dreamcontext 0.17.0 → 0.17.1

package/dist/index.js

@@ -28253,8 +28253,8 @@ var require_excerpt = __commonJS({
       if (sep18 == null && (opts.excerpt === false || opts.excerpt == null)) {
         return file;
       }
-      const delimiter = typeof opts.excerpt === "string" ? opts.excerpt : sep18 || opts.delimiters[0];
-      const idx = file.content.indexOf(delimiter);
+      const delimiter2 = typeof opts.excerpt === "string" ? opts.excerpt : sep18 || opts.delimiters[0];
+      const idx = file.content.indexOf(delimiter2);
       if (idx !== -1) {
         file.excerpt = file.content.slice(0, idx);
       }
@@ -38942,7 +38942,7 @@ var init_brain_repo = __esm({
 
 // src/lib/git-sync/credentials.ts
 import { accessSync, chmodSync as chmodSync4, constants, existsSync as existsSync47, unlinkSync as unlinkSync5, writeFileSync as writeFileSync34 } from "fs";
-import { join as join48 } from "path";
+import { delimiter, dirname as dirname24, join as join48 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 import { randomUUID as randomUUID2 } from "crypto";
 import { fileURLToPath as fileURLToPath6 } from "url";
@@ -38965,6 +38965,13 @@ function resolveAskpassPath() {
   }
   throw new Error("askpass.cjs not found \u2014 the dreamcontext installation may be corrupt or incomplete.");
 }
+function withNodeDirOnPath(currentPath) {
+  const nodeDir = dirname24(process.execPath);
+  const base = currentPath ?? "";
+  if (!nodeDir) return base;
+  if (base.split(delimiter).includes(nodeDir)) return base;
+  return base ? `${nodeDir}${delimiter}${base}` : nodeDir;
+}
 async function withGitCredentials(token, fn) {
   const tmpPath = join48(tmpdir2(), `dreamcontext-askpass-${randomUUID2()}`);
   writeFileSync34(tmpPath, token, { mode: 384 });
@@ -38974,6 +38981,15 @@ async function withGitCredentials(token, fn) {
   }
   const env2 = {
     ...process.env,
+    // git execs the askpass helper (`#!/usr/bin/env node`) DIRECTLY, so `node`
+    // must be resolvable on PATH at that instant. The desktop app spawns the
+    // dashboard server with a minimal GUI PATH (`/usr/bin:/bin:/usr/sbin:/sbin`)
+    // that has NO node — git then can't launch the helper ("env: node: No such
+    // file or directory" → "could not read Username … terminal prompts disabled"),
+    // and that failure gets MISCLASSIFIED as an expired GitHub sign-in. Guarantee
+    // the helper can find node by prepending the directory of the CURRENT node
+    // binary (dreamcontext always runs under node, so process.execPath IS node).
+    PATH: withNodeDirOnPath(process.env.PATH),
     GIT_ASKPASS: resolveAskpassPath(),
     DREAMCONTEXT_ASKPASS_TOKEN_FILE: tmpPath,
     GIT_TERMINAL_PROMPT: "0"
@@ -38996,7 +39012,7 @@ var init_credentials = __esm({
 });
 
 // src/lib/git-sync/sync-engine.ts
-import { dirname as dirname24 } from "path";
+import { dirname as dirname25 } from "path";
 function syncCommitMessage(ctx) {
   return ctx.mode === "full-repo" ? "chore: sync project (dreamcontext)" : "chore(brain): sync";
 }
@@ -39032,7 +39048,7 @@ function authorFor(ctx) {
 async function runBrainSync(opts, depsOverride = {}) {
   const d = { ...defaultDeps, ...depsOverride };
   const contextRoot = opts.cwd;
-  const projectRoot = dirname24(contextRoot);
+  const projectRoot = dirname25(contextRoot);
   const config = readSetupConfig(projectRoot);
   const enabledResolution = resolveBrainSyncEnabled(projectRoot, config, d.git);
   if (!enabledResolution.enabled) {
@@ -39435,13 +39451,123 @@ var init_sync_engine = __esm({
   }
 });
 
+// src/lib/git-sync/failure.ts
+function githubSlug(s) {
+  const m = s.match(/github\.com[/:]([^/\s]+\/[^/\s'".]+)/i);
+  return m ? m[1].replace(/\.git$/, "") : void 0;
+}
+function extractRepo(message, fallbackRepo) {
+  const perm = message.match(/Permission to ([^\s]+?)(?:\.git)? denied/i);
+  if (perm) return perm[1];
+  const fromMsg = githubSlug(message);
+  if (fromMsg) return fromMsg;
+  if (fallbackRepo) return githubSlug(fallbackRepo) ?? fallbackRepo;
+  return void 0;
+}
+function classifySyncError(rawMessage, repoHint) {
+  const m = rawMessage || "";
+  const repo = extractRepo(m, repoHint);
+  const named = repo ? ` on ${repo}` : "";
+  if (/non-fast-forward.*twice|rejected.*non-fast-forward|Push rejected \(non-fast-forward\) twice/i.test(m)) {
+    return {
+      kind: "push-rejected",
+      recovery: "retry",
+      repo,
+      message: "The team pushed while your sync was in flight. Retry \u2014 dreamcontext will merge their changes and push again."
+    };
+  }
+  if (/Contents\b.*write|permission to .* denied|protected branch|not authorized|remote: Permission|must have push access|403\b/i.test(m)) {
+    return {
+      kind: "permission",
+      recovery: "check-permissions",
+      repo,
+      message: `Your GitHub token can't write to${named || " this repo"}. Give it Contents (read & write) access${repo ? ` on ${repo}` : ""}, then retry.`
+    };
+  }
+  if (/no github token found|no token found for the brain/i.test(m)) {
+    return {
+      kind: "no-token",
+      recovery: "reconnect-github",
+      repo,
+      message: "Cloud sync needs a GitHub account. Connect GitHub to start syncing."
+    };
+  }
+  if (/authentication failed|could not read Username|bad credentials|invalid credentials|401\b|terminal prompts disabled|Support for password authentication/i.test(m)) {
+    return {
+      kind: "auth",
+      recovery: "reconnect-github",
+      repo,
+      message: "Your GitHub sign-in expired or is invalid. Reconnect GitHub to keep syncing."
+    };
+  }
+  if (/could ?n[o']t resolve host|could not resolve host|connection timed out|failed to connect|network is unreachable|temporary failure in name resolution|unable to access .*(?:Could not resolve|timed out|Failed to connect)|getaddrinfo|ENOTFOUND|ETIMEDOUT/i.test(m)) {
+    return {
+      kind: "network",
+      recovery: "wait-online",
+      repo,
+      message: "You're offline \u2014 sync will retry automatically when you're back online. Nothing was lost."
+    };
+  }
+  if (/unrelated histories/i.test(m)) {
+    return {
+      kind: "unknown",
+      recovery: "manual",
+      repo,
+      message: "The remote contains content that did not come from this brain (e.g. a README). Attach an empty repo or reconcile the histories manually."
+    };
+  }
+  return {
+    kind: "unknown",
+    recovery: "retry",
+    repo,
+    message: rawMessage.trim() || "Sync failed. Retry, or check your connection and GitHub access."
+  };
+}
+var init_failure = __esm({
+  "src/lib/git-sync/failure.ts"() {
+    "use strict";
+  }
+});
+
+// src/lib/git-sync/auth-reconcile.ts
+function reconcileBrainSyncSuccess(action) {
+  if (AUTH_OK_ACTIONS.has(action)) setGlobalGitHubAuthValid(true);
+}
+function reconcileBrainSyncFailure(rawMessage, projectRoot, repoHint) {
+  const failure = classifySyncError(rawMessage, repoHint);
+  if (failure.kind === "permission") {
+    setGlobalGitHubAuthValid(true);
+    return;
+  }
+  if (failure.kind !== "auth") return;
+  if (resolveBrainSyncToken(projectRoot)?.via === "global") setGlobalGitHubAuthValid(false);
+}
+var AUTH_OK_ACTIONS;
+var init_auth_reconcile = __esm({
+  "src/lib/git-sync/auth-reconcile.ts"() {
+    "use strict";
+    init_auth_store();
+    init_brain_repo();
+    init_failure();
+    AUTH_OK_ACTIONS = /* @__PURE__ */ new Set([
+      "pulled",
+      "pushed",
+      "noop",
+      "merged",
+      "blocked-scrub",
+      "awaiting-agent",
+      "code-conflict"
+    ]);
+  }
+});
+
 // src/cli/commands/brain.ts
-import { dirname as dirname25 } from "path";
+import { dirname as dirname26 } from "path";
 function registerBrainCommand(program2) {
   const brain = program2.command("brain").description("Cloud collaboration \u2014 sync the whole project (code + brain) to your GitHub origin");
   brain.command("status").description("Show sync mode, remote, sync state, and the resolved cloud-sync switch").action(() => {
     const contextRoot = ensureContextRoot();
-    const projectRoot = dirname25(contextRoot);
+    const projectRoot = dirname26(contextRoot);
     const config = readSetupConfig(projectRoot);
     const mode = resolveMode2(config);
     const enabledResolution = resolveBrainSyncEnabled(projectRoot, config);
@@ -39459,7 +39585,7 @@ function registerBrainCommand(program2) {
   });
   brain.command("enable").description("Turn cloud sync ON \u2014 sync the whole project (code + brain) to your GitHub origin").action(() => {
     const contextRoot = ensureContextRoot();
-    const projectRoot = dirname25(contextRoot);
+    const projectRoot = dirname26(contextRoot);
     const config = readSetupConfig(projectRoot);
     const origin = isGitRepo(projectRoot) ? getRemoteUrl(projectRoot, "origin") : null;
     updateSetupConfig(projectRoot, {
@@ -39475,7 +39601,7 @@ function registerBrainCommand(program2) {
   });
   brain.command("disable").description("Turn cloud sync OFF \u2014 the brain is still committed in-tree locally, never pushed").action(() => {
     const contextRoot = ensureContextRoot();
-    const projectRoot = dirname25(contextRoot);
+    const projectRoot = dirname26(contextRoot);
     const config = readSetupConfig(projectRoot);
     updateSetupConfig(projectRoot, {
       brainRepo: { ...config?.brainRepo ?? {}, mode: "in-tree", enabled: false }
@@ -39484,7 +39610,7 @@ function registerBrainCommand(program2) {
   });
   brain.command("scrub").description("Dry-run the scrub gate against the current staged tree").action(() => {
     const contextRoot = ensureContextRoot();
-    const projectRoot = dirname25(contextRoot);
+    const projectRoot = dirname26(contextRoot);
     const hits = scrubStagedFiles(projectRoot);
     const { blocks, warns } = summarizeScrub(hits);
     if (blocks.length === 0 && warns.length === 0) {
@@ -39516,9 +39642,11 @@ function registerBrainCommand(program2) {
         continue: opts.continue,
         resume: opts.resume
       });
+      reconcileBrainSyncSuccess(result.action);
       renderBrainSyncResult(result);
       if (result.action === "invalid-flag" || result.action === "blocked-scrub") process.exitCode = 1;
     } catch (err) {
+      reconcileBrainSyncFailure(err.message, dirname26(contextRoot));
       if (err instanceof GitSyncError) {
         error(err.message);
       } else {
@@ -39576,6 +39704,7 @@ var init_brain = __esm({
     init_sync_engine();
     init_brain_repo();
     init_scrub();
+    init_auth_reconcile();
     init_git();
     init_git();
   }
@@ -39876,7 +40005,7 @@ var init_session_digest = __esm({
 
 // src/lib/recall.ts
 import { existsSync as existsSync49, readFileSync as readFileSync36 } from "fs";
-import { join as join50, basename as basename13, dirname as dirname26, relative as relative4 } from "path";
+import { join as join50, basename as basename13, dirname as dirname27, relative as relative4 } from "path";
 function isFederated(doc) {
   return doc.federated === true;
 }
@@ -40151,7 +40280,7 @@ function loadSkillDocs(skillsRoot) {
     try {
       const { data, content } = readFrontmatter(file);
       if (data.alwaysApply === true) continue;
-      const slug = typeof data.name === "string" && data.name ? data.name : basename13(dirname26(file));
+      const slug = typeof data.name === "string" && data.name ? data.name : basename13(dirname27(file));
       const title = slug;
       const description = typeof data.description === "string" ? data.description : "";
       const tags = Array.isArray(data.tags) ? data.tags.map(String) : [];
@@ -41121,7 +41250,7 @@ var init_sleep_consolidation = __esm({
 
 // src/cli/commands/sleep.ts
 import { existsSync as existsSync52 } from "fs";
-import { join as join53, dirname as dirname27 } from "path";
+import { join as join53, dirname as dirname28 } from "path";
 function getSleepPath(root) {
   return join53(root, "state", ".sleep.json");
 }
@@ -41317,7 +41446,7 @@ function registerSleepCommand(program2) {
       const decision = consolidationDepth(state.debt, { userRequestedDeep: !!opts.deep });
       state.consolidation_depth = decision.depth;
       state.pendingMigrationNotices = [];
-      const projectRoot = dirname27(root);
+      const projectRoot = dirname28(root);
       const config = readSetupConfig(projectRoot);
       const fromVersion = config?.setupVersion ?? "0.0.0";
       const migResult = runMigrations(root, fromVersion, dreamcontextVersion());
@@ -41401,22 +41530,24 @@ function registerSleepCommand(program2) {
       warn(`Task sync: skipped \u2014 ${err.message ?? err}`);
     }
     try {
-      const cfg = readSetupConfig(dirname27(root));
+      const cfg = readSetupConfig(dirname28(root));
       if (cfg?.brainRepo?.autoSync) {
         const result2 = await runBrainSync({ cwd: root, mode: "auto" });
+        reconcileBrainSyncSuccess(result2.action);
         renderBrainSyncResult(result2);
         if (result2.action === "awaiting-agent" || result2.action === "already-awaiting-agent") {
           warn("Brain sync paused on a team merge \u2014 run /dream-sync to reconcile (it will resume or continue as needed).");
         }
-        if (result2.needsTaskSync || readBrainLocal(dirname27(root)).needsTaskSync) {
+        if (result2.needsTaskSync || readBrainLocal(dirname28(root)).needsTaskSync) {
           const backend = getTaskBackend(root);
           if (backend.name !== "local") {
             await backend.sync("both");
-            writeBrainLocal(dirname27(root), { needsTaskSync: false });
+            writeBrainLocal(dirname28(root), { needsTaskSync: false });
           }
         }
       }
     } catch (err) {
+      reconcileBrainSyncFailure(err.message ?? String(err), dirname28(root));
       warn(`Brain sync: skipped \u2014 ${err.message ?? err}`);
     }
     try {
@@ -41520,6 +41651,7 @@ var init_sleep = __esm({
     init_manifest();
     init_file_lock();
     init_sync_engine();
+    init_auth_reconcile();
     init_brain();
     init_recall();
     init_store();
@@ -41888,7 +42020,7 @@ import {
   renameSync as renameSync11,
   mkdirSync as mkdirSync31
 } from "fs";
-import { join as join55, dirname as dirname28, resolve as resolve12, sep as sep8 } from "path";
+import { join as join55, dirname as dirname29, resolve as resolve12, sep as sep8 } from "path";
 function normalizeSlug2(raw) {
   return raw.trim().replace(/\\/g, "/").replace(/\.md$/i, "").replace(/^\/+|\/+$/g, "");
 }
@@ -41981,7 +42113,7 @@ ${srcBody}
   const newDstContent = import_gray_matter7.default.stringify(newDstBody, newDstData);
   const tmpPath = dstAbsPath + ".km-tmp";
   try {
-    mkdirSync31(dirname28(tmpPath), { recursive: true });
+    mkdirSync31(dirname29(tmpPath), { recursive: true });
     writeFileSync38(tmpPath, newDstContent, "utf-8");
     renameSync11(tmpPath, dstAbsPath);
   } catch (e) {
@@ -42540,7 +42672,7 @@ var init_objectives_store = __esm({
 });
 
 // src/cli/commands/tasks.ts
-import { join as join58, basename as basename16, dirname as dirname29 } from "path";
+import { join as join58, basename as basename16, dirname as dirname30 } from "path";
 function getStateDir() {
   const root = ensureContextRoot();
   return join58(root, "state");
@@ -42833,7 +42965,7 @@ function registerTasksCommand(program2) {
     const description = opts.description || name;
     const tags = opts.tags ? opts.tags.split(",").map((t) => t.trim()).filter(Boolean) : [];
     if (opts.person && opts.person.trim()) {
-      const projectRoot = dirname29(ensureContextRoot());
+      const projectRoot = dirname30(ensureContextRoot());
       if (isMultiPerson(readSetupConfig(projectRoot))) {
         const resolved = await resolvePersonSlug(backend, opts.person);
         if ("abort" in resolved) return;
@@ -43309,7 +43441,7 @@ function registerTasksCommand(program2) {
         return;
       }
       if (report.skipped !== "locked") {
-        writeBrainLocal(dirname29(root), { needsTaskSync: false });
+        writeBrainLocal(dirname30(root), { needsTaskSync: false });
       }
       if (opts.json) {
         console.log(JSON.stringify(report, null, 2));
@@ -43400,7 +43532,7 @@ function registerTasksCommand(program2) {
     }
   });
   tasks.command("sync-hooks").argument("<action>", "install | uninstall").description("Install/uninstall best-effort git sync triggers (post-commit, pre-push)").action((action) => {
-    const projectRoot = dirname29(ensureContextRoot());
+    const projectRoot = dirname30(ensureContextRoot());
     if (action === "install") {
       const res = installTaskSyncHooks(projectRoot);
       if (res.noGit) {
@@ -43802,7 +43934,7 @@ var init_roadmap_model = __esm({
 
 // src/cli/commands/roadmap.ts
 import { mkdirSync as mkdirSync33, writeFileSync as writeFileSync39 } from "fs";
-import { join as join60, dirname as dirname30 } from "path";
+import { join as join60, dirname as dirname31 } from "path";
 function fmtDates(o) {
   const parts = [];
   if (o.target_date) parts.push(`target ${o.target_date}`);
@@ -43857,7 +43989,7 @@ function renderRoadmapBoard(model) {
 }
 function writeRoadmapBoard(contextRoot, model) {
   const path2 = join60(contextRoot, "knowledge", "roadmap", "board.md");
-  mkdirSync33(dirname30(path2), { recursive: true });
+  mkdirSync33(dirname31(path2), { recursive: true });
   const slipping = model.objectives.filter((o) => o.slipping === true).map((o) => o.slug);
   const content = [
     "---",
@@ -43938,7 +44070,7 @@ function registerRoadmapCommand(program2) {
     printBoard(model);
     const path2 = writeRoadmapBoard(root, model);
     console.log();
-    success(`Board written: ${path2.replace(dirname30(root) + "/", "")}`);
+    success(`Board written: ${path2.replace(dirname31(root) + "/", "")}`);
   });
   const objective = roadmap.command("objective").description("Manage objectives (create/list/show/edit/delete/depend)");
   objective.command("create").argument("<slug>", "Kebab-case objective slug (e.g. increase-retention-20)").description("Create an objective in core/objectives/<slug>.md").requiredOption("--title <title>", "One-line outcome statement").option("--target <date>", "Target date the PO commits to (YYYY-MM-DD)").option("--depends-on <slugs>", "Comma-separated slugs this objective depends on").option("--feature <slug>", "Backing feature PRD slug (optional)").option("--metric <label>", 'Track by a Key Result metric instead of tasks (e.g. "MRR")').option("--metric-target <n>", "The metric value that means 100% done (required with --metric)").option("--metric-baseline <n>", "Where the metric started (default 0)").option("--metric-current <n>", "Current metric value (default = baseline)").option("--metric-unit <unit>", 'Metric display unit (e.g. "USD")').option("--why <text>", "Why this outcome matters (seeds the ## Why section)").action((slug, opts) => {
@@ -44637,14 +44769,14 @@ var init_generic_http = __esm({
 });
 
 // src/lib/lab/adapters/custom-script.ts
-import { dirname as dirname31, resolve as resolve13, sep as sep9 } from "path";
+import { dirname as dirname32, resolve as resolve13, sep as sep9 } from "path";
 import { pathToFileURL } from "url";
 function scriptFilePath(manifest) {
   const source = manifest.source;
   if (!source || source.adapter !== "script") {
     throw new LabError("Custom-script adapter requires a `script` source.");
   }
-  const labRoot = dirname31(dirname31(manifest.path));
+  const labRoot = dirname32(dirname32(manifest.path));
   const abs = resolve13(labRoot, source.file);
   if (abs !== labRoot && !abs.startsWith(labRoot + sep9)) {
     throw new LabError(`Script path escapes lab/: ${source.file}`);
@@ -45064,9 +45196,9 @@ var init_sync = __esm({
 });
 
 // src/cli/commands/lab.ts
-import { dirname as dirname32 } from "path";
+import { dirname as dirname33 } from "path";
 function projectRootFor(contextRoot) {
-  return dirname32(contextRoot);
+  return dirname33(contextRoot);
 }
 function handleLabError(err) {
   if (err instanceof LabError) {
@@ -45662,17 +45794,17 @@ import {
   unlinkSync as unlinkSync8,
   readdirSync as readdirSync12
 } from "fs";
-import { dirname as dirname33, join as join67 } from "path";
+import { dirname as dirname34, join as join67 } from "path";
 import { randomBytes as randomBytes2 } from "crypto";
 function atomicWriteFile(path2, data) {
-  mkdirSync37(dirname33(path2), { recursive: true });
+  mkdirSync37(dirname34(path2), { recursive: true });
   const tmp = `${path2}.tmp.${process.pid}.${randomBytes2(4).toString("hex")}`;
   writeFileSync43(tmp, data, "utf8");
   renameSync13(tmp, path2);
 }
 function writeJsonWithBridge(jsonPath, bridgePath, jsonValue, bridgeMarkdown) {
-  mkdirSync37(dirname33(jsonPath), { recursive: true });
-  mkdirSync37(dirname33(bridgePath), { recursive: true });
+  mkdirSync37(dirname34(jsonPath), { recursive: true });
+  mkdirSync37(dirname34(bridgePath), { recursive: true });
   const jsonStr = JSON.stringify(jsonValue, null, 2) + "\n";
   const jsonTmp = `${jsonPath}.tmp.${process.pid}.${randomBytes2(4).toString("hex")}`;
   const bridgeTmp = `${bridgePath}.tmp.${process.pid}.${randomBytes2(4).toString("hex")}`;
@@ -45801,7 +45933,7 @@ function beginRun(verb, inputs) {
 }
 function appendIndex(runId, verb, status) {
   const path2 = MARKETING_PATHS.runsIndex();
-  mkdirSync37(dirname33(path2), { recursive: true });
+  mkdirSync37(dirname34(path2), { recursive: true });
   const ts = (/* @__PURE__ */ new Date()).toISOString();
   const line = `- \`${ts}\` **${verb}** (${status}) \u2014 [\`${runId}\`](./${runId}.json)
 `;
@@ -45925,10 +46057,10 @@ import {
   writeFileSync as writeFileSync44,
   renameSync as renameSync14
 } from "fs";
-import { dirname as dirname34 } from "path";
+import { dirname as dirname35 } from "path";
 import { randomBytes as randomBytes3 } from "crypto";
 function atomicWriteFile2(path2, data) {
-  mkdirSync38(dirname34(path2), { recursive: true });
+  mkdirSync38(dirname35(path2), { recursive: true });
   const tmp = `${path2}.tmp.${process.pid}.${randomBytes3(4).toString("hex")}`;
   writeFileSync44(tmp, data, "utf8");
   renameSync14(tmp, path2);
@@ -46273,7 +46405,7 @@ var init_setup_drift = __esm({
 
 // src/lib/asset-drift-cache.ts
 import { existsSync as existsSync69, readFileSync as readFileSync47, writeFileSync as writeFileSync45, mkdirSync as mkdirSync39 } from "fs";
-import { join as join69, dirname as dirname35 } from "path";
+import { join as join69, dirname as dirname36 } from "path";
 function assetDriftCachePath(contextRoot) {
   return join69(contextRoot, "state", ".asset-drift.json");
 }
@@ -46297,7 +46429,7 @@ function readAssetDriftCache(contextRoot) {
 }
 function writeAssetDriftCache(contextRoot, cache) {
   const p = assetDriftCachePath(contextRoot);
-  mkdirSync39(dirname35(p), { recursive: true });
+  mkdirSync39(dirname36(p), { recursive: true });
   writeFileSync45(p, JSON.stringify(cache, null, 2) + "\n", "utf-8");
 }
 function cacheConfidentlyClean(cache, cliVersion, setupVersion) {
@@ -46322,7 +46454,7 @@ var init_federation_config = __esm({
 });
 
 // src/lib/federation-recall.ts
-import { basename as basename20, dirname as dirname36 } from "path";
+import { basename as basename20, dirname as dirname37 } from "path";
 function namespacedKey(vault, type, slug) {
   return `${vault}::${type}/${slug}`;
 }
@@ -46347,7 +46479,7 @@ function crossVaultRecall(query, opts) {
     }
     const isCurrent = target.current === true;
     if (!isCurrent) {
-      const projectRoot = dirname36(contextRoot);
+      const projectRoot = dirname37(contextRoot);
       if (!isShareable(projectRoot)) continue;
     }
     const corpus = buildCorpus(contextRoot, opts.types ? { types: opts.types } : {}).filter((doc) => !isFederated(doc));
@@ -46421,7 +46553,7 @@ var init_federation_recall = __esm({
 
 // src/lib/federation-peer-summary.ts
 import { existsSync as existsSync70, mkdirSync as mkdirSync40, readFileSync as readFileSync48, writeFileSync as writeFileSync46 } from "fs";
-import { dirname as dirname37, join as join70 } from "path";
+import { dirname as dirname38, join as join70 } from "path";
 function peerSummaryCachePath(contextRoot) {
   return join70(contextRoot, CACHE_REL_PATH2);
 }
@@ -46578,7 +46710,7 @@ function readPinnedTitles(peerRoot) {
   return Array.from(seen).sort((a, b) => a.localeCompare(b)).slice(0, MAX_PINNED);
 }
 function refreshPeerSummaries(contextRoot, home) {
-  const { name, target } = currentVaultTarget(dirname37(contextRoot), home);
+  const { name, target } = currentVaultTarget(dirname38(contextRoot), home);
   const targets = resolveConnectedVaults(target, contextRoot, home).filter(
     (t) => t.current !== true && t.name !== name
   );
@@ -46598,7 +46730,7 @@ function refreshPeerSummaries(contextRoot, home) {
 }
 function writePeerSummaryCache(contextRoot, cache) {
   const path2 = peerSummaryCachePath(contextRoot);
-  mkdirSync40(dirname37(path2), { recursive: true });
+  mkdirSync40(dirname38(path2), { recursive: true });
   writeFileSync46(path2, JSON.stringify(cache, null, 2) + "\n", "utf-8");
 }
 var import_fast_glob18, CACHE_REL_PATH2, MAX_ACTIVITY, MAX_TAGS, MAX_PINNED, WHAT_IT_IS_CHARS;
@@ -46722,7 +46854,7 @@ var init_origin_setup = __esm({
 
 // src/lib/linked-repos.ts
 import { existsSync as existsSync71, mkdirSync as mkdirSync41, readFileSync as readFileSync49, renameSync as renameSync15, statSync as statSync10, writeFileSync as writeFileSync47 } from "fs";
-import { dirname as dirname38, isAbsolute as isAbsolute2, join as join71, resolve as resolve14, sep as sep10 } from "path";
+import { dirname as dirname39, isAbsolute as isAbsolute2, join as join71, resolve as resolve14, sep as sep10 } from "path";
 import { homedir as homedir5 } from "os";
 import { randomBytes as randomBytes4 } from "crypto";
 function linkedReposFilePath(home = homedir5()) {
@@ -46750,7 +46882,7 @@ function readLinkedRepoRegistry(home) {
 }
 function writeLinkedRepoRegistry(repos, home) {
   const filePath = linkedReposFilePath(home);
-  mkdirSync41(dirname38(filePath), { recursive: true });
+  mkdirSync41(dirname39(filePath), { recursive: true });
   const registry = { repos };
   const tmp = `${filePath}.${process.pid}.${randomBytes4(6).toString("hex")}.tmp`;
   writeFileSync47(tmp, JSON.stringify(registry, null, 2) + "\n", "utf-8");
@@ -46842,7 +46974,7 @@ async function cloneLinkedRepo(projectRoot, name, opts = {}) {
   }
   const base = sanitizeRepoName(slug.repo);
   if (!base) throw new LinkedRepoError(`Refusing to clone "${name}": no safe folder name.`);
-  const parent = resolve14(opts.dir ?? dirname38(projectRoot));
+  const parent = resolve14(opts.dir ?? dirname39(projectRoot));
   const dest = join71(parent, base);
   if (!resolve14(dest).startsWith(resolve14(parent) + sep10)) {
     throw new LinkedRepoError(`Refusing to clone "${name}": destination escapes ${parent}.`);
@@ -46987,7 +47119,7 @@ var init_snapshot_budget = __esm({
 
 // src/cli/commands/snapshot.ts
 import { readFileSync as readFileSync50, existsSync as existsSync72, statSync as statSync11 } from "fs";
-import { join as join72, basename as basename21, dirname as dirname39 } from "path";
+import { join as join72, basename as basename21, dirname as dirname40 } from "path";
 function extractFirstParagraph(content) {
   const lines = content.split("\n");
   const paragraphLines = [];
@@ -47108,7 +47240,7 @@ function resolveActiveTaskPath(root) {
   return candidates[0].path;
 }
 function getActiveProductKnowledge(root) {
-  const config = readSetupConfig(dirname39(root));
+  const config = readSetupConfig(dirname40(root));
   if (!config || !Array.isArray(config.multiProduct) || config.multiProduct.length === 0) {
     return [];
   }
@@ -47164,7 +47296,7 @@ function getActiveProductKnowledge(root) {
 }
 function getVersionNudge(root) {
   try {
-    const projectRoot = dirname39(root);
+    const projectRoot = dirname40(root);
     const cache = readVersionCache(projectRoot);
     if (!cache || !isCacheFresh(cache)) return "";
     const installedCli = dreamcontextVersion();
@@ -47200,7 +47332,7 @@ Migrations applied since last session: ${notices.join("; ")}`;
 }
 function getDriftDirective(root) {
   try {
-    const projectRoot = dirname39(root);
+    const projectRoot = dirname40(root);
     const config = readSetupConfig(projectRoot);
     if (!config) return "";
     const cliVersion = dreamcontextVersion();
@@ -47483,7 +47615,7 @@ function generateSnapshot(rootOverride) {
   const CHANGELOG_TIER2 = 10;
   const TIER1_BODY_CHARS = 300;
   const TIER2_LINE_CHARS = 140;
-  const multiPerson = isMultiPerson(readSetupConfig(dirname39(root)));
+  const multiPerson = isMultiPerson(readSetupConfig(dirname40(root)));
   const authorSuffix = (e) => {
     if (!multiPerson) return "";
     const authors = Array.isArray(e.authors) ? e.authors.filter((a) => typeof a === "string") : [];
@@ -47832,7 +47964,7 @@ ${pendingFederation} legacy peer digest entr${pendingFederation === 1 ? "y" : "i
     flush("connected-projects", { neverEvict: true });
   }
   try {
-    const linked = resolveLinkedRepos(dirname39(root));
+    const linked = resolveLinkedRepos(dirname40(root));
     if (linked.length > 0) {
       const lines = ["## Linked repos\n"];
       lines.push(
@@ -48372,7 +48504,7 @@ var init_salience = __esm({
 
 // src/lib/marketing/path-guards.ts
 import { existsSync as existsSync74, realpathSync } from "fs";
-import { basename as basename22, dirname as dirname40, resolve as resolve15, sep as sep11 } from "path";
+import { basename as basename22, dirname as dirname41, resolve as resolve15, sep as sep11 } from "path";
 function isMarketingEnvPath(filePath, from) {
   if (!filePath) return false;
   const root = resolveContextRoot(from);
@@ -48396,7 +48528,7 @@ function realpathOfNearestAncestor(p) {
   const tail = [];
   while (current && current !== sep11 && !existsSync74(current)) {
     tail.unshift(basename22(current));
-    current = dirname40(current);
+    current = dirname41(current);
   }
   if (!current || current === sep11) return p;
   try {
@@ -48691,7 +48823,7 @@ If pure greeting: {"skip":true}`;
 // src/cli/commands/asset-drift.ts
 import { mkdtempSync as mkdtempSync2, rmSync as rmSync8, existsSync as existsSync75, readFileSync as readFileSync52, readdirSync as readdirSync14 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
-import { join as join73, dirname as dirname41 } from "path";
+import { join as join73, dirname as dirname42 } from "path";
 function walkFiles(dir, base, out) {
   for (const entry of readdirSync14(dir, { withFileTypes: true })) {
     const abs = join73(dir, entry.name);
@@ -48726,7 +48858,7 @@ async function computeUsedAssetsChanged(projectRoot, config) {
   }
 }
 async function runAssetDriftRefresh(contextRoot) {
-  const projectRoot = dirname41(contextRoot);
+  const projectRoot = dirname42(contextRoot);
   const config = readSetupConfig(projectRoot);
   if (!config) return;
   const cliVersion = dreamcontextVersion();
@@ -48757,7 +48889,7 @@ var init_asset_drift = __esm({
 
 // src/lib/initializer-detect.ts
 import { existsSync as existsSync76, statSync as statSync13, readdirSync as readdirSync15, readFileSync as readFileSync53 } from "fs";
-import { join as join74, dirname as dirname42, basename as basename23, extname as extname2, isAbsolute as isAbsolute3, resolve as resolve16, sep as sep12 } from "path";
+import { join as join74, dirname as dirname43, basename as basename23, extname as extname2, isAbsolute as isAbsolute3, resolve as resolve16, sep as sep12 } from "path";
 import { homedir as homedir6 } from "os";
 function isUntouchedTemplateCore(root) {
   try {
@@ -48953,7 +49085,7 @@ function isOwnProject(absPath, contextRoot, cwd) {
     if (norm2 === resolve16(cwd)) return true;
     if (contextRoot) {
       const cr = resolve16(contextRoot);
-      const projectRoot = dirname42(cr);
+      const projectRoot = dirname43(cr);
       if (norm2 === cr || norm2 === projectRoot) return true;
       if (norm2.startsWith(cr + sep12)) return true;
     }
@@ -49140,7 +49272,7 @@ var init_initializer_detect = __esm({
 
 // src/lib/agent-session-map.ts
 import { existsSync as existsSync77, lstatSync as lstatSync2, mkdirSync as mkdirSync42, readFileSync as readFileSync54, writeFileSync as writeFileSync48, renameSync as renameSync16, readdirSync as readdirSync16, unlinkSync as unlinkSync9, statSync as statSync14 } from "fs";
-import { join as join75, dirname as dirname43, basename as basename24 } from "path";
+import { join as join75, dirname as dirname44, basename as basename24 } from "path";
 import { randomUUID as randomUUID3 } from "crypto";
 function mapDir(contextRoot) {
   return join75(contextRoot, MAP_DIR_REL);
@@ -49174,7 +49306,7 @@ function ensureMapDir(contextRoot) {
   if (existsSync77(dir) && !lstatSync2(dir).isDirectory()) return null;
   if (!existsSync77(dir)) {
     try {
-      ensureGitignoreEntries(dirname43(contextRoot), ["_dream_context/state/.agent-session-map/"], {
+      ensureGitignoreEntries(dirname44(contextRoot), ["_dream_context/state/.agent-session-map/"], {
         comment: "dreamcontext: machine-local agent tab \u2192 live Claude session map"
       });
     } catch {
@@ -49288,7 +49420,7 @@ var init_agent_session_map = __esm({
 import { readFileSync as readFileSync55, existsSync as existsSync78, statSync as statSync15 } from "fs";
 import { execFileSync as execFileSync8, spawn as spawn3 } from "child_process";
 import { get as httpGet, request as httpRequest } from "http";
-import { dirname as dirname44, resolve as resolve17, join as join76, extname as extname3, basename as basename25, relative as relative5 } from "path";
+import { dirname as dirname45, resolve as resolve17, join as join76, extname as extname3, basename as basename25, relative as relative5 } from "path";
 function readStdin() {
   if (process.stdin.isTTY) return null;
   try {
@@ -49402,7 +49534,7 @@ function isJsTsFile(filePath) {
   return JS_TS_EXTENSIONS.has(extname3(filePath).toLowerCase());
 }
 function findProjectConfig(filePath) {
-  let dir = dirname44(resolve17(filePath));
+  let dir = dirname45(resolve17(filePath));
   let formatter = null;
   let tsconfig = null;
   for (let i = 0; i <= MAX_WALK_LEVELS; i++) {
@@ -49426,7 +49558,7 @@ function findProjectConfig(filePath) {
       tsconfig = join76(dir, "tsconfig.json");
     }
     if (formatter && tsconfig) break;
-    const parent = dirname44(dir);
+    const parent = dirname45(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -49476,7 +49608,7 @@ function runFormatter(detection, filePath) {
   }
 }
 function runTscCheckWithConfig(filePath, tsconfigPath) {
-  const projectRoot = dirname44(tsconfigPath);
+  const projectRoot = dirname45(tsconfigPath);
   let tscOutput;
   try {
     const localBin = resolveLocalBin("tsc", projectRoot);
@@ -49911,7 +50043,7 @@ function registerHookCommand(program2) {
     }
     try {
       if (process.env.DREAMCONTEXT_BRAIN_SYNC !== "0") {
-        const projectRoot = dirname44(root);
+        const projectRoot = dirname45(root);
         const cfg = readSetupConfig(projectRoot);
         const enabledResolution = resolveBrainSyncEnabled(projectRoot, cfg);
         if (enabledResolution.enabled && cfg?.brainRepo?.mode === "full-repo" && cfg?.brainRepo?.autoSync) {
@@ -50032,7 +50164,7 @@ function registerHookCommand(program2) {
     }
     if (process.env.DREAMCONTEXT_VERSION_CHECK !== "0") {
       try {
-        const projectRoot = dirname44(root);
+        const projectRoot = dirname45(root);
         let vcache = readVersionCache(projectRoot);
         if (!isCacheFresh(vcache)) {
           const loaded = loadCatalog();
@@ -50103,7 +50235,7 @@ function registerHookCommand(program2) {
               if (bumped) writeSleepState(root, state);
             }
             try {
-              const { target: currentTarget } = currentVaultTarget(dirname44(root));
+              const { target: currentTarget } = currentVaultTarget(dirname45(root));
               const peerTargets = resolveConnectedVaults(currentTarget, root).filter(
                 (t) => t.current !== true
               );
@@ -50330,7 +50462,7 @@ var init_hook = __esm({
 // src/cli/commands/doctor.ts
 import { existsSync as existsSync79, readFileSync as readFileSync56, readdirSync as readdirSync17, statSync as statSync16 } from "fs";
 import { join as join77 } from "path";
-import { dirname as dirname45 } from "path";
+import { dirname as dirname46 } from "path";
 function stripDocumentedMentions(content) {
   let result = content.replace(/```[\s\S]*?```/g, "");
   result = result.replace(/`[^`]*`/g, "");
@@ -50565,7 +50697,7 @@ function checkLab(root) {
   const insights = listInsights(root);
   const credentialsPath2 = join77(root, "lab", "credentials.json");
   if (existsSync79(credentialsPath2)) {
-    const projectRoot = dirname45(root);
+    const projectRoot = dirname46(root);
     const covered = gitignoreCovers(projectRoot, ["_dream_context/lab/credentials.json"]);
     if (!covered) {
       results.push({
@@ -51089,7 +51221,7 @@ var init_change_tracker2 = __esm({
 });
 
 // src/server/routes/tasks.ts
-import { dirname as dirname46 } from "path";
+import { dirname as dirname47 } from "path";
 function toApiTask(task) {
   const { raw: _raw, rawBody: _rawBody, ...api } = task;
   return api;
@@ -51356,7 +51488,7 @@ function slugToName(slug) {
   return slug.split("-").map((w) => w ? w[0].toUpperCase() + w.slice(1) : w).join(" ");
 }
 function rosterMembers(contextRoot) {
-  const config = readSetupConfig(dirname46(contextRoot));
+  const config = readSetupConfig(dirname47(contextRoot));
   const people = config?.people ?? [];
   return people.map((slug) => ({
     slug,
@@ -58660,7 +58792,7 @@ var require_lib4 = __commonJS({
 
 // src/server/routes/knowledge.ts
 import { existsSync as existsSync82, readFileSync as readFileSync58, statSync as statSync18 } from "fs";
-import { join as join80, dirname as dirname47, basename as basename26, extname as extname5 } from "path";
+import { join as join80, dirname as dirname48, basename as basename26, extname as extname5 } from "path";
 function getKnowledgeDir2(contextRoot) {
   return join80(contextRoot, "knowledge");
 }
@@ -58776,8 +58908,8 @@ async function handleKnowledgeAssets(_req, res, params, contextRoot) {
   }
   const { content } = readFrontmatter(filePath);
   const embedded = parseEmbeddedFiles(content);
-  const vaultRoot2 = dirname47(contextRoot);
-  const boardDir = dirname47(filePath);
+  const vaultRoot2 = dirname48(contextRoot);
+  const boardDir = dirname48(filePath);
   const imageCount = embedded.filter((e) => IMAGE_MIME[extname5(e.path).toLowerCase()]).length;
   const { maxDim, quality } = compressionFor(imageCount);
   const files = {};
@@ -59921,9 +60053,9 @@ var init_council2 = __esm({
 });
 
 // src/server/routes/config.ts
-import { dirname as dirname48 } from "path";
+import { dirname as dirname49 } from "path";
 async function handleConfigGet(_req, res, _params, contextRoot) {
-  const config = readSetupConfig(dirname48(contextRoot));
+  const config = readSetupConfig(dirname49(contextRoot));
   sendJson(res, 200, { config });
 }
 async function handleConfigUpdate(req, res, _params, contextRoot) {
@@ -60007,7 +60139,7 @@ async function handleConfigUpdate(req, res, _params, contextRoot) {
       }
       picked.changelogTarget = "comments";
     }
-    const existing = readSetupConfig(dirname48(contextRoot))?.clickup ?? {};
+    const existing = readSetupConfig(dirname49(contextRoot))?.clickup ?? {};
     patch.clickup = { ...existing, ...picked };
   }
   if (body.github !== void 0) {
@@ -60033,14 +60165,14 @@ async function handleConfigUpdate(req, res, _params, contextRoot) {
       }
       picked.changelogTarget = "comments";
     }
-    const existing = readSetupConfig(dirname48(contextRoot))?.github ?? {};
+    const existing = readSetupConfig(dirname49(contextRoot))?.github ?? {};
     patch.github = { ...existing, ...picked };
   }
   if (patch.platforms === void 0 && patch.packs === void 0 && patch.disableNativeMemory === void 0 && patch.taskBackend === void 0 && patch.cloudTaskManagement === void 0 && patch.clickup === void 0 && patch.github === void 0 && patch.shareable === void 0) {
     sendError(res, 400, "no_changes", "Provide at least one of: platforms, packs, disableNativeMemory, taskBackend, cloudTaskManagement, clickup, github, shareable.");
     return;
   }
-  const projectRoot = dirname48(contextRoot);
+  const projectRoot = dirname49(contextRoot);
   if (patch.taskBackend === "clickup" || patch.taskBackend === "github") {
     try {
       ensureRemoteBackendGitignore(projectRoot);
@@ -60067,11 +60199,11 @@ var init_config = __esm({
 });
 
 // src/server/routes/vaults.ts
-import { dirname as dirname49, resolve as resolve21 } from "path";
+import { dirname as dirname50, resolve as resolve21 } from "path";
 import { existsSync as existsSync88 } from "fs";
 async function handleVaultsGet(_req, res, _params, contextRoot) {
   const vaults = listVaults().map((v) => ({ ...v, exists: existsSync88(resolve21(v.path)) }));
-  const current = contextRoot ? vaults.find((v) => resolve21(v.path) === resolve21(dirname49(contextRoot)))?.name ?? null : null;
+  const current = contextRoot ? vaults.find((v) => resolve21(v.path) === resolve21(dirname50(contextRoot)))?.name ?? null : null;
   sendJson(res, 200, { vaults, current });
 }
 var init_vaults2 = __esm({
@@ -60083,7 +60215,7 @@ var init_vaults2 = __esm({
 });
 
 // src/lib/vault-discovery.ts
-import { dirname as dirname50 } from "path";
+import { dirname as dirname51 } from "path";
 function discoverVaults(root) {
   const matches = import_fast_glob21.default.sync("**/_dream_context", {
     cwd: root,
@@ -60094,7 +60226,7 @@ function discoverVaults(root) {
     suppressErrors: true
   });
   const projects = /* @__PURE__ */ new Set();
-  for (const ctx of matches) projects.add(dirname50(ctx));
+  for (const ctx of matches) projects.add(dirname51(ctx));
   return Array.from(projects).sort();
 }
 async function discoverVaultsAsync(root) {
@@ -60107,7 +60239,7 @@ async function discoverVaultsAsync(root) {
     suppressErrors: true
   });
   const projects = /* @__PURE__ */ new Set();
-  for (const ctx of matches) projects.add(dirname50(ctx));
+  for (const ctx of matches) projects.add(dirname51(ctx));
   return Array.from(projects).sort();
 }
 var import_fast_glob21;
@@ -61063,7 +61195,7 @@ var init_launcher = __esm({
 });
 
 // src/server/routes/ui-settings.ts
-import { dirname as dirname51, join as join86 } from "path";
+import { dirname as dirname52, join as join86 } from "path";
 import { existsSync as existsSync90, mkdirSync as mkdirSync45, readFileSync as readFileSync63, writeFileSync as writeFileSync51 } from "fs";
 function settingsPath(contextRoot) {
   return join86(contextRoot, BRAIN_SETTINGS_REL_PATH);
@@ -61100,7 +61232,7 @@ async function handleBrainSettingsPut(req, res, _params, contextRoot) {
   }
   try {
     const path2 = settingsPath(contextRoot);
-    mkdirSync45(dirname51(path2), { recursive: true });
+    mkdirSync45(dirname52(path2), { recursive: true });
     writeFileSync51(path2, serialized + "\n", "utf-8");
     sendJson(res, 200, { ok: true });
   } catch (err) {
@@ -61142,7 +61274,7 @@ function makeSettingsHandlers(relPath, logTag) {
     }
     try {
       const path2 = pathFor(contextRoot);
-      mkdirSync45(dirname51(path2), { recursive: true });
+      mkdirSync45(dirname52(path2), { recursive: true });
       writeFileSync51(path2, serialized + "\n", "utf-8");
       sendJson(res, 200, { ok: true });
     } catch (err) {
@@ -61374,7 +61506,7 @@ var init_objectives = __esm({
 });
 
 // src/server/routes/lab.ts
-import { dirname as dirname52 } from "path";
+import { dirname as dirname53 } from "path";
 function toPublicTweaks(m) {
   return m.tweaks.map((t) => ({
     key: t.key,
@@ -61552,7 +61684,7 @@ async function handleLabCredentialsSet(req, res, _params, contextRoot) {
     return;
   }
   try {
-    writeCredential(dirname52(contextRoot), contextRoot, key2, value);
+    writeCredential(dirname53(contextRoot), contextRoot, key2, value);
     sendJson(res, 200, { keys: credentialKeyStatuses(contextRoot) });
   } catch (err) {
     const message = redactSecrets(err.message ?? String(err), [value]);
@@ -61600,7 +61732,7 @@ var init_lab2 = __esm({
 });
 
 // src/server/routes/board.ts
-import { dirname as dirname53, join as join87 } from "path";
+import { dirname as dirname54, join as join87 } from "path";
 import { existsSync as existsSync91, mkdirSync as mkdirSync46, readFileSync as readFileSync64, writeFileSync as writeFileSync52 } from "fs";
 function sharedPath(contextRoot) {
   return join87(contextRoot, SHARED_REL_PATH);
@@ -61636,7 +61768,7 @@ function writeBlob(path2, board) {
   if (Buffer.byteLength(serialized, "utf-8") > MAX_BYTES2) {
     return "board payload is too large.";
   }
-  mkdirSync46(dirname53(path2), { recursive: true });
+  mkdirSync46(dirname54(path2), { recursive: true });
   writeFileSync52(path2, serialized + "\n", "utf-8");
   return null;
 }
@@ -61689,7 +61821,7 @@ var init_board = __esm({
 
 // src/server/routes/sleepy-chat.ts
 import { spawn as spawn5 } from "child_process";
-import { dirname as dirname54, join as join88 } from "path";
+import { dirname as dirname55, join as join88 } from "path";
 import { existsSync as existsSync92, mkdirSync as mkdirSync47, readFileSync as readFileSync65, writeFileSync as writeFileSync53 } from "fs";
 import { randomUUID as randomUUID5 } from "crypto";
 function modelFor(tier) {
@@ -61742,7 +61874,7 @@ function writeStore(contextRoot, store) {
   }
 }
 function projectRootOf(contextRoot) {
-  return contextRoot.endsWith("_dream_context") ? dirname54(contextRoot) : contextRoot;
+  return contextRoot.endsWith("_dream_context") ? dirname55(contextRoot) : contextRoot;
 }
 function handleStreamLine(run3, obj) {
   const type = obj.type;
@@ -65754,13 +65886,13 @@ var init_wrapper = __esm({
 import { spawn as spawn6 } from "child_process";
 import { randomUUID as randomUUID6 } from "crypto";
 import { createRequire as createRequire2 } from "module";
-import { basename as basename29, dirname as dirname55, join as join89 } from "path";
+import { basename as basename29, dirname as dirname56, join as join89 } from "path";
 import { existsSync as existsSync93, readdirSync as readdirSync20, statSync as statSync20, chmodSync as chmodSync6, readFileSync as readFileSync66 } from "fs";
 import { homedir as homedir8 } from "os";
 function ensurePtyHelperExecutable() {
   try {
     const require2 = createRequire2(import.meta.url);
-    const root = dirname55(dirname55(require2.resolve("node-pty")));
+    const root = dirname56(dirname56(require2.resolve("node-pty")));
     const candidates = [join89(root, "build", "Release", "spawn-helper")];
     const prebuilds = join89(root, "prebuilds");
     if (existsSync93(prebuilds)) {
@@ -65816,7 +65948,7 @@ function detectOnPath(cmd, timeoutMs = 8e3) {
   });
 }
 function projectRootOf2(contextRoot) {
-  return contextRoot.endsWith("_dream_context") ? dirname55(contextRoot) : contextRoot;
+  return contextRoot.endsWith("_dream_context") ? dirname56(contextRoot) : contextRoot;
 }
 function resolveVaultProjectRoot(name) {
   if (!name) return null;
@@ -65891,11 +66023,11 @@ function pruneInstallRuns() {
   }
 }
 function cliPackageRoot() {
-  let dir = process.argv[1] ? dirname55(process.argv[1]) : "";
+  let dir = process.argv[1] ? dirname56(process.argv[1]) : "";
   if (!dir) return null;
   for (let i = 0; i < 8; i++) {
     if (existsSync93(join89(dir, "package.json"))) return dir;
-    const parent = dirname55(dir);
+    const parent = dirname56(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -66615,7 +66747,7 @@ var init_agent_drop = __esm({
 });
 
 // src/server/routes/agent-sessions.ts
-import { join as join91, dirname as dirname56 } from "path";
+import { join as join91, dirname as dirname57 } from "path";
 import { existsSync as existsSync94, mkdirSync as mkdirSync49, readFileSync as readFileSync67, writeFileSync as writeFileSync55, renameSync as renameSync17 } from "fs";
 import { randomUUID as randomUUID8 } from "crypto";
 function storePath2(contextRoot) {
@@ -66650,7 +66782,7 @@ function readRoster(contextRoot) {
 }
 function writeRoster(contextRoot, sessions) {
   try {
-    ensureGitignoreEntries(dirname56(contextRoot), ["_dream_context/state/.agent-sessions.json"], {
+    ensureGitignoreEntries(dirname57(contextRoot), ["_dream_context/state/.agent-sessions.json"], {
       comment: "dreamcontext: machine-local agent session roster (Claude resume ids)"
     });
   } catch {
@@ -66717,9 +66849,9 @@ var init_agent_sessions = __esm({
 });
 
 // src/server/routes/connections.ts
-import { dirname as dirname57 } from "path";
+import { dirname as dirname58 } from "path";
 function currentVaultName(contextRoot) {
-  return currentVaultTarget(dirname57(contextRoot)).name;
+  return currentVaultTarget(dirname58(contextRoot)).name;
 }
 async function handleConnectionsList(_req, res, _params, contextRoot) {
   sendJson(res, 200, { connections: listConnections(contextRoot) });
@@ -66916,7 +67048,7 @@ var init_federation_digest = __esm({
 });
 
 // src/server/routes/federation.ts
-import { dirname as dirname58 } from "path";
+import { dirname as dirname59 } from "path";
 async function handleFederationInboxGet(_req, res, _params, contextRoot) {
   const { entries, quarantined } = drainInbox(contextRoot);
   const pending = entries.map((e) => e.entry);
@@ -66928,7 +67060,7 @@ async function handleFederationInboxGet(_req, res, _params, contextRoot) {
   });
 }
 async function handleFederationSyncPost(_req, res, _params, contextRoot) {
-  const senderName = currentVaultTarget(dirname58(contextRoot)).name;
+  const senderName = currentVaultTarget(dirname59(contextRoot)).name;
   const outbound = listConnections(contextRoot).filter(
     (c) => (c.direction === "out" || c.direction === "both") && c.status !== "stale"
   );
@@ -66976,14 +67108,14 @@ var init_federation = __esm({
 });
 
 // src/server/routes/packs.ts
-import { dirname as dirname59 } from "path";
+import { dirname as dirname60 } from "path";
 async function handlePacksGet(_req, res, _params, contextRoot) {
   const loaded = loadCatalog();
   if (!loaded) {
     sendJson(res, 200, { packs: [], standalone: [] });
     return;
   }
-  const projectRoot = dirname59(contextRoot);
+  const projectRoot = dirname60(contextRoot);
   const packs = loaded.catalog.packs.map((p) => ({ ...p, installed: isSkillInstalled(projectRoot, p.name) }));
   const standalone = loaded.catalog.standalone.map((s) => ({ ...s, installed: isSkillInstalled(projectRoot, s.name) }));
   sendJson(res, 200, { packs, standalone });
@@ -66997,7 +67129,7 @@ var init_packs = __esm({
 });
 
 // src/server/routes/packs-install.ts
-import { dirname as dirname60 } from "path";
+import { dirname as dirname61 } from "path";
 function validatePackName(name, contextRoot) {
   if (name.includes("/") || name.includes("\0") || safeChildPath2("/x", name) === null) {
     return { ok: false, status: 400, code: "invalid_name", message: "Invalid pack name." };
@@ -67010,7 +67142,7 @@ function validatePackName(name, contextRoot) {
   if (!known) {
     return { ok: false, status: 404, code: "unknown_pack", message: `Pack "${name}" not found.` };
   }
-  const projectRoot = dirname60(contextRoot);
+  const projectRoot = dirname61(contextRoot);
   const config = readSetupConfig(projectRoot);
   const platforms = normalizePlatforms(config?.platforms ?? []);
   const resolved = platforms.length > 0 ? platforms : [...DEFAULT_PLATFORMS];
@@ -67083,10 +67215,10 @@ var init_packs_install = __esm({
 });
 
 // src/server/routes/version-check.ts
-import { dirname as dirname61 } from "path";
+import { dirname as dirname62 } from "path";
 async function handleVersionCheckGet(_req, res, _params, contextRoot) {
   try {
-    const projectRoot = dirname61(contextRoot);
+    const projectRoot = dirname62(contextRoot);
     const cache = readVersionCache(projectRoot);
     const fresh = isCacheFresh(cache);
     const freshCli = readDreamcontextVersionFromDisk();
@@ -67552,86 +67684,8 @@ var init_team_fetch = __esm({
   }
 });
 
-// src/lib/git-sync/failure.ts
-function githubSlug(s) {
-  const m = s.match(/github\.com[/:]([^/\s]+\/[^/\s'".]+)/i);
-  return m ? m[1].replace(/\.git$/, "") : void 0;
-}
-function extractRepo(message, fallbackRepo) {
-  const perm = message.match(/Permission to ([^\s]+?)(?:\.git)? denied/i);
-  if (perm) return perm[1];
-  const fromMsg = githubSlug(message);
-  if (fromMsg) return fromMsg;
-  if (fallbackRepo) return githubSlug(fallbackRepo) ?? fallbackRepo;
-  return void 0;
-}
-function classifySyncError(rawMessage, repoHint) {
-  const m = rawMessage || "";
-  const repo = extractRepo(m, repoHint);
-  const named = repo ? ` on ${repo}` : "";
-  if (/non-fast-forward.*twice|rejected.*non-fast-forward|Push rejected \(non-fast-forward\) twice/i.test(m)) {
-    return {
-      kind: "push-rejected",
-      recovery: "retry",
-      repo,
-      message: "The team pushed while your sync was in flight. Retry \u2014 dreamcontext will merge their changes and push again."
-    };
-  }
-  if (/Contents\b.*write|permission to .* denied|protected branch|not authorized|remote: Permission|must have push access|403\b/i.test(m)) {
-    return {
-      kind: "permission",
-      recovery: "check-permissions",
-      repo,
-      message: `Your GitHub token can't write to${named || " this repo"}. Give it Contents (read & write) access${repo ? ` on ${repo}` : ""}, then retry.`
-    };
-  }
-  if (/no github token found|no token found for the brain/i.test(m)) {
-    return {
-      kind: "no-token",
-      recovery: "reconnect-github",
-      repo,
-      message: "Cloud sync needs a GitHub account. Connect GitHub to start syncing."
-    };
-  }
-  if (/authentication failed|could not read Username|bad credentials|invalid credentials|401\b|terminal prompts disabled|Support for password authentication/i.test(m)) {
-    return {
-      kind: "auth",
-      recovery: "reconnect-github",
-      repo,
-      message: "Your GitHub sign-in expired or is invalid. Reconnect GitHub to keep syncing."
-    };
-  }
-  if (/could ?n[o']t resolve host|could not resolve host|connection timed out|failed to connect|network is unreachable|temporary failure in name resolution|unable to access .*(?:Could not resolve|timed out|Failed to connect)|getaddrinfo|ENOTFOUND|ETIMEDOUT/i.test(m)) {
-    return {
-      kind: "network",
-      recovery: "wait-online",
-      repo,
-      message: "You're offline \u2014 sync will retry automatically when you're back online. Nothing was lost."
-    };
-  }
-  if (/unrelated histories/i.test(m)) {
-    return {
-      kind: "unknown",
-      recovery: "manual",
-      repo,
-      message: "The remote contains content that did not come from this brain (e.g. a README). Attach an empty repo or reconcile the histories manually."
-    };
-  }
-  return {
-    kind: "unknown",
-    recovery: "retry",
-    repo,
-    message: rawMessage.trim() || "Sync failed. Retry, or check your connection and GitHub access."
-  };
-}
-var init_failure = __esm({
-  "src/lib/git-sync/failure.ts"() {
-    "use strict";
-  }
-});
-
 // src/server/routes/brain.ts
-import { basename as basename31, dirname as dirname62 } from "path";
+import { basename as basename31, dirname as dirname63 } from "path";
 function mergeKindFor(contextRoot, hasMergeHead2, pendingAgentMerge) {
   if (hasMergeHead2) {
     const report = readConflictReport(contextRoot);
@@ -67651,7 +67705,7 @@ function gate2(res) {
 }
 async function handleBrainStatus(_req, res, _params, contextRoot) {
   if (!gate2(res)) return;
-  const projectRoot = dirname62(contextRoot);
+  const projectRoot = dirname63(contextRoot);
   const config = readSetupConfig(projectRoot);
   const mode = resolveMode2(config);
   const enabled = resolveBrainSyncEnabled(projectRoot, config);
@@ -67701,7 +67755,7 @@ async function handleBrainStatus(_req, res, _params, contextRoot) {
 }
 async function handleBrainSync(req, res, _params, contextRoot) {
   if (!gate2(res)) return;
-  const projectRoot = dirname62(contextRoot);
+  const projectRoot = dirname63(contextRoot);
   const body = await parseJsonBody(req);
   const mode = body?.mode === "auto" ? "auto" : "pull-only";
   const foreground = body?.foreground !== false;
@@ -67711,7 +67765,7 @@ async function handleBrainSync(req, res, _params, contextRoot) {
 async function runSyncPayload(projectRoot, contextRoot, opts) {
   try {
     const result = await runBrainSync({ cwd: contextRoot, mode: opts.mode, foreground: opts.foreground, noCheckpoint: opts.noCheckpoint });
-    if (AUTH_OK_ACTIONS.has(result.action)) setGlobalGitHubAuthValid(true);
+    reconcileBrainSyncSuccess(result.action);
     let failure;
     if (result.action === "no-remote" && /token/i.test(result.note ?? "")) {
       failure = classifySyncError(result.note ?? "no github token found", syncRepoHint(projectRoot));
@@ -67728,8 +67782,7 @@ async function runSyncPayload(projectRoot, contextRoot, opts) {
     };
   } catch (err) {
     const failure = classifySyncError(err.message, syncRepoHint(projectRoot));
-    if (failure.kind === "auth") setGlobalGitHubAuthValid(false);
-    else if (failure.kind === "permission") setGlobalGitHubAuthValid(true);
+    reconcileBrainSyncFailure(err.message, projectRoot, syncRepoHint(projectRoot));
     return {
       action: "error",
       pulledUpdates: 0,
@@ -67748,7 +67801,7 @@ function syncRepoHint(projectRoot, _result) {
 }
 async function handleBrainSettingsGet2(_req, res, _params, contextRoot) {
   if (!gate2(res)) return;
-  const projectRoot = dirname62(contextRoot);
+  const projectRoot = dirname63(contextRoot);
   const config = readSetupConfig(projectRoot);
   const enabled = resolveBrainSyncEnabled(projectRoot, config);
   const mode = resolveMode2(config);
@@ -67763,7 +67816,7 @@ async function handleBrainSettingsGet2(_req, res, _params, contextRoot) {
 }
 async function handleBrainSettingsPost(req, res, _params, contextRoot) {
   if (!gate2(res)) return;
-  const projectRoot = dirname62(contextRoot);
+  const projectRoot = dirname63(contextRoot);
   const body = await parseJsonBody(req);
   if (typeof body?.enabled !== "boolean") {
     sendError(res, 400, "invalid_body", "enabled (boolean) is required.");
@@ -67824,7 +67877,7 @@ function currentOrigin(projectRoot) {
 }
 async function handleBrainOriginCreate(req, res, _params, contextRoot) {
   if (!gate2(res)) return;
-  const projectRoot = dirname62(contextRoot);
+  const projectRoot = dirname63(contextRoot);
   const body = await parseJsonBody(req);
   if (!resolveBrainSyncToken(projectRoot)) {
     sendError(res, 401, "no_token", "Sign in with GitHub before creating a repo.");
@@ -67848,7 +67901,7 @@ async function handleBrainOriginCreate(req, res, _params, contextRoot) {
 }
 async function handleBrainOriginPreview(req, res, _params, contextRoot) {
   if (!gate2(res)) return;
-  const projectRoot = dirname62(contextRoot);
+  const projectRoot = dirname63(contextRoot);
   const body = await parseJsonBody(req);
   const url = typeof body?.url === "string" ? body.url.trim() : "";
   if (!url) {
@@ -67860,7 +67913,7 @@ async function handleBrainOriginPreview(req, res, _params, contextRoot) {
 }
 async function handleBrainOriginAttach(req, res, _params, contextRoot) {
   if (!gate2(res)) return;
-  const projectRoot = dirname62(contextRoot);
+  const projectRoot = dirname63(contextRoot);
   const body = await parseJsonBody(req);
   const url = typeof body?.url === "string" ? body.url.trim() : "";
   if (!url) {
@@ -67891,7 +67944,7 @@ async function handleBrainOriginAttach(req, res, _params, contextRoot) {
 }
 async function handleBrainOriginUpdate(req, res, _params, contextRoot) {
   if (!gate2(res)) return;
-  const projectRoot = dirname62(contextRoot);
+  const projectRoot = dirname63(contextRoot);
   const body = await parseJsonBody(req);
   const url = typeof body?.url === "string" ? body.url.trim() : "";
   if (!url) {
@@ -67926,7 +67979,7 @@ async function handleBrainOriginUpdate(req, res, _params, contextRoot) {
 }
 async function handleBrainOriginDetach(_req, res, _params, contextRoot) {
   if (!gate2(res)) return;
-  const projectRoot = dirname62(contextRoot);
+  const projectRoot = dirname63(contextRoot);
   let mergeInProgress = false;
   try {
     mergeInProgress = isGitRepo(projectRoot) && hasMergeHead(projectRoot);
@@ -67954,7 +68007,7 @@ function isSafeToGitignore(relPath) {
 }
 async function handleBrainScrubIgnore(req, res, _params, contextRoot) {
   if (!gate2(res)) return;
-  const projectRoot = dirname62(contextRoot);
+  const projectRoot = dirname63(contextRoot);
   const body = await parseJsonBody(req);
   const rawPath = typeof body?.path === "string" ? body.path.trim() : "";
   if (!rawPath) {
@@ -68007,7 +68060,7 @@ async function handleBrainTeamFetch(req, res) {
     sendError(res, 502, "team_fetch_failed", err.message);
   }
 }
-var AUTH_OK_ACTIONS, SAFE_TO_GITIGNORE;
+var SAFE_TO_GITIGNORE;
 var init_brain2 = __esm({
   "src/server/routes/brain.ts"() {
     "use strict";
@@ -68021,16 +68074,15 @@ var init_brain2 = __esm({
     init_team_fetch();
     init_conflict_report();
     init_failure();
-    init_auth_store();
+    init_auth_reconcile();
     init_gitignore();
     init_vaults();
-    AUTH_OK_ACTIONS = /* @__PURE__ */ new Set(["pulled", "pushed", "noop", "merged", "blocked-scrub", "awaiting-agent", "code-conflict"]);
     SAFE_TO_GITIGNORE = /(^|\/)([^/]*\.env(\.[^/]+)?|[^/]*\.local\.[^/]+|[^/]*secrets?[^/]*\.(json|ya?ml|toml|env)|credentials?[^/]*\.(json|ya?ml|toml|env)|[^/]*\.(pem|key|p12|pfx|keystore|jks)|id_rsa[^/]*|id_ed25519[^/]*)$/i;
   }
 });
 
 // src/server/routes/linked-repos.ts
-import { dirname as dirname63 } from "path";
+import { dirname as dirname64 } from "path";
 function gate3(res) {
   if (!isDesktop()) {
     sendError(res, 403, "desktop_only", "Linked repos are only available in the desktop app.");
@@ -68040,12 +68092,12 @@ function gate3(res) {
 }
 async function handleLinkedReposList(_req, res, _params, contextRoot) {
   if (!gate3(res)) return;
-  const projectRoot = dirname63(contextRoot);
+  const projectRoot = dirname64(contextRoot);
   sendJson(res, 200, { repos: resolveLinkedRepos(projectRoot) });
 }
 async function handleLinkedReposLink(req, res, _params, contextRoot) {
   if (!gate3(res)) return;
-  const projectRoot = dirname63(contextRoot);
+  const projectRoot = dirname64(contextRoot);
   const body = await parseJsonBody(req);
   const name = typeof body?.name === "string" ? body.name.trim() : "";
   const path2 = typeof body?.path === "string" ? body.path.trim() : "";
@@ -68067,7 +68119,7 @@ async function handleLinkedReposLink(req, res, _params, contextRoot) {
 }
 async function handleLinkedReposClone(req, res, _params, contextRoot) {
   if (!gate3(res)) return;
-  const projectRoot = dirname63(contextRoot);
+  const projectRoot = dirname64(contextRoot);
   const body = await parseJsonBody(req);
   const name = typeof body?.name === "string" ? body.name.trim() : "";
   const dir = typeof body?.dir === "string" && body.dir.trim() ? body.dir.trim() : void 0;
@@ -68097,7 +68149,7 @@ async function handleLinkedReposClone(req, res, _params, contextRoot) {
 }
 async function handleLinkedReposUnlink(req, res, _params, contextRoot) {
   if (!gate3(res)) return;
-  const projectRoot = dirname63(contextRoot);
+  const projectRoot = dirname64(contextRoot);
   const body = await parseJsonBody(req);
   const name = typeof body?.name === "string" ? body.name.trim() : "";
   if (!name) {
@@ -68623,7 +68675,7 @@ var init_trigger = __esm({
 
 // src/lib/reflection.ts
 import { existsSync as existsSync96, mkdirSync as mkdirSync50, writeFileSync as writeFileSync56 } from "fs";
-import { join as join95, dirname as dirname64 } from "path";
+import { join as join95, dirname as dirname65 } from "path";
 function buildExclusionSet(corpus, excludedExtra) {
   const excluded = new Set(excludedExtra);
   for (const doc of corpus) {
@@ -68803,7 +68855,7 @@ function reflectionPath(root) {
 }
 function writeReflection(root, md) {
   const outPath = reflectionPath(root);
-  const dir = dirname64(outPath);
+  const dir = dirname65(outPath);
   if (!existsSync96(dir)) {
     mkdirSync50(dir, { recursive: true });
   }
@@ -69880,7 +69932,7 @@ var init_env_loader = __esm({
 
 // src/lib/marketing/config.ts
 import { existsSync as existsSync99, readFileSync as readFileSync72, writeFileSync as writeFileSync58, mkdirSync as mkdirSync52 } from "fs";
-import { dirname as dirname65 } from "path";
+import { dirname as dirname66 } from "path";
 function readEnvFile() {
   const path2 = MARKETING_PATHS.envFile();
   if (!existsSync99(path2)) return {};
@@ -69945,7 +69997,7 @@ function loadConfig() {
 }
 function writeConfig(cfg) {
   const path2 = MARKETING_PATHS.configFile();
-  mkdirSync52(dirname65(path2), { recursive: true });
+  mkdirSync52(dirname66(path2), { recursive: true });
   writeFileSync58(path2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
 }
 function ensureConfigFile() {
@@ -70002,7 +70054,7 @@ REINFLUENCE_BIN=           # optional override; default uses .venv
 import { spawn as spawn7, spawnSync as spawnSync2 } from "child_process";
 import { existsSync as existsSync100, mkdirSync as mkdirSync53, cpSync as cpSync3 } from "fs";
 import { fileURLToPath as fileURLToPath9 } from "url";
-import { dirname as dirname66, resolve as resolve24, join as join98 } from "path";
+import { dirname as dirname67, resolve as resolve24, join as join98 } from "path";
 function findBundledReinfluence() {
   const candidates = [
     // Installed npm package: dist/<chunk>.js -> ../tools/reinfluence
@@ -70133,7 +70185,7 @@ var init_bootstrap = __esm({
     "use strict";
     init_paths2();
     __filename = fileURLToPath9(import.meta.url);
-    __dirname7 = dirname66(__filename);
+    __dirname7 = dirname67(__filename);
   }
 });
 
@@ -70203,7 +70255,7 @@ var init_init2 = __esm({
 
 // src/lib/marketing/vision.ts
 import { existsSync as existsSync101, readFileSync as readFileSync73, writeFileSync as writeFileSync59 } from "fs";
-import { dirname as dirname67, join as join99 } from "path";
+import { dirname as dirname68, join as join99 } from "path";
 function pickVisionProvider(env2 = process.env) {
   const oai = env2.OPENAI_VISION_API_KEY;
   if (oai && oai.trim().length > 0) return { provider: "openai", apiKey: oai.trim() };
@@ -70338,7 +70390,7 @@ async function runVisionPassOnPost(postJsonPath, opts = {}) {
   writeFileSync59(tmp, JSON.stringify(post, null, 2) + "\n", "utf-8");
   const fs = await import("fs");
   fs.renameSync(tmp, postJsonPath);
-  const mdPath = join99(dirname67(postJsonPath), `${shortcode}.md`);
+  const mdPath = join99(dirname68(postJsonPath), `${shortcode}.md`);
   if (existsSync101(mdPath)) {
     try {
       const md = readFileSync73(mdPath, "utf-8");
@@ -70419,7 +70471,7 @@ Example output: ["talking-head","prop-driven"]`;
 import { spawn as spawn8 } from "child_process";
 import { spawnSync as spawnSync3 } from "child_process";
 import { existsSync as existsSync102, mkdirSync as mkdirSync55, statfsSync } from "fs";
-import { dirname as dirname68, join as join100, basename as basename32, extname as extname6 } from "path";
+import { dirname as dirname69, join as join100, basename as basename32, extname as extname6 } from "path";
 function which(cmd) {
   const r = spawnSync3(process.platform === "win32" ? "where" : "which", [cmd], { encoding: "utf8" });
   if (r.status === 0) return (r.stdout || "").trim().split("\n")[0] || null;
@@ -70650,7 +70702,7 @@ First seen: ${(/* @__PURE__ */ new Date()).toISOString()}
 }
 function moveAsset(src, dest) {
   if (!existsSync102(src)) return dest;
-  mkdirSync55(dirname68(dest), { recursive: true });
+  mkdirSync55(dirname69(dest), { recursive: true });
   const fs = __require("fs");
   try {
     fs.renameSync(src, dest);
@@ -70893,7 +70945,7 @@ var init_competitor = __esm({
 
 // src/lib/marketing/meta-fetch.ts
 import { existsSync as existsSync104, mkdirSync as mkdirSync56, readFileSync as readFileSync74, writeFileSync as writeFileSync60, statSync as statSync23, openSync as openSync2, readSync, closeSync as closeSync2 } from "fs";
-import { dirname as dirname69, basename as basename33 } from "path";
+import { dirname as dirname70, basename as basename33 } from "path";
 import { randomUUID as randomUUID10 } from "crypto";
 function getQueue(accountId) {
   let q = writeQueues.get(accountId);
@@ -70952,7 +71004,7 @@ function readIdem(key2) {
 }
 function writeIdem(rec) {
   const p = idemCachePath(rec.key);
-  mkdirSync56(dirname69(p), { recursive: true });
+  mkdirSync56(dirname70(p), { recursive: true });
   writeFileSync60(p, JSON.stringify(rec, null, 2) + "\n", "utf8");
 }
 function backoffMs(attempt, hintSec) {
@@ -73503,7 +73555,7 @@ var init_ad = __esm({
 
 // src/lib/marketing/launch.ts
 import { existsSync as existsSync111, readFileSync as readFileSync80, writeFileSync as writeFileSync62, mkdirSync as mkdirSync58, renameSync as renameSync18, readdirSync as readdirSync26 } from "fs";
-import { dirname as dirname70, join as join105, basename as basename34 } from "path";
+import { dirname as dirname71, join as join105, basename as basename34 } from "path";
 import { randomBytes as randomBytes6 } from "crypto";
 function buildLaunchSummary(cohortId) {
   const cohort = loadCohort(cohortId);
@@ -73547,7 +73599,7 @@ function isoTs2() {
   return (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
 }
 function atomicWriteFile3(path2, data) {
-  mkdirSync58(dirname70(path2), { recursive: true });
+  mkdirSync58(dirname71(path2), { recursive: true });
   const tmp = `${path2}.tmp.${process.pid}.${randomBytes6(4).toString("hex")}`;
   writeFileSync62(tmp, data, "utf8");
   renameSync18(tmp, path2);
@@ -74025,10 +74077,10 @@ import {
   unlinkSync as unlinkSync11,
   renameSync as renameSync19
 } from "fs";
-import { dirname as dirname71, join as join106 } from "path";
+import { dirname as dirname72, join as join106 } from "path";
 import { randomBytes as randomBytes7 } from "crypto";
 function atomicWriteFile4(path2, data) {
-  mkdirSync59(dirname71(path2), { recursive: true });
+  mkdirSync59(dirname72(path2), { recursive: true });
   const tmp = `${path2}.tmp.${process.pid}.${randomBytes7(4).toString("hex")}`;
   writeFileSync63(tmp, data, "utf8");
   renameSync19(tmp, path2);
@@ -74433,7 +74485,7 @@ exec dreamcontext mk hooks check-staged
 // src/lib/marketing/council-personas.ts
 import { existsSync as existsSync115, readFileSync as readFileSync84, readdirSync as readdirSync28 } from "fs";
 import { fileURLToPath as fileURLToPath10 } from "url";
-import { join as join108, dirname as dirname72 } from "path";
+import { join as join108, dirname as dirname73 } from "path";
 function findPersonasDir() {
   const candidates = [
     // dev:   src/lib/marketing/council-personas.ts → ../../../skill-packs/...
@@ -74491,7 +74543,7 @@ var init_council_personas = __esm({
     import_gray_matter8 = __toESM(require_gray_matter(), 1);
     __dirname_local = (() => {
       try {
-        return dirname72(fileURLToPath10(import.meta.url));
+        return dirname73(fileURLToPath10(import.meta.url));
       } catch {
         return process.cwd();
       }
@@ -74680,7 +74732,7 @@ var init_marketing = __esm({
 
 // src/cli/commands/memory.ts
 import { existsSync as existsSync117, unlinkSync as unlinkSync12 } from "fs";
-import { join as join109, dirname as dirname73 } from "path";
+import { join as join109, dirname as dirname74 } from "path";
 function collectVault(value, previous) {
   return [...previous, value];
 }
@@ -74692,7 +74744,7 @@ function parseTypes2(value) {
   return filtered.length > 0 ? filtered : void 0;
 }
 function recallFederated(contextRoot, query, topK, types, opts) {
-  const projectRoot = dirname73(contextRoot);
+  const projectRoot = dirname74(contextRoot);
   const { target: currentTarget } = currentVaultTarget(projectRoot);
   const byName = /* @__PURE__ */ new Map();
   const add = (t) => {
@@ -74784,7 +74836,7 @@ function registerMemoryCommand(program2) {
         recallFederated(root, query, topK, types, opts);
         return;
       }
-      const projectRoot = dirname73(root);
+      const projectRoot = dirname74(root);
       const { target: currentTarget } = currentVaultTarget(projectRoot);
       const connectedTargets = resolveConnectedVaults(currentTarget, root);
       if (connectedTargets.length > 1) {
@@ -75110,7 +75162,7 @@ var init_embed = __esm({
 
 // src/cli/commands/upgrade.ts
 import { execFileSync as execFileSync11 } from "child_process";
-import { dirname as dirname74 } from "path";
+import { dirname as dirname75 } from "path";
 import { existsSync as existsSync119 } from "fs";
 function defaultInstaller(args) {
   execFileSync11("npm", args, { stdio: "inherit" });
@@ -75145,7 +75197,7 @@ function defaultAppUpdater() {
 }
 function projectRootForCache() {
   const contextDir = resolveContextRoot();
-  return contextDir ? dirname74(contextDir) : process.cwd();
+  return contextDir ? dirname75(contextDir) : process.cwd();
 }
 function defaultLiveLatest() {
   let latest = null;
@@ -75608,7 +75660,7 @@ var init_vaults3 = __esm({
 });
 
 // src/cli/commands/connections.ts
-import { dirname as dirname75 } from "path";
+import { dirname as dirname76 } from "path";
 function refreshPeerSummariesQuietly(contextRoot) {
   try {
     refreshPeerSummaries(contextRoot);
@@ -75616,7 +75668,7 @@ function refreshPeerSummariesQuietly(contextRoot) {
   }
 }
 function currentVaultName2(contextRoot) {
-  return currentVaultTarget(dirname75(contextRoot)).name;
+  return currentVaultTarget(dirname76(contextRoot)).name;
 }
 function registerConnectionsCommand(program2) {
   program2.command("connect <vault>").description("Connect this vault to read a peer (live reference; out is a read edge)").option("-d, --direction <direction>", "Connection direction: out | in | both (out = read)", "out").option("--topics <list>", "Comma-separated topic filter (default: all topics)").action((vault, opts) => {
@@ -75910,12 +75962,12 @@ var init_people = __esm({
 });
 
 // src/cli/commands/config.ts
-import { dirname as dirname76 } from "path";
+import { dirname as dirname77 } from "path";
 import { existsSync as existsSync120, readFileSync as readFileSync87, writeFileSync as writeFileSync66 } from "fs";
 import { join as join112 } from "path";
 function resolveProjectRoot() {
   const contextRoot = resolveContextRoot();
-  return contextRoot ? dirname76(contextRoot) : null;
+  return contextRoot ? dirname77(contextRoot) : null;
 }
 function requireProjectRoot() {
   const projectRoot = resolveProjectRoot();
@@ -76783,12 +76835,12 @@ var init_feedback2 = __esm({
 });
 
 // src/cli/commands/migrations.ts
-import { dirname as dirname77 } from "path";
+import { dirname as dirname78 } from "path";
 function registerMigrationsCommand(program2) {
   const migrations = program2.command("migrations").description("Inspect and record brain structure migrations");
   migrations.command("pending").description("Print pending agent task instructions for any unfinished migrations").action(() => {
     const root = ensureContextRoot();
-    const projectRoot = dirname77(root);
+    const projectRoot = dirname78(root);
     const config = readSetupConfig(projectRoot);
     const fromVersion = config?.setupVersion ?? "0.0.0";
     const toVersion = dreamcontextVersion();
@@ -76904,9 +76956,9 @@ var init_migrations2 = __esm({
 });
 
 // src/cli/commands/link.ts
-import { dirname as dirname78 } from "path";
+import { dirname as dirname79 } from "path";
 function runLinkLs() {
-  const projectRoot = dirname78(ensureContextRoot());
+  const projectRoot = dirname79(ensureContextRoot());
   const repos = resolveLinkedRepos(projectRoot);
   if (repos.length === 0) {
     console.log(source_default.dim("(no linked repos)"));
@@ -76923,7 +76975,7 @@ function runLinkLs() {
   console.log(formatTable(["Name", "URL", "Status", "Local path"], rows, { statusCol: 2 }));
 }
 function runLinkRm(name) {
-  const projectRoot = dirname78(ensureContextRoot());
+  const projectRoot = dirname79(ensureContextRoot());
   if (unlinkRepo(projectRoot, name)) {
     success(`Unlinked "${name}" (the local path stays registered on this machine).`);
   } else {
@@ -76934,7 +76986,7 @@ function runLinkRm(name) {
 function registerLinkCommand(program2) {
   const link = program2.command("link").description("Govern bare code repos: bind, clone, list, and unlink linked repos");
   link.command("add <name> <path>").description("Bind a local checkout of a linked repo (records name+URL shared, path machine-local)").option("--url <url>", "Explicit GitHub URL (required when the repo has no origin)").action((name, path2, opts) => {
-    const projectRoot = dirname78(ensureContextRoot());
+    const projectRoot = dirname79(ensureContextRoot());
     try {
       const entry = linkRepo(projectRoot, name, path2, { url: opts.url });
       success(`Linked "${entry.name}" \u2192 ${entry.gitRemoteUrl}`);
@@ -76946,7 +76998,7 @@ function registerLinkCommand(program2) {
     }
   });
   link.command("clone <name>").description("Clone a MISSING linked repo (trust-gated \u2014 the URL is team-writable)").option("--dir <dir>", "Parent directory for the clone (default: alongside the project)").option("--yes", "Confirm the clone (required \u2014 see the trust warning)").action(async (name, opts) => {
-    const projectRoot = dirname78(ensureContextRoot());
+    const projectRoot = dirname79(ensureContextRoot());
     warn("This URL comes from the shared config and could have been set by any teammate.");
     info("dreamcontext clones it over HTTPS with transport hardening (ext:: refused, options terminated).");
     if (!opts.yes) {