverUrl.replace(/\/+$/, "");
       try {
-        const res = await fetchWithTimeout(`${base3}/api/capabilities`, {
+        const res = await fetchWithTimeout(`${base4}/api/capabilities`, {
           headers: cred.token ? { authorization: `Bearer ${cred.token}` } : {}
         }, 5e3);
         if (!res.ok) continue;
@@ -21968,11 +22032,11 @@ var init_update_notice = __esm({
 });
 
 // ../engine/dist/core/which.js
-import { existsSync as existsSync42, statSync as statSync38, accessSync, constants } from "node:fs";
+import { existsSync as existsSync42, statSync as statSync39, accessSync, constants } from "node:fs";
 import { join as join44, isAbsolute as isAbsolute2, delimiter as delimiter2, sep as sep3 } from "node:path";
 function executable(p) {
   try {
-    if (!statSync38(p).isFile())
+    if (!statSync39(p).isFile())
       return false;
   } catch {
     return false;
@@ -22301,7 +22365,7 @@ __export(companions_exports, {
   uninstallCodeindex: () => uninstallCodeindex,
   unregisterCodeindexMcp: () => unregisterCodeindexMcp
 });
-import { existsSync as existsSync45, mkdirSync as mkdirSync13, statSync as statSync39, chmodSync as chmodSync4, unlinkSync as unlinkSync3, renameSync as renameSync5, createWriteStream, readFileSync as readFileSync38, writeFileSync as writeFileSync13 } from "node:fs";
+import { existsSync as existsSync45, mkdirSync as mkdirSync13, statSync as statSync40, chmodSync as chmodSync4, unlinkSync as unlinkSync3, renameSync as renameSync5, createWriteStream, readFileSync as readFileSync38, writeFileSync as writeFileSync13 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
 import { join as join47 } from "node:path";
 import { execSync as execSync3 } from "node:child_process";
@@ -22352,7 +22416,7 @@ function checkCodeindexStatus() {
     status.installed = true;
     status.path = foundPath;
     try {
-      status.size = statSync39(foundPath).size;
+      status.size = statSync40(foundPath).size;
     } catch {
     }
     try {
@@ -22502,7 +22566,7 @@ __export(install_skills_exports, {
   skillsSourceDir: () => skillsSourceDir,
   uninstallSkills: () => uninstallSkills
 });
-import { readdirSync as readdirSync32, existsSync as existsSync46, mkdirSync as mkdirSync14, rmSync as rmSync7, cpSync, writeFileSync as writeFileSync14, readFileSync as readFileSync39, statSync as statSync40, realpathSync as realpathSync4 } from "fs";
+import { readdirSync as readdirSync32, existsSync as existsSync46, mkdirSync as mkdirSync14, rmSync as rmSync7, cpSync, writeFileSync as writeFileSync14, readFileSync as readFileSync39, statSync as statSync41, realpathSync as realpathSync4 } from "fs";
 import { createHash as createHash11 } from "crypto";
 import { join as join48, basename as basename21 } from "path";
 function skillsSourceDir() {
@@ -22721,10 +22785,10 @@ function parseAgentText(content, format, fallbackName) {
   return { name: fm.name || fallbackName, description: fm.description || "", tools: fm.tools, body: body2.trim() };
 }
 function readCommand(filePath, format) {
-  return parseCommandText(readFileSync40(filePath, "utf-8"), format, base(filePath));
+  return parseCommandText(readFileSync40(filePath, "utf-8"), format, base2(filePath));
 }
 function readAgent(filePath, format) {
-  return parseAgentText(readFileSync40(filePath, "utf-8"), format, base(filePath));
+  return parseAgentText(readFileSync40(filePath, "utf-8"), format, base2(filePath));
 }
 function readInstructions(filePath, name) {
   const content = readFileSync40(filePath, "utf-8");
@@ -22824,7 +22888,7 @@ function emit(type, art, toTool, projectPath) {
     content: stringifyFrontmatter({ name: art.name, description: art.description, ...art.tools ? { tools: art.tools } : {} }, art.body)
   };
 }
-function base(filePath) {
+function base2(filePath) {
   return basename22(filePath).replace(/\.(md|toml)$/, "");
 }
 var init_artifact_codec = __esm({
@@ -23309,11 +23373,11 @@ __export(toolkit_pull_exports, {
   platformRefusal: () => platformRefusal,
   portableCommand: () => portableCommand
 });
-import { existsSync as existsSync48, mkdirSync as mkdirSync16, statSync as statSync41, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync48, mkdirSync as mkdirSync16, statSync as statSync42, writeFileSync as writeFileSync16 } from "node:fs";
 import { dirname as dirname23, join as join51, basename as basename24, isAbsolute as isAbsolute3 } from "node:path";
 function isExecutableFile(p) {
   try {
-    return statSync41(p).isFile();
+    return statSync42(p).isFile();
   } catch {
     return false;
   }
@@ -23327,9 +23391,9 @@ function portableCommand(cmd) {
   }
   if (isExecutableFile(cmd))
     return { command: cmd, rewritten: false };
-  const base3 = basename24(cmd);
-  if (onPath(base3))
-    return { command: base3, rewritten: true };
+  const base4 = basename24(cmd);
+  if (onPath(base4))
+    return { command: base4, rewritten: true };
   return { missing: cmd };
 }
 function entryFromSpec(spec) {
@@ -24163,8 +24227,8 @@ import { homedir as homedir20 } from "os";
 import { join as join53 } from "path";
 function opencodeConfigDir() {
   const xdg = process.env.XDG_CONFIG_HOME;
-  const base3 = xdg && xdg.trim() ? xdg : join53(homedir20(), ".config");
-  return join53(base3, "opencode");
+  const base4 = xdg && xdg.trim() ? xdg : join53(homedir20(), ".config");
+  return join53(base4, "opencode");
 }
 function opencodePluginDir() {
   return join53(opencodeConfigDir(), "plugins");
@@ -24751,17 +24815,17 @@ async function collectCode(opts) {
     return r;
   };
   log6(`indexing ${ws} + analyses \u2026`);
-  const base3 = await runMcp(bin, ws, [
+  const base4 = await runMcp(bin, ws, [
     call(1, "index_workspace", { path: ws }),
     call(2, "status"),
     call(3, "get_tree"),
     ...ANALYSES.map((a, i) => call(10 + i, "analyze", { analysis: a }))
   ]);
-  const st = parseJson(base3, 2, {});
-  const tree = parseJson(base3, 3, []);
+  const st = parseJson(base4, 2, {});
+  const tree = parseJson(base4, 3, []);
   const A = {};
   ANALYSES.forEach((a, i) => {
-    A[a] = parseJson(base3, 10 + i, {});
+    A[a] = parseJson(base4, 10 + i, {});
   });
   const { health, security: sec, duplication: dup, clones, literal_scan: lit, coupling: coup, cycles: cyc, dead_code: dead, unwrap_audit: unwrap, test_coverage: coverage, architecture: arch, crossref, type_drift: typeDrift, db_schema: dbSchema, migration_parity: migParity, manifest_compliance: manifest } = A;
   if (tree.length === 0) {
@@ -25590,7 +25654,7 @@ __export(project_tasks_exports, {
   pushProjectTaskStatuses: () => pushProjectTaskStatuses,
   renderTeamTasksMd: () => renderTeamTasksMd
 });
-import { existsSync as existsSync51, readFileSync as readFileSync44, writeFileSync as writeFileSync18, mkdirSync as mkdirSync18, statSync as statSync42 } from "node:fs";
+import { existsSync as existsSync51, readFileSync as readFileSync44, writeFileSync as writeFileSync18, mkdirSync as mkdirSync18, statSync as statSync43 } from "node:fs";
 import { join as join55, dirname as dirname25 } from "node:path";
 import { homedir as homedir21 } from "node:os";
 function isTeamTaskStatus(v) {
@@ -25661,14 +25725,14 @@ function writeLedger(l) {
   } catch {
   }
 }
-async function pushProjectTaskStatuses(base3, authHeaders, opts = {}) {
+async function pushProjectTaskStatuses(base4, authHeaders, opts = {}) {
   const out = { files: 0, pushedTasks: 0 };
   const ledger = readLedger();
   let ledgerDirty = false;
   for (const fk of FILE_KINDS) {
     let projects;
     try {
-      const res = await fetchWithTimeout(`${base3}${fk.trackedPath}`, { headers: authHeaders });
+      const res = await fetchWithTimeout(`${base4}${fk.trackedPath}`, { headers: authHeaders });
       if (!res.ok) continue;
       projects = (await res.json()).projects || [];
     } catch {
@@ -25679,7 +25743,7 @@ async function pushProjectTaskStatuses(base3, authHeaders, opts = {}) {
       if (!existsSync51(file)) continue;
       let mtime;
       try {
-        mtime = statSync42(file).mtimeMs;
+        mtime = statSync43(file).mtimeMs;
       } catch {
         continue;
       }
@@ -25696,7 +25760,7 @@ async function pushProjectTaskStatuses(base3, authHeaders, opts = {}) {
         continue;
       }
       try {
-        const res = await fetchWithTimeout(`${base3}${fk.statusPath}`, {
+        const res = await fetchWithTimeout(`${base4}${fk.statusPath}`, {
           method: "POST",
           headers: { "content-type": "application/json", ...authHeaders },
           body: JSON.stringify({ project, items: changed.map((t) => ({ id: t.id, status: t.intent })) })
@@ -25822,16 +25886,16 @@ ${block}`);
     return { status: "error", result: JSON.stringify({ error: e instanceof Error ? e.message : "failed" }) };
   }
 }
-async function runPull(base3, opts) {
+async function runPull(base4, opts) {
   const { executePull: executePull2 } = await Promise.resolve().then(() => (init_toolkit_pull(), toolkit_pull_exports));
   const { hostname: hostname3 } = await import("node:os");
-  const creds = loadAllCredentials().find((c) => c.serverUrl.replace(/\/+$/, "") === base3.replace(/\/+$/, ""));
+  const creds = loadAllCredentials().find((c) => c.serverUrl.replace(/\/+$/, "") === base4.replace(/\/+$/, ""));
   const headers = creds?.token ? { authorization: `Bearer ${creds.token}` } : {};
   const wanted = opts.types?.length ? opts.types : ["mcp", "skill", "command", "agent", "instructions"];
   const rows = [];
   for (const type of wanted) {
     try {
-      const res = await fetchWithTimeout(`${base3}/api/toolkit/browse/${type}?limit=1000`, { headers });
+      const res = await fetchWithTimeout(`${base4}/api/toolkit/browse/${type}?limit=1000`, { headers });
       if (!res.ok) continue;
       const body2 = await res.json();
       for (const it of body2.items || []) rows.push(it);
@@ -25900,20 +25964,20 @@ async function runIntent(intent, ctx) {
 async function drainSyncIntents(opts = {}) {
   const out = { processed: 0, done: 0, errored: 0 };
   for (const cred of loadAllCredentials()) {
-    const base3 = cred.serverUrl.replace(/\/+$/, "");
+    const base4 = cred.serverUrl.replace(/\/+$/, "");
     const authHeaders = cred.token ? { authorization: `Bearer ${cred.token}` } : {};
     let pending;
     try {
-      const res = await fetchWithTimeout(`${base3}/api/sync-intents/pending`, { headers: authHeaders });
+      const res = await fetchWithTimeout(`${base4}/api/sync-intents/pending`, { headers: authHeaders });
       if (!res.ok) continue;
       const data = await res.json();
       pending = data.intents || [];
       if (data.cli && data.cli.version) {
         const { planAutoUpdate: planAutoUpdate2, runAutoUpdate: runAutoUpdate2, sweepStaleStaging: sweepStaleStaging2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
-        const plan = planAutoUpdate2(base3, { cli: data.cli }, ownVersion2, process.env.CHAT_RECALL_AUTO_UPDATE);
+        const plan = planAutoUpdate2(base4, { cli: data.cli }, ownVersion2, process.env.CHAT_RECALL_AUTO_UPDATE);
         sweepStaleStaging2();
         if (plan.update) {
-          void runAutoUpdate2(base3, authHeaders, ownVersion2).catch(() => {
+          void runAutoUpdate2(base4, authHeaders, ownVersion2).catch(() => {
           });
         }
       }
@@ -25921,7 +25985,7 @@ async function drainSyncIntents(opts = {}) {
       continue;
     }
     for (const intent of pending) {
-      const { status, result } = await runIntent(intent, { base: base3 });
+      const { status, result } = await runIntent(intent, { base: base4 });
       out.processed++;
       if (status === "done") out.done++;
       else out.errored++;
@@ -25930,7 +25994,7 @@ async function drainSyncIntents(opts = {}) {
         console.error(`[sync-intent] ${label}: ${status}`);
       }
       try {
-        await fetchWithTimeout(`${base3}/api/sync-intents/${intent.id}/ack`, {
+        await fetchWithTimeout(`${base4}/api/sync-intents/${intent.id}/ack`, {
           method: "POST",
           headers: { "content-type": "application/json", ...authHeaders },
           body: JSON.stringify({ status, result })
@@ -25939,7 +26003,7 @@ async function drainSyncIntents(opts = {}) {
       }
     }
     try {
-      await pushProjectTaskStatuses(base3, authHeaders, { verbose: opts.verbose });
+      await pushProjectTaskStatuses(base4, authHeaders, { verbose: opts.verbose });
     } catch {
     }
   }
@@ -25979,7 +26043,7 @@ var init_intent_drain = __esm({
       ownVersion2 = JSON.parse(readFileSync45(join56(dir, "../package.json"), "utf-8")).version || ownVersion2;
     } catch {
       try {
-        if (true) ownVersion2 = "0.7.13";
+        if (true) ownVersion2 = "0.7.15";
       } catch {
       }
     }
@@ -26180,7 +26244,7 @@ var team_merge_exports = {};
 __export(team_merge_exports, {
   mergePullResult: () => mergePullResult
 });
-import { existsSync as existsSync53, mkdirSync as mkdirSync20, readFileSync as readFileSync46, rmSync as rmSync8, writeFileSync as writeFileSync20, statSync as statSync43 } from "fs";
+import { existsSync as existsSync53, mkdirSync as mkdirSync20, readFileSync as readFileSync46, rmSync as rmSync8, writeFileSync as writeFileSync20, statSync as statSync44 } from "fs";
 import { dirname as dirname27, join as join57 } from "path";
 import { createHash as createHash14 } from "crypto";
 function installPathFor(art, tool) {
@@ -26317,7 +26381,7 @@ function readFileIfExists(path) {
   try {
     if (!existsSync53(path))
       return null;
-    const s = statSync43(path);
+    const s = statSync44(path);
     if (!s.isFile())
       return null;
     return readFileSync46(path);
@@ -26401,7 +26465,7 @@ var init_vault_crypto = __esm({
 });
 
 // ../engine/dist/core/vault-source.js
-import { existsSync as existsSync54, readdirSync as readdirSync33, statSync as statSync44 } from "fs";
+import { existsSync as existsSync54, readdirSync as readdirSync33, statSync as statSync45 } from "fs";
 import { extname, join as join58 } from "path";
 function* walkVaultSources() {
   const t = loadSettings().team.vault;
@@ -26417,7 +26481,7 @@ function* walkVaultSources() {
 }
 function safeStat(path) {
   try {
-    const s = statSync44(path);
+    const s = statSync45(path);
     if (!s.isFile())
       return null;
     return { mtimeMs: s.mtimeMs, size: s.size };
@@ -26502,8 +26566,8 @@ function* walkCodex() {
       const s = safeStat(path);
       if (!s)
         continue;
-      const base3 = e.name.replace(/\.jsonl$/, "");
-      yield { sessionId: `codex_${base3}`, tool: "codex", path, mtimeMs: s.mtimeMs, sizeBytes: s.size };
+      const base4 = e.name.replace(/\.jsonl$/, "");
+      yield { sessionId: `codex_${base4}`, tool: "codex", path, mtimeMs: s.mtimeMs, sizeBytes: s.size };
     }
   }
 }
@@ -26520,7 +26584,7 @@ function* walkAgy() {
   for (const rawId of sessionDirs) {
     const sessionPath = join58(brainDir, rawId);
     try {
-      if (!statSync44(sessionPath).isDirectory())
+      if (!statSync45(sessionPath).isDirectory())
         continue;
     } catch {
       continue;
@@ -26645,11 +26709,11 @@ function vaultEnable(passphrase, opts = {}) {
 }
 async function vaultEnableWithRemote(passphrase, remote, opts = {}) {
   const doFetch = opts.fetchImpl ?? fetch;
-  const base3 = remote.baseUrl.replace(/\/+$/, "");
+  const base4 = remote.baseUrl.replace(/\/+$/, "");
   const headers = { authorization: `Bearer ${remote.token}`, "content-type": "application/json" };
   let published = { saltHex: null, keyId: null };
   try {
-    const r = await doFetch(`${base3}/api/vault/salt`, { headers });
+    const r = await doFetch(`${base4}/api/vault/salt`, { headers });
     if (r.ok)
       published = await r.json();
   } catch {
@@ -26663,7 +26727,7 @@ async function vaultEnableWithRemote(passphrase, remote, opts = {}) {
   }
   const result = vaultEnable(passphrase);
   try {
-    const r = await doFetch(`${base3}/api/vault/salt`, {
+    const r = await doFetch(`${base4}/api/vault/salt`, {
       method: "POST",
       headers,
       body: JSON.stringify({ saltHex: result.saltHex, keyId: result.keyId })
@@ -26756,8 +26820,8 @@ async function vaultSync(passphrase) {
   return report;
 }
 function importedPathFor(tool, sessionId) {
-  const base3 = sessionId.replace(/^gemini_/, "").replace(/^codex_/, "").replace(/^agy_/, "").replace(/^cursor_/, "").replace(/^opencode_/, "");
-  return join59(IMPORTED_ROOT(), tool, `${base3}.jsonl`);
+  const base4 = sessionId.replace(/^gemini_/, "").replace(/^codex_/, "").replace(/^agy_/, "").replace(/^cursor_/, "").replace(/^opencode_/, "");
+  return join59(IMPORTED_ROOT(), tool, `${base4}.jsonl`);
 }
 async function vaultRestore(passphrase, opts = {}) {
   const ctx = context2();
@@ -27158,8 +27222,8 @@ var init_decision_guard = __esm({
     isManifest = (p) => {
       if (!p)
         return false;
-      const base3 = p.split(/[\\/]/).pop()?.toLowerCase() ?? "";
-      return MANIFESTS.includes(base3);
+      const base4 = p.split(/[\\/]/).pop()?.toLowerCase() ?? "";
+      return MANIFESTS.includes(base4);
     };
   }
 });
@@ -27757,8 +27821,8 @@ async function deviceLogin(opts, onPrompt) {
   throw new Error("device-auth timed out \u2014 the code expired before approval.");
 }
 async function betterAuthDeviceLogin(serverUrl, onPrompt) {
-  const base3 = serverUrl.replace(/\/+$/, "");
-  const startRes = await fetch(`${base3}/api/auth/device/code`, {
+  const base4 = serverUrl.replace(/\/+$/, "");
+  const startRes = await fetch(`${base4}/api/auth/device/code`, {
     method: "POST",
     headers: { "content-type": "application/json" },
     body: JSON.stringify({ client_id: BETTER_AUTH_CLI_CLIENT_ID })
@@ -27766,7 +27830,7 @@ async function betterAuthDeviceLogin(serverUrl, onPrompt) {
   if (!startRes.ok) {
     throw new Error(`device-auth init failed: HTTP ${startRes.status} ${await startRes.text().catch(() => "")}`);
   }
-  const start = await readDeviceCode(startRes, base3);
+  const start = await readDeviceCode(startRes, base4);
   onPrompt({
     url: start.verification_uri_complete || start.verification_uri,
     userCode: start.user_code,
@@ -27776,7 +27840,7 @@ async function betterAuthDeviceLogin(serverUrl, onPrompt) {
   let interval = (start.interval ?? 5) * 1e3;
   while (Date.now() < deadline) {
     await sleep(interval);
-    const res = await fetch(`${base3}/api/auth/device/token`, {
+    const res = await fetch(`${base4}/api/auth/device/token`, {
       method: "POST",
       headers: { "content-type": "application/json" },
       body: JSON.stringify({
@@ -27878,7 +27942,7 @@ async function selectSessions(target, opts, fetchImpl = fetch) {
     const qs = new URLSearchParams({ limit: String(PAGE), offset: String(offset) });
     if (opts.project) qs.set("project", opts.project);
     if (opts.tool) qs.set("tool", opts.tool);
-    const res = await fetchImpl(`${base2(target.serverUrl)}/api/conversations/recent?${qs}`, {
+    const res = await fetchImpl(`${base3(target.serverUrl)}/api/conversations/recent?${qs}`, {
       headers: { authorization: `Bearer ${target.token}` }
     });
     if (!res.ok) throw new Error(`list failed: HTTP ${res.status}`);
@@ -27907,7 +27971,7 @@ async function bulkDelete(ids, opts = {}) {
     try {
       for (let i = 0; i < unique.length; i += BATCH) {
         const slice = unique.slice(i, i + BATCH);
-        const res = await fetchImpl(`${base2(t.serverUrl)}/api/sync`, {
+        const res = await fetchImpl(`${base3(t.serverUrl)}/api/sync`, {
           method: "POST",
           headers: { "content-type": "application/json", authorization: `Bearer ${t.token}` },
           body: JSON.stringify({
@@ -27943,7 +28007,7 @@ async function bulkDelete(ids, opts = {}) {
   return out;
 }
 async function listTombstones(target, limit = 500, fetchImpl = fetch) {
-  const res = await fetchImpl(`${base2(target.serverUrl)}/api/data/tombstones?limit=${limit}`, {
+  const res = await fetchImpl(`${base3(target.serverUrl)}/api/data/tombstones?limit=${limit}`, {
     headers: { authorization: `Bearer ${target.token}` }
   });
   if (!res.ok) throw new Error(`HTTP ${res.status}`);
@@ -27960,7 +28024,7 @@ async function restoreSessions(ids, opts = {}) {
     try {
       let restored = 0, notDeleted = 0;
       for (let i = 0; i < unique.length; i += BATCH) {
-        const res = await fetchImpl(`${base2(t.serverUrl)}/api/data/restore`, {
+        const res = await fetchImpl(`${base3(t.serverUrl)}/api/data/restore`, {
           method: "POST",
           headers: { "content-type": "application/json", authorization: `Bearer ${t.token}` },
           body: JSON.stringify({ session_ids: unique.slice(i, i + BATCH) })
@@ -27983,7 +28047,7 @@ function needsConfirmation(opts) {
   const enumeratedByCaller = opts.argvIds > 0 && !opts.project && !opts.stdin;
   return !enumeratedByCaller;
 }
-var PAGE, BATCH, base2;
+var PAGE, BATCH, base3;
 var init_bulk_delete = __esm({
   "src/bulk-delete.ts"() {
     "use strict";
@@ -27991,7 +28055,7 @@ var init_bulk_delete = __esm({
     init_sync_ledger();
     PAGE = 200;
     BATCH = 250;
-    base2 = (url) => url.replace(/\/+$/, "");
+    base3 = (url) => url.replace(/\/+$/, "");
   }
 });
 
@@ -28356,13 +28420,13 @@ function requireTarget() {
   }
   return t;
 }
-async function readJsonBody(res, base3, what) {
+async function readJsonBody(res, base4, what) {
   const text = await res.text().catch(() => "");
   try {
     return JSON.parse(text);
   } catch {
     throw new Error(
-      `${base3} answered ${res.status} with something that is not JSON (${JSON.stringify(text.trim().slice(0, 60))}) for ${what} \u2014 a proxy, a captive portal or a host that no longer serves the chat-recall API`
+      `${base4} answered ${res.status} with something that is not JSON (${JSON.stringify(text.trim().slice(0, 60))}) for ${what} \u2014 a proxy, a captive portal or a host that no longer serves the chat-recall API`
     );
   }
 }
@@ -29168,9 +29232,9 @@ program.command("feedback").argument("<message...>", "what you want to say \u201
     return;
   }
   const target = firstTarget();
-  const base3 = target?.base || (process.env.CHAT_RECALL_SERVER || "https://chatrecall.dev").replace(/\/+$/, "");
+  const base4 = target?.base || (process.env.CHAT_RECALL_SERVER || "https://chatrecall.dev").replace(/\/+$/, "");
   try {
-    const res = await fetch(`${base3}/api/contact/feedback`, {
+    const res = await fetch(`${base4}/api/contact/feedback`, {
       method: "POST",
       headers: {
         "content-type": "application/json",
@@ -29197,14 +29261,14 @@ program.command("feedback").argument("<message...>", "what you want to say \u201
       console.log(chalk2.dim("  Add --email <address> next time if you want a reply."));
     }
   } catch (err) {
-    console.error(chalk2.red(`Could not reach ${base3}.`));
+    console.error(chalk2.red(`Could not reach ${base4}.`));
     console.error(chalk2.dim("  Your message, so it is not lost:"));
     console.error(chalk2.dim(`  ${message}`));
     process.exitCode = 1;
   }
 });
 program.command("doctor").description("Quick health check across login, server, credentials, hooks, MCP server, and codeindex").option("--purge-local", "Remove the legacy local index (cache.db + vector/KG files) left by pre-thin-collector versions \u2014 storage is server-side now. Requires login; keeps credentials, sync ledger, identity, and the audit log.").action(async (opts) => {
-  const { existsSync: existsSync58, readFileSync: readFileSync50, statSync: statSync45 } = await import("fs");
+  const { existsSync: existsSync58, readFileSync: readFileSync50, statSync: statSync46 } = await import("fs");
   const { execSync: execSync6 } = await import("child_process");
   const rows = [];
   const note = (ok, label, detail) => rows.push({ ok, label, detail });
@@ -29272,7 +29336,7 @@ program.command("doctor").description("Quick health check across login, server,
     note(false, "Credentials file", `missing \u2014 run \`chat-recall login <server-url>\``);
   } else {
     try {
-      const mode = statSync45(credFile).mode & 511;
+      const mode = statSync46(credFile).mode & 511;
       const isWin = process.platform === "win32";
       const safe = isWin || (mode & 63) === 0;
       note(safe, "Credentials file", isWin ? `${credFile} (Windows ACL \u2014 POSIX mode does not apply)` : `${credFile} (mode ${mode.toString(8).padStart(3, "0")}${safe ? "" : " \u2014 should be 600"})`);
@@ -29802,13 +29866,13 @@ sources2.command("decline <path>").description("Keep a folder out of sync (e.g.
   }
   const { fetchWithTimeout: fetchWithTimeout2 } = await Promise.resolve().then(() => (init_http(), http_exports));
   for (const t of targets) {
-    const base3 = t.serverUrl.replace(/\/+$/, "");
+    const base4 = t.serverUrl.replace(/\/+$/, "");
     const headers = {};
     if (t.token) headers.authorization = `Bearer ${t.token}`;
     let deleted = 0, missing = 0, failed = 0;
     for (const id of ids) {
       try {
-        const res = await fetchWithTimeout2(`${base3}/api/conversations/${encodeURIComponent(id)}`, { method: "DELETE", headers }, 3e4);
+        const res = await fetchWithTimeout2(`${base4}/api/conversations/${encodeURIComponent(id)}`, { method: "DELETE", headers }, 3e4);
         if (res.ok) deleted++;
         else if (res.status === 404) missing++;
         else failed++;
@@ -29816,7 +29880,7 @@ sources2.command("decline <path>").description("Keep a folder out of sync (e.g.
         failed++;
       }
     }
-    const line = `  ${base3}: deleted ${deleted}` + (missing ? `, ${missing} were not there` : "") + (failed ? chalk2.red(`, ${failed} FAILED`) : "");
+    const line = `  ${base4}: deleted ${deleted}` + (missing ? `, ${missing} were not there` : "") + (failed ? chalk2.red(`, ${failed} FAILED`) : "");
     console.log(failed ? chalk2.yellow(line) : chalk2.green(line));
     if (failed) process.exitCode = 1;
   }
@@ -30598,7 +30662,7 @@ program.command("task-hook").description("Move a board card when a prompt or a c
   }
 });
 program.command("install-hooks").description("Install Claude Code hooks (Stop + PreCompact + UserPromptSubmit + SessionEnd + SessionStart) into every Claude profile").option("--uninstall", "Remove hooks instead of installing them").option("--no-resume-hint", "Don't install the UserPromptSubmit resume-hint hook").option("--no-escalate", "Don't install the SessionEnd learnings-escalation hook").option("--no-wakeup", "Don't install the SessionStart wake-up hook").option("--no-guard", "Don't install the PreToolUse decision guard").option("--no-task-board", "Don't install the hooks that claim and close board cards").action(async (opts) => {
-  const { mkdirSync: mkdirSync23, copyFileSync: copyFileSync4, chmodSync: chmodSync5, existsSync: existsSync58, readFileSync: readFileSync50, writeFileSync: writeFileSync24, statSync: statSync45, unlinkSync: unlinkSync4 } = await import("fs");
+  const { mkdirSync: mkdirSync23, copyFileSync: copyFileSync4, chmodSync: chmodSync5, existsSync: existsSync58, readFileSync: readFileSync50, writeFileSync: writeFileSync24, statSync: statSync46, unlinkSync: unlinkSync4 } = await import("fs");
   const { fileURLToPath: fileURLToPath6 } = await import("url");
   const { boardHookEntries: boardHookEntries2, isBoardHookEntry: isBoardHookEntry2, registerBoardHooks: registerBoardHooks2, resolveCliEntry: resolveCliEntry2 } = await Promise.resolve().then(() => (init_board_hooks(), board_hooks_exports));
   const here = fileURLToPath6(new URL(".", import.meta.url));
@@ -30813,18 +30877,18 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
     writeFileSync24(hooksJson, JSON.stringify(config2, null, 2) + "\n");
   }
   if (installGuard) await addGuardToOtherTools(installedGuardHook);
-  const saveSz = statSync45(installedSaveHook).size;
+  const saveSz = statSync46(installedSaveHook).size;
   console.log(chalk2.green(`\u2713 Installed chat-recall save hook (${saveSz} bytes)`));
   if (installResume) {
-    const resumeSz = statSync45(installedResumeHook).size;
+    const resumeSz = statSync46(installedResumeHook).size;
     console.log(chalk2.green(`\u2713 Installed chat-recall resume-hint hook (${resumeSz} bytes)`));
   }
   if (installEscalate) {
-    const escalateSz = statSync45(installedEscalateHook).size;
+    const escalateSz = statSync46(installedEscalateHook).size;
     console.log(chalk2.green(`\u2713 Installed chat-recall learnings-escalation hook (${escalateSz} bytes)`));
   }
   if (installGuard) {
-    const guardSz = statSync45(installedGuardHook).size;
+    const guardSz = statSync46(installedGuardHook).size;
     console.log(chalk2.green(`\u2713 Installed chat-recall decision guard (${guardSz} bytes)`));
   }
   if (installTaskBoard) {
@@ -30832,7 +30896,7 @@ program.command("install-hooks").description("Install Claude Code hooks (Stop +
     console.log(chalk2.dim("  A prompt naming a card id claims it; a commit message naming one closes it."));
   }
   if (installWakeup) {
-    const wakeupSz = statSync45(installedWakeupHook).size;
+    const wakeupSz = statSync46(installedWakeupHook).size;
     console.log(chalk2.green(`\u2713 Installed chat-recall wake-up hook (${wakeupSz} bytes)`));
     for (const f of wakeupSkipped) {
       console.log(chalk2.dim(`  (SessionStart already wired in ${f} \u2014 left as is, not duplicated)`));
@@ -30949,10 +31013,10 @@ program.command("service <action>").description("Manage the per-user background
 });
 async function runLogin(serverUrl, opts) {
   const { saveCredentials: saveCredentials2, loadAllCredentials: loadAllCredentials2 } = await Promise.resolve().then(() => (init_sync_client(), sync_client_exports));
-  const base3 = serverUrl.replace(/\/+$/, "");
+  const base4 = serverUrl.replace(/\/+$/, "");
   const verifyToken = async (token) => {
     try {
-      const res = await fetch(`${base3}/api/status`, {
+      const res = await fetch(`${base4}/api/status`, {
         headers: token ? { authorization: `Bearer ${token}` } : {},
         signal: AbortSignal.timeout(1e4)
       });
@@ -30968,36 +31032,36 @@ async function runLogin(serverUrl, opts) {
       return failLogin(opts, 'the token contains non-ASCII characters \u2014 this looks like a masked/truncated copy (e.g. "ct_12345678\u2026")');
     }
     const { probeServer: identifyServer, probeOk: identified, probeAdvice: identifyAdvice } = await Promise.resolve().then(() => (init_server_probe(), server_probe_exports));
-    const who = await identifyServer(base3, { timeoutMs: 1e4 });
-    if (!identified(who)) return failLogin(opts, identifyAdvice(who, base3));
+    const who = await identifyServer(base4, { timeoutMs: 1e4 });
+    if (!identified(who)) return failLogin(opts, identifyAdvice(who, base4));
     const check = await verifyToken(token);
     if (!check.ok) {
       if (check.status === 401 || check.status === 403) {
         console.error(chalk2.dim("Tokens are shown once \u2014 mint a fresh one (Account \u2192 Connect your machine) and copy the whole line."));
-        return failLogin(opts, `${base3} rejected the token (HTTP ${check.status})`);
+        return failLogin(opts, `${base4} rejected the token (HTTP ${check.status})`);
       }
       if (check.status !== void 0 && check.status >= 500) {
-        return failLogin(opts, `${base3} answered HTTP ${check.status} \u2014 the server is up but failing. The token was never checked. Nothing to fix locally.`);
+        return failLogin(opts, `${base4} answered HTTP ${check.status} \u2014 the server is up but failing. The token was never checked. Nothing to fix locally.`);
       }
       if (check.status === 404 || check.status === 410) {
-        return failLogin(opts, `${base3} does not serve the chat-recall API (HTTP ${check.status}). If the server moved, log in to its new URL.`);
+        return failLogin(opts, `${base4} does not serve the chat-recall API (HTTP ${check.status}). If the server moved, log in to its new URL.`);
       }
-      return failLogin(opts, `could not verify the token against ${base3}: ${check.error || `HTTP ${check.status}`}`);
+      return failLogin(opts, `could not verify the token against ${base4}: ${check.error || `HTTP ${check.status}`}`);
     }
     saveCredentials2({ serverUrl, token });
     console.log(chalk2.green("\u2713 Logged in.") + chalk2.dim(`  server: ${serverUrl} (token verified)`));
     return;
   }
-  const existing = loadAllCredentials2().find((t) => t.serverUrl.replace(/\/+$/, "") === base3);
+  const existing = loadAllCredentials2().find((t) => t.serverUrl.replace(/\/+$/, "") === base4);
   if (existing && (await verifyToken(existing.token)).ok) {
     console.log(chalk2.green("\u2713 Already connected.") + chalk2.dim(`  server: ${serverUrl} (existing token verified)`));
     return;
   }
   try {
     const { probeServer: probeServer2, probeOk: probeOk2 } = await Promise.resolve().then(() => (init_server_probe(), server_probe_exports));
-    const identified = await probeServer2(base3, { timeoutMs: 8e3 });
+    const identified = await probeServer2(base4, { timeoutMs: 8e3 });
     if (probeOk2(identified)) {
-      const probe = await fetch(`${base3}/api/status`, { signal: AbortSignal.timeout(8e3) });
+      const probe = await fetch(`${base4}/api/status`, { signal: AbortSignal.timeout(8e3) });
       if (probe.status === 200) {
         saveCredentials2({ serverUrl, token: "" });
         console.log(chalk2.green("\u2713 Logged in.") + chalk2.dim(`  ${serverUrl} (local server \u2014 no auth, no token needed)`));
@@ -31018,16 +31082,16 @@ async function runLogin(serverUrl, opts) {
     if (!issuer) {
       const { probeServer: probeServer2, probeOk: probeOk2, probeAdvice: probeAdvice2 } = await Promise.resolve().then(() => (init_server_probe(), server_probe_exports));
       for (let attempt = 1; attempt <= 3 && !authProvider; attempt++) {
-        const probe = await probeServer2(base3, { timeoutMs: 15e3 });
+        const probe = await probeServer2(base4, { timeoutMs: 15e3 });
         if (probeOk2(probe)) {
           const caps = probe.raw;
           authProvider = caps?.authProvider;
           if (caps?.oidcIssuer) issuer = caps.oidcIssuer;
           capsError = null;
         } else if (probe.kind === "moved" || probe.kind === "not_api") {
-          return failLogin(opts, probeAdvice2(probe, base3));
+          return failLogin(opts, probeAdvice2(probe, base4));
         } else {
-          capsError = probeAdvice2(probe, base3);
+          capsError = probeAdvice2(probe, base4);
         }
         if (!authProvider && attempt < 3) await new Promise((r) => setTimeout(r, attempt * 1e3));
       }
@@ -31036,7 +31100,7 @@ async function runLogin(serverUrl, opts) {
       authProvider = "better-auth";
       if (capsError) {
         console.log(`   ${chalk2.yellow("Could not read the server's capabilities")} (${capsError}) \u2014 assuming the standard sign-in flow.`);
-        void Promise.resolve().then(() => (init_install_report(), install_report_exports)).then(({ reportInstallFailure: reportInstallFailure2 }) => reportInstallFailure2(base3, {
+        void Promise.resolve().then(() => (init_install_report(), install_report_exports)).then(({ reportInstallFailure: reportInstallFailure2 }) => reportInstallFailure2(base4, {
           step: "cli_login_probe",
           reason: capsError?.slice(0, 40) ?? null,
           message: capsError
@@ -31058,20 +31122,20 @@ async function runLogin(serverUrl, opts) {
       console.log(chalk2.dim(`  If the page asks for a code: ${chalk2.bold(p.userCode)}`));
       console.log(chalk2.dim("Then come back here \u2014 this finishes on its own. Waiting\u2026"));
     };
-    const tokens = authProvider === "better-auth" ? await betterAuthDeviceLogin2(base3, onPrompt) : await deviceLogin2({ issuer, clientId: opts.clientId }, onPrompt);
+    const tokens = authProvider === "better-auth" ? await betterAuthDeviceLogin2(base4, onPrompt) : await deviceLogin2({ issuer, clientId: opts.clientId }, onPrompt);
     const authHdr = { authorization: `Bearer ${tokens.accessToken}`, "content-type": "application/json" };
-    const meRes = await fetch(`${base3}/api/me`, { headers: authHdr });
-    if (!meRes.ok) throw new Error(`${base3}/api/me: HTTP ${meRes.status} ${await meRes.text().catch(() => "")}`);
-    const me = await readJsonBody(meRes, base3, "GET /api/me");
+    const meRes = await fetch(`${base4}/api/me`, { headers: authHdr });
+    if (!meRes.ok) throw new Error(`${base4}/api/me: HTTP ${meRes.status} ${await meRes.text().catch(() => "")}`);
+    const me = await readJsonBody(meRes, base4, "GET /api/me");
     const teams = me.teams || [];
     let slug = opts.team;
     if (!slug) {
       if (teams.length === 1) slug = teams[0].team_slug;
       else if (teams.length === 0) {
         const name = me.user?.email?.split("@")[0]?.replace(/[^a-z0-9]/gi, "") || "workspace";
-        const created = await fetch(`${base3}/api/teams`, { method: "POST", headers: authHdr, body: JSON.stringify({ name }) });
+        const created = await fetch(`${base4}/api/teams`, { method: "POST", headers: authHdr, body: JSON.stringify({ name }) });
         if (!created.ok) throw new Error(`workspace create failed: HTTP ${created.status} ${await created.text().catch(() => "")}`);
-        slug = (await readJsonBody(created, base3, "POST /api/teams")).slug;
+        slug = (await readJsonBody(created, base4, "POST /api/teams")).slug;
         console.log(chalk2.dim(`Created workspace "${name}" (${slug}) \u2014 you're its owner.`));
       } else {
         teams.forEach((t) => console.error(`  ${t.team_slug}  ${chalk2.dim(t.name)}`));
@@ -31079,13 +31143,13 @@ async function runLogin(serverUrl, opts) {
       }
     }
     const deviceId = opts.deviceId || (await import("node:os")).hostname();
-    const mint = await fetch(`${base3}/api/teams/${encodeURIComponent(slug)}/tokens`, {
+    const mint = await fetch(`${base4}/api/teams/${encodeURIComponent(slug)}/tokens`, {
       method: "POST",
       headers: authHdr,
       body: JSON.stringify({ device_id: deviceId })
     });
     if (!mint.ok) throw new Error(`token mint failed: HTTP ${mint.status} ${await mint.text().catch(() => "")}`);
-    const { token } = await readJsonBody(mint, base3, "POST /api/teams/:slug/tokens");
+    const { token } = await readJsonBody(mint, base4, "POST /api/teams/:slug/tokens");
     saveCredentials2({ serverUrl, token });
     console.log(chalk2.green(`\u2713 Logged in to ${chalk2.bold(slug)}`) + chalk2.dim(`  (device: ${deviceId})  server: ${serverUrl}`));
     if (!opts.fromInit) {
@@ -31562,16 +31626,16 @@ program.command("update").description("Update this CLI now from the server you s
   }
   let installFailed = false;
   for (const cred of targets) {
-    const base3 = cred.serverUrl.replace(/\/+$/, "");
+    const base4 = cred.serverUrl.replace(/\/+$/, "");
     const headers = cred.token ? { authorization: `Bearer ${cred.token}` } : {};
-    const r = await runAutoUpdate2(base3, headers, cliVersion3());
+    const r = await runAutoUpdate2(base4, headers, cliVersion3());
     if (r.updated) {
-      console.log(chalk2.green(`\u2713 ${r.reason}`) + chalk2.dim(` (${base3})`));
+      console.log(chalk2.green(`\u2713 ${r.reason}`) + chalk2.dim(` (${base4})`));
       continue;
     }
     const benign = /already current|no CLI release|disabled/.test(r.reason);
     if (/install failed|download failed|checksum/.test(r.reason)) installFailed = true;
-    console.log((benign ? chalk2.dim("\u2022 ") : chalk2.red("\u2717 ")) + r.reason + chalk2.dim(` (${base3})`));
+    console.log((benign ? chalk2.dim("\u2022 ") : chalk2.red("\u2717 ")) + r.reason + chalk2.dim(` (${base4})`));
   }
   const check = await refreshUpdateCheck2(true);
   if (installFailed) {