ed-mcp 0.3.1 → 0.5.0

package/dist/index.js

@@ -8,7 +8,11 @@ var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -408,11 +412,11 @@ var require_codegen = __commonJS({
         const rhs = this.rhs === void 0 ? "" : ` = ${this.rhs}`;
         return `${varKind} ${this.name}${rhs};` + _n;
       }
-      optimizeNames(names, constants) {
+      optimizeNames(names, constants3) {
         if (!names[this.name.str])
           return;
         if (this.rhs)
-          this.rhs = optimizeExpr(this.rhs, names, constants);
+          this.rhs = optimizeExpr(this.rhs, names, constants3);
         return this;
       }
       get names() {
@@ -429,10 +433,10 @@ var require_codegen = __commonJS({
       render({ _n }) {
         return `${this.lhs} = ${this.rhs};` + _n;
       }
-      optimizeNames(names, constants) {
+      optimizeNames(names, constants3) {
         if (this.lhs instanceof code_1.Name && !names[this.lhs.str] && !this.sideEffects)
           return;
-        this.rhs = optimizeExpr(this.rhs, names, constants);
+        this.rhs = optimizeExpr(this.rhs, names, constants3);
         return this;
       }
       get names() {
@@ -493,8 +497,8 @@ var require_codegen = __commonJS({
       optimizeNodes() {
         return `${this.code}` ? this : void 0;
       }
-      optimizeNames(names, constants) {
-        this.code = optimizeExpr(this.code, names, constants);
+      optimizeNames(names, constants3) {
+        this.code = optimizeExpr(this.code, names, constants3);
         return this;
       }
       get names() {
@@ -523,12 +527,12 @@ var require_codegen = __commonJS({
         }
         return nodes.length > 0 ? this : void 0;
       }
-      optimizeNames(names, constants) {
+      optimizeNames(names, constants3) {
         const { nodes } = this;
         let i = nodes.length;
         while (i--) {
           const n = nodes[i];
-          if (n.optimizeNames(names, constants))
+          if (n.optimizeNames(names, constants3))
             continue;
           subtractNames(names, n.names);
           nodes.splice(i, 1);
@@ -581,12 +585,12 @@ var require_codegen = __commonJS({
           return void 0;
         return this;
       }
-      optimizeNames(names, constants) {
+      optimizeNames(names, constants3) {
         var _a3;
-        this.else = (_a3 = this.else) === null || _a3 === void 0 ? void 0 : _a3.optimizeNames(names, constants);
-        if (!(super.optimizeNames(names, constants) || this.else))
+        this.else = (_a3 = this.else) === null || _a3 === void 0 ? void 0 : _a3.optimizeNames(names, constants3);
+        if (!(super.optimizeNames(names, constants3) || this.else))
           return;
-        this.condition = optimizeExpr(this.condition, names, constants);
+        this.condition = optimizeExpr(this.condition, names, constants3);
         return this;
       }
       get names() {
@@ -609,10 +613,10 @@ var require_codegen = __commonJS({
       render(opts) {
         return `for(${this.iteration})` + super.render(opts);
       }
-      optimizeNames(names, constants) {
-        if (!super.optimizeNames(names, constants))
+      optimizeNames(names, constants3) {
+        if (!super.optimizeNames(names, constants3))
           return;
-        this.iteration = optimizeExpr(this.iteration, names, constants);
+        this.iteration = optimizeExpr(this.iteration, names, constants3);
         return this;
       }
       get names() {
@@ -648,10 +652,10 @@ var require_codegen = __commonJS({
       render(opts) {
         return `for(${this.varKind} ${this.name} ${this.loop} ${this.iterable})` + super.render(opts);
       }
-      optimizeNames(names, constants) {
-        if (!super.optimizeNames(names, constants))
+      optimizeNames(names, constants3) {
+        if (!super.optimizeNames(names, constants3))
           return;
-        this.iterable = optimizeExpr(this.iterable, names, constants);
+        this.iterable = optimizeExpr(this.iterable, names, constants3);
         return this;
       }
       get names() {
@@ -693,11 +697,11 @@ var require_codegen = __commonJS({
         (_b = this.finally) === null || _b === void 0 ? void 0 : _b.optimizeNodes();
         return this;
       }
-      optimizeNames(names, constants) {
+      optimizeNames(names, constants3) {
         var _a3, _b;
-        super.optimizeNames(names, constants);
-        (_a3 = this.catch) === null || _a3 === void 0 ? void 0 : _a3.optimizeNames(names, constants);
-        (_b = this.finally) === null || _b === void 0 ? void 0 : _b.optimizeNames(names, constants);
+        super.optimizeNames(names, constants3);
+        (_a3 = this.catch) === null || _a3 === void 0 ? void 0 : _a3.optimizeNames(names, constants3);
+        (_b = this.finally) === null || _b === void 0 ? void 0 : _b.optimizeNames(names, constants3);
         return this;
       }
       get names() {
@@ -998,7 +1002,7 @@ var require_codegen = __commonJS({
     function addExprNames(names, from) {
       return from instanceof code_1._CodeOrName ? addNames(names, from.names) : names;
     }
-    function optimizeExpr(expr, names, constants) {
+    function optimizeExpr(expr, names, constants3) {
       if (expr instanceof code_1.Name)
         return replaceName(expr);
       if (!canOptimize(expr))
@@ -1013,14 +1017,14 @@ var require_codegen = __commonJS({
         return items;
       }, []));
       function replaceName(n) {
-        const c = constants[n.str];
+        const c = constants3[n.str];
         if (c === void 0 || names[n.str] !== 1)
           return n;
         delete names[n.str];
         return c;
       }
       function canOptimize(e) {
-        return e instanceof code_1._Code && e._items.some((c) => c instanceof code_1.Name && names[c.str] === 1 && constants[c.str] !== void 0);
+        return e instanceof code_1._Code && e._items.some((c) => c instanceof code_1.Name && names[c.str] === 1 && constants3[c.str] !== void 0);
       }
     }
     function subtractNames(names, from) {
@@ -3260,8 +3264,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path12) {
-      let input2 = path12;
+    function removeDotSegments(path15) {
+      let input2 = path15;
       const output3 = [];
       let nextSlash = -1;
       let len = 0;
@@ -3335,6 +3339,37 @@ var require_utils = __commonJS({
       }
       return output3.join("");
     }
+    function removeDotSegmentsRelative(path15) {
+      if (path15 === "" || path15[0] === "/") {
+        return removeDotSegments(path15);
+      }
+      const segments = path15.split("/");
+      const last = segments.length - 1;
+      const output3 = [];
+      let trailingDirectory = false;
+      for (let i = 0; i <= last; i++) {
+        const segment = segments[i];
+        if (segment === "." || segment === "..") {
+          if (segment === "..") {
+            if (output3.length !== 0 && output3[output3.length - 1] !== "..") {
+              output3.pop();
+            } else {
+              output3.push("..");
+            }
+          }
+          trailingDirectory = i === last;
+        } else {
+          output3.push(segment);
+        }
+      }
+      if (trailingDirectory && output3[output3.length - 1] !== "..") {
+        output3.push("");
+      }
+      if (output3.length === 0 || output3[0] === "" || output3[0].includes(":")) {
+        output3.unshift(".");
+      }
+      return output3.join("/");
+    }
     var HOST_DELIMS = { "@": "%40", "/": "%2F", "?": "%3F", "#": "%23", ":": "%3A" };
     var HOST_DELIM_RE = /[@/?#:]/g;
     var HOST_DELIM_NO_COLON_RE = /[@/?#]/g;
@@ -3595,6 +3630,7 @@ var require_utils = __commonJS({
       encodeFragment,
       escapePreservingEscapes,
       removeDotSegments,
+      removeDotSegmentsRelative,
       isIPv4,
       isUUID,
       normalizeIPv6,
@@ -3670,8 +3706,8 @@ var require_schemes = __commonJS({
       }
       if (wsComponent.resourceName) {
         const queryIndex = wsComponent.resourceName.indexOf("?");
-        const path12 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
-        wsComponent.path = path12 && path12 !== "/" ? path12 : void 0;
+        const path15 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path15 && path15 !== "/" ? path15 : void 0;
         wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
@@ -3818,16 +3854,18 @@ var require_schemes = __commonJS({
 var require_fast_uri = __commonJS({
   "node_modules/fast-uri/index.js"(exports, module) {
     "use strict";
-    var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
+    var { normalizeIPv6, removeDotSegments, removeDotSegmentsRelative, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
     var VALID_SCHEME = /^[A-Za-z][A-Za-z0-9+.-]*$/u;
     var MALFORMED_SCHEME_ERROR = "URI scheme is malformed.";
-    function decodeValidScheme(scheme) {
-      const decodedScheme = unescape(String(scheme));
-      if (!VALID_SCHEME.test(decodedScheme)) {
+    var MALFORMED_HOST_ERROR = "URI host is malformed.";
+    var FORBIDDEN_DOMAIN_HOST_CHARACTER = /[\0-\x20"#/:<>?@[\\\]^`{|}\x7F]/u;
+    function validateScheme(scheme) {
+      const stringScheme = String(scheme);
+      if (!VALID_SCHEME.test(stringScheme)) {
         throw new TypeError(MALFORMED_SCHEME_ERROR);
       }
-      return decodedScheme;
+      return stringScheme;
     }
     function normalize(uri, options) {
       if (typeof uri === "string") {
@@ -3835,7 +3873,7 @@ var require_fast_uri = __commonJS({
         normalizeString(uri, options);
       } else if (typeof uri === "object") {
         uri = /** @type {T} */
-        parse3(serialize(uri, options), options);
+        parse4(serialize(uri, options), options);
       }
       return uri;
     }
@@ -3864,6 +3902,9 @@ var require_fast_uri = __commonJS({
       const resolvedSchemeHandler = getSchemeHandler(options && options.scheme || resolved.scheme);
       const resolvedHost = resolved.host;
       const resolvedHostIsIP = resolvedHost !== void 0 && resolvedHost !== "" && (isIPv4(resolvedHost) || normalizeIPv6(resolvedHost).isIPV6);
+      if (hasForbiddenDomainHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP)) {
+        throw new Error(MALFORMED_HOST_ERROR);
+      }
       canonicalizeHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP);
       const encodedASCIIHost = resolvedHost && resolvedHost.indexOf("%") !== -1 && !new RegExp("\\P{ASCII}", "u").test(resolvedHost);
       if (resolved.error && !encodedASCIIHost) {
@@ -3875,8 +3916,8 @@ var require_fast_uri = __commonJS({
     function resolveComponent(base2, relative, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
-        base2 = parse3(serialize(base2, options), options);
-        relative = parse3(serialize(relative, options), options);
+        base2 = parse4(serialize(base2, options), options);
+        relative = parse4(serialize(relative, options), options);
       }
       options = options || {};
       if (!options.tolerant && relative.scheme) {
@@ -3905,14 +3946,15 @@ var require_fast_uri = __commonJS({
             if (relative.path[0] === "/") {
               target.path = removeDotSegments(relative.path);
             } else {
-              if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) {
+              const baseHasAuthority = base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0;
+              if (baseHasAuthority && !base2.path) {
                 target.path = "/" + relative.path;
               } else if (!base2.path) {
                 target.path = relative.path;
               } else {
                 target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative.path;
               }
-              target.path = removeDotSegments(target.path);
+              target.path = base2.scheme === void 0 && !baseHasAuthority && target.path[0] !== "/" ? removeDotSegmentsRelative(target.path) : removeDotSegments(target.path);
             }
             target.query = relative.query;
           }
@@ -3950,12 +3992,13 @@ var require_fast_uri = __commonJS({
       const options = Object.assign({}, opts);
       const uriTokens = [];
       if (component.scheme) {
-        component.scheme = decodeValidScheme(component.scheme);
+        component.scheme = validateScheme(component.scheme);
       }
       const schemeHandler = getSchemeHandler(options.scheme || component.scheme);
       if (schemeHandler && schemeHandler.serialize) schemeHandler.serialize(component, options);
       const hasAuthority = component.userinfo !== void 0 || component.host !== void 0 || component.port !== void 0;
-      const pathNoScheme = !options.skipEscape && component.scheme === void 0 && !hasAuthority;
+      const schemelessReference = (component.scheme === void 0 || options.reference === "suffix") && !hasAuthority;
+      const pathNoScheme = !options.skipEscape && schemelessReference;
       if (component.path !== void 0) {
         if (!options.skipEscape) {
           component.path = serializePathEncoding(component.path, pathNoScheme);
@@ -3964,7 +4007,7 @@ var require_fast_uri = __commonJS({
         }
       }
       if (options.reference !== "suffix" && component.scheme) {
-        component.scheme = decodeValidScheme(component.scheme);
+        component.scheme = validateScheme(component.scheme);
         uriTokens.push(component.scheme, ":");
       }
       const authority = recomposeAuthority(component);
@@ -3980,9 +4023,9 @@ var require_fast_uri = __commonJS({
       if (component.path !== void 0) {
         let s = component.path;
         if (!options.absolutePath && (!schemeHandler || !schemeHandler.absolutePath)) {
-          s = removeDotSegments(s);
+          s = schemelessReference && s[0] !== "/" ? removeDotSegmentsRelative(s) : removeDotSegments(s);
         }
-        if (pathNoScheme) {
+        if (schemelessReference) {
           s = serializePathEncoding(s, true);
         }
         if (authority === void 0 && s[0] === "/" && s[1] === "/") {
@@ -4029,16 +4072,34 @@ var require_fast_uri = __commonJS({
       return hasMalformedPercentEncoding(matches2[3]) || host !== void 0 && !isIPLiteral(host) && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches2[6]) || hasMalformedPercentEncoding(matches2[7]) || hasMalformedPercentEncoding(matches2[8]);
     }
     function canonicalizeHost(parsed, options, schemeHandler, isIP) {
+      if (hasForbiddenDomainHost(parsed, options, schemeHandler, isIP)) {
+        parsed.error = parsed.error || MALFORMED_HOST_ERROR;
+        return true;
+      }
       if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
+        let url2;
         try {
-          parsed.host = new URL("http://" + parsed.host).hostname;
+          url2 = new URL("http://" + parsed.host);
         } catch (e) {
           parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e;
           return true;
         }
+        if (!isHostOnlyURL(url2)) {
+          parsed.error = parsed.error || MALFORMED_HOST_ERROR;
+          return true;
+        }
+        parsed.host = url2.hostname;
       }
       return false;
     }
+    function hasForbiddenDomainHost(parsed, options, schemeHandler, isIP) {
+      return Boolean(
+        parsed.host && isIP === false && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && FORBIDDEN_DOMAIN_HOST_CHARACTER.test(parsed.host)
+      );
+    }
+    function isHostOnlyURL(url2) {
+      return url2.username === "" && url2.password === "" && url2.port === "" && url2.pathname === "/" && url2.search === "" && url2.hash === "" && url2.hostname !== "";
+    }
     function parseWithStatus(uri, opts) {
       const options = Object.assign({}, opts);
       const parsed = {
@@ -4093,9 +4154,8 @@ var require_fast_uri = __commonJS({
         parsed.query = matches2[7];
         parsed.fragment = matches2[8];
         if (parsed.scheme !== void 0) {
-          const decodedScheme = unescape(parsed.scheme);
-          if (VALID_SCHEME.test(decodedScheme)) {
-            parsed.scheme = decodedScheme.toLowerCase();
+          if (VALID_SCHEME.test(parsed.scheme)) {
+            parsed.scheme = parsed.scheme.toLowerCase();
           } else {
             parsed.error = parsed.error || MALFORMED_SCHEME_ERROR;
             malformedScheme = true;
@@ -4123,7 +4183,7 @@ var require_fast_uri = __commonJS({
             malformedIPLiteral = hasIPLiteralBracket && (!bracketedIPLiteral || ipv6result.error === true);
             parsed.host = isIP ? ipv6result.host : ipv6result.host.toLowerCase();
             if (malformedIPLiteral) {
-              parsed.error = parsed.error || "URI host is malformed.";
+              parsed.error = parsed.error || MALFORMED_HOST_ERROR;
               malformedAuthorityOrPort = true;
             }
           } else {
@@ -4151,7 +4211,7 @@ var require_fast_uri = __commonJS({
           if (!isIP) {
             host = normalizePercentEncoding(host.toLowerCase());
           }
-          parsed.host = reescapeHostDelimiters(host, isIP);
+          parsed.host = isIP || options.scheme !== "null" ? reescapeHostDelimiters(host, isIP) : host;
         }
         if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
           if (parsed.path) {
@@ -4175,7 +4235,7 @@ var require_fast_uri = __commonJS({
       }
       return { parsed, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme };
     }
-    function parse3(uri, opts) {
+    function parse4(uri, opts) {
       return parseWithStatus(uri, opts).parsed;
     }
     function normalizeString(uri, opts) {
@@ -4212,7 +4272,7 @@ var require_fast_uri = __commonJS({
       resolveComponent,
       equal,
       serialize,
-      parse: parse3
+      parse: parse4
     };
     module.exports = fastUri;
     module.exports.default = fastUri;
@@ -8017,10 +8077,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path12) {
-  if (!path12)
+function getElementAtPath(obj, path15) {
+  if (!path15)
     return obj;
-  return path12.reduce((acc, key) => acc?.[key], obj);
+  return path15.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -8237,7 +8297,7 @@ var BIGINT_FORMAT_RANGES = {
   int64: [/* @__PURE__ */ BigInt("-9223372036854775808"), /* @__PURE__ */ BigInt("9223372036854775807")],
   uint64: [/* @__PURE__ */ BigInt(0), /* @__PURE__ */ BigInt("18446744073709551615")]
 };
-function pick(schema, mask) {
+function pick(schema, mask2) {
   const currDef = schema._zod.def;
   const checks = currDef.checks;
   const hasChecks = checks && checks.length > 0;
@@ -8245,29 +8305,29 @@ function pick(schema, mask) {
     throw new Error(".pick() cannot be used on object schemas containing refinements");
   }
   const newShape = {};
-  mirrorShape(newShape, schema, maskedKeys(schema, mask));
+  mirrorShape(newShape, schema, maskedKeys(schema, mask2));
   return clone(schema, mergeDefs(currDef, { shape: newShape, checks: [] }));
 }
-function maskedKeys(schema, mask) {
+function maskedKeys(schema, mask2) {
   const raw = sourceShape(schema);
   const keys = [];
-  for (const key of Reflect.ownKeys(mask)) {
+  for (const key of Reflect.ownKeys(mask2)) {
     if (!Object.getOwnPropertyDescriptor(raw, key)?.enumerable) {
       throw new Error(`Unrecognized key: "${String(key)}"`);
     }
-    if (mask[key])
+    if (mask2[key])
       keys.push(key);
   }
   return keys;
 }
-function omit(schema, mask) {
+function omit(schema, mask2) {
   const currDef = schema._zod.def;
   const checks = currDef.checks;
   const hasChecks = checks && checks.length > 0;
   if (hasChecks) {
     throw new Error(".omit() cannot be used on object schemas containing refinements");
   }
-  const omitted = new Set(maskedKeys(schema, mask));
+  const omitted = new Set(maskedKeys(schema, mask2));
   const newShape = {};
   mirrorShape(newShape, schema, Reflect.ownKeys(sourceShape(schema)).filter((key) => !omitted.has(key)));
   return clone(schema, mergeDefs(currDef, { shape: newShape, checks: [] }));
@@ -8319,20 +8379,20 @@ function merge(a, b) {
   });
   return clone(a, def);
 }
-function partial(Class2, schema, mask, name = "partial") {
+function partial(Class2, schema, mask2, name = "partial") {
   const currDef = schema._zod.def;
   const checks = currDef.checks;
   const hasChecks = checks && checks.length > 0;
   if (hasChecks) {
     throw new Error(`.${name}() cannot be used on object schemas containing refinements`);
   }
-  const selected = mask ? new Set(maskedKeys(schema, mask)) : void 0;
+  const selected = mask2 ? new Set(maskedKeys(schema, mask2)) : void 0;
   const newShape = {};
   mirrorShape(newShape, schema, Reflect.ownKeys(sourceShape(schema)), Class2 && ((value, key) => selected && !selected.has(key) ? value : new Class2({ type: "optional", innerType: value })));
   return clone(schema, mergeDefs(schema._zod.def, { shape: newShape, checks: [] }));
 }
-function required(Class2, schema, mask) {
-  const selected = mask ? new Set(maskedKeys(schema, mask)) : void 0;
+function required(Class2, schema, mask2) {
+  const selected = mask2 ? new Set(maskedKeys(schema, mask2)) : void 0;
   const newShape = {};
   mirrorShape(newShape, schema, Reflect.ownKeys(sourceShape(schema)), (value, key) => (
     // overwrite with non-optional
@@ -8360,11 +8420,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path12, issues) {
+function prefixIssues(path15, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path12);
+    iss.path.unshift(path15);
     return iss;
   });
 }
@@ -8826,16 +8886,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path12 = []) => {
+  const processError = (error63, path15 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path12, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path15, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path12, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path12, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
       } else {
-        const fullpath = [...path12, ...issue2.path];
+        const fullpath = [...path15, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -8874,17 +8934,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path12 = []) => {
+  const processError = (error63, path15 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path12, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path15, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path12, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path12, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
       } else {
-        const fullpath = [...path12, ...issue2.path];
+        const fullpath = [...path15, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -8923,8 +8983,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path12 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path12) {
+  const path15 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path15) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -9058,18 +9118,18 @@ var validateAsync = async (schema, value, _ctx) => {
   return result.issues.length === 0;
 };
 var _encode = (_Err) => {
-  const parse3 = _parse(_Err);
+  const parse4 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
     const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
-    return parse3(schema, value, ctx, finalizeParams(fn, _params));
+    return parse4(schema, value, ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
 var encode = /* @__PURE__ */ _encode($ZodRealError);
 var _decode = (_Err) => {
-  const parse3 = _parse(_Err);
+  const parse4 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
-    return parse3(schema, value, _ctx, finalizeParams(fn, _params));
+    return parse4(schema, value, _ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
@@ -9803,7 +9863,7 @@ ${content.join("\n")}
 var version = {
   major: 4,
   minor: 6,
-  patch: 6
+  patch: 7
 };
 
 // node_modules/zod/v4/core/schemas.js
@@ -10564,7 +10624,7 @@ function capSize(inst, size) {
   if (!caps.length)
     return;
   const cap2 = Math.min(...caps.map((c) => c[0]));
-  const parse3 = inst._zod.parse;
+  const parse4 = inst._zod.parse;
   inst._zod.parse = (payload, ctx) => {
     const n = size(payload.value);
     if (n > cap2 && !ctx?.skipChecks && ctx?.direction !== "backward") {
@@ -10578,7 +10638,7 @@ function capSize(inst, size) {
         }
       }
     }
-    return parse3(payload, ctx);
+    return parse4(payload, ctx);
   };
 }
 var arraySize = (input2) => Array.isArray(input2) ? input2.length : -1;
@@ -12423,9 +12483,9 @@ var memo = {
     if (!bucket)
       return empty;
     handoff = void 0;
-    const entry = { value: empty, issues: null };
-    bucket.set(payload.value, entry);
-    open.push(entry);
+    const entry2 = { value: empty, issues: null };
+    bucket.set(payload.value, entry2);
+    open.push(entry2);
     return empty;
   },
   guard(inst) {
@@ -12499,16 +12559,16 @@ var memo = {
         const depth = open.length;
         const result = base2(payload, ctx);
         handoff = void 0;
-        const entry = open.length > depth ? open.pop() : void 0;
+        const entry2 = open.length > depth ? open.pop() : void 0;
         if (result instanceof Promise) {
           return result.then((r) => {
-            if (entry)
-              entry.issues = r.issues.length ? cloneIssues(r.issues) : NO_ISSUES;
+            if (entry2)
+              entry2.issues = r.issues.length ? cloneIssues(r.issues) : NO_ISSUES;
             return r;
           });
         }
-        if (entry)
-          entry.issues = result.issues.length ? cloneIssues(result.issues) : NO_ISSUES;
+        if (entry2)
+          entry2.issues = result.issues.length ? cloneIssues(result.issues) : NO_ISSUES;
         return result;
       };
       inst._zod.parse = wrapped;
@@ -22719,8 +22779,8 @@ function describe(description) {
   const ch = new $ZodCheck({ check: "describe" });
   ch._zod.onattach = [
     (inst) => {
-      const existing = globalRegistry.get(inst) ?? {};
-      globalRegistry.add(inst, { ...existing, description });
+      const existing2 = globalRegistry.get(inst) ?? {};
+      globalRegistry.add(inst, { ...existing2, description });
     }
   ];
   ch._zod.check = () => {
@@ -22732,8 +22792,8 @@ function meta(metadata) {
   const ch = new $ZodCheck({ check: "meta" });
   ch._zod.onattach = [
     (inst) => {
-      const existing = globalRegistry.get(inst) ?? {};
-      globalRegistry.add(inst, { ...existing, ...metadata });
+      const existing2 = globalRegistry.get(inst) ?? {};
+      globalRegistry.add(inst, { ...existing2, ...metadata });
     }
   ];
   ch._zod.check = () => {
@@ -22922,42 +22982,42 @@ function extractDefs(ctx, schema) {
   if (ctx.external && ctx.sharedDefsExtractedFor === ctx.external)
     return;
   const idToSchema = /* @__PURE__ */ new Map();
-  for (const entry of ctx.seen.entries()) {
-    const id = ctx.metadataRegistry.get(entry[0])?.id;
+  for (const entry2 of ctx.seen.entries()) {
+    const id = ctx.metadataRegistry.get(entry2[0])?.id;
     if (id) {
-      const existing = idToSchema.get(id);
-      if (existing && existing !== entry[0]) {
+      const existing2 = idToSchema.get(id);
+      if (existing2 && existing2 !== entry2[0]) {
         throw new Error(`Duplicate schema id "${id}" detected during JSON Schema conversion. Two different schemas cannot share the same id when converted together.`);
       }
-      idToSchema.set(id, entry[0]);
+      idToSchema.set(id, entry2[0]);
     }
   }
-  const makeURI = (entry) => {
+  const makeURI = (entry2) => {
     const defsSegment = ctx.target === "draft-2020-12" ? "$defs" : "definitions";
     if (ctx.external) {
-      const externalId = ctx.external.registry.get(entry[0])?.id;
+      const externalId = ctx.external.registry.get(entry2[0])?.id;
       const uriGenerator = ctx.external.uri ?? ((id2) => id2);
       if (externalId) {
         return { ref: uriGenerator(externalId) };
       }
-      const id = entry[1].defId ?? entry[1].schema.id ?? `schema${ctx.counter++}`;
-      entry[1].defId = id;
+      const id = entry2[1].defId ?? entry2[1].schema.id ?? `schema${ctx.counter++}`;
+      entry2[1].defId = id;
       return { defId: id, ref: `${uriGenerator("__shared")}#/${defsSegment}/${encodeJSONPointerSegment(id)}` };
     }
     const uriPrefix = `#`;
     const defUriPrefix = `${uriPrefix}/${defsSegment}/`;
-    if (entry[1] === root && !entry[1].schema.id) {
+    if (entry2[1] === root && !entry2[1].schema.id) {
       return { ref: uriPrefix };
     }
-    const defId = entry[1].schema.id ?? `__schema${ctx.counter++}`;
+    const defId = entry2[1].schema.id ?? `__schema${ctx.counter++}`;
     return { defId, ref: defUriPrefix + encodeJSONPointerSegment(defId) };
   };
-  const extractToDef = (entry) => {
-    if (entry[1].schema.$ref) {
+  const extractToDef = (entry2) => {
+    if (entry2[1].schema.$ref) {
       return;
     }
-    const seen = entry[1];
-    const { ref, defId } = makeURI(entry);
+    const seen = entry2[1];
+    const { ref, defId } = makeURI(entry2);
     seen.def = { ...seen.schema };
     if (defId)
       seen.defId = defId;
@@ -22968,8 +23028,8 @@ function extractDefs(ctx, schema) {
     schema2.$ref = ref;
   };
   if (ctx.cycles === "throw") {
-    for (const entry of ctx.seen.entries()) {
-      const seen = entry[1];
+    for (const entry2 of ctx.seen.entries()) {
+      const seen = entry2[1];
       if (seen.cycle) {
         throw new Error(`Cycle detected: #/${seen.cycle?.join("/")}/<root>
 
@@ -22977,31 +23037,31 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       }
     }
   }
-  for (const entry of ctx.seen.entries()) {
-    const seen = entry[1];
-    if (schema === entry[0]) {
-      extractToDef(entry);
+  for (const entry2 of ctx.seen.entries()) {
+    const seen = entry2[1];
+    if (schema === entry2[0]) {
+      extractToDef(entry2);
       continue;
     }
     if (ctx.external) {
-      const ext = ctx.external.registry.get(entry[0])?.id;
-      if (schema !== entry[0] && ext) {
-        extractToDef(entry);
+      const ext = ctx.external.registry.get(entry2[0])?.id;
+      if (schema !== entry2[0] && ext) {
+        extractToDef(entry2);
         continue;
       }
     }
-    const id = ctx.metadataRegistry.get(entry[0])?.id;
+    const id = ctx.metadataRegistry.get(entry2[0])?.id;
     if (id) {
-      extractToDef(entry);
+      extractToDef(entry2);
       continue;
     }
     if (seen.cycle) {
-      extractToDef(entry);
+      extractToDef(entry2);
       continue;
     }
     if (seen.count > 1) {
       if (ctx.reused === "ref") {
-        extractToDef(entry);
+        extractToDef(entry2);
       }
     }
   }
@@ -23183,12 +23243,12 @@ function finalize(ctx, schema) {
     });
   };
   if (!ctx.external || ctx.sharedEmitDoneFor !== ctx.external) {
-    for (const entry of [...ctx.seen.entries()].reverse()) {
-      flattenRef(entry[0]);
+    for (const entry2 of [...ctx.seen.entries()].reverse()) {
+      flattenRef(entry2[0]);
     }
     if (ctx.target !== "openapi-3.0") {
-      for (const entry of ctx.seen.entries()) {
-        compactTypeUnion(entry[1].def ?? entry[1].schema);
+      for (const entry2 of ctx.seen.entries()) {
+        compactTypeUnion(entry2[1].def ?? entry2[1].schema);
       }
     }
     for (const rewrite of ctx.deferred)
@@ -23200,9 +23260,9 @@ function finalize(ctx, schema) {
           const allOf = json3?.allOf;
           if (!Array.isArray(allOf))
             continue;
-          const existing = carriers.get(allOf);
-          if (existing)
-            existing.push(json3);
+          const existing2 = carriers.get(allOf);
+          if (existing2)
+            existing2.push(json3);
           else
             carriers.set(allOf, [json3]);
         }
@@ -23235,8 +23295,8 @@ function finalize(ctx, schema) {
     delete result.id;
   const defs = ctx.external?.defs ?? {};
   if (!ctx.external || ctx.sharedEmitDoneFor !== ctx.external) {
-    for (const entry of ctx.seen.entries()) {
-      const seen = entry[1];
+    for (const entry2 of ctx.seen.entries()) {
+      const seen = entry2[1];
       if (seen.def && seen.defId) {
         if (seen.def.id === seen.defId)
           delete seen.def.id;
@@ -23848,9 +23908,9 @@ function stringifyKeyNames(bySchema, json3, visited) {
 var pendingRecords = /* @__PURE__ */ new WeakMap();
 function rewriteKeyNames(ctx) {
   const bySchema = /* @__PURE__ */ new Map();
-  for (const entry of ctx.seen.values()) {
-    if (entry.def && !bySchema.has(entry.schema))
-      bySchema.set(entry.schema, entry);
+  for (const entry2 of ctx.seen.values()) {
+    if (entry2.def && !bySchema.has(entry2.schema))
+      bySchema.set(entry2.schema, entry2);
   }
   const rewrites = /* @__PURE__ */ new Map();
   for (const record2 of pendingRecords.get(ctx) ?? []) {
@@ -23864,8 +23924,8 @@ function rewriteKeyNames(ctx) {
   }
   if (!rewrites.size)
     return;
-  for (const entry of ctx.seen.values()) {
-    for (const carrier of [entry.schema, entry.def]) {
+  for (const entry2 of ctx.seen.values()) {
+    for (const carrier of [entry2.schema, entry2.def]) {
       const rewritten = carrier && rewrites.get(carrier.propertyNames);
       if (rewritten)
         carrier.propertyNames = rewritten;
@@ -24059,8 +24119,8 @@ function toJSONSchema(input2, params) {
     const registry2 = input2;
     const ctx2 = initializeContext({ ...params, processors: allProcessors });
     const defs = {};
-    for (const entry of registry2._idmap.entries()) {
-      const [_, schema] = entry;
+    for (const entry2 of registry2._idmap.entries()) {
+      const [_, schema] = entry2;
       processSchema(schema, ctx2);
     }
     const schemas = {};
@@ -24070,8 +24130,8 @@ function toJSONSchema(input2, params) {
       defs
     };
     ctx2.external = external;
-    for (const entry of registry2._idmap.entries()) {
-      const [key, schema] = entry;
+    for (const entry2 of registry2._idmap.entries()) {
+      const [key, schema] = entry2;
       extractDefs(ctx2, schema);
       assignProp(schemas, key, finalize(ctx2, schema));
     }
@@ -25292,11 +25352,11 @@ var ZodObject = /* @__PURE__ */ $constructor("ZodObject", (inst, def) => {
   merge(other) {
     return util_exports.merge(this, other);
   },
-  pick(mask) {
-    return util_exports.pick(this, mask);
+  pick(mask2) {
+    return util_exports.pick(this, mask2);
   },
-  omit(mask) {
-    return util_exports.omit(this, mask);
+  omit(mask2) {
+    return util_exports.omit(this, mask2);
   },
   partial(...args) {
     return util_exports.partial(ZodOptional, this, args[0]);
@@ -26062,13 +26122,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path12 = ref.slice(1).split("/").filter(Boolean);
-  if (path12.length === 0) {
+  const path15 = ref.slice(1).split("/").filter(Boolean);
+  if (path15.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path12[0] === defsKey) {
-    const key = path12[1] === void 0 ? void 0 : decodeJSONPointerSegment(path12[1]);
+  if (path15[0] === defsKey) {
+    const key = path15[1] === void 0 ? void 0 : decodeJSONPointerSegment(path15[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -28692,7 +28752,7 @@ async function canonical(p) {
 }
 
 // src/version.ts
-var VERSION = "0.3.1";
+var VERSION = "0.5.0";
 
 // src/config.ts
 var ConfigError = class extends Error {
@@ -28724,6 +28784,7 @@ function userPath(env2, key) {
   }
 }
 var ED_MCP_CAPI_CLIENT_ID = "320100b9-b71e-4b8a-ab80-210f7192d330";
+var MIN_PASSWORD = 12;
 function loadConfig(env2, dirs, platform = process.platform) {
   const devMode = bool(env2, "INARA_DEV_MODE", false);
   const inaraKey = get(env2, "INARA_API_KEY");
@@ -28731,26 +28792,39 @@ function loadConfig(env2, dirs, platform = process.platform) {
   const edsmKey = get(env2, "EDSM_API_KEY");
   const edsmCmdr = get(env2, "EDSM_CMDR");
   const capiClientId = get(env2, "CAPI_CLIENT_ID") ?? ED_MCP_CAPI_CLIENT_ID;
+  const syncDir = userPath(env2, "ED_MCP_SYNC_DIR");
+  const rawPassword = env2.ED_MCP_SYNC_PASSWORD;
+  const syncPassword = rawPassword && !UNSET_PLACEHOLDER.test(rawPassword.trim()) ? rawPassword : void 0;
+  if (syncPassword !== void 0 && syncPassword.length < MIN_PASSWORD) {
+    throw new ConfigError(`ED_MCP_SYNC_PASSWORD must be at least ${MIN_PASSWORD} characters.`);
+  }
+  const dataDir = syncDir ?? dirs.config;
+  const appName = get(env2, "INARA_APP_NAME") ?? "ed-mcp";
   return {
     inara: inaraKey && inaraCmdr ? {
       apiKey: inaraKey,
       cmdr: inaraCmdr,
-      appName: get(env2, "INARA_APP_NAME") ?? "ed-mcp",
+      appName,
       devMode
     } : void 0,
     edsm: edsmKey && edsmCmdr ? { apiKey: edsmKey, cmdr: edsmCmdr } : void 0,
     capi: capiClientId ? { clientId: capiClientId } : void 0,
     journalDir: userPath(env2, "ED_JOURNAL_DIR") ?? (platform === "win32" ? path3.join(os3.homedir(), "Saved Games", "Frontier Developments", "Elite Dangerous") : void 0),
-    plansFile: userPath(env2, "ED_MCP_PLANS") ?? path3.join(dirs.config, "plans.json"),
+    inaraApp: { appName, devMode },
+    syncDir,
+    syncPassword,
+    plansFile: path3.join(dataDir, "plans.json"),
+    legacyPlansEnv: get(env2, "ED_MCP_PLANS"),
+    plansMarkdownDir: path3.join(dataDir, "plans"),
+    prefsFile: path3.join(dataDir, "preferences.json"),
+    secretsFile: syncPassword ? path3.join(dataDir, "secrets.enc") : path3.join(dirs.config, "secrets.json"),
+    locksDir: path3.join(dirs.config, "locks"),
     cacheDir: dirs.cache,
     configDir: dirs.config,
     userAgent: `ed-mcp/${VERSION} (+https://github.com/pilotso11/ed-mcp)`
   };
 }
 
-// src/deps.ts
-import path10 from "path";
-
 // src/capi/auth.ts
 import { createServer } from "http";
 
@@ -28844,10 +28918,41 @@ var HttpClient = class {
 
 // src/capi/browser.ts
 import { spawn } from "child_process";
+var KEEP = {
+  all: ["PATH", "HOME", "USER", "LOGNAME"],
+  win32: [
+    "SYSTEMROOT",
+    "COMSPEC",
+    "USERPROFILE",
+    "APPDATA",
+    "LOCALAPPDATA",
+    "TEMP",
+    "TMP",
+    "PATHEXT"
+  ],
+  linux: ["DISPLAY", "WAYLAND_DISPLAY", "XDG_RUNTIME_DIR", "DBUS_SESSION_BUS_ADDRESS"]
+};
+function browserEnv(env2 = process.env, platform = process.platform) {
+  const names = [
+    ...KEEP.all,
+    ...platform === "win32" ? KEEP.win32 : [],
+    ...platform === "linux" ? KEEP.linux : []
+  ];
+  const out = {};
+  for (const n of names) {
+    const key = Object.keys(env2).find((k) => k.toUpperCase() === n);
+    if (key && env2[key] !== void 0) out[key] = env2[key];
+  }
+  return out;
+}
 async function openInBrowser(url2) {
   const [cmd, args] = process.platform === "darwin" ? ["open", [url2]] : process.platform === "win32" ? ["rundll32", ["url.dll,FileProtocolHandler", url2]] : ["xdg-open", [url2]];
   await new Promise((resolve, reject) => {
-    const child = spawn(cmd, args, { detached: true, stdio: "ignore" });
+    const child = spawn(cmd, args, {
+      detached: true,
+      stdio: "ignore",
+      env: browserEnv()
+    });
     child.once("error", reject);
     child.once("spawn", () => {
       child.unref();
@@ -28887,6 +28992,8 @@ var CapiAuth = class {
   pending = null;
   failure = null;
   refreshing = null;
+  // Logout bumps this, so a refresh that began before it cannot write tokens back.
+  session = 0;
   authBase;
   openUrl;
   now;
@@ -29025,6 +29132,7 @@ var CapiAuth = class {
   }
   async accessToken() {
     const cfg = this.requireConfig();
+    const session = this.session;
     const t = await this.tokens.load();
     if (!t) throw new UserError("Not logged in to Frontier. Call capi_login first.");
     if (this.now() - t.authorized_at > REFRESH_WINDOW) {
@@ -29034,7 +29142,7 @@ var CapiAuth = class {
       );
     }
     if (t.access_token && t.expires_at - 6e4 > this.now()) return t.access_token;
-    this.refreshing ??= this.refresh(cfg, t).finally(() => this.refreshing = null);
+    this.refreshing ??= this.refresh(cfg, t, session).finally(() => this.refreshing = null);
     return this.refreshing;
   }
   /** Forces the next accessToken() call to refresh (after a 401 from CAPI). */
@@ -29047,6 +29155,8 @@ var CapiAuth = class {
   }
   async logout() {
     this.pending?.cancel();
+    this.session++;
+    await this.refreshing?.catch(() => void 0);
     await this.tokens.clear();
     this.failure = null;
     this.onSessionChange();
@@ -29073,7 +29183,7 @@ var CapiAuth = class {
     this.onSessionChange();
     return true;
   }
-  async refresh(cfg, t, retried = false) {
+  async refresh(cfg, t, session, retried = false) {
     let res;
     try {
       res = await this.token({
@@ -29089,15 +29199,18 @@ var CapiAuth = class {
       }
       const latest = await this.tokens.load();
       if (!retried && latest && latest.refresh_token !== t.refresh_token) {
-        if (latest.access_token && latest.expires_at - 6e4 > this.now())
+        if (latest.access_token && latest.expires_at - 6e4 > this.now()) {
+          if (session !== this.session)
+            throw new UserError("Logged out while the login was refreshing.");
           return latest.access_token;
-        return this.refresh(cfg, latest, true);
+        }
+        return this.refresh(cfg, latest, session, true);
       }
-      await this.tokens.clear();
       throw new UserError(
-        `Frontier refused to refresh the login (${err.message}). Call capi_login to log in again.`
+        `Frontier refused to refresh the login (${err.message}). If you use ed-mcp on another computer, wait for your sync app to catch up and try again; otherwise call capi_login.`
       );
     }
+    if (session !== this.session) throw new UserError("Logged out while the login was refreshing.");
     await this.tokens.save({
       refresh_token: res.refresh_token,
       access_token: res.access_token,
@@ -29201,8 +29314,8 @@ function parseModifiers(list2) {
     return label && value !== null ? [{ label, value, original_value: num(o.OriginalValue) }] : [];
   });
 }
-function parseEntry(entry) {
-  const o = entry;
+function parseEntry(entry2) {
+  const o = entry2;
   const data = o?.data ?? o;
   const header = o?.data ? o.header ?? {} : {};
   const ship = str(data?.Ship);
@@ -29289,10 +29402,10 @@ var CapiClient = class {
       }))
     };
   }
-  async get(path12) {
+  async get(path15) {
     for (let attempt = 0; attempt < 2; attempt++) {
       const token = await this.auth.accessToken();
-      const url2 = `${this.base}${path12}`;
+      const url2 = `${this.base}${path15}`;
       const res = await this.http.request(url2, {
         headers: { authorization: `Bearer ${token}` }
       });
@@ -29347,52 +29460,30 @@ function mapShip(s) {
 }
 
 // src/capi/tokens.ts
-import { chmod, mkdir, readFile, rename, rm, writeFile } from "fs/promises";
-import path4 from "path";
-var StoredTokensSchema = external_exports.object({
-  refresh_token: external_exports.string(),
-  access_token: external_exports.string().nullable(),
-  expires_at: external_exports.number(),
-  authorized_at: external_exports.number()
-});
 var TokenStore = class {
-  constructor(file2) {
-    this.file = file2;
+  constructor(secrets) {
+    this.secrets = secrets;
   }
-  file;
+  secrets;
   async load() {
-    let json3;
-    try {
-      json3 = JSON.parse(await readFile(this.file, "utf8"));
-    } catch (err) {
-      if (err.code === "ENOENT") return null;
-      if (err instanceof SyntaxError) return null;
-      throw err;
-    }
-    const parsed = StoredTokensSchema.safeParse(json3);
-    return parsed.success ? parsed.data : null;
+    return (await this.secrets.get()).capi ?? null;
   }
-  // The refresh token grants account access, so only the user may read the file.
   async save(t) {
-    await mkdir(path4.dirname(this.file), { recursive: true });
-    const tmp = `${this.file}.${process.pid}.tmp`;
-    await writeFile(tmp, JSON.stringify(t), { mode: 384 });
-    await chmod(tmp, 384);
-    try {
-      await rename(tmp, this.file);
-    } catch (err) {
-      await rm(tmp, { force: true });
-      throw err;
-    }
+    await this.secrets.update((s) => {
+      s.capi = t;
+    });
   }
   async clear() {
-    await rm(this.file, { force: true });
+    if (!(await this.secrets.get()).capi) return;
+    await this.secrets.update((s) => {
+      delete s.capi;
+    });
   }
 };
 
 // src/catalog/service.ts
-import { mkdir as mkdir2, readFile as readFile2, rename as rename2, writeFile as writeFile2 } from "fs/promises";
-import path5 from "path";
+import { mkdir, readFile, rename, writeFile } from "fs/promises";
+import path4 from "path";
 
 // node_modules/fastest-levenshtein/esm/mod.js
 var peq = new Uint32Array(65536);
@@ -30942,7 +31033,7 @@ var DEFAULT_STATICS = {
 var CatalogService = class {
   constructor(http, cacheDir, opts = {}) {
     this.http = http;
-    this.dir = path5.join(cacheDir, "catalog");
+    this.dir = path4.join(cacheDir, "catalog");
     this.statics = opts.statics ?? DEFAULT_STATICS;
     this.now = opts.now ?? Date.now;
     this.maxAgeMs = opts.maxAgeMs ?? 7 * 864e5;
@@ -31004,11 +31095,11 @@ var CatalogService = class {
   }
   async loadDisk() {
     try {
-      const meta3 = JSON.parse(await readFile2(path5.join(this.dir, "meta.json"), "utf8"));
+      const meta3 = JSON.parse(await readFile(path4.join(this.dir, "meta.json"), "utf8"));
       const texts = {};
       for (const k of KEYS) {
-        const file2 = path5.join(this.dir, `${k}.raw`);
-        const text = await readFile2(file2, "utf8").catch((err) => {
+        const file2 = path4.join(this.dir, `${k}.raw`);
+        const text = await readFile(file2, "utf8").catch((err) => {
           if (OPTIONAL.has(k) && err.code === "ENOENT") return void 0;
           throw err;
         });
@@ -31073,11 +31164,11 @@ var CatalogService = class {
         changed.push(k);
       }
       const built = buildCatalog(next, this.statics, this.minimums);
-      await mkdir2(this.dir, { recursive: true });
+      await mkdir(this.dir, { recursive: true });
       for (const k of changed)
-        await atomicWrite(path5.join(this.dir, `${k}.raw`), next[k]);
+        await atomicWrite(path4.join(this.dir, `${k}.raw`), next[k]);
       const meta3 = { version: 1, checked_at: stamp, files };
-      await atomicWrite(path5.join(this.dir, "meta.json"), JSON.stringify(meta3, null, 2));
+      await atomicWrite(path4.join(this.dir, "meta.json"), JSON.stringify(meta3, null, 2));
       this.catalog = built.catalog;
       this.warnings = [...missing, ...built.warnings];
       this.texts = next;
@@ -31092,8 +31183,8 @@ var CatalogService = class {
 };
 async function atomicWrite(file2, text) {
   const tmp = `${file2}.${process.pid}.tmp`;
-  await writeFile2(tmp, text);
-  await rename2(tmp, file2);
+  await writeFile(tmp, text);
+  await rename(tmp, file2);
 }
 
 // src/http/cache.ts
@@ -31196,12 +31287,12 @@ var CacheRegistry = class {
 };
 
 // src/journal/service.ts
-import { readFile as readFile4, stat as stat4 } from "fs/promises";
-import path7 from "path";
+import { readFile as readFile3, stat as stat4 } from "fs/promises";
+import path6 from "path";
 
 // src/journal/files.ts
 import { readdir, stat as stat2 } from "fs/promises";
-import path6 from "path";
+import path5 from "path";
 var NEW = /^Journal\.(\d{4})-(\d{2})-(\d{2})T(\d{2})(\d{2})(\d{2})\.(\d{2})\.log$/;
 var OLD = /^Journal\.(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})\.(\d{2})\.log$/;
 function parseJournalName(name) {
@@ -31225,7 +31316,7 @@ async function listJournals(dir, opts = {}) {
   }
   const files = await Promise.all(
     candidates.map(async (n) => {
-      const file2 = path6.join(dir, n.name);
+      const file2 = path5.join(dir, n.name);
       const mtimeMs = await stat2(file2).then(
         (st) => st.mtimeMs,
         () => null
@@ -31242,7 +31333,7 @@ async function listJournals(dir, opts = {}) {
 }
 
 // src/journal/reader.ts
-import { readFile as readFile3, stat as stat3 } from "fs/promises";
+import { readFile as readFile2, stat as stat3 } from "fs/promises";
 var JournalReader = class {
   keep;
   cache = /* @__PURE__ */ new Map();
@@ -31256,7 +31347,7 @@ var JournalReader = class {
     if (hit && hit.size === st.size && hit.mtimeMs === st.mtimeMs) return hit.events;
     const events = [];
     let last;
-    for (const line of (await readFile3(file2.path, "utf8")).split(/\r?\n/)) {
+    for (const line of (await readFile2(file2.path, "utf8")).split(/\r?\n/)) {
       if (!line.trim()) continue;
       try {
         const e = JSON.parse(line);
@@ -31355,12 +31446,12 @@ function buildState(events) {
     const symbol2 = name.toLowerCase();
     const target = kind2 ? materials.get(kind2) : KINDS.map((k) => materials.get(k)).find((m) => m.has(symbol2));
     if (!target) return;
-    const entry = target.get(symbol2) ?? { symbol: symbol2, name: symbol2, count: 0 };
+    const entry2 = target.get(symbol2) ?? { symbol: symbol2, name: symbol2, count: 0 };
     const label = str2(localised);
-    if (label) entry.name = label;
-    entry.count = Math.max(0, entry.count + delta);
-    if (entry.count === 0) target.delete(symbol2);
-    else target.set(symbol2, entry);
+    if (label) entry2.name = label;
+    entry2.count = Math.max(0, entry2.count + delta);
+    if (entry2.count === 0) target.delete(symbol2);
+    else target.set(symbol2, entry2);
   };
   const setLocation = (e, docked) => {
     location.system = str2(e.StarSystem) ?? location.system;
@@ -31765,7 +31856,7 @@ var JournalService = class {
   // deliver the logs before this file, so a file older than the newest Cargo event is ignored.
   async readCargoFile(dir, newestCargoEvent) {
     try {
-      const j = JSON.parse(await readFile4(path7.join(dir, "Cargo.json"), "utf8"));
+      const j = JSON.parse(await readFile3(path6.join(dir, "Cargo.json"), "utf8"));
       if (!Array.isArray(j.Inventory) || j.Vessel !== void 0 && j.Vessel !== "Ship") {
         return null;
       }
@@ -31781,7 +31872,7 @@ var JournalService = class {
   async stationFile(kind2) {
     let j;
     try {
-      j = JSON.parse(await readFile4(path7.join(this.requireDir(), STATION_FILES[kind2]), "utf8"));
+      j = JSON.parse(await readFile3(path6.join(this.requireDir(), STATION_FILES[kind2]), "utf8"));
     } catch (err) {
       if (err instanceof NotConfiguredError) throw err;
       return null;
@@ -31845,7 +31936,7 @@ function marketDemand(item) {
   return demand > 1 ? demand : 0;
 }
 async function isSettingsFolder(dir) {
-  return stat4(path7.join(dir, "Options")).then(
+  return stat4(path6.join(dir, "Options")).then(
     (s) => s.isDirectory(),
     () => false
   );
@@ -31867,12 +31958,14 @@ var InaraClient = class {
   endpoint;
   now;
   async profile(name) {
+    const cfg = await this.requireConfig();
+    const who = name ?? cfg.cmdr;
     const ev = await this.cache.getOrLoad(
-      `profile:${name ?? ""}`,
-      () => this.send("getCommanderProfile", name ? { searchName: name } : {})
+      `profile:${cfg.cmdr}:${name ?? ""}`,
+      () => this.send(cfg, "getCommanderProfile", name ? { searchName: name } : {})
     );
     if (ev.eventStatus === 204) {
-      throw new UserError(`Inara: no commander found for "${name ?? this.cfg?.cmdr}"`);
+      throw new UserError(`Inara: no commander found for "${who}"`);
     }
     const d = ev.eventData ?? {};
     const ship = d.commanderMainShip;
@@ -31906,7 +31999,7 @@ var InaraClient = class {
   async communityGoals() {
     const ev = await this.cache.getOrLoad(
       "cgs",
-      () => this.send("getCommunityGoalsRecent", [])
+      async () => this.send(await this.requireConfig(), "getCommunityGoalsRecent", [])
     );
     if (ev.eventStatus === 204) return [];
     const goals = ev.eventData ?? [];
@@ -31925,12 +32018,15 @@ var InaraClient = class {
       description: String(g.goalDescriptionText ?? "").slice(0, 300)
     }));
   }
+  // One call resolves the config once and passes it down, so a key change mid-call cannot
+  // mix the old and new values.
+  async requireConfig() {
+    const cfg = typeof this.cfg === "function" ? await this.cfg() : this.cfg;
+    if (!cfg) throw new NotConfiguredError("Inara", ["INARA_API_KEY", "INARA_CMDR"]);
+    return cfg;
+  }
   // Inara asks clients not to hammer the API, so requests run one at a time.
-  send(eventName, eventData) {
-    const cfg = this.cfg;
-    if (!cfg) {
-      return Promise.reject(new NotConfiguredError("Inara", ["INARA_API_KEY", "INARA_CMDR"]));
-    }
+  send(cfg, eventName, eventData) {
     const run = this.queue.then(async () => {
       const body = {
         header: {
@@ -31956,7 +32052,7 @@ var InaraClient = class {
       });
       if (res.header?.eventStatus === 400) {
         throw new UserError(
-          `Inara rejected the request: ${String(res.header.eventStatusText ?? "error").replace(/\.+$/, "")}. Check INARA_API_KEY, and that the app name "${cfg.appName}" has been whitelisted by Inara.`
+          `Inara rejected the request: ${String(res.header.eventStatusText ?? "error").replace(/\.+$/, "")}. Check INARA_API_KEY or the key saved on the settings page (settings_open), and that the app name "${cfg.appName}" has been whitelisted by Inara.`
         );
       }
       const ev = res.events?.[0];
@@ -32006,8 +32102,11 @@ var EdsmClient = class {
     }
     return out;
   }
+  config() {
+    return typeof this.cfg === "function" ? this.cfg() : Promise.resolve(this.cfg);
+  }
   async call(endpoint, params) {
-    const cfg = this.cfg;
+    const cfg = await this.config();
     if (!cfg) throw new NotConfiguredError("EDSM", ["EDSM_API_KEY", "EDSM_CMDR"]);
     const url2 = new URL(`${this.baseUrl}/${endpoint}`);
     url2.search = new URLSearchParams({
@@ -32029,7 +32128,7 @@ function check2(b) {
   if (b.msgnum === 100) return;
   if (b.msgnum === 203) {
     throw new UserError(
-      "EDSM: commander name or API key not found. Check EDSM_CMDR and EDSM_API_KEY, and that EDSM sync is on in EDMC."
+      "EDSM: commander name or API key not found. Check EDSM_CMDR and EDSM_API_KEY, or the values saved on the settings page (settings_open), and that EDSM sync is on in EDMC."
     );
   }
   throw new UserError(`EDSM error ${b.msgnum}: ${b.msg}`);
@@ -32041,25 +32140,139 @@ function parseSpanshJson(text) {
   return JSON.parse(text.replace(BIG_ID, '$1"$2"'));
 }
 
+// src/systems/sweep.ts
+function stationPad(s) {
+  if (s.has_large_pad || (s.large_pads ?? 0) > 0) return "L";
+  if ((s.medium_pads ?? 0) > 0) return "M";
+  if ((s.small_pads ?? 0) > 0) return "S";
+  return null;
+}
+var skipStation = (type) => type === "Drake-Class Carrier" || /Construction Depot/.test(type ?? "");
+function mapSystem(raw) {
+  const { x, y, z: z2 } = raw;
+  if (x == null || y == null || z2 == null) return null;
+  return {
+    name: raw.name,
+    id64: String(raw.id64),
+    coords: { x, y, z: z2 },
+    government: raw.government ?? null,
+    allegiance: raw.allegiance ?? null,
+    security: raw.security ?? null,
+    controlling_power: raw.controlling_power ?? null,
+    powers: raw.power ?? [],
+    power_state: raw.power_state ?? null,
+    updated_at: raw.updated_at ?? null,
+    factions: (raw.minor_faction_presences ?? []).map((f) => ({
+      name: f.name,
+      government: f.government ?? null,
+      allegiance: f.allegiance ?? null,
+      influence: f.influence ?? null,
+      controlling: f.name === raw.controlling_minor_faction,
+      // Spansh leaves out active_states when a faction has one state.
+      active_states: f.active_states ?? (f.state && f.state !== "None" ? [f.state] : []),
+      pending_states: f.pending_states ?? []
+    })),
+    stations: (raw.stations ?? []).filter((s) => !skipStation(s.type)).map((s) => ({
+      name: s.name,
+      type: s.type ?? null,
+      pad: stationPad(s),
+      arrival_ls: s.distance_to_arrival ?? null
+    })),
+    stars: (raw.bodies ?? []).filter((b) => b.type === "Star").map((b) => ({ name: b.name, arrival_ls: b.distance_to_arrival ?? 0 }))
+  };
+}
+function distanceLy(a, b) {
+  return Math.hypot(a.x - b.x, a.y - b.y, a.z - b.z);
+}
+var isAnarchy = (f) => f.government === "Anarchy";
+
+// src/systems/sweep-cache.ts
+var SweepCache = class {
+  constructor(ttlMs = 36e5, now = Date.now, maxSweeps = 4) {
+    this.ttlMs = ttlMs;
+    this.now = now;
+    this.maxSweeps = maxSweeps;
+  }
+  ttlMs;
+  now;
+  maxSweeps;
+  name = "spansh-sweeps";
+  sweeps = [];
+  find(centre, radiusLy) {
+    this.dropExpired();
+    const hit = this.sweeps.find(
+      (s) => distanceLy(s.centre, centre) + radiusLy <= s.radiusLy + 1e-9
+    );
+    return hit?.systems.filter((s) => distanceLy(s.coords, centre) <= radiusLy);
+  }
+  add(centre, radiusLy, systems) {
+    this.sweeps.push({ centre, radiusLy, systems, storedAt: this.now() });
+    while (this.sweeps.length > this.maxSweeps) this.sweeps.shift();
+  }
+  clear() {
+    const n = this.sweeps.length;
+    this.sweeps = [];
+    return n;
+  }
+  stats() {
+    this.dropExpired();
+    const oldest = this.sweeps[0]?.storedAt;
+    return {
+      name: this.name,
+      entries: this.sweeps.length,
+      oldestAgeSeconds: oldest === void 0 ? null : Math.round((this.now() - oldest) / 1e3)
+    };
+  }
+  dropExpired() {
+    const cutoff = this.now() - this.ttlMs;
+    this.sweeps = this.sweeps.filter((s) => s.storedAt > cutoff);
+  }
+};
+
 // src/spansh/client.ts
-var SERVICE_FILTERS = {
+var TRADER_FILTERS = {
   material_trader_raw: { material_trader: { value: ["Raw"] } },
   material_trader_manufactured: { material_trader: { value: ["Manufactured"] } },
   material_trader_encoded: { material_trader: { value: ["Encoded"] } },
   tech_broker_human: { technology_broker: { value: ["Human"] } },
-  tech_broker_guardian: { technology_broker: { value: ["Guardian"] } },
-  interstellar_factors: { services: [{ name: { value: ["Interstellar Factors Contact"] } }] }
-};
+  tech_broker_guardian: { technology_broker: { value: ["Guardian"] } }
+};
+var NAMED_SERVICES = {
+  interstellar_factors: "Interstellar Factors Contact",
+  black_market: "Black Market",
+  universal_cartographics: "Universal Cartographics",
+  vista_genomics: "Vista Genomics",
+  search_and_rescue: "Search and Rescue",
+  refuel: "Refuel",
+  repair: "Repair",
+  restock: "Restock",
+  shipyard: "Shipyard",
+  outfitting: "Outfitting",
+  market: "Market",
+  apex_interstellar: "Apex Interstellar",
+  frontline_solutions: "Frontline Solutions",
+  pioneer_supplies: "Pioneer Supplies",
+  bartender: "Bartender",
+  refinery_contact: "Refinery Contact",
+  redemption_office: "Redemption Office",
+  crew_lounge: "Crew Lounge",
+  squadron_bank: "Squadron Bank",
+  construction_services: "Construction Services",
+  powerplay: "Powerplay"
+};
+var STATION_SERVICES = [
+  ...Object.keys(TRADER_FILTERS),
+  ...Object.keys(NAMED_SERVICES)
+];
+function serviceFilter(s) {
+  if (Object.hasOwn(TRADER_FILTERS, s)) return TRADER_FILTERS[s];
+  return { services: [{ name: { value: [NAMED_SERVICES[s]] } }] };
+}
 var COUNT_CAP = 1e4;
 var shipKey = (s) => s.toLowerCase().replace(/[\s-]/g, "");
-function pad(s) {
-  if (s.has_large_pad || (s.large_pads ?? 0) > 0) return "L";
-  if ((s.medium_pads ?? 0) > 0) return "M";
-  if ((s.small_pads ?? 0) > 0) return "S";
-  return null;
-}
 var MAX_JOBS = 100;
 var SEARCH_PAGE_SIZE = 50;
+var SWEEP_PAGE_SIZE = 500;
 var CARRIER_TYPE = "Drake-Class Carrier";
 var NON_CARRIER_TYPES = [
   "Asteroid base",
@@ -32092,6 +32305,7 @@ var SpanshClient = class {
     this.now = opts.now ?? Date.now;
     this.systemCache = opts.systemCache ?? cache;
     this.marketCache = opts.marketCache ?? cache;
+    this.sweepCache = opts.sweepCache ?? new SweepCache();
   }
   http;
   cache;
@@ -32102,10 +32316,12 @@ var SpanshClient = class {
   now;
   systemCache;
   marketCache;
+  sweepCache;
   // Job ids by route form, so a call after a timeout collects the job instead of resubmitting.
   routeJobs = /* @__PURE__ */ new Map();
   tradeJobs = /* @__PURE__ */ new Map();
   tradeSubmits = /* @__PURE__ */ new Map();
+  sweeps = /* @__PURE__ */ new Map();
   gate = Promise.resolve();
   lastStart = 0;
   async resolveShip(name) {
@@ -32130,7 +32346,7 @@ var SpanshClient = class {
       shipName = await this.resolveShip(q.ship);
       filters.ships = [{ name: { value: [shipName] } }];
     } else if (q.service) {
-      Object.assign(filters, SERVICE_FILTERS[q.service]);
+      Object.assign(filters, serviceFilter(q.service));
     }
     if (q.largePad) filters.has_large_pad = { value: true };
     if (q.maxDistanceLy !== void 0) filters.distance = { min: 0, max: q.maxDistanceLy };
@@ -32197,7 +32413,7 @@ var SpanshClient = class {
         name: s.name,
         type: s.type ?? null,
         arrival_ls: s.distance_to_arrival ?? null,
-        pad: pad(s),
+        pad: stationPad(s),
         market: s.has_market ?? false,
         market_id: s.market_id ?? null,
         outfitting: s.has_outfitting ?? false,
@@ -32214,6 +32430,66 @@ var SpanshClient = class {
     );
     return detail.record.needs_permit ?? null;
   }
+  /** Populated systems within radiusLy of near. Stops paging at opts.deadline; a partial result is not cached. */
+  async populatedSystems(near, radiusLy, opts = {}) {
+    const centre = (await this.system(near, 0)).coords;
+    const cached2 = this.sweepCache.find(centre, radiusLy);
+    if (cached2) return { centre, systems: cached2, total: cached2.length, partial: false };
+    const key = `${near.toLowerCase()}:${radiusLy}`;
+    let running = this.sweeps.get(key);
+    if (!running) {
+      running = this.sweepPages(near, radiusLy, centre, opts).finally(
+        () => this.sweeps.delete(key)
+      );
+      this.sweeps.set(key, running);
+    }
+    return running;
+  }
+  async sweepPages(near, radiusLy, centre, opts) {
+    const systems = [];
+    const seen = /* @__PURE__ */ new Set();
+    let total = 0;
+    let partial2 = false;
+    for (let page2 = 0; ; page2++) {
+      if (page2 > 0 && opts.deadline !== void 0 && this.now() >= opts.deadline) {
+        partial2 = true;
+        break;
+      }
+      const body = {
+        filters: {
+          distance: { min: 0, max: radiusLy },
+          population: { comparison: "<=>", value: [1, 1e11] }
+        },
+        sort: [{ distance: { direction: "asc" } }],
+        size: SWEEP_PAGE_SIZE,
+        page: page2,
+        reference_system: near
+      };
+      let res;
+      try {
+        res = await this.post("/systems/search", JSON.stringify(body), "application/json");
+      } catch (err) {
+        if (err instanceof SpanshError && err.status === 400) {
+          throw new UserError(
+            `Spansh rejected the search (${err.detail}). Check that "${near}" is an exact system name (spansh_system).`
+          );
+        }
+        throw err;
+      }
+      total = res.count;
+      const results = res.results ?? [];
+      for (const raw of results) {
+        const s = mapSystem(raw);
+        if (s && !seen.has(s.id64)) {
+          seen.add(s.id64);
+          systems.push(s);
+        }
+      }
+      if (results.length < SWEEP_PAGE_SIZE) break;
+    }
+    if (!partial2) this.sweepCache.add(centre, radiusLy, systems);
+    return { centre, systems, total, partial: partial2 };
+  }
   async route(q, opts = {}) {
     const form = new URLSearchParams({
       from: q.from,
@@ -32439,8 +32715,8 @@ var SpanshClient = class {
     let droppedOld = 0;
     let loaded = 0;
     let partial2 = false;
-    for (let page = 0; loaded < q.maxStations; page++) {
-      if (page > 0 && deadline !== void 0 && this.now() >= deadline) {
+    for (let page2 = 0; loaded < q.maxStations; page2++) {
+      if (page2 > 0 && deadline !== void 0 && this.now() >= deadline) {
         partial2 = true;
         break;
       }
@@ -32448,7 +32724,7 @@ var SpanshClient = class {
         filters,
         sort: [{ distance: { direction: "asc" } }],
         size: SEARCH_PAGE_SIZE,
-        page,
+        page: page2,
         reference_system: q.near
       };
       let res;
@@ -32509,7 +32785,7 @@ var SpanshClient = class {
       distance_ly: s.distance ?? null,
       arrival_ls: s.distance_to_arrival ?? null,
       coords: { x, y, z: z2 },
-      pad: pad(s),
+      pad: stationPad(s),
       type: s.type ?? null,
       planetary: s.is_planetary ?? false,
       market_age_hours: Number.isNaN(updated) ? null : Math.round((now - updated) / 36e5 * 10) / 10,
@@ -32540,7 +32816,7 @@ var SpanshClient = class {
       distance_ly: s.distance ?? 0,
       arrival_ls: s.distance_to_arrival ?? null,
       type: s.type ?? null,
-      pad: pad(s),
+      pad: stationPad(s),
       planetary: s.is_planetary ?? null,
       price,
       market_updated_at: s.market_updated_at ?? null,
@@ -32551,14 +32827,14 @@ var SpanshClient = class {
   cached(key, load) {
     return this.cache.getOrLoad(key, load);
   }
-  async get(path12) {
-    const { status, body } = await this.raw(path12);
+  async get(path15) {
+    const { status, body } = await this.raw(path15);
     if (status >= 400) throw new SpanshError(status, body);
     return body;
   }
-  async post(path12, body, contentType, opts) {
+  async post(path15, body, contentType, opts) {
     const res = await this.raw(
-      path12,
+      path15,
       { method: "POST", body, headers: { "content-type": contentType } },
       opts
     );
@@ -32566,7 +32842,7 @@ var SpanshClient = class {
     return res.body;
   }
   // Spansh publishes no quota; spacing requests keeps us a polite client.
-  async raw(path12, init = {}, opts) {
+  async raw(path15, init = {}, opts) {
     const turn = this.gate.then(async () => {
       const wait = this.lastStart + this.minIntervalMs - Date.now();
       if (wait > 0) await this.sleep(wait);
@@ -32574,7 +32850,7 @@ var SpanshClient = class {
     });
     this.gate = turn.catch(() => void 0);
     await turn;
-    const { status, text } = await this.http.text(`${this.baseUrl}${path12}`, init, opts);
+    const { status, text } = await this.http.text(`${this.baseUrl}${path15}`, init, opts);
     let body;
     try {
       body = text ? parseSpanshJson(text) : void 0;
@@ -32616,17 +32892,34 @@ function mapRoute(r) {
 }
 
 // src/plans/store.ts
-import { readFile as readFile6 } from "fs/promises";
+import { randomBytes as randomBytes2 } from "crypto";
+import { lstat as lstat2, mkdir as mkdir3, rename as rename3, rm, writeFile as writeFile3 } from "fs/promises";
+import path8 from "path";
 
 // src/fs/lock.ts
-import { randomUUID } from "crypto";
-import { link, mkdir as mkdir3, open as open2, readFile as readFile5, rename as rename3, stat as stat5, unlink, writeFile as writeFile3 } from "fs/promises";
-import path8 from "path";
+import { createHash as createHash2, randomUUID } from "crypto";
+import {
+  chmod,
+  link,
+  mkdir as mkdir2,
+  open as open2,
+  readFile as readFile4,
+  rename as rename2,
+  stat as stat5,
+  unlink,
+  writeFile as writeFile2
+} from "fs/promises";
+import path7 from "path";
 var LOCK_RETRY_MS = 50;
 var LOCK_STALE_MS = 3e4;
 var PENDING_DELETE_MS = 1e3;
-async function acquireLock(file2, timeoutMs, lockedMessage) {
-  const lock = `${file2}.lock`;
+function lockPath(file2, lockDir) {
+  if (!lockDir) return `${file2}.lock`;
+  const hash2 = createHash2("sha256").update(path7.resolve(file2)).digest("hex").slice(0, 16);
+  return path7.join(lockDir, `${hash2}.lock`);
+}
+async function acquireLock(file2, timeoutMs, lockedMessage, lockDir) {
+  const lock = lockPath(file2, lockDir);
   const deadline = Date.now() + timeoutMs;
   let pendingSince;
   const waitForDelete = async (err) => {
@@ -32663,7 +32956,7 @@ async function acquireLock(file2, timeoutMs, lockedMessage) {
     }
     const token = randomUUID();
     const release = async () => {
-      const held = await readFile5(lock, "utf8").catch(() => void 0);
+      const held = await readFile4(lock, "utf8").catch(() => void 0);
       if (held === token) await unlink(lock).catch(() => void 0);
     };
     try {
@@ -32682,18 +32975,21 @@ function pendingDelete(err) {
   return process.platform === "win32" && (code === "EPERM" || code === "EACCES");
 }
 async function lockedWrite(file2, opts, update) {
-  await mkdir3(path8.dirname(file2), { recursive: true });
-  const release = await acquireLock(file2, opts.timeoutMs, opts.lockedMessage);
+  await mkdir2(path7.dirname(file2), { recursive: true });
+  if (opts.lockDir) await mkdir2(opts.lockDir, { recursive: true });
+  const release = await acquireLock(file2, opts.timeoutMs, opts.lockedMessage, opts.lockDir);
   try {
     const { content, result } = await update();
     const tmp = `${file2}.${process.pid}.${randomUUID()}.tmp`;
     try {
-      await writeFile3(tmp, content);
-      await rename3(tmp, file2);
+      await writeFile2(tmp, content, opts.mode === void 0 ? void 0 : { mode: opts.mode });
+      if (opts.mode !== void 0) await chmod(tmp, opts.mode);
+      await rename2(tmp, file2);
     } catch (err) {
       await unlink(tmp).catch(() => void 0);
       throw err;
     }
+    await opts.afterWrite?.();
     return result;
   } finally {
     await release();
@@ -32702,7 +32998,7 @@ async function lockedWrite(file2, opts, update) {
 async function breakStaleLock(lock) {
   const aside = `${lock}.${process.pid}.${Date.now()}.stale`;
   try {
-    await rename3(lock, aside);
+    await rename2(lock, aside);
   } catch (err) {
     if (err.code === "ENOENT") return true;
     throw err;
@@ -32717,6 +33013,105 @@ async function breakStaleLock(lock) {
   return true;
 }
 
+// src/fs/regular.ts
+import { constants } from "fs";
+import { lstat, open as open3 } from "fs/promises";
+var MAX_SECRETS_FILE = 1024 * 1024;
+var MAX_DATA_FILE = 8 * 1024 * 1024;
+var NOFOLLOW = constants.O_NOFOLLOW;
+async function readRegularText(file2, max) {
+  if (NOFOLLOW === void 0) {
+    try {
+      if (!(await lstat(file2)).isFile()) return { kind: "unsafe", reason: "not a regular file" };
+    } catch (err) {
+      return failure2(err, file2);
+    }
+  }
+  let handle;
+  try {
+    handle = await open3(
+      file2,
+      constants.O_RDONLY | (NOFOLLOW ?? 0) | (NOFOLLOW ? constants.O_NONBLOCK : 0)
+    );
+  } catch (err) {
+    if (err.code === "ELOOP") {
+      return { kind: "unsafe", reason: "not a regular file" };
+    }
+    return failure2(err, file2);
+  }
+  try {
+    const st = await handle.stat();
+    if (!st.isFile()) return { kind: "unsafe", reason: "not a regular file" };
+    if (st.size > max) return { kind: "unsafe", reason: "too large" };
+    return { kind: "ok", text: await handle.readFile("utf8") };
+  } catch (err) {
+    return failure2(err, file2);
+  } finally {
+    await handle.close().catch(() => void 0);
+  }
+}
+async function failure2(err, file2) {
+  const code = err.code;
+  if (code === "ENOENT") return { kind: "missing" };
+  const st = await lstat(file2).catch(() => null);
+  if (st && !st.isFile()) return { kind: "unsafe", reason: "not a regular file" };
+  return { kind: "unsafe", reason: `not readable (${code ?? "unknown error"})` };
+}
+
+// src/plans/markdown.ts
+var box = {
+  todo: "[ ]",
+  in_progress: "[~]",
+  done: "[x]",
+  skipped: "[-]"
+};
+function planToMarkdown(plan) {
+  const done = plan.items.filter((i) => i.status === "done" || i.status === "skipped").length;
+  const out = [
+    `# ${plan.name}`,
+    "",
+    `Plan \`${plan.id}\` \xB7 updated ${plan.updated_at} \xB7 ${done}/${plan.items.length} done`,
+    ""
+  ];
+  if (plan.notes) out.push(plan.notes, "");
+  if (plan.items.length) {
+    out.push("## Items", "");
+    for (const i of plan.items) {
+      const where = [
+        i.station ? `at ${i.station}` : void 0,
+        i.engineer ? `engineer ${i.engineer}` : void 0
+      ].filter(Boolean);
+      out.push(
+        `- ${box[i.status]} **${i.kind}** ${i.description}${where.length ? ` \u2014 ${where.join(", ")}` : ""}`
+      );
+      if (i.materials?.length) {
+        out.push(`  - Materials: ${i.materials.map((m) => `${m.count}\xD7 ${m.name}`).join(", ")}`);
+      }
+      if (i.notes) out.push(`  - Notes: ${i.notes}`);
+    }
+    out.push("");
+  }
+  if (plan.stops.length) {
+    out.push("## Stops", "");
+    plan.stops.forEach((s, n) => {
+      out.push(`${n + 1}. ${s.system}${s.station ? ` \u2014 ${s.station}` : ""}: ${s.purpose}`);
+    });
+    out.push("");
+  }
+  if (plan.route) {
+    out.push("## Route", "");
+    plan.route.stops.forEach((s, n) => out.push(`${n + 1}. ${s}`));
+    const r = plan.route;
+    const kind2 = r.plotted ? "plotted" : "estimate";
+    out.push(
+      "",
+      `From ${r.from}; ${kind2}. Total ${r.total_min} min, computed ${r.computed_at}`,
+      ""
+    );
+  }
+  return out.join("\n");
+}
+
 // src/plans/schema.ts
 var ItemKind = external_exports.enum([
   "buy",
@@ -32774,16 +33169,28 @@ var PlanFileSchema = external_exports.object({
 
 // src/plans/store.ts
 var LOCK_TIMEOUT_MS = 5e3;
+var PlanExistsError = class extends UserError {
+  constructor(id) {
+    super(`Plan ${id} exists; pass overwrite: true to replace it`);
+  }
+};
 var PlanStore = class {
   constructor(file2, now = () => /* @__PURE__ */ new Date(), opts = {}) {
     this.file = file2;
     this.now = now;
     this.lockTimeoutMs = opts.lockTimeoutMs ?? LOCK_TIMEOUT_MS;
+    this.lockDir = opts.lockDir;
+    this.guard = opts.guard;
+    this.markdownDir = opts.markdownDir;
   }
   file;
   now;
+  lastCopyError = null;
   queue = Promise.resolve();
   lockTimeoutMs;
+  lockDir;
+  guard;
+  markdownDir;
   async list() {
     const { plans } = await this.read();
     return plans.map((p) => ({
@@ -32806,7 +33213,7 @@ var PlanStore = class {
       const stamp = this.now().toISOString();
       const idx = data.plans.findIndex((p) => p.id === parsed.data.id);
       if (idx >= 0 && opts.overwrite === false) {
-        throw new UserError(`Plan ${parsed.data.id} exists; pass overwrite: true to replace it`);
+        throw new PlanExistsError(parsed.data.id);
       }
       const plan = {
         ...parsed.data,
@@ -32847,13 +33254,13 @@ var PlanStore = class {
     });
   }
   async read() {
-    let raw;
-    try {
-      raw = await readFile6(this.file, "utf8");
-    } catch (err) {
-      if (err.code === "ENOENT") return { version: 1, plans: [] };
-      throw err;
+    await this.guard?.();
+    const read2 = await readRegularText(this.file, MAX_DATA_FILE);
+    if (read2.kind === "missing") return { version: 1, plans: [] };
+    if (read2.kind === "unsafe") {
+      throw new UserError(`Plan file ${this.file} is invalid: ${read2.reason}`);
     }
+    const raw = read2.text;
     let json3;
     try {
       json3 = JSON.parse(raw);
@@ -32869,27 +33276,99 @@ var PlanStore = class {
   // Read-modify-write runs one at a time so concurrent tool calls cannot lose updates.
   // The lock file extends that across processes (e.g. Claude Desktop and Claude Code).
   mutate(fn) {
-    const run = this.queue.then(
-      () => lockedWrite(
+    const run = this.queue.then(async () => {
+      await this.guard?.();
+      let latest = null;
+      let before = [];
+      return lockedWrite(
         this.file,
         {
           timeoutMs: this.lockTimeoutMs,
-          lockedMessage: "Plan file is locked by another process; try again"
+          lockDir: this.lockDir,
+          lockedMessage: "Plan file is locked by another process; try again",
+          // Under the lock, so the copies always match the last saved file.
+          afterWrite: async () => {
+            if (latest && this.markdownDir) await this.writeMarkdown(latest, before);
+          }
         },
         async () => {
           const data = await this.read();
+          before = data.plans.map((p) => p.id);
           const result = fn(data);
-          return { content: JSON.stringify(data, null, 2), result };
+          latest = data;
+          const content = JSON.stringify(data, null, 2);
+          if (Buffer.byteLength(content) > MAX_DATA_FILE) {
+            throw new UserError(
+              "Plans file would be larger than 8 MB; delete plans or shorten notes first."
+            );
+          }
+          return { content, result };
         }
-      )
-    );
+      );
+    });
     this.queue = run.catch(() => void 0);
     return run;
   }
+  /** Why the Markdown copies are not being written, or null when they are fine. */
+  async markdownProblem() {
+    const dir = this.markdownDir;
+    if (!dir) return null;
+    const fixed = await this.directoryProblem();
+    if (fixed) return fixed;
+    return this.lastCopyError === null ? null : `Plan copies could not be written to ${dir}: ${this.lastCopyError}.`;
+  }
+  async directoryProblem() {
+    const dir = this.markdownDir;
+    if (!dir) return null;
+    let st;
+    try {
+      st = await lstat2(dir);
+    } catch {
+      return null;
+    }
+    if (st.isSymbolicLink()) return `Plan copies were not written: ${dir} is a symbolic link.`;
+    if (!st.isDirectory()) return `Plan copies were not written: ${dir} is not a folder.`;
+    return null;
+  }
+  // Claude on mobile can read these through the Google Drive connector; they are copies only.
+  // The sync folder may be shared, so nothing here follows a link or deletes a file we did not write.
+  async writeMarkdown(data, before) {
+    const dir = this.markdownDir;
+    try {
+      await mkdir3(dir, { recursive: true });
+      const problem = await this.directoryProblem();
+      if (problem) {
+        console.error(problem);
+        return;
+      }
+      const keep = /* @__PURE__ */ new Set();
+      for (const p of data.plans) {
+        const name = `${p.id}.md`;
+        keep.add(name);
+        const tmp = path8.join(dir, `${name}.${randomBytes2(6).toString("hex")}.tmp`);
+        try {
+          await writeFile3(tmp, planToMarkdown(p), { flag: "wx" });
+          await rename3(tmp, path8.join(dir, name));
+        } catch (err) {
+          await rm(tmp, { force: true });
+          throw err;
+        }
+      }
+      for (const id of before) {
+        const n = `${id}.md`;
+        if (keep.has(n) || !PRUNABLE.test(n)) continue;
+        const file2 = path8.join(dir, n);
+        const st = await lstat2(file2).catch(() => null);
+        if (st?.isFile()) await rm(file2, { force: true });
+      }
+      this.lastCopyError = null;
+    } catch (err) {
+      this.lastCopyError = err.message;
+      console.error(`Could not write Markdown plan copies to ${dir}: ${err.message}`);
+    }
+  }
 };
-
-// src/prefs/store.ts
-import { readFile as readFile7 } from "fs/promises";
+var PRUNABLE = /^[a-z0-9][a-z0-9-]{0,63}\.md$/;
 
 // src/prefs/schema.ts
 var Mode = external_exports.enum(["soft", "hard", "off"]);
@@ -33016,18 +33495,22 @@ var PreferencesStore = class {
   constructor(file2, opts = {}) {
     this.file = file2;
     this.lockTimeoutMs = opts.lockTimeoutMs ?? LOCK_TIMEOUT_MS2;
+    this.lockDir = opts.lockDir;
+    this.guard = opts.guard;
   }
   file;
   queue = Promise.resolve();
   lockTimeoutMs;
+  lockDir;
+  guard;
   async get() {
-    let raw;
-    try {
-      raw = await readFile7(this.file, "utf8");
-    } catch (err) {
-      if (err.code === "ENOENT") return DEFAULT_PREFS;
-      throw err;
+    await this.guard?.();
+    const read2 = await readRegularText(this.file, MAX_DATA_FILE);
+    if (read2.kind === "missing") return DEFAULT_PREFS;
+    if (read2.kind === "unsafe") {
+      throw new UserError(`Preferences file ${this.file} is invalid: ${read2.reason}`);
     }
+    const raw = read2.text;
     let json3;
     try {
       json3 = JSON.parse(raw);
@@ -33049,22 +33532,30 @@ var PreferencesStore = class {
   }
   async write(patch) {
     const parsed = parsePatch(patch);
+    await this.guard?.();
     return lockedWrite(
       this.file,
       {
         timeoutMs: this.lockTimeoutMs,
+        lockDir: this.lockDir,
         lockedMessage: "Preferences file is locked by another process; try again"
       },
       async () => {
         const next = applyPatch(await this.get(), parsed);
-        return { content: JSON.stringify(next, null, 2), result: next };
+        const content = JSON.stringify(next, null, 2);
+        if (Buffer.byteLength(content) > MAX_DATA_FILE) {
+          throw new UserError(
+            "Preferences file would be larger than 8 MB; shorten the preferences first."
+          );
+        }
+        return { content, result: next };
       }
     );
   }
 };
 
 // src/ships/data.ts
-import { mkdir as mkdir4, readFile as readFile8, rename as rename4, writeFile as writeFile4 } from "fs/promises";
+import { mkdir as mkdir4, readFile as readFile5, rename as rename4, writeFile as writeFile4 } from "fs/promises";
 import path9 from "path";
 import { gunzipSync } from "zlib";
 
@@ -33308,14 +33799,14 @@ function readTar(buf) {
       comment = paxFields(data).comment ?? comment;
       continue;
     }
-    let path12 = str3(h, 0, 100);
+    let path15 = str3(h, 0, 100);
     if (str3(h, 257, 6) === "ustar") {
       const prefix = str3(h, 345, 155);
-      if (prefix) path12 = `${prefix}/${path12}`;
+      if (prefix) path15 = `${prefix}/${path15}`;
     }
-    if (nextPath !== null) path12 = nextPath;
+    if (nextPath !== null) path15 = nextPath;
     nextPath = null;
-    if (type === "0" || type === "\0") files.push({ path: path12, data });
+    if (type === "0" || type === "\0") files.push({ path: path15, data });
   }
   return { files, comment };
 }
@@ -33581,7 +34072,7 @@ var ShipDataService = class {
   }
   async loadDisk() {
     try {
-      const snap = JSON.parse(await readFile8(this.file, "utf8"));
+      const snap = JSON.parse(await readFile5(this.file, "utf8"));
       if (snap.version !== 1 || typeof snap.commit !== "string") return;
       const data = buildShipData(snap.commit, snap.files);
       if (this.data) return;
@@ -33600,37 +34091,775 @@ var ShipDataService = class {
 };
 var message = (err) => err instanceof Error ? err.message : String(err);
 
+// src/settings/secrets.ts
+import { lstat as lstat3, mkdir as mkdir5, rm as rm2 } from "fs/promises";
+import path10 from "path";
+
+// src/settings/crypto.ts
+import { createCipheriv, createDecipheriv, randomBytes as randomBytes3, scryptSync } from "crypto";
+var SCRYPT = { N: 2 ** 17, r: 8, p: 1 };
+var SCRYPT_MAXMEM = 256 * 1024 * 1024;
+var SecretsError = class extends UserError {
+  name = "SecretsError";
+};
+var EnvelopeSchema = external_exports.object({
+  format: external_exports.literal("ed-mcp-secrets"),
+  version: external_exports.number().int(),
+  kdf: external_exports.literal("scrypt"),
+  // With the memory check in open(), these bounds stop a crafted file from making scrypt use gigabytes.
+  N: external_exports.number().int().min(2).max(2 ** 17).refine((n) => (n & n - 1) === 0),
+  r: external_exports.number().int().min(1).max(8),
+  p: external_exports.number().int().min(1).max(2),
+  salt: external_exports.string(),
+  iv: external_exports.string(),
+  tag: external_exports.string(),
+  data: external_exports.string()
+});
+var SecretCipher = class {
+  constructor(password, params = SCRYPT) {
+    this.password = password;
+    this.params = params;
+  }
+  password;
+  params;
+  // Deriving the key is slow on purpose, so each salt's key is derived once per process.
+  keys = /* @__PURE__ */ new Map();
+  seal(plaintext, salt = randomBytes3(16).toString("base64")) {
+    const key = this.key(salt, this.params);
+    const iv = randomBytes3(12);
+    const cipher = createCipheriv("aes-256-gcm", key, iv);
+    const data = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
+    return {
+      format: "ed-mcp-secrets",
+      version: 1,
+      kdf: "scrypt",
+      ...this.params,
+      salt,
+      iv: iv.toString("base64"),
+      tag: cipher.getAuthTag().toString("base64"),
+      data: data.toString("base64")
+    };
+  }
+  open(raw) {
+    const env2 = EnvelopeSchema.safeParse(raw);
+    if (!env2.success) throw new SecretsError("not an ed-mcp secrets file");
+    const e = env2.data;
+    if (e.version !== 1) {
+      throw new SecretsError(
+        e.version > 1 ? `made by a newer ed-mcp (version ${e.version})` : `unknown version ${e.version}`
+      );
+    }
+    if (128 * e.N * e.r >= SCRYPT_MAXMEM) throw new SecretsError("not an ed-mcp secrets file");
+    const key = this.key(e.salt, { N: e.N, r: e.r, p: e.p });
+    try {
+      const decipher = createDecipheriv("aes-256-gcm", key, Buffer.from(e.iv, "base64"), {
+        authTagLength: 16
+      });
+      decipher.setAuthTag(Buffer.from(e.tag, "base64"));
+      const plaintext = Buffer.concat([
+        decipher.update(Buffer.from(e.data, "base64")),
+        decipher.final()
+      ]).toString("utf8");
+      return { plaintext, salt: e.salt };
+    } catch {
+      throw new SecretsError("wrong password");
+    }
+  }
+  key(salt, params) {
+    const id = `${salt}:${params.N}:${params.r}:${params.p}`;
+    let key = this.keys.get(id);
+    if (!key) {
+      key = scryptSync(this.password, Buffer.from(salt, "base64"), 32, {
+        ...params,
+        maxmem: SCRYPT_MAXMEM
+      });
+      this.keys.set(id, key);
+    }
+    return key;
+  }
+};
+
+// src/settings/secrets.ts
+var StoredTokensSchema = external_exports.object({
+  refresh_token: external_exports.string(),
+  access_token: external_exports.string().nullable(),
+  expires_at: external_exports.number(),
+  authorized_at: external_exports.number()
+});
+var ServiceKeySchema = external_exports.strictObject({ apiKey: external_exports.string().min(1), cmdr: external_exports.string().min(1) });
+var SecretsSchema = external_exports.strictObject({
+  version: external_exports.literal(1),
+  inara: ServiceKeySchema.optional(),
+  edsm: ServiceKeySchema.optional(),
+  capi: StoredTokensSchema.optional()
+});
+var WrongPasswordError = class extends SecretsError {
+};
+var LOCK_TIMEOUT_MS3 = 5e3;
+var SecretStore = class _SecretStore {
+  constructor(file2, opts = {}) {
+    this.file = file2;
+    this.opts = opts;
+    this.encrypted = opts.password !== void 0;
+    if (opts.password !== void 0) this.cipher = new SecretCipher(opts.password, opts.scrypt);
+  }
+  file;
+  opts;
+  encrypted;
+  cipher;
+  cached = null;
+  salt;
+  queue = Promise.resolve();
+  async get() {
+    return this.read();
+  }
+  update(fn) {
+    const run = this.queue.then(() => this.write(fn));
+    this.queue = run.catch(() => void 0);
+    return run;
+  }
+  /** Decrypts with the old password and writes the same secrets with the current one. */
+  reencrypt(oldPassword) {
+    const cipher = this.cipher;
+    if (!cipher) {
+      return Promise.reject(new SecretsError("Secrets are not encrypted; nothing to re-encrypt."));
+    }
+    const run = this.queue.then(async () => {
+      await this.opts.guard?.();
+      await lockedWrite(
+        this.file,
+        {
+          timeoutMs: this.opts.lockTimeoutMs ?? LOCK_TIMEOUT_MS3,
+          lockedMessage: "Secrets file is locked by another process; try again",
+          lockDir: this.opts.lockDir,
+          mode: 384
+        },
+        async () => {
+          const st = await this.checkFile();
+          if (!st) throw new SecretsError(`${this.file} does not exist; nothing to re-encrypt.`);
+          const raw = await this.readText();
+          const old = new _SecretStore(this.file, {
+            password: oldPassword,
+            scrypt: this.opts.scrypt
+          });
+          const { value } = old.parse(raw);
+          const content = JSON.stringify(cipher.seal(JSON.stringify(value, null, 2)), null, 2);
+          return { content, result: void 0 };
+        }
+      );
+    });
+    this.queue = run.catch(() => void 0);
+    return run.finally(() => {
+      this.cached = null;
+      this.salt = void 0;
+    });
+  }
+  /** Removes the secrets file: keys and the Frontier login are forgotten. */
+  reset() {
+    const run = this.queue.then(async () => {
+      await this.opts.guard?.();
+      await mkdir5(path10.dirname(this.file), { recursive: true });
+      if (this.opts.lockDir) await mkdir5(this.opts.lockDir, { recursive: true });
+      const release = await acquireLock(
+        this.file,
+        this.opts.lockTimeoutMs ?? LOCK_TIMEOUT_MS3,
+        "Secrets file is locked by another process; try again",
+        this.opts.lockDir
+      );
+      try {
+        await rm2(this.file, { force: true });
+      } finally {
+        await release();
+      }
+    });
+    this.queue = run.catch(() => void 0);
+    return run.finally(() => {
+      this.cached = null;
+      this.salt = void 0;
+    });
+  }
+  async read() {
+    await this.opts.guard?.();
+    const st = await this.checkFile();
+    if (!st) {
+      this.cached = null;
+      return { version: 1 };
+    }
+    if (this.cached && this.cached.mtimeMs === st.mtimeMs && this.cached.size === st.size) {
+      return structuredClone(this.cached.value);
+    }
+    const raw = await this.readText();
+    const { value, salt } = this.parse(raw);
+    this.cached = { mtimeMs: st.mtimeMs, size: st.size, value };
+    this.salt = salt;
+    return structuredClone(value);
+  }
+  // Returns null when the file is missing. Refuses anything that is not a small regular file.
+  async checkFile() {
+    let st;
+    try {
+      st = await lstat3(this.file);
+    } catch (err) {
+      const code = err.code;
+      if (code === "ENOENT") return null;
+      throw new SecretsError(`${this.file} is not readable (${code ?? "unknown error"}).`);
+    }
+    if (!st.isFile()) throw new SecretsError(`${this.file} is not readable (not a regular file).`);
+    if (st.size > MAX_SECRETS_FILE)
+      throw new SecretsError(`${this.file} is not readable (too large).`);
+    return st;
+  }
+  async readText() {
+    const read2 = await readRegularText(this.file, MAX_SECRETS_FILE);
+    if (read2.kind === "ok") return read2.text;
+    const reason2 = read2.kind === "missing" ? "not readable (ENOENT)" : read2.reason;
+    throw new SecretsError(
+      reason2.startsWith("not readable") ? `${this.file} is ${reason2}.` : `${this.file} is not readable (${reason2}).`
+    );
+  }
+  parse(raw) {
+    let json3;
+    try {
+      json3 = JSON.parse(raw);
+    } catch {
+      throw new SecretsError(`${this.file} is not readable (not JSON).`);
+    }
+    let salt;
+    if (!this.cipher && json3?.format === "ed-mcp-secrets") {
+      throw new SecretsError(`${this.file} is not readable (encrypted; set ED_MCP_SYNC_PASSWORD).`);
+    }
+    if (this.cipher) {
+      try {
+        const opened = this.cipher.open(json3);
+        salt = opened.salt;
+        json3 = JSON.parse(opened.plaintext);
+      } catch (err) {
+        if (err instanceof SecretsError && err.message === "wrong password") {
+          throw new WrongPasswordError(`Can't decrypt ${this.file}: wrong ED_MCP_SYNC_PASSWORD.`);
+        }
+        const reason2 = err instanceof SecretsError ? err.message : "not JSON";
+        throw new SecretsError(`${this.file} is not readable (${reason2}).`);
+      }
+    }
+    const parsed = SecretsSchema.safeParse(json3);
+    if (!parsed.success) {
+      const issue2 = parsed.error.issues[0];
+      const where = issue2?.path.length ? `${issue2.path.join(".")}: ` : "";
+      throw new SecretsError(
+        `${this.file} is not readable (${where}${issue2?.message ?? "invalid"}).`
+      );
+    }
+    return { value: parsed.data, salt };
+  }
+  async write(fn) {
+    await this.opts.guard?.();
+    return lockedWrite(
+      this.file,
+      {
+        timeoutMs: this.opts.lockTimeoutMs ?? LOCK_TIMEOUT_MS3,
+        lockedMessage: "Secrets file is locked by another process; try again",
+        lockDir: this.opts.lockDir,
+        mode: 384
+      },
+      async () => {
+        this.cached = null;
+        const next = await this.read();
+        fn(next);
+        const result = SecretsSchema.safeParse(next);
+        if (!result.success) {
+          const issue2 = result.error.issues[0]?.message ?? "invalid";
+          throw new SecretsError(`${this.file} would be invalid (${issue2}).`);
+        }
+        const checked = result.data;
+        const body = JSON.stringify(checked, null, 2);
+        const content = this.cipher ? JSON.stringify(this.cipher.seal(body, this.salt), null, 2) : body;
+        return { content, result: checked };
+      }
+    ).finally(() => {
+      this.cached = null;
+    });
+  }
+};
+
+// src/settings/sync.ts
+import { constants as constants2 } from "fs";
+import { access, readdir as readdir2, stat as stat6 } from "fs/promises";
+import path11 from "path";
+var escape2 = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function conflictPattern(file2) {
+  const ext = path11.extname(file2);
+  const base2 = escape2(path11.basename(file2, ext));
+  const e = escape2(ext);
+  return new RegExp(
+    [
+      `^${base2} \\(\\d+\\)${e}$`,
+      // Google Drive
+      `^${base2} \\d+${e}$`,
+      // iCloud
+      `^${base2}-[^.\\s]+${e}$`,
+      // OneDrive: name-COMPUTERNAME
+      `^${base2}\\.sync-conflict-\\d{8}-\\d{6}-[A-Z0-9]{7}${e}$`
+      // Syncthing
+    ].join("|")
+  );
+}
+var SyncFolder = class {
+  dir;
+  constructor(dir) {
+    this.dir = path11.resolve(dir);
+  }
+  contains(file2) {
+    const rel = path11.relative(this.dir, path11.resolve(file2));
+    return rel !== "" && rel !== ".." && !rel.startsWith(`..${path11.sep}`) && !path11.isAbsolute(rel);
+  }
+  // No fallback to the local folder: writing there while the sync app is down would split
+  // the plans into two copies that never merge.
+  async check() {
+    const fail2 = (reason2) => new UserError(
+      `Sync folder ${this.dir} is not available: ${reason2}. Start your sync app, or fix ED_MCP_SYNC_DIR.`
+    );
+    let st;
+    try {
+      st = await stat6(this.dir);
+    } catch (err) {
+      const code = err.code;
+      throw fail2(code === "ENOENT" ? "it does not exist" : String(code ?? err));
+    }
+    if (!st.isDirectory()) throw fail2("it is not a folder");
+    await access(this.dir, constants2.W_OK).catch(() => {
+      throw fail2("it is not writable");
+    });
+  }
+  async conflicts(file2) {
+    const names = await readdir2(path11.dirname(file2)).catch(() => []);
+    const re = conflictPattern(file2);
+    const own2 = path11.basename(file2);
+    return names.filter((n) => n !== own2 && re.test(n));
+  }
+  async warnings(files) {
+    const out = [];
+    for (const f of files.filter((f2) => this.contains(f2))) {
+      for (const copy of await this.conflicts(f)) {
+        out.push(
+          `Sync conflict: ${copy} exists next to ${path11.basename(f)}. Compare them and delete the copy you don't want.`
+        );
+      }
+    }
+    return out;
+  }
+};
+
+// src/settings/settings.ts
+var Settings = class {
+  constructor(env2, inaraApp, secrets) {
+    this.env = env2;
+    this.inaraApp = inaraApp;
+    this.secrets = secrets;
+  }
+  env;
+  inaraApp;
+  secrets;
+  seeded = null;
+  async inara() {
+    const k = await this.key("inara");
+    return k ? { ...k, ...this.inaraApp } : void 0;
+  }
+  async edsm() {
+    return this.key("edsm");
+  }
+  async sources() {
+    let stored = {};
+    try {
+      await this.seed();
+      stored = await this.secrets.get();
+    } catch (err) {
+      if (!(err instanceof UserError)) throw err;
+    }
+    const info = (s) => {
+      const env2 = this.env[s];
+      const saved = stored[s];
+      if (env2) {
+        const differs = !!saved && (saved.apiKey !== env2.apiKey || saved.cmdr !== env2.cmdr);
+        return { source: "environment", cmdr: env2.cmdr, differs_from_stored: differs };
+      }
+      if (saved) return { source: "stored", cmdr: saved.cmdr, differs_from_stored: false };
+      return { source: "not set", cmdr: null, differs_from_stored: false };
+    };
+    return { inara: info("inara"), edsm: info("edsm") };
+  }
+  // The environment wins on this computer, so the store is read only when it has no value.
+  async key(s) {
+    await this.seed().catch(() => void 0);
+    if (this.env[s]) return this.env[s];
+    return (await this.secrets.get())[s];
+  }
+  // Copies a key set in the environment into an empty slot once, so other computers that
+  // share the sync folder get it. A stored value is never overwritten from the environment.
+  seed() {
+    this.seeded ??= (async () => {
+      const current = await this.secrets.get();
+      const missing = ["inara", "edsm"].filter((s) => this.env[s] && !current[s]);
+      if (!missing.length) return;
+      await this.secrets.update((d) => {
+        for (const s of missing) d[s] ??= this.env[s];
+      });
+    })().catch((err) => {
+      this.seeded = null;
+      throw err;
+    });
+    return this.seeded;
+  }
+};
+
+// src/settings/page.ts
+import { randomBytes as randomBytes4, timingSafeEqual } from "crypto";
+import { createServer as createServer2 } from "http";
+var TIMEOUT_MS = 10 * 6e4;
+var MAX_BODY = 16 * 1024;
+var BodyTooLarge = class extends Error {
+};
+var esc2 = (v) => v.replace(/[&<>"']/g, (c) => `&#${c.charCodeAt(0)};`);
+var mask = (k) => !k ? "not set" : k.length <= 8 ? "set" : `\u2026${esc2(k.slice(-4))}`;
+var page = (body) => `<!doctype html><meta charset="utf-8"><title>ed-mcp settings</title><style>body{font:15px system-ui;max-width:640px;margin:2em auto}label{display:block;margin:.6em 0}input[type=text],input[type=password]{width:100%}fieldset{margin:1em 0}</style>${body}`;
+var SettingsPage = class {
+  constructor(deps, opts = {}) {
+    this.deps = deps;
+    this.inSyncFolder = opts.inSyncFolder ?? false;
+    this.openUrl = opts.openUrl ?? openInBrowser;
+    this.timeoutMs = opts.timeoutMs ?? TIMEOUT_MS;
+  }
+  deps;
+  server = null;
+  closed = Promise.resolve();
+  opening = Promise.resolve();
+  openUrl;
+  timeoutMs;
+  inSyncFolder;
+  isOpen() {
+    return this.server !== null;
+  }
+  waitForClose() {
+    return this.closed;
+  }
+  // Calls run one after another, so two overlapping calls cannot leave a server nobody tracks.
+  open() {
+    const run = this.opening.then(() => this.start());
+    this.opening = run.catch(() => void 0);
+    return run;
+  }
+  async start() {
+    this.close();
+    const key = randomBytes4(24).toString("hex");
+    let done;
+    this.closed = new Promise((r) => done = r);
+    const server = createServer2((req, res) => {
+      this.handle(req, res, key, server).catch((err) => {
+        if (!(err instanceof UserError)) console.error(err instanceof Error ? err.message : err);
+        const text = err instanceof UserError ? esc2(err.message) : "Something went wrong.";
+        if (!res.headersSent) res.writeHead(500).end(page(`<p>${text}</p>`));
+      });
+    });
+    server.on("close", done);
+    server.unref();
+    await new Promise((resolve, reject) => {
+      server.once("error", reject);
+      server.listen(0, "127.0.0.1", resolve);
+    });
+    this.server = server;
+    const timer = setTimeout(() => this.stop(server), this.timeoutMs);
+    timer.unref();
+    server.on("close", () => clearTimeout(timer));
+    const url2 = `http://127.0.0.1:${server.address().port}/?key=${key}`;
+    const opened = await this.openUrl(url2).then(
+      () => true,
+      () => false
+    );
+    return { url: url2, expires_at: new Date(Date.now() + this.timeoutMs).toISOString(), opened };
+  }
+  close() {
+    if (this.server) this.stop(this.server);
+  }
+  stop(server) {
+    if (this.server === server) this.server = null;
+    server.close();
+    server.closeAllConnections();
+  }
+  async handle(req, res, key, server) {
+    const url2 = new URL(req.url ?? "/", "http://127.0.0.1");
+    const html = (status, body) => res.writeHead(status, {
+      "content-type": "text/html; charset=utf-8",
+      "cache-control": "no-store",
+      "referrer-policy": "no-referrer"
+    }).end(page(body));
+    const denied = () => html(403, "<p>Use the link from Claude.</p>");
+    if (req.method === "GET" && url2.pathname === "/") {
+      if (!sameKey(url2.searchParams.get("key"), key)) return void denied();
+      return void html(200, await this.form(key));
+    }
+    if (req.method !== "POST") return void res.writeHead(404).end();
+    let form;
+    try {
+      form = new URLSearchParams(await readBody(req));
+    } catch (err) {
+      if (!(err instanceof BodyTooLarge)) throw err;
+      return void res.writeHead(413, { connection: "close" }).end();
+    }
+    if (!sameKey(form.get("key"), key)) return void denied();
+    try {
+      if (url2.pathname === "/save") {
+        await this.deps.secrets.update((d) => {
+          for (const s of ["inara", "edsm"]) {
+            if (form.get(`clear_${s}`) === "on") {
+              delete d[s];
+              continue;
+            }
+            const next = entry(form, s, d[s]);
+            if (next) d[s] = next;
+          }
+        });
+      } else if (url2.pathname === "/reencrypt") {
+        await this.deps.secrets.reencrypt(form.get("old_password") ?? "");
+      } else if (url2.pathname === "/reset") {
+        await this.deps.secrets.reset();
+      } else {
+        return void res.writeHead(404).end();
+      }
+    } catch (err) {
+      if (!(err instanceof UserError)) throw err;
+      const text = err instanceof WrongPasswordError && url2.pathname === "/reencrypt" ? "The old password is wrong." : err.message;
+      return void html(400, `<p>${esc2(text)}</p><p>Go back and try again.</p>`);
+    }
+    res.once("finish", () => this.stop(server));
+    html(200, "<p>Saved. You can close this tab and go back to Claude.</p>");
+  }
+  async form(key) {
+    const k = `<input type="hidden" name="key" value="${key}">`;
+    const shared = this.inSyncFolder ? "<p><strong>This changes the secrets for every computer that shares the sync folder.</strong></p>" : "";
+    let stored;
+    try {
+      stored = await this.deps.secrets.get();
+    } catch (err) {
+      if (!(err instanceof SecretsError)) throw err;
+      return `<h1>ed-mcp settings</h1><p>${esc2(err.message)}</p><form method="post" action="/reencrypt">${k}<fieldset><legend>Re-encrypt with the current password</legend>${shared}<label>Old password <input type="password" name="old_password" autocomplete="off"></label><button>Re-encrypt</button></fieldset></form><form method="post" action="/reset">${k}<fieldset><legend>Start fresh</legend>${shared}<p>Removes the saved keys and the Frontier login. Plans and preferences are not affected.</p><button>Start fresh</button></fieldset></form>`;
+    }
+    const sources = await this.deps.settings.sources();
+    const help = {
+      inara: `Get your key: log in at <a href="https://inara.cz/elite/inara-api/" target="_blank" rel="noopener noreferrer">inara.cz</a>, click the cog next to "Personal content", open API settings and choose "Generate new key". The commander name is your in-game name.`,
+      edsm: `Get your key: log in at <a href="https://www.edsm.net/" target="_blank" rel="noopener noreferrer">edsm.net</a>, open the user menu and choose "My API Key". Use your EDSM commander name, which may differ from your in-game name.`
+    };
+    const section = (s, title, info) => `<fieldset><legend>${title}</legend><p><small>${help[s]}</small></p><p>In use: ${info.source === "environment" ? "from the environment (it wins on this computer)" : info.source}. Saved key: ${mask(stored[s]?.apiKey)}</p><label>${title} API key <input type="password" name="${s}_key" autocomplete="off" placeholder="leave empty to keep"></label><label>Commander name <input type="text" name="${s}_cmdr" value="${esc2(stored[s]?.cmdr ?? "")}"></label><label><input type="checkbox" name="clear_${s}"> Forget the saved ${title} key</label></fieldset>`;
+    return `<h1>ed-mcp settings</h1><form method="post" action="/save">${k}${shared}` + section("inara", "Inara", sources.inara) + section("edsm", "EDSM", sources.edsm) + `<button>Save</button></form>`;
+  }
+};
+function sameKey(given, key) {
+  const a = Buffer.from(given ?? "");
+  const b = Buffer.from(key);
+  return a.length === b.length && timingSafeEqual(a, b);
+}
+function entry(form, s, current) {
+  const apiKey = form.get(`${s}_key`)?.trim() || current?.apiKey;
+  const cmdr = form.get(`${s}_cmdr`)?.trim() || current?.cmdr;
+  if (!!apiKey !== !!cmdr) {
+    const name = s === "inara" ? "Inara" : "EDSM";
+    throw new UserError(`Give both the API key and the commander name for ${name}.`);
+  }
+  return apiKey && cmdr ? { apiKey, cmdr } : void 0;
+}
+function readBody(req) {
+  return new Promise((resolve, reject) => {
+    let size = 0;
+    let failed = false;
+    const chunks = [];
+    req.on("data", (c) => {
+      if (failed) return;
+      size += c.length;
+      if (size > MAX_BODY) {
+        failed = true;
+        reject(new BodyTooLarge());
+      } else chunks.push(c);
+    });
+    req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+    req.on("error", reject);
+  });
+}
+
+// src/version/check.ts
+import { readFile as readFile6 } from "fs/promises";
+import path12 from "path";
+var RELEASE_URL = "https://api.github.com/repos/pilotso11/ed-mcp/releases/latest";
+var DAY_MS = 24 * 60 * 60 * 1e3;
+var RETRY_MS = 60 * 60 * 1e3;
+var RELEASE_PAGE = "https://github.com/pilotso11/ed-mcp/releases/tag";
+var STRICT_VERSION = /^\d+\.\d+\.\d+$/;
+var releaseSchema = external_exports.object({
+  tag_name: external_exports.string().transform((t) => t.replace(/^v/, "")).pipe(external_exports.string().regex(STRICT_VERSION))
+});
+var cacheSchema = external_exports.object({
+  checked_at: external_exports.number(),
+  latest: external_exports.string().regex(STRICT_VERSION)
+});
+function parse3(version2) {
+  const m = /^v?(\d+)\.(\d+)\.(\d+)$/.exec(version2.trim());
+  return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
+}
+function isNewer(latest, current) {
+  const a = parse3(latest);
+  const b = parse3(current);
+  if (!a || !b) return false;
+  for (let i = 0; i < 3; i++) if (a[i] !== b[i]) return a[i] > b[i];
+  return false;
+}
+var VersionCheck = class {
+  constructor(opts) {
+    this.opts = opts;
+    this.file = path12.join(opts.cacheDir, "version-check.json");
+    this.now = opts.now ?? Date.now;
+  }
+  opts;
+  file;
+  now;
+  running = Promise.resolve();
+  inFlight = false;
+  stopped = false;
+  timer;
+  /**
+   * Checks in the background, then again every 24 hours (every hour after a failure), so a
+   * server that runs for days still learns of a new release. It never throws.
+   */
+  start() {
+    this.stopped = false;
+    if (this.timer || this.inFlight) return;
+    this.run();
+  }
+  /** Cancels the next scheduled check. */
+  stop() {
+    this.stopped = true;
+    clearTimeout(this.timer);
+    this.timer = void 0;
+  }
+  /** Resolves when the check in progress is done. */
+  whenIdle() {
+    return this.running;
+  }
+  /** Reads the saved result only. It never makes a request or writes. */
+  async notice() {
+    try {
+      const cached2 = await this.read();
+      if (!cached2 || !isNewer(cached2.latest, this.opts.current)) return null;
+      return `ed-mcp ${cached2.latest} is available (you have ${this.opts.current}): ${RELEASE_PAGE}/v${cached2.latest}`;
+    } catch {
+      return null;
+    }
+  }
+  run() {
+    clearTimeout(this.timer);
+    this.timer = void 0;
+    if (this.inFlight) return;
+    this.inFlight = true;
+    this.running = this.check().then(
+      () => true,
+      (err) => {
+        if (!(err instanceof UserError || err instanceof external_exports.ZodError || err instanceof SyntaxError)) {
+          console.error(
+            `ed-mcp version check failed: ${err instanceof Error ? err.message : err}`
+          );
+        }
+        return false;
+      }
+    ).then((ok2) => {
+      this.inFlight = false;
+      if (this.stopped) return;
+      clearTimeout(this.timer);
+      this.timer = setTimeout(
+        () => {
+          this.timer = void 0;
+          this.run();
+        },
+        ok2 ? DAY_MS : RETRY_MS
+      );
+      this.timer.unref();
+    });
+  }
+  async read() {
+    try {
+      return cacheSchema.parse(JSON.parse(await readFile6(this.file, "utf8")));
+    } catch {
+      return null;
+    }
+  }
+  // A clock set back would keep a stale entry fresh for too long, so a future time counts as old.
+  isStale(cached2) {
+    if (!cached2) return true;
+    const age = this.now() - cached2.checked_at;
+    return age < 0 || age >= DAY_MS;
+  }
+  async check() {
+    if (!this.isStale(await this.read())) return;
+    const release = releaseSchema.parse(await this.opts.http.json(RELEASE_URL));
+    const entry2 = {
+      checked_at: this.now(),
+      latest: release.tag_name
+    };
+    await lockedWrite(
+      this.file,
+      { timeoutMs: 2e3, lockedMessage: "version-check.json is locked" },
+      async () => ({ content: JSON.stringify(entry2), result: void 0 })
+    );
+  }
+};
+
 // src/deps.ts
+var envKey = (c) => c ? { apiKey: c.apiKey, cmdr: c.cmdr } : void 0;
 function buildDeps(config2, opts = {}) {
   const caches = new CacheRegistry();
   const http = new HttpClient({ userAgent: config2.userAgent, fetchFn: opts.fetchFn });
   const catalog = new CatalogService(http, config2.cacheDir);
   const ships2 = new ShipDataService({ cacheDir: config2.cacheDir, http });
+  const sync = config2.syncDir ? new SyncFolder(config2.syncDir) : void 0;
+  const guardFor = (file2) => sync?.contains(file2) ? () => sync.check() : void 0;
+  const lockFor = (file2) => sync?.contains(file2) ? config2.locksDir : void 0;
+  const secrets = new SecretStore(config2.secretsFile, {
+    password: config2.syncPassword,
+    lockDir: lockFor(config2.secretsFile),
+    guard: guardFor(config2.secretsFile)
+  });
+  const settings = new Settings(
+    { inara: envKey(config2.inara), edsm: envKey(config2.edsm) },
+    config2.inaraApp,
+    secrets
+  );
+  const plans = new PlanStore(config2.plansFile, void 0, {
+    lockDir: lockFor(config2.plansFile),
+    guard: guardFor(config2.plansFile),
+    markdownDir: config2.plansMarkdownDir
+  });
+  const legacyPlans = config2.legacyPlansEnv ? `ED_MCP_PLANS is no longer used. Plans are now in ${config2.plansFile}. Move your old plans file there, or use plan_import, then remove ED_MCP_PLANS.` : void 0;
+  const syncWarnings = sync ? () => sync.warnings([config2.plansFile, config2.prefsFile, config2.secretsFile]) : void 0;
   const inaraCache = new TtlCache("inara", 6e4);
   caches.register(inaraCache);
-  const inara = new InaraClient(http, config2.inara, inaraCache);
+  const inara = new InaraClient(http, () => settings.inara(), inaraCache);
   const edsmCache = new TtlCache("edsm", 6e4);
   caches.register(edsmCache);
-  const edsm = new EdsmClient(http, config2.edsm, edsmCache);
+  const edsm = new EdsmClient(http, () => settings.edsm(), edsmCache);
   const spanshCache = new TtlCache("spansh", 3e5);
   caches.register(spanshCache);
   const spanshSystemCache = new TtlCache("spansh-systems", 864e5);
   caches.register(spanshSystemCache);
   const spanshMarketCache = new TtlCache("spansh-markets", 6e5);
   caches.register(spanshMarketCache);
+  const spanshSweepCache = new SweepCache();
+  caches.register(spanshSweepCache);
   const spansh = new SpanshClient(http, spanshCache, {
     systemCache: spanshSystemCache,
-    marketCache: spanshMarketCache
+    marketCache: spanshMarketCache,
+    sweepCache: spanshSweepCache
   });
   const capiHttp = new HttpClient({ userAgent: `EDCD-EdMcp-${VERSION}`, fetchFn: opts.fetchFn });
   const capiCache = new TtlCache("capi", 6e4);
   caches.register(capiCache);
-  const capiAuth = new CapiAuth(
-    capiHttp,
-    config2.capi,
-    new TokenStore(path10.join(config2.configDir, "capi-token.json")),
-    { onSessionChange: () => void capiCache.clear() }
-  );
+  const capiAuth = new CapiAuth(capiHttp, config2.capi, new TokenStore(secrets), {
+    onSessionChange: () => void capiCache.clear()
+  });
   const capi = new CapiClient(capiHttp, capiAuth, capiCache);
   const journal = opts.journal ?? new JournalService(config2.journalDir);
   return {
@@ -33650,8 +34879,30 @@ function buildDeps(config2, opts = {}) {
     },
     jumpRange: async () => (await journal.freshShip())?.max_jump_range ?? null,
     journal,
-    plans: new PlanStore(config2.plansFile),
-    prefs: new PreferencesStore(path10.join(config2.configDir, "preferences.json"))
+    settings,
+    secrets,
+    settingsPage: new SettingsPage(
+      { secrets, settings },
+      { inSyncFolder: !!sync?.contains(config2.secretsFile) }
+    ),
+    plans,
+    planWarnings: async () => {
+      const problem = await plans.markdownProblem();
+      return [
+        ...await syncWarnings?.() ?? [],
+        ...problem ? [problem] : [],
+        ...legacyPlans ? [legacyPlans] : []
+      ];
+    },
+    prefs: new PreferencesStore(config2.prefsFile, {
+      lockDir: lockFor(config2.prefsFile),
+      guard: guardFor(config2.prefsFile)
+    }),
+    sync,
+    syncWarnings,
+    versionCheck: new VersionCheck({ http, cacheDir: config2.cacheDir, current: VERSION }),
+    notes: legacyPlans ? [legacyPlans] : [],
+    localDir: config2.configDir
   };
 }
 
@@ -34029,8 +35280,8 @@ function getErrorMap2() {
 
 // node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path12, errorMaps, issueData } = params;
-  const fullPath = [...path12, ...issueData.path || []];
+  const { data, path: path15, errorMaps, issueData } = params;
+  const fullPath = [...path15, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -34145,11 +35396,11 @@ var errorUtil;
 
 // node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path12, key) {
+  constructor(parent, value, path15, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path12;
+    this._path = path15;
     this._key = key;
   }
   get path() {
@@ -36161,10 +37412,10 @@ var ZodObject2 = class _ZodObject extends ZodType2 {
       catchall: index
     });
   }
-  pick(mask) {
+  pick(mask2) {
     const shape = {};
-    for (const key of util.objectKeys(mask)) {
-      if (mask[key] && this.shape[key]) {
+    for (const key of util.objectKeys(mask2)) {
+      if (mask2[key] && this.shape[key]) {
         shape[key] = this.shape[key];
       }
     }
@@ -36173,10 +37424,10 @@ var ZodObject2 = class _ZodObject extends ZodType2 {
       shape: () => shape
     });
   }
-  omit(mask) {
+  omit(mask2) {
     const shape = {};
     for (const key of util.objectKeys(this.shape)) {
-      if (!mask[key]) {
+      if (!mask2[key]) {
         shape[key] = this.shape[key];
       }
     }
@@ -36191,11 +37442,11 @@ var ZodObject2 = class _ZodObject extends ZodType2 {
   deepPartial() {
     return deepPartialify(this);
   }
-  partial(mask) {
+  partial(mask2) {
     const newShape = {};
     for (const key of util.objectKeys(this.shape)) {
       const fieldSchema = this.shape[key];
-      if (mask && !mask[key]) {
+      if (mask2 && !mask2[key]) {
         newShape[key] = fieldSchema;
       } else {
         newShape[key] = fieldSchema.optional();
@@ -36206,10 +37457,10 @@ var ZodObject2 = class _ZodObject extends ZodType2 {
       shape: () => newShape
     });
   }
-  required(mask) {
+  required(mask2) {
     const newShape = {};
     for (const key of util.objectKeys(this.shape)) {
-      if (mask && !mask[key]) {
+      if (mask2 && !mask2[key]) {
         newShape[key] = this.shape[key];
       } else {
         const fieldSchema = this.shape[key];
@@ -37700,11 +38951,11 @@ function normalizeObjectSchema(schema) {
   }
   return void 0;
 }
-function getDotPath(path12) {
-  if (path12.length === 0) {
+function getDotPath(path15) {
+  if (path15.length === 0) {
     return "object root";
   }
-  return path12.reduce((acc, seg, index) => {
+  return path15.reduce((acc, seg, index) => {
     if (index === 0) {
       return String(seg);
     }
@@ -39697,7 +40948,7 @@ var Protocol = class {
           }
         };
       }
-      const cancel = (reason) => {
+      const cancel = (reason2) => {
         this._responseHandlers.delete(messageId);
         this._progressHandlers.delete(messageId);
         this._cleanupTimeout(messageId);
@@ -39706,10 +40957,10 @@ var Protocol = class {
           method: "notifications/cancelled",
           params: {
             requestId: messageId,
-            reason: String(reason)
+            reason: String(reason2)
           }
         }, { relatedRequestId, resumptionToken, onresumptiontoken }).catch((error63) => this._onerror(new Error(`Failed to send cancellation: ${error63}`)));
-        const error62 = reason instanceof McpError ? reason : new McpError(ErrorCode.RequestTimeout, String(reason));
+        const error62 = reason2 instanceof McpError ? reason2 : new McpError(ErrorCode.RequestTimeout, String(reason2));
         reject(error62);
       };
       this._responseHandlers.set(messageId, (response) => {
@@ -40907,6 +42158,15 @@ var McpServer = class {
     this._promptHandlersInitialized = false;
     this.server = new Server(serverInfo, options);
     this._maxToolInputElements = resolveMaxToolInputElements(options?.maxToolInputElements);
+    if (options?.capabilities?.tools) {
+      this.setToolRequestHandlers();
+    }
+    if (options?.capabilities?.resources) {
+      this.setResourceRequestHandlers();
+    }
+    if (options?.capabilities?.prompts) {
+      this.setPromptRequestHandlers();
+    }
   }
   /**
    * Access experimental features.
@@ -42234,10 +43494,10 @@ function slotInfo(hull, slot, item) {
   return { slot, kind: kind2, size };
 }
 function bulkheadFromItem(hull, item) {
-  const lower = item.toLowerCase();
+  const lower2 = item.toLowerCase();
   const offset = hull.bulkheads.length > 5 ? 1 : 0;
-  if (lower.endsWith("_armour_grade1_default")) return hull.bulkheads[0] ?? null;
-  const i = BULKHEAD_SUFFIXES.findIndex((s) => lower.endsWith(`_armour_${s}`));
+  if (lower2.endsWith("_armour_grade1_default")) return hull.bulkheads[0] ?? null;
+  const i = BULKHEAD_SUFFIXES.findIndex((s) => lower2.endsWith(`_armour_${s}`));
   return i < 0 ? null : hull.bulkheads[i + offset] ?? null;
 }
 function bulkheadItem(hull, module) {
@@ -43002,6 +44262,27 @@ function wrap(fn) {
     }
   };
 }
+function wrapWarn(fn, warnings) {
+  const inner = wrap(fn);
+  return async (args) => {
+    const result = await inner(args);
+    const list2 = warnings ? await warnings().catch(() => []) : [];
+    if (!list2.length) return result;
+    return {
+      ...result,
+      content: [
+        ...result.content,
+        { type: "text", text: `Warnings:
+${list2.map((w) => `- ${w}`).join("\n")}` }
+      ]
+    };
+  };
+}
+function reason(err) {
+  if (err instanceof UserError) return err.message;
+  console.error(err);
+  return err instanceof Error ? err.message : String(err);
+}
 
 // src/tools/build.ts
 var SCO_NOTE = "Jump range uses the drive's normal values, not supercruise overcharge.";
@@ -43028,6 +44309,13 @@ function registerBuildStatsTool(server, deps) {
   server.registerTool(
     "build_stats",
     {
+      annotations: {
+        title: "Build Stats",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Model a ship build: mass, fuel, jump range, power, speed, shields, armour and weapon damage. The build comes from the latest journal Loadout (the default), the CAPI ship, a SLEF build or a plan's target_build. `changes` apply what-if changes in order: swap, engineer or remove modules. With changes, `diff` lists only the values that changed, and `build` is the changed build as SLEF. Save it with plan_upsert (target_build), in a file or in an artifact. Real builds use their real engineering values; engineering from changes assumes the best roll for the blueprint and grade.",
       inputSchema: {
         build: BuildInput.optional().describe("Where to load the build. Default: the journal."),
@@ -43166,12 +44454,12 @@ function diff(before, after) {
   const a = flatten(before, "", /* @__PURE__ */ new Map());
   const b = flatten(after, "", /* @__PURE__ */ new Map());
   const out = {};
-  for (const path12 of /* @__PURE__ */ new Set([...a.keys(), ...b.keys()])) {
-    const x = a.get(path12) ?? null;
-    const y = b.get(path12) ?? null;
+  for (const path15 of /* @__PURE__ */ new Set([...a.keys(), ...b.keys()])) {
+    const x = a.get(path15) ?? null;
+    const y = b.get(path15) ?? null;
     if (x === y) continue;
     const change = typeof x === "number" && typeof y === "number" ? Math.round((y - x) * 1e4) / 1e4 : null;
-    out[path12] = { before: x, after: y, change };
+    out[path15] = { before: x, after: y, change };
   }
   return out;
 }
@@ -43181,6 +44469,13 @@ function registerBuildTools(server, deps) {
   server.registerTool(
     "build_parse_slef",
     {
+      annotations: {
+        title: "Parse SLEF Build",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Parse a SLEF ship build (export from EDSY, Coriolis or Inara) into slots, modules, blueprints, grades and experimental effects. Module names, class and rating are resolved from the game data catalog when available. Accepts SLEF JSON only. An EDSY link (edsy.org/#/L=...) is not SLEF: open it in a browser, click Export..., read the export_slef text input and pass that value, or ask the user to paste the SLEF.",
       inputSchema: { slef: external_exports.string().describe("SLEF JSON text") }
     },
@@ -43230,6 +44525,13 @@ function registerCacheTools(server, deps) {
   server.registerTool(
     "cache_refresh",
     {
+      annotations: {
+        title: "Refresh Cache",
+        readOnlyHint: false,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Clear cached data so the next call fetches fresh data. source: a source name or 'all' (default). For 'catalog' and 'ships' this also checks upstream for new game data.",
       inputSchema: { source: external_exports.string().optional() }
     },
@@ -43265,6 +44567,13 @@ function registerCacheTools(server, deps) {
   server.registerTool(
     "cache_status",
     {
+      annotations: {
+        title: "Cache Status",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: "Show cached entries and their age per source, and the catalog and ship data versions."
     },
     wrap(async () => ({
@@ -43279,6 +44588,13 @@ function registerCapiTools(server, deps) {
   server.registerTool(
     "capi_login",
     {
+      annotations: {
+        title: "Log In to Frontier",
+        readOnlyHint: false,
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: true
+      },
       description: "Log in to Frontier's Companion API in the browser. Returns immediately with the login URL; the user finishes in the browser. Call again to check the state; pass force: true to log in again. Logins last 25 days.",
       inputSchema: { force: external_exports.boolean().optional() }
     },
@@ -43294,13 +44610,29 @@ function registerCapiTools(server, deps) {
   server.registerTool(
     "capi_profile",
     {
+      annotations: {
+        title: "Frontier Profile",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Live commander data from Frontier: current system and docked station, current ship with every module and its engineering (blueprint, grade, engineer, experimental), and all owned ships with locations. Does not include materials (use edsm_commander_materials). Cached 60 s."
     },
     wrap(async () => deps.capi.profile())
   );
   server.registerTool(
     "capi_logout",
-    { description: "Forget the stored Frontier login on this machine." },
+    {
+      annotations: {
+        title: "Log Out of Frontier",
+        readOnlyHint: false,
+        destructiveHint: true,
+        idempotentHint: true,
+        openWorldHint: false
+      },
+      description: "Forget the stored Frontier login. With a sync password, this logs out every computer that shares the sync folder."
+    },
     wrap(async () => {
       await deps.capiAuth.logout();
       return { state: "logged_out" };
@@ -43314,6 +44646,13 @@ function registerCatalogTools(server, deps) {
   server.registerTool(
     "catalog_blueprint",
     {
+      annotations: {
+        title: "Look Up Blueprint",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Engineering blueprint by journal id (e.g. FSD_LongRange) or name (e.g. 'Increased range'): materials per grade 1-5 with material symbol, grade and trade group, and the experimental effects available for the module. Give module when the name is shared by several modules.",
       inputSchema: { name: external_exports.string(), module: external_exports.string().optional() }
     },
@@ -43322,6 +44661,13 @@ function registerCatalogTools(server, deps) {
   server.registerTool(
     "catalog_engineers",
     {
+      annotations: {
+        title: "Look Up Engineers",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "With blueprint (and optional module): engineers who apply it, their max grade, location and invite/unlock requirements, best first. With engineer: that engineer's location, requirements and every blueprint they offer.",
       inputSchema: {
         blueprint: external_exports.string().optional(),
@@ -43342,6 +44688,13 @@ function registerCatalogTools(server, deps) {
   server.registerTool(
     "catalog_material",
     {
+      annotations: {
+        title: "Look Up Material",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Engineering material by name or symbol: kind, grade, trade group, other materials in the same trade group, and material trader exchange rules.",
       inputSchema: { name: external_exports.string() }
     },
@@ -43350,6 +44703,13 @@ function registerCatalogTools(server, deps) {
   server.registerTool(
     "catalog_module",
     {
+      annotations: {
+        title: "Look Up Module",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Outfitting module by journal symbol (e.g. Int_Hyperdrive_Size5_Class5) or name: class, rating, mount and engineering group. Returns total matches and at most 20 items.",
       inputSchema: { query: external_exports.string() }
     },
@@ -43601,13 +44961,13 @@ function resolveRules(stored, override, usePreferences, auto, jumpAuto = { ly: n
   const prefs = applyPatch(usePreferences ? stored : OFF_PREFS, override ?? {});
   const p = prefs.stations.min_pad;
   const fromRequest = override?.stations?.min_pad !== void 0;
-  const pad2 = p === "auto" ? auto : p === "none" ? { size: null, source: fromRequest ? "request" : "none" } : { size: p, source: fromRequest ? "request" : "preferences" };
+  const pad = p === "auto" ? auto : p === "none" ? { size: null, source: fromRequest ? "request" : "none" } : { size: p, source: fromRequest ? "request" : "preferences" };
   const range = prefs.travel.jump_range_ly;
   const fromRequestRange = override?.travel?.jump_range_ly !== void 0;
   const { ly, source } = range !== "auto" ? { ly: range, source: fromRequestRange ? "request" : "preferences" } : jumpAuto.ly ? { ly: jumpAuto.ly, source: jumpAuto.source } : { ly: 30, source: "auto: default 30 LY" };
   return {
     prefs,
-    pad: pad2,
+    pad,
     travel: { ...prefs.travel, jump_range_ly: ly },
     jumpRangeSource: source
   };
@@ -43760,23 +45120,23 @@ async function screenPermits(a) {
     if (kept.length >= a.limit) break;
     const refs = a.systemsOf(item).filter((r) => !exempt.has(r.name.toLowerCase()));
     let needsPermit = false;
-    let open3 = true;
+    let open4 = true;
     let missed = false;
     for (const ref of refs) {
       if (!lookup2.has(ref.name)) stop ??= stopReason();
       if (stop && !lookup2.has(ref.name)) {
         missed = true;
-        open3 = false;
+        open4 = false;
         continue;
       }
       const permit = await within(lookup2.check(ref), deadline - now());
       if (permit === TIMED_OUT) {
         stop = "time limit";
         missed = true;
-        open3 = false;
+        open4 = false;
         continue;
       }
-      if (permit === null) open3 = false;
+      if (permit === null) open4 = false;
       if (permit === true) {
         needsPermit = true;
         if (!locked.has(ref.name.toLowerCase())) locked.set(ref.name.toLowerCase(), ref.name);
@@ -43793,7 +45153,7 @@ async function screenPermits(a) {
       }
     } else {
       kept.push(item);
-      if (open3) checkedOpen.push(item);
+      if (open4) checkedOpen.push(item);
     }
   }
   const notes = [];
@@ -43868,20 +45228,20 @@ function credits(n) {
 function recommendStation(ranked, t) {
   const best = ranked[0];
   if (!best) return null;
-  let reason;
+  let reason2;
   if (best.effective_cost === null) {
-    reason = `fastest, about ${best.travel_min} min`;
+    reason2 = `fastest, about ${best.travel_min} min`;
   } else {
     const fastest = [...ranked].sort((a, b) => a.travel_s - b.travel_s)[0];
     if (fastest !== best && fastest.price && best.price && fastest.price > best.price) {
       const extra = best.travel_s - fastest.travel_s;
       const more = extra < 60 ? `${extra} more seconds` : `${(extra / 60).toFixed(1)} more minutes`;
-      reason = `${credits(fastest.price - best.price)} cr cheaper than ${fastest.name} (${fastest.system}) for ${more} at ${credits(t.credits_per_hour)} cr/h`;
+      reason2 = `${credits(fastest.price - best.price)} cr cheaper than ${fastest.name} (${fastest.system}) for ${more} at ${credits(t.credits_per_hour)} cr/h`;
     } else {
-      reason = `lowest cost including travel time, about ${best.travel_min} min`;
+      reason2 = `lowest cost including travel time, about ${best.travel_min} min`;
     }
   }
-  return { name: best.name, system: best.system, reason };
+  return { name: best.name, system: best.system, reason: reason2 };
 }
 
 // src/stations/search.ts
@@ -43952,20 +45312,20 @@ async function searchStations(spansh, query, rules, limit, permits = {}) {
     spansh,
     ...permits
   });
-  const page = screen.kept.map(
+  const page2 = screen.kept.map(
     (h) => screen.locked(h.system) ? { ...h, needs_permit: true } : h
   );
-  const open3 = mode === "exclude" ? ranked.filter((h) => !screen.locked(h.system)) : ranked;
+  const open4 = mode === "exclude" ? ranked.filter((h) => !screen.locked(h.system)) : ranked;
   const recommended = screen.checkedOpen.length ? recommendStation(screen.checkedOpen, rules.travel) : null;
   return {
     near: source.near,
     total: source.total,
-    matched: open3.length,
+    matched: open4.length,
     total_capped: source.total_capped,
-    stations: page,
+    stations: page2,
     recommended,
     // Only the returned page counts, so every listed rule is broken by a station shown.
-    relaxed: relaxAttempted ? brokenRules(page, rules) : [],
+    relaxed: relaxAttempted ? brokenRules(page2, rules) : [],
     relax_attempted: relaxAttempted,
     applied_preferences: describeRules(rules),
     notes: screen.notes
@@ -43981,11 +45341,11 @@ function union2(a, b) {
 async function resolveSearchRules(deps, preferences, usePreferences, largePad) {
   const stored = deps.prefs && usePreferences ? await deps.prefs.get() : DEFAULT_PREFS;
   const override = largePad ? { ...preferences, stations: { ...preferences?.stations, min_pad: "L" } } : preferences ?? {};
-  let pad2 = { size: null, source: "none" };
+  let pad = { size: null, source: "none" };
   let jump2;
-  const first = resolveRules(stored, override, usePreferences, pad2);
+  const first = resolveRules(stored, override, usePreferences, pad);
   if (first.prefs.stations.min_pad === "auto") {
-    pad2 = await autoPad(deps.currentShip ?? (async () => null));
+    pad = await autoPad(deps.currentShip ?? (async () => null));
   }
   if (first.prefs.travel.jump_range_ly === "auto") {
     const max = await deps.jumpRange?.().catch(() => null);
@@ -43997,7 +45357,7 @@ async function resolveSearchRules(deps, preferences, usePreferences, largePad) {
       };
     }
   }
-  return resolveRules(stored, override, usePreferences, pad2, jump2);
+  return resolveRules(stored, override, usePreferences, pad, jump2);
 }
 
 // src/tools/materials.ts
@@ -44006,6 +45366,13 @@ function registerMaterialsTools(server, deps) {
   server.registerTool(
     "materials_plan",
     {
+      annotations: {
+        title: "Plan Materials",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Plan engineering materials: needs for blueprints (grades, rolls, experimentals) and extra materials, compared with the commander's inventory (journal or EDSM), trades from surplus at exact material trader rates, what is still short, and the best trader of each type near the commander (travel preferences apply).",
       inputSchema: {
         blueprints: external_exports.array(
@@ -44181,7 +45548,7 @@ function legBetween(from, to, travel) {
   if (same(from.system, to.system) && same(from.station, to.station)) {
     return { jumps: 0, seconds: 0, distanceLy: 0 };
   }
-  const distanceLy = same(from.system, to.system) ? 0 : Math.hypot(
+  const distanceLy2 = same(from.system, to.system) ? 0 : Math.hypot(
     from.coords.x - to.coords.x,
     from.coords.y - to.coords.y,
     from.coords.z - to.coords.z
@@ -44189,14 +45556,14 @@ function legBetween(from, to, travel) {
   return {
     ...legSeconds(
       {
-        distanceLy,
+        distanceLy: distanceLy2,
         arrivalLs: to.arrivalLs,
         planetary: to.planetary,
         stationKnown: to.station !== null
       },
       travel
     ),
-    distanceLy
+    distanceLy: distanceLy2
   };
 }
 
@@ -44207,17 +45574,17 @@ var better = (l1, t1, l2, t2) => l1 < l2 || l1 === l2 && t1 < t2;
 var lateAt = (deadlines, t) => deadlines.filter((d) => t > d).length;
 function findCycle(after) {
   const state = [];
-  const path12 = [];
+  const path15 = [];
   const visit2 = (i) => {
     if (state[i] === 2) return null;
-    if (state[i] === 1) return path12.slice(path12.indexOf(i));
+    if (state[i] === 1) return path15.slice(path15.indexOf(i));
     state[i] = 1;
-    path12.push(i);
+    path15.push(i);
     for (const j of after[i] ?? []) {
       const cycle = visit2(j);
       if (cycle) return cycle;
     }
-    path12.pop();
+    path15.pop();
     state[i] = 2;
     return null;
   };
@@ -44296,14 +45663,14 @@ function exactOrder(p) {
       parent: null
     });
   }
-  for (let mask = 1; mask < 1 << n; mask++) {
+  for (let mask2 = 1; mask2 < 1 << n; mask2++) {
     for (let last = 0; last < n; last++) {
-      for (const label of fronts[mask][last]) {
+      for (const label of fronts[mask2][last]) {
         for (let next = 0; next < n; next++) {
-          if (mask & 1 << next || (needs[next] & mask) !== needs[next]) continue;
+          if (mask2 & 1 << next || (needs[next] & mask2) !== needs[next]) continue;
           const time3 = label.time + between[last][next];
           const late2 = label.late + lateAt(p.deadlines[next] ?? [], time3);
-          insert(fronts[mask | 1 << next][next], { late: late2, time: time3, last: next, parent: label });
+          insert(fronts[mask2 | 1 << next][next], { late: late2, time: time3, last: next, parent: label });
         }
       }
     }
@@ -44427,6 +45794,13 @@ function registerMissionTools(server, deps) {
   server.registerTool(
     "missions_route",
     {
+      annotations: {
+        title: "Plan Mission Route",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Order the stops for accepted missions (from the game journal): passengers, deliveries and hand-ins for completed missions. Uses Spansh coordinates and the travel-time model to minimise time while meeting deadlines; lists late and unroutable missions. The order is exact up to 12 stops and 24 missions with an expiry; above that it is a nearest-first heuristic and deadline handling is best-effort. Planetary stations are inferred from the Spansh station type. `from` and `return_to` must be systems Spansh knows. The first call for systems not seen in the last day can take tens of seconds, because Spansh lookups are rate limited.",
       inputSchema: {
         from: external_exports.string().optional().describe("Start system; default the journal location"),
@@ -44479,8 +45853,8 @@ function registerMissionTools(server, deps) {
             places.push(await place2(stop.system, stop.station));
             stops.push(stop);
           } catch (e) {
-            const reason = e instanceof UserError ? e.message : `Spansh lookup failed: ${e instanceof Error ? e.message : String(e)}`;
-            for (const m of stop.missions) unroutable.push({ id: m.id, name: m.name, reason });
+            const reason2 = e instanceof UserError ? e.message : `Spansh lookup failed: ${e instanceof Error ? e.message : String(e)}`;
+            for (const m of stop.missions) unroutable.push({ id: m.id, name: m.name, reason: reason2 });
           }
         }
         const returnPlace = a.return_to ? await endpoint("return_to", a.return_to.system, a.return_to.station ?? null) : void 0;
@@ -44570,13 +45944,31 @@ function registerJournalTools(server, deps) {
   server.registerTool(
     "journal_status",
     {
-      description: "Check the Elite Dangerous journal folder: whether it exists, the newest journal and how old its last event is, the commander and game version. Use it first when journal data looks wrong or out of date; warnings explain missing folders and stalled Syncthing sync."
+      annotations: {
+        title: "Journal Status",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
+      description: "Check the Elite Dangerous journal folder: whether it exists, the newest journal and how old its last event is, the commander and game version. Use it first when journal data looks wrong or out of date; warnings explain missing folders and stalled Syncthing sync, and also mention a newer ed-mcp release when one is available."
     },
-    wrap(async () => deps.journal.status())
+    wrap(async () => {
+      const status = await deps.journal.status();
+      const update = await deps.update?.();
+      return update ? { ...status, warnings: [...status.warnings, update] } : status;
+    })
   );
   server.registerTool(
     "journal_commander",
     {
+      annotations: {
+        title: "Journal Commander",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: "The commander's current state from the local game journal: name, credits, location (system, station, docked), ship (type, name, jump range, cargo and fuel capacity) and cargo. " + FRESHNESS_TEXT
     },
     wrap(async () => {
@@ -44594,6 +45986,13 @@ function registerJournalTools(server, deps) {
   server.registerTool(
     "journal_materials",
     {
+      annotations: {
+        title: "Journal Materials",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: "Engineering materials the commander holds, from the local game journal, by kind (raw, manufactured, encoded) with counts. Pass kinds to limit the result. " + FRESHNESS_TEXT,
       inputSchema: { kinds: external_exports.array(external_exports.enum(["raw", "manufactured", "encoded"])).optional() }
     },
@@ -44619,6 +46018,13 @@ function registerJournalTools(server, deps) {
   server.registerTool(
     "journal_missions",
     {
+      annotations: {
+        title: "Journal Missions",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: "Accepted missions (active and complete) from the local game journal: destination, expiry, reward and passenger or cargo details, soonest expiry first. status is active or complete (objectives met, not handed in). origin_system and origin_station are where the mission was accepted (station is null when not docked). expired is true once the expiry has passed. details_missing marks missions accepted before the 14-day journal window (name and expiry only). " + FRESHNESS_TEXT
     },
     wrap(async () => {
@@ -44634,6 +46040,13 @@ function registerJournalTools(server, deps) {
   server.registerTool(
     "journal_engineers",
     {
+      annotations: {
+        title: "Journal Engineers",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: "Engineer progress from the local game journal: invited, unlocked or known, with rank and rank progress. " + FRESHNESS_TEXT
     },
     wrap(async () => {
@@ -44853,6 +46266,13 @@ function registerLoopTools(server, deps) {
   server.registerTool(
     "trade_loops",
     {
+      annotations: {
+        title: "Find Trade Loops",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: `Find repeatable trade loops: two or three stations, where a leg can run empty. start "here" (default) finds loops through your docked station; start "any" finds the best loops anywhere within radius_ly of near (default: where you are). Ranked by sustained profit per hour: thin markets that cannot refill a full hold every lap rank low. Uses Spansh market data (check each price's age). Cargo and capital default to the journal. Loops through permit-locked systems are left out unless permit_systems is allow. Legality is not checked.`,
       inputSchema: {
         start: external_exports.enum(["here", "any"]).default("here"),
@@ -45000,25 +46420,25 @@ function registerLoopTools(server, deps) {
           );
           if (!startMarket) {
             const info = await spansh.system(centre.system, STATION_LIMIT);
-            const entry = info.stations.find((st) => same2(st.name, name));
-            if (entry?.market_id == null) {
+            const entry2 = info.stations.find((st) => same2(st.name, name));
+            if (entry2?.market_id == null) {
               throw new UserError(`Spansh has no market for ${name} in ${info.name}.`);
             }
-            const id2 = entry.market_id;
+            const id2 = entry2.market_id;
             const fresh = journalMarket?.market_id === id2 && localHours !== null && localHours <= a.max_price_age_days * 24;
             const rows = fresh ? renamedLocalRows() : null;
             startMarket = rows ? fromJournal2(
               {
-                name: entry.name,
+                name: entry2.name,
                 system: info.name,
                 system_id64: info.id64,
                 market_id: id2,
                 distance_ly: null,
-                arrival_ls: entry.arrival_ls,
+                arrival_ls: entry2.arrival_ls,
                 coords: info.coords,
-                pad: entry.pad,
-                type: entry.type,
-                planetary: PLANETARY.test(entry.type ?? ""),
+                pad: entry2.pad,
+                type: entry2.type,
+                planetary: PLANETARY.test(entry2.type ?? ""),
                 market_age_hours: null,
                 market: []
               },
@@ -45044,15 +46464,15 @@ function registerLoopTools(server, deps) {
             break;
           }
           let market = null;
-          let failure2 = "Spansh has no market for it.";
+          let failure3 = "Spansh has no market for it.";
           try {
             market = await includeMarket(inc);
           } catch (err) {
             if (!(err instanceof UserError)) throw err;
-            failure2 = err.message;
+            failure3 = err.message;
           }
           if (!market) {
-            notes.push(`Cannot include ${inc.station}: ${failure2}`);
+            notes.push(`Cannot include ${inc.station}: ${failure3}`);
           } else if (!candidates.some((c) => c.market_id === market.market_id)) {
             candidates.push(market);
           }
@@ -45198,11 +46618,347 @@ function registerLoopTools(server, deps) {
   }
 }
 
+// src/systems/massacre.ts
+var SOURCE_RANGE_LY = 10;
+var NO_MASSACRES = /* @__PURE__ */ new Set(["war", "civil war", "election"]);
+function massacreTargets(systems, centre, opts) {
+  const pirates = systems.flatMap(
+    (s) => s.factions.filter(isAnarchy).map((f) => ({ faction: f.name, system: s }))
+  );
+  const piratesNear = /* @__PURE__ */ new Map();
+  const piratesInRange = (s) => {
+    let list2 = piratesNear.get(s.id64);
+    if (!list2) {
+      list2 = pirates.filter((p) => p.system.id64 !== s.id64).filter((p) => distanceLy(p.system.coords, s.coords) <= SOURCE_RANGE_LY).map((p) => ({ faction: p.faction, system: p.system.name }));
+      piratesNear.set(s.id64, list2);
+    }
+    return list2;
+  };
+  const candidates = systems.filter((s) => s.stations.length > 0);
+  const targets = [];
+  let leftOutSpread = 0;
+  for (const p of pirates) {
+    const distance2 = distanceLy(p.system.coords, centre);
+    if (distance2 > opts.radiusLy) continue;
+    const spreadLs = Math.max(0, ...p.system.stars.map((s) => s.arrival_ls));
+    if (spreadLs > opts.maxStarLs) {
+      leftOutSpread++;
+      continue;
+    }
+    const sources = [];
+    const excluded = [];
+    for (const s of candidates) {
+      if (s.id64 === p.system.id64) continue;
+      const toTarget = distanceLy(s.coords, p.system.coords);
+      if (toTarget > SOURCE_RANGE_LY) continue;
+      const blocked = s.factions.flatMap(
+        (f) => f.active_states.filter((x) => NO_MASSACRES.has(x.toLowerCase())).map((state) => ({ system: s.name, faction: f.name, state, updated_at: s.updated_at }))
+      );
+      if (blocked.length) {
+        excluded.push(...blocked);
+        continue;
+      }
+      const others = piratesInRange(s).filter((x) => x.faction !== p.faction);
+      sources.push({
+        system: s,
+        distanceToTargetLy: toTarget,
+        primary: others.length === 0,
+        otherPirates: others
+      });
+    }
+    const primary = sources.filter((s) => s.primary);
+    if (!primary.length) continue;
+    const givers = new Set(
+      primary.flatMap((s) => s.system.factions.filter((f) => !isAnarchy(f)).map((f) => f.name))
+    );
+    if (givers.size === 0) continue;
+    sources.sort(
+      (a, b) => Number(b.primary) - Number(a.primary) || a.distanceToTargetLy - b.distanceToTargetLy
+    );
+    targets.push({
+      faction: p.faction,
+      system: p.system,
+      distanceLy: distance2,
+      spreadLs,
+      stackSize: givers.size,
+      sources,
+      excluded
+    });
+  }
+  targets.sort(
+    (a, b) => b.stackSize - a.stackSize || a.spreadLs - b.spreadLs || a.distanceLy - b.distanceLy
+  );
+  return { targets, leftOutSpread };
+}
+
+// src/systems/state.ts
+var lower = (xs) => xs?.length ? new Set(xs.map((x) => x.toLowerCase())) : null;
+var has = (set2, v) => !set2 || v !== null && set2.has(v.toLowerCase());
+function hasFilter(q) {
+  return [q.states, q.government, q.allegiance, q.power, q.security].some((x) => x?.length);
+}
+function systemsByState(systems, centre, radiusLy, q) {
+  const states = lower(q.states);
+  const government = lower(q.government);
+  const allegiance = lower(q.allegiance);
+  const power2 = lower(q.power);
+  const security = lower(q.security);
+  const out = [];
+  for (const s of systems) {
+    const d = distanceLy(s.coords, centre);
+    if (d > radiusLy) continue;
+    if (!has(government, s.government) || !has(allegiance, s.allegiance)) continue;
+    if (!has(power2, s.controlling_power) || !has(security, s.security)) continue;
+    let factions = [];
+    if (states) {
+      factions = s.factions.filter(
+        (f) => (!q.controllingOnly || f.controlling) && [...f.active_states, ...q.includePending ? f.pending_states : []].some(
+          (x) => states.has(x.toLowerCase())
+        )
+      );
+      if (!factions.length) continue;
+    }
+    out.push({ system: s, distanceLy: d, factions });
+  }
+  return out.sort((a, b) => a.distanceLy - b.distanceLy);
+}
+
+// src/tools/systems.ts
+var TIME_LIMIT_MS2 = 2e4;
+var MASSACRE_MARGIN_LY = 2 * SOURCE_RANGE_LY;
+var STALE_HOURS = 72;
+var FAR_STAR_LS = 1e3;
+var Radius = external_exports.number().min(1).max(50).default(50);
+var Limit = external_exports.number().int().min(1).max(100).default(50);
+var Values = external_exports.array(external_exports.string()).optional();
+function registerSystemTools(server, deps) {
+  const now = deps.now ?? Date.now;
+  const resolveNear = async (near, notes) => {
+    if (near) return near;
+    if (deps.journal) {
+      try {
+        const system = (await deps.journal.state())?.location.system;
+        if (system) return system;
+      } catch (err) {
+        notes.push(`Journal unavailable: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
+    const why = notes.length ? ` (${notes.join(" ")})` : "";
+    throw new UserError(`Give near, or set up the journal to use the current system${why}.`);
+  };
+  const ageHours2 = (s) => s.updated_at ? Math.round((now() - Date.parse(s.updated_at)) / 36e5 * 10) / 10 : null;
+  const leg = (ly, t) => legSeconds({ distanceLy: ly, arrivalLs: null, planetary: false, stationKnown: false }, t);
+  const nearestWith = (s, ok2) => {
+    const ls = s.stations.filter((x) => ok2(x.pad)).map((x) => x.arrival_ls ?? Infinity);
+    const min3 = Math.min(...ls);
+    return Number.isFinite(min3) ? Math.round(min3) : null;
+  };
+  const pads = (s) => ({
+    L: nearestWith(s, (p) => p === "L"),
+    M: nearestWith(s, (p) => p === "L" || p === "M"),
+    S: nearestWith(s, (p) => p !== null)
+  });
+  server.registerTool(
+    "systems_by_state",
+    {
+      annotations: {
+        title: "Systems by Faction State",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
+      description: "Find the nearest populated systems with a faction in a given state (e.g. War, Civil War, Election, Boom, Outbreak), or by government, allegiance, controlling power or security. near defaults to the journal location. War and Civil War results say conflict_zones: likely (settlements are not checked). Faction states come from player visits: check age_hours. Uses one Spansh search of all populated systems in radius_ly, cached for an hour; the first call can take 10 s.",
+      inputSchema: {
+        near: external_exports.string().optional().describe("Exact reference system name"),
+        radius_ly: Radius,
+        state: Values.describe("Faction states to match, e.g. ['War', 'Civil War']"),
+        include_pending: external_exports.boolean().default(false),
+        controlling_only: external_exports.boolean().default(false),
+        government: Values,
+        allegiance: Values,
+        power: Values.describe("Controlling power"),
+        security: Values,
+        limit: Limit
+      }
+    },
+    wrap(
+      async (a) => {
+        const q = {
+          states: a.state,
+          includePending: a.include_pending,
+          controllingOnly: a.controlling_only,
+          government: a.government,
+          allegiance: a.allegiance,
+          power: a.power,
+          security: a.security
+        };
+        if (!hasFilter(q)) {
+          throw new UserError(
+            "Give at least one of state, government, allegiance, power or security."
+          );
+        }
+        if (a.controlling_only && !a.state?.length) {
+          throw new UserError(
+            "controlling_only needs state: it limits the state match to the controlling faction."
+          );
+        }
+        const notes = [];
+        const near = await resolveNear(a.near, notes);
+        const rules = await resolveSearchRules(deps, void 0, true);
+        const sweep = await deps.spansh.populatedSystems(near, a.radius_ly, {
+          deadline: now() + TIME_LIMIT_MS2
+        });
+        const matches2 = systemsByState(sweep.systems, sweep.centre, a.radius_ly, q);
+        const shown = matches2.slice(0, a.limit);
+        const stale = shown.filter((m) => (ageHours2(m.system) ?? 0) > STALE_HOURS).length;
+        if (stale) notes.push(`${stale} results have data more than ${STALE_HOURS / 24} days old.`);
+        if (sweep.partial) {
+          notes.push("Spansh did not return every system in time; results may be missing.");
+        }
+        return {
+          near,
+          searched: sweep.systems.length,
+          travel: describeRules(rules).travel,
+          total_matches: matches2.length,
+          partial: sweep.partial,
+          systems: shown.map((m) => {
+            const s = m.system;
+            const war = m.factions.some(
+              (f) => f.active_states.some((x) => /^(war|civil war)$/i.test(x))
+            );
+            const nearest3 = pads(s);
+            const bestPad = nearest3.L !== null ? "L" : nearest3.M !== null ? "M" : nearest3.S !== null ? "S" : null;
+            return {
+              system: s.name,
+              distance_ly: Math.round(m.distanceLy * 100) / 100,
+              jumps: leg(m.distanceLy, rules.travel).jumps,
+              matching_factions: m.factions.map((f) => ({
+                name: f.name,
+                controlling: f.controlling,
+                influence: f.influence,
+                active_states: f.active_states,
+                pending_states: f.pending_states
+              })),
+              government: s.government,
+              allegiance: s.allegiance,
+              security: s.security,
+              controlling_power: s.controlling_power,
+              power_state: s.power_state,
+              best_pad: bestPad,
+              nearest_station_ls: bestPad ? nearest3[bestPad] : null,
+              updated_at: s.updated_at,
+              age_hours: ageHours2(s),
+              ...war ? { conflict_zones: "likely" } : {}
+            };
+          }),
+          notes
+        };
+      }
+    )
+  );
+  server.registerTool(
+    "massacre_targets",
+    {
+      annotations: {
+        title: "Find Massacre Targets",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
+      description: "Find pirate (Anarchy) factions near you with good sources of stackable pirate massacre missions, as Inara's 'nearest massacre missions' does. Sources are populated systems within 10 ly of the target; a primary source has no other pirate faction in other systems within 10 ly (its own pirate faction does not count, as missions send you to another system), so all its massacre missions are for this target. Sources with a faction in War, Civil War or Election are excluded and listed. stack_size is the number of distinct giving factions in the primary sources. Targets whose farthest star is beyond max_star_ls (default 10,000) are left out, because fights there can be far from the arrival star. Ranked by stack_size, then spread_ls, then distance. Results are candidates: mission boards are not published. Pads are listed, not filtered. near defaults to the journal location.",
+      inputSchema: {
+        near: external_exports.string().optional().describe("Exact reference system name"),
+        radius_ly: Radius.describe("Targets within this distance"),
+        max_star_ls: external_exports.number().min(0).default(1e4),
+        limit: Limit,
+        preferences: PrefsPatchSchema.optional(),
+        use_preferences: external_exports.boolean().default(true)
+      }
+    },
+    wrap(
+      async (a) => {
+        const notes = [];
+        const near = await resolveNear(a.near, notes);
+        const rules = await resolveSearchRules(deps, a.preferences, a.use_preferences);
+        const sweep = await deps.spansh.populatedSystems(near, a.radius_ly + MASSACRE_MARGIN_LY, {
+          deadline: now() + TIME_LIMIT_MS2
+        });
+        const { targets, leftOutSpread } = massacreTargets(sweep.systems, sweep.centre, {
+          radiusLy: a.radius_ly,
+          maxStarLs: a.max_star_ls
+        });
+        notes.push(
+          "These are candidates: whether the mission boards have massacre missions now depends on recent player activity."
+        );
+        if (leftOutSpread) {
+          notes.push(
+            `${leftOutSpread} targets left out: a star beyond ${a.max_star_ls} ls. Raise max_star_ls to see them.`
+          );
+        }
+        if (sweep.partial) {
+          notes.push(
+            "Spansh did not return every system in time: a source can look primary when a pirate faction near the edge was missed."
+          );
+        }
+        return {
+          near,
+          searched: sweep.systems.length,
+          left_out_spread: leftOutSpread,
+          partial: sweep.partial,
+          travel: describeRules(rules).travel,
+          targets: targets.slice(0, a.limit).map((t) => ({
+            target_faction: t.faction,
+            target_system: t.system.name,
+            distance_ly: Math.round(t.distanceLy * 100) / 100,
+            travel_min: Math.round(leg(t.distanceLy, rules.travel).seconds / 6) / 10,
+            stack_size: t.stackSize,
+            spread_ls: Math.round(t.spreadLs),
+            far_stars: t.system.stars.filter((s) => s.arrival_ls > FAR_STAR_LS).map((s) => ({ name: s.name, arrival_ls: Math.round(s.arrival_ls) })),
+            sources: t.sources.map((s) => {
+              const counts2 = { federation: 0, empire: 0, alliance: 0, independent: 0 };
+              for (const f of s.system.factions) {
+                const k = f.allegiance?.toLowerCase();
+                if (!isAnarchy(f) && k && k in counts2) counts2[k]++;
+              }
+              return {
+                system: s.system.name,
+                primary: s.primary,
+                other_pirates: s.otherPirates,
+                distance_to_target_ly: Math.round(s.distanceToTargetLy * 100) / 100,
+                allegiance_counts: counts2,
+                pads: pads(s.system),
+                factions: s.system.factions.map((f) => ({
+                  name: f.name,
+                  allegiance: f.allegiance,
+                  active_states: f.active_states
+                })),
+                updated_at: s.system.updated_at,
+                age_hours: ageHours2(s.system)
+              };
+            }),
+            excluded: t.excluded
+          })),
+          notes
+        };
+      }
+    )
+  );
+}
+
 // src/tools/inara.ts
 function registerInaraTools(server, deps) {
   server.registerTool(
     "inara_commander_profile",
     {
+      annotations: {
+        title: "Inara Commander Profile",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Commander profile from Inara: ranks with progress, allegiance, power, main ship type, squadron and Inara URL. Omit name for your own commander. Inara does not expose location, loadout or materials; use EDSM or CAPI tools for those. Cached 60 s.",
       inputSchema: { name: external_exports.string().optional() }
     },
@@ -45210,7 +46966,16 @@ function registerInaraTools(server, deps) {
   );
   server.registerTool(
     "inara_community_goals",
-    { description: "Recent and active community goals from Inara. Cached 60 s." },
+    {
+      annotations: {
+        title: "Community Goals",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
+      description: "Recent and active community goals from Inara. Cached 60 s."
+    },
     wrap(async () => deps.inara.communityGoals())
   );
 }
@@ -45221,6 +46986,13 @@ function registerEdsmTools(server, deps) {
   server.registerTool(
     "edsm_commander_location",
     {
+      annotations: {
+        title: "Commander Location",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Commander's last known system, coordinates, docked station and ship, from EDSM. Cached 60 s."
     },
     wrap(async () => deps.edsm.position())
@@ -45228,6 +47000,13 @@ function registerEdsmTools(server, deps) {
   server.registerTool(
     "edsm_commander_materials",
     {
+      annotations: {
+        title: "EDSM Commander Materials",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Commander's engineering materials (raw and manufactured), encoded data, and cargo, from EDSM. kinds defaults to all three. Cached 60 s.",
       inputSchema: { kinds: external_exports.array(Kind).min(1).optional() }
     },
@@ -45306,13 +47085,13 @@ function buildPool(a, catalog) {
     const byEngineer = /* @__PURE__ */ new Map();
     for (const item of a.plan.items) {
       if (!item.engineer || item.status === "done" || item.status === "skipped") continue;
-      const entry = byEngineer.get(lc(item.engineer)) ?? {
+      const entry2 = byEngineer.get(lc(item.engineer)) ?? {
         id: item.id,
         name: item.engineer,
         descriptions: []
       };
-      entry.descriptions.push(item.description);
-      byEngineer.set(lc(item.engineer), entry);
+      entry2.descriptions.push(item.description);
+      byEngineer.set(lc(item.engineer), entry2);
     }
     const baseFor = /* @__PURE__ */ new Map();
     if (catalog) {
@@ -45548,6 +47327,13 @@ function registerRouteTools(server, deps) {
   server.registerTool(
     "route_stops",
     {
+      annotations: {
+        title: "Plan Route Stops",
+        readOnlyHint: false,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Order the stops for a build: shops, material traders and engineers, from a plan (plan_id) or a list (stops). Uses Spansh coordinates and the travel-time model. For each engineer stop, set `after` to the shops and traders that supply what that engineer needs (the module to buy, the materials to trade). Give `after: []` to an engineer who needs nothing from the other stops, so they can come first. Without your rules, a plan puts every engineer after every shop and trader. Use `one_of` for alternatives, for example two engineers who both do the work; the tool tries every combination (at most 16) and keeps the fastest. `only` and `skip` choose stops from the plan, so one plan can serve several trips. One place (the same engineer, or the same system and station) can be an option in several groups; it is visited once, and each stop's `meets` lists the groups it covers. Leg times are estimates from straight-line jumps; pass plot: true to plot the chosen route with Spansh.",
       inputSchema: {
         plan_id: external_exports.string().optional(),
@@ -45589,8 +47375,8 @@ function registerRouteTools(server, deps) {
         );
         const cycle = findCycle(graph);
         if (cycle) {
-          const path12 = [...cycle, cycle[0]].map((i) => names(all[i]).join("+"));
-          throw new UserError(`The after rules form a cycle: ${path12.join(" -> ")}`);
+          const path15 = [...cycle, cycle[0]].map((i) => names(all[i]).join("+"));
+          throw new UserError(`The after rules form a cycle: ${path15.join(" -> ")}`);
         }
         const rules = await resolveSearchRules(deps, a.preferences, a.use_preferences);
         const travel = rules.travel;
@@ -45835,19 +47621,23 @@ function registerRouteTools(server, deps) {
         const total = min2(totalSeconds);
         let saved = false;
         if (a.save_to_plan && a.plan_id) {
-          await deps.plans.setRoute(a.plan_id, {
-            computed_at: new Date(now()).toISOString(),
-            from: startPlace.system,
-            stops: [
-              ...solved.order.map(optionLabel),
-              ...returnPlace ? [
-                `return to ${returnPlace.system}${returnPlace.station ? ` \u2014 ${returnPlace.station}` : ""}`
-              ] : []
-            ],
-            total_min: total,
-            plotted: a.plot && allPlotted
-          });
-          saved = true;
+          try {
+            await deps.plans.setRoute(a.plan_id, {
+              computed_at: new Date(now()).toISOString(),
+              from: startPlace.system,
+              stops: [
+                ...solved.order.map(optionLabel),
+                ...returnPlace ? [
+                  `return to ${returnPlace.system}${returnPlace.station ? ` \u2014 ${returnPlace.station}` : ""}`
+                ] : []
+              ],
+              total_min: total,
+              plotted: a.plot && allPlotted
+            });
+            saved = true;
+          } catch (err) {
+            notes.add(`The route was not saved to plan "${a.plan_id}": ${reason(err)}`);
+          }
         }
         return {
           start: { system: startPlace.system, station: startPlace.station, source },
@@ -45873,66 +47663,26 @@ function registerRouteTools(server, deps) {
 
 // src/tools/plans.ts
 import { randomUUID as randomUUID2 } from "crypto";
-import { mkdir as mkdir5, readFile as readFile9, rename as rename5, stat as stat6, unlink as unlink2, writeFile as writeFile5 } from "fs/promises";
-import path11 from "path";
+import { mkdir as mkdir6, readFile as readFile7, rename as rename5, stat as stat7, unlink as unlink2, writeFile as writeFile5 } from "fs/promises";
+import path13 from "path";
+var MAX_ECHOED_PLAN = 100 * 1024;
+function registerPlanTools(server, deps) {
+  const { plans, warnings } = deps;
+  const saveOrReturnJson = async (input2, tooLargeAdvice, opts = {}) => {
+    const parsed = PlanInputSchema.safeParse(input2);
+    if (!parsed.success) throw new UserError(`Invalid plan: ${external_exports.prettifyError(parsed.error)}`);
+    try {
+      return await plans.upsert(parsed.data, opts);
+    } catch (err) {
+      if (err instanceof PlanExistsError) throw err;
+      const json3 = JSON.stringify(parsed.data, null, 2);
+      const tail = json3.length > MAX_ECHOED_PLAN ? `The plan was not saved, and it is too large to include here. ${tooLargeAdvice}` : `The plan was not saved. Save this JSON and load it later with plan_import:
+${json3}`;
+      throw new UserError(`${reason(err)}
 
-// src/plans/markdown.ts
-var box = {
-  todo: "[ ]",
-  in_progress: "[~]",
-  done: "[x]",
-  skipped: "[-]"
-};
-function planToMarkdown(plan) {
-  const done = plan.items.filter((i) => i.status === "done" || i.status === "skipped").length;
-  const out = [
-    `# ${plan.name}`,
-    "",
-    `Plan \`${plan.id}\` \xB7 updated ${plan.updated_at} \xB7 ${done}/${plan.items.length} done`,
-    ""
-  ];
-  if (plan.notes) out.push(plan.notes, "");
-  if (plan.items.length) {
-    out.push("## Items", "");
-    for (const i of plan.items) {
-      const where = [
-        i.station ? `at ${i.station}` : void 0,
-        i.engineer ? `engineer ${i.engineer}` : void 0
-      ].filter(Boolean);
-      out.push(
-        `- ${box[i.status]} **${i.kind}** ${i.description}${where.length ? ` \u2014 ${where.join(", ")}` : ""}`
-      );
-      if (i.materials?.length) {
-        out.push(`  - Materials: ${i.materials.map((m) => `${m.count}\xD7 ${m.name}`).join(", ")}`);
-      }
-      if (i.notes) out.push(`  - Notes: ${i.notes}`);
+${tail}`);
     }
-    out.push("");
-  }
-  if (plan.stops.length) {
-    out.push("## Stops", "");
-    plan.stops.forEach((s, n) => {
-      out.push(`${n + 1}. ${s.system}${s.station ? ` \u2014 ${s.station}` : ""}: ${s.purpose}`);
-    });
-    out.push("");
-  }
-  if (plan.route) {
-    out.push("## Route", "");
-    plan.route.stops.forEach((s, n) => out.push(`${n + 1}. ${s}`));
-    const r = plan.route;
-    const kind2 = r.plotted ? "plotted" : "estimate";
-    out.push(
-      "",
-      `From ${r.from}; ${kind2}. Total ${r.total_min} min, computed ${r.computed_at}`,
-      ""
-    );
-  }
-  return out.join("\n");
-}
-
-// src/tools/plans.ts
-function registerPlanTools(server, deps) {
-  const { plans } = deps;
+  };
   const exports = /* @__PURE__ */ new Map();
   const serialise = (target, fn) => {
     const key = process.platform === "linux" ? target : target.toLowerCase();
@@ -45945,25 +47695,61 @@ function registerPlanTools(server, deps) {
   };
   server.registerTool(
     "plan_list",
-    { description: "List saved build plans with item counts and progress." },
-    wrap(async () => plans.list())
+    {
+      annotations: {
+        title: "List Plans",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
+      description: "List saved build plans with item counts and progress."
+    },
+    wrapWarn(async () => plans.list(), warnings)
   );
   server.registerTool(
     "plan_get",
-    { description: "Get a saved plan by id.", inputSchema: { id: external_exports.string() } },
-    wrap(async ({ id }) => plans.get(id))
+    {
+      annotations: {
+        title: "Get Plan",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
+      description: "Get a saved plan by id.",
+      inputSchema: { id: external_exports.string() }
+    },
+    wrapWarn(async ({ id }) => plans.get(id), warnings)
   );
   server.registerTool(
     "plan_upsert",
     {
+      annotations: {
+        title: "Save Plan",
+        readOnlyHint: false,
+        destructiveHint: true,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: "Create or replace a build plan. Items are things to buy, engineer, unlock, gather or trade, plus refits (moving modules between slots, storing modules, or a fitting decision); stops are the places to visit (optionally with label, kind and after rules); route is the saved visiting order. Replacing keeps created_at.",
       inputSchema: { plan: PlanInputSchema }
     },
-    wrap(async ({ plan }) => plans.upsert(plan))
+    wrapWarn(
+      async ({ plan }) => saveOrReturnJson(plan, "Ask Claude to save it again later."),
+      warnings
+    )
   );
   server.registerTool(
     "plan_update_item",
     {
+      annotations: {
+        title: "Update Plan Item",
+        readOnlyHint: false,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: "Set the status and/or notes of one plan item.",
       inputSchema: {
         plan_id: external_exports.string(),
@@ -45972,26 +47758,57 @@ function registerPlanTools(server, deps) {
         notes: external_exports.string().optional()
       }
     },
-    wrap(
+    wrapWarn(
       async (a) => {
         if (a.status === void 0 && a.notes === void 0) {
           throw new UserError("Give status or notes to update");
         }
-        return plans.updateItem(a.plan_id, a.item_id, { status: a.status, notes: a.notes });
-      }
+        try {
+          return await plans.updateItem(a.plan_id, a.item_id, {
+            status: a.status,
+            notes: a.notes
+          });
+        } catch (err) {
+          const changes = [
+            ...a.status !== void 0 ? [`status: ${a.status}`] : [],
+            ...a.notes !== void 0 ? ["notes changed"] : []
+          ].join(", ");
+          throw new UserError(
+            `Item "${a.item_id}" in plan "${a.plan_id}" was not updated (${changes}). ${reason(err)}`
+          );
+        }
+      },
+      warnings
     )
   );
   server.registerTool(
     "plan_delete",
-    { description: "Delete a saved plan.", inputSchema: { id: external_exports.string() } },
-    wrap(async ({ id }) => {
+    {
+      annotations: {
+        title: "Delete Plan",
+        readOnlyHint: false,
+        destructiveHint: true,
+        idempotentHint: true,
+        openWorldHint: false
+      },
+      description: "Delete a saved plan.",
+      inputSchema: { id: external_exports.string() }
+    },
+    wrapWarn(async ({ id }) => {
       await plans.delete(id);
       return { deleted: id };
-    })
+    }, warnings)
   );
   server.registerTool(
     "plan_export",
     {
+      annotations: {
+        title: "Export Plan",
+        readOnlyHint: false,
+        destructiveHint: true,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: "Export a plan as Markdown (default) or JSON. Without path, returns the text (markdown) or the plan (json). With path (absolute or ~/...), writes the file. A JSON file can be loaded again with plan_import.",
       inputSchema: {
         id: external_exports.string(),
@@ -46000,7 +47817,7 @@ function registerPlanTools(server, deps) {
         overwrite: external_exports.boolean().optional()
       }
     },
-    wrap(
+    wrapWarn(
       async (a) => {
         const plan = await plans.get(a.id);
         const json3 = a.format === "json";
@@ -46014,7 +47831,7 @@ function registerPlanTools(server, deps) {
           if (!a.overwrite && await exists(target)) {
             throw new UserError(`${target} exists; pass overwrite: true to replace it`);
           }
-          await mkdir5(path11.dirname(target), { recursive: true });
+          await mkdir6(path13.dirname(target), { recursive: true });
           const tmp = `${target}.${process.pid}.${randomUUID2()}.tmp`;
           try {
             await writeFile5(tmp, text);
@@ -46025,12 +47842,20 @@ function registerPlanTools(server, deps) {
           }
         });
         return { path: target, bytes: Buffer.byteLength(text) };
-      }
+      },
+      warnings
     )
   );
   server.registerTool(
     "plan_import",
     {
+      annotations: {
+        title: "Import Plan",
+        readOnlyHint: false,
+        destructiveHint: true,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: "Load a plan from a JSON file written by plan_export (absolute or ~/... path). id replaces the id in the file. Refuses to replace an existing plan unless overwrite is true.",
       inputSchema: {
         path: external_exports.string(),
@@ -46038,14 +47863,14 @@ function registerPlanTools(server, deps) {
         overwrite: external_exports.boolean().optional()
       }
     },
-    wrap(async (a) => {
+    wrapWarn(async (a) => {
       const source = resolveUserPath(a.path);
       let raw;
       try {
-        if ((await stat6(source)).isDirectory()) {
+        if ((await stat7(source)).isDirectory()) {
           throw new UserError(`${source} is a directory, not a plan file`);
         }
-        raw = await readFile9(source, "utf8");
+        raw = await readFile7(source, "utf8");
       } catch (err) {
         if (err instanceof UserError) throw err;
         if (err.code === "ENOENT") {
@@ -46064,13 +47889,15 @@ function registerPlanTools(server, deps) {
       }
       const parsed = PlanInputSchema.safeParse(json3);
       if (!parsed.success) throw new UserError(`Invalid plan: ${external_exports.prettifyError(parsed.error)}`);
-      return plans.upsert(parsed.data, { overwrite: a.overwrite === true });
-    })
+      return saveOrReturnJson(parsed.data, "Keep your original file and try again later.", {
+        overwrite: a.overwrite === true
+      });
+    }, warnings)
   );
 }
 async function exists(p) {
   try {
-    await stat6(p);
+    await stat7(p);
     return true;
   } catch (err) {
     if (err.code === "ENOENT") return false;
@@ -46083,17 +47910,31 @@ function registerPrefsTools(server, deps) {
   server.registerTool(
     "prefs_get",
     {
+      annotations: {
+        title: "Get Preferences",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: "Get the commander's stored travel preferences used by station searches: maximum arrival distance (soft/hard/off), planetary, fleet carrier and megaship rules, minimum pad (auto = current ship), permit-locked systems (allow/exclude), and the travel-time model (jump range and the share of the journal's unladen range that auto uses, seconds per jump, supercruise curve, docking, planetary time, value of time in cr/h)."
     },
-    wrap(async () => deps.prefs.get())
+    wrapWarn(async () => deps.prefs.get(), deps.warnings)
   );
   server.registerTool(
     "prefs_set",
     {
+      annotations: {
+        title: "Set Preferences",
+        readOnlyHint: false,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: 'Change stored travel preferences with a partial patch, for example {"stations":{"max_arrival_ls":{"value":2000}}}. Saved for future sessions; returns the full preferences. For a one-off change pass `preferences` to the search tool instead.',
       inputSchema: { patch: PrefsPatchSchema }
     },
-    wrap(async ({ patch }) => deps.prefs.set(patch))
+    wrapWarn(async ({ patch }) => deps.prefs.set(patch), deps.warnings)
   );
 }
 
@@ -46191,6 +48032,13 @@ function registerStationTools(server, deps) {
   server.registerTool(
     "station_info",
     {
+      annotations: {
+        title: "Station Info",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
       description: "What the station you last opened a screen at sells, from the game's own files in the journal folder (Market.json, Outfitting.json, Shipyard.json). Complete and current, but only for the latest station of each kind. part: market (commodities sold and bought, each with price, stock or demand and vs_mean_pct), outfitting (modules by group with price), shipyard (ships by price) or all (a short summary of each, the default). commodity filters the market by name; search filters modules by name, group, symbol or class and rating (for example '5A'). Notes flag data that is old or from a station other than the docked one.",
       inputSchema: {
         part: external_exports.enum(["all", "market", "outfitting", "shipyard"]).optional(),
@@ -46271,22 +48119,22 @@ function registerStationTools(server, deps) {
 }
 
 // src/tools/spansh.ts
-var Service = external_exports.enum([
-  "material_trader_raw",
-  "material_trader_manufactured",
-  "material_trader_encoded",
-  "tech_broker_human",
-  "tech_broker_guardian",
-  "interstellar_factors"
-]);
-var Limit = external_exports.number().int().min(1).max(50).default(10);
+var Service = external_exports.enum(STATION_SERVICES);
+var Limit2 = external_exports.number().int().min(1).max(50).default(10);
 function registerSpanshTools(server, deps) {
   const { spansh } = deps;
   const now = deps.now ?? Date.now;
   server.registerTool(
     "spansh_find_stations",
     {
-      description: "Find the best stations near a system, ranked by travel time and cost, that sell a module or ship, or offer a service (material trader, tech broker, interstellar factors). Give exactly one of module, ship, service. Module names are generic (e.g. 'Frame Shift Drive') with class 1-8 and rating A-I; give class and rating to compare prices. Applies the commander's stored travel preferences (arrival distance, station types, pad size from the current ship, travel-time model); override any of them for this call with `preferences` (same shape as prefs_set's patch) or ignore them with use_preferences=false. Returns total (Spansh matches before preferences; 10000 means 10000 or more), matched (matches after preferences among the stations fetched: the nearest 50, or up to 100 when the arrival limit was relaxed). Stations are ranked by estimated travel time (jumps plus supercruise, docking and planetary time) and, for purchases, by effective cost = price + travel time \xD7 the commander's credits_per_hour. Each station has jumps, travel_s, travel_min, arrival_assumed, effective_cost and discount_pct (versus the median price); recommended explains the trade-off. Stations in permit-locked systems are left out unless permit_systems is allow, which keeps them with needs_permit: true. Also returns any relaxed rules, the applied preferences and notes. Cached 5 min.",
+      annotations: {
+        title: "Find Stations",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
+      description: "Find the best stations near a system, ranked by travel time and cost, that sell a module or ship, or offer a service: material traders, tech brokers, interstellar factors, black market, Universal Cartographics, Vista Genomics, Search and Rescue, refuel, repair, restock, shipyard, outfitting, market and more (see the service enum). Give exactly one of module, ship, service. Module names are generic (e.g. 'Frame Shift Drive') with class 1-8 and rating A-I; give class and rating to compare prices. Applies the commander's stored travel preferences (arrival distance, station types, pad size from the current ship, travel-time model); override any of them for this call with `preferences` (same shape as prefs_set's patch) or ignore them with use_preferences=false. Returns total (Spansh matches before preferences; 10000 means 10000 or more), matched (matches after preferences among the stations fetched: the nearest 50, or up to 100 when the arrival limit was relaxed). Stations are ranked by estimated travel time (jumps plus supercruise, docking and planetary time) and, for purchases, by effective cost = price + travel time \xD7 the commander's credits_per_hour. Each station has jumps, travel_s, travel_min, arrival_assumed, effective_cost and discount_pct (versus the median price); recommended explains the trade-off. Stations in permit-locked systems are left out unless permit_systems is allow, which keeps them with needs_permit: true. Also returns any relaxed rules, the applied preferences and notes. Cached 5 min.",
       inputSchema: {
         near: external_exports.string().describe("Exact reference system name"),
         module: external_exports.object({
@@ -46300,7 +48148,7 @@ function registerSpanshTools(server, deps) {
         max_distance_ly: external_exports.number().positive().optional(),
         preferences: PrefsPatchSchema.optional(),
         use_preferences: external_exports.boolean().default(true),
-        limit: Limit
+        limit: Limit2
       }
     },
     wrap(
@@ -46326,14 +48174,28 @@ function registerSpanshTools(server, deps) {
   server.registerTool(
     "spansh_system",
     {
+      annotations: {
+        title: "Look Up System",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Look up a system by exact name: coordinates, allegiance, permit, and its stations sorted by distance from arrival (limit applies to stations). Cached 24 h.",
-      inputSchema: { name: external_exports.string(), limit: Limit }
+      inputSchema: { name: external_exports.string(), limit: Limit2 }
     },
     wrap(async (a) => spansh.system(a.name, a.limit))
   );
   server.registerTool(
     "spansh_route",
     {
+      annotations: {
+        title: "Plot Route",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Plot a neutron-boosted route between two systems for a laden jump range in LY. Returns waypoints with jumps needed to reach each. May take a while; if it says still plotting, call again with the same arguments. Cached 5 min.",
       inputSchema: {
         from: external_exports.string(),
@@ -46444,7 +48306,7 @@ function recommendCommodityStation(stations, mode, maxAgeHours = Infinity) {
   const best = stations.find(
     (h) => h.market_age_hours === null || h.market_age_hours <= maxAgeHours
   );
-  const reason = (b) => {
+  const reason2 = (b) => {
     const trip = `about ${b.travel_min} min`;
     if (b.value === null) {
       return `${mode === "sell" ? "highest" : "lowest"} price, ${credits2(b.price ?? 0)} cr, ${trip}`;
@@ -46454,7 +48316,7 @@ function recommendCommodityStation(stations, mode, maxAgeHours = Infinity) {
     }
     return `best ${mode === "sell" ? "net return" : "total cost"} after travel time: ${credits2(b.value)} cr, ${trip}`;
   };
-  return best ? { name: best.name, system: best.system, reason: reason(best) } : null;
+  return best ? { name: best.name, system: best.system, reason: reason2(best) } : null;
 }
 
 // src/tools/trade.ts
@@ -46512,6 +48374,13 @@ function registerTradeTools(server, deps) {
   server.registerTool(
     "trade_route",
     {
+      annotations: {
+        title: "Find Trade Route",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Plan a multi-hop trade run with the Spansh trade planner and rank it by profit per hour. Starts at from_system/from_station, or the docked station from the game journal. Cargo and capital default to the journal's ship and credits (else 7 t and 1000 cr). Pad size, planetary stations and fleet carriers and a hard arrival-distance limit come from the commander's travel preferences. Returns hops with commodities to buy and sell, profit, travel_min, total_profit, total_travel_min and profit_per_hour (from the travel-time model), plus the resolved inputs. Spansh takes one to several minutes: if the result is status pending, call again with the inputs it shows to resume. Finished routes are cached 5 min.",
       inputSchema: {
         from_system: external_exports.string().optional(),
@@ -46653,6 +48522,13 @@ function registerTradeTools(server, deps) {
   server.registerTool(
     "commodity_prices",
     {
+      annotations: {
+        title: "Commodity Prices",
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true
+      },
       description: "Find the best stations near a system to sell or buy one commodity, from Spansh market data, filtered and ranked with the commander's travel preferences. Stations show price, demand (sell) or supply (buy), market_age_hours and travel_min. Give amount (tonnes) to rank by value = price \xD7 amount \u2213 travel time \xD7 credits_per_hour (minus when selling, plus when buying); otherwise ranked by price. Searches within max_distance_ly of near (default the journal's current system) and only markets updated within max_price_age_days. Stations must have demand or supply of at least amount (else 1). Stations in permit-locked systems are left out unless permit_systems is allow. recommended names the best station and why. Cached 5 min.",
       inputSchema: {
         commodity: external_exports.string().describe("Exact English commodity name, e.g. Gold"),
@@ -46709,7 +48585,7 @@ function registerTradeTools(server, deps) {
           now
         });
         notes.push(...screen.notes);
-        const open3 = mode === "exclude" ? ranked.stations.filter((h) => !screen.locked(h.system)) : ranked.stations;
+        const open4 = mode === "exclude" ? ranked.stations.filter((h) => !screen.locked(h.system)) : ranked.stations;
         const applied_preferences = describeRules(rules);
         if (!found.stations.length) {
           notes.push("No stations found; check the exact English commodity name");
@@ -46727,7 +48603,7 @@ function registerTradeTools(server, deps) {
         return {
           near: found.near,
           total: found.total,
-          matched: open3.length,
+          matched: open4.length,
           stations: screen.kept.map((st) => ({
             ...st,
             ...screen.locked(st.system) ? { needs_permit: true } : {},
@@ -46757,14 +48633,150 @@ function registerTradeTools(server, deps) {
   );
 }
 
+// src/tools/settings.ts
+import { access as access2 } from "fs/promises";
+import path14 from "path";
+async function exists2(file2) {
+  return access2(file2).then(
+    () => true,
+    () => false
+  );
+}
+async function existing(dir, names) {
+  const found = [];
+  for (const n of names) if (await exists2(path14.join(dir, n))) found.push(n);
+  return found;
+}
+function registerSettingsTools(server, deps) {
+  server.registerTool(
+    "settings_open",
+    {
+      annotations: {
+        title: "Open Settings Page",
+        // Not read-only: it starts a local page that saves keys.
+        readOnlyHint: false,
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false
+      },
+      description: "Open the ed-mcp settings page in the browser, where the user enters or clears Inara and EDSM API keys and commander names. Keys entered there apply at once, without a restart, and sync (encrypted) when a sync folder and password are set. Never ask the user to type a key into the chat; use this page."
+    },
+    wrap(async () => {
+      const { url: url2, expires_at, opened } = await deps.page.open();
+      return opened ? {
+        opened: true,
+        expires_at,
+        next: "Ask the user to enter their keys in the browser tab that opened and press Save."
+      } : {
+        opened: false,
+        url: url2,
+        expires_at,
+        next: "Ask the user to open this link in their browser, enter their keys and press Save."
+      };
+    })
+  );
+  server.registerTool(
+    "settings_status",
+    {
+      annotations: {
+        title: "Settings Status",
+        // Not read-only: a status call can copy environment keys into the store once (seed-once).
+        readOnlyHint: false,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      },
+      description: "Where ed-mcp keeps its data: the sync folder and whether it is available, whether secrets are encrypted, where each API key comes from (environment or saved), whether a Frontier login is saved, any sync conflict copies, and notes on settings that look mismatched between Claude apps. An `update` line says when a newer ed-mcp release is available. Never returns key values."
+    },
+    wrap(async () => {
+      let syncFolder = null;
+      if (deps.sync) {
+        try {
+          await deps.sync.check();
+          syncFolder = { path: deps.sync.dir, available: true };
+        } catch (err) {
+          if (!(err instanceof UserError)) throw err;
+          syncFolder = { path: deps.sync.dir, available: false, error: err.message };
+        }
+      }
+      let readable = true;
+      let secretsError;
+      let frontier = false;
+      try {
+        frontier = !!(await deps.secrets.get()).capi;
+      } catch (err) {
+        if (!(err instanceof UserError)) throw err;
+        readable = false;
+        secretsError = err.message;
+      }
+      const sources = await deps.settings.sources();
+      const notes = [...deps.notes ?? []];
+      if (deps.sync && deps.localDir && path14.resolve(deps.localDir) !== path14.resolve(deps.sync.dir)) {
+        const own2 = path14.resolve(deps.secrets.file);
+        const localDir = deps.localDir;
+        const files = (await existing(localDir, [
+          "plans.json",
+          "preferences.json",
+          "secrets.json",
+          "secrets.enc"
+        ])).filter((n) => path14.resolve(localDir, n) !== own2);
+        if (files.length > 0) {
+          notes.push(
+            `The settings folder ${deps.localDir} also holds ${files.join(", ")}. Another Claude app on this computer may not have the sync folder set. Give every Claude app the same ED_MCP_SYNC_DIR and ED_MCP_SYNC_PASSWORD.`
+          );
+        }
+      }
+      if (deps.secrets.encrypted) {
+        const dir = path14.dirname(deps.secrets.file);
+        if (await exists2(path14.join(dir, "secrets.json"))) {
+          notes.push(
+            `${dir} holds both secrets.enc and secrets.json. A Claude app without ED_MCP_SYNC_PASSWORD uses secrets.json. Give every Claude app the same password, then delete secrets.json.`
+          );
+        }
+      }
+      return {
+        sync_folder: syncFolder,
+        secrets: {
+          file: deps.secrets.file,
+          encrypted: deps.secrets.encrypted,
+          readable,
+          ...secretsError ? { error: secretsError } : {}
+        },
+        inara: sources.inara,
+        edsm: sources.edsm,
+        frontier_login: frontier,
+        conflicts: await deps.syncWarnings?.() ?? [],
+        notes,
+        update: await deps.update?.() ?? null
+      };
+    })
+  );
+}
+
 // src/server.ts
-function createServer2(deps) {
+function createServer3(deps) {
   const server = new McpServer({ name: "ed-mcp", version: VERSION });
   if (deps.caches) {
     registerCacheTools(server, { caches: deps.caches, refreshables: deps.refreshables });
   }
-  if (deps.plans) registerPlanTools(server, { plans: deps.plans });
-  if (deps.prefs) registerPrefsTools(server, { prefs: deps.prefs });
+  if (deps.plans)
+    registerPlanTools(server, {
+      plans: deps.plans,
+      warnings: deps.planWarnings ?? deps.syncWarnings
+    });
+  if (deps.prefs) registerPrefsTools(server, { prefs: deps.prefs, warnings: deps.syncWarnings });
+  if (deps.settingsPage && deps.settings && deps.secrets) {
+    registerSettingsTools(server, {
+      page: deps.settingsPage,
+      settings: deps.settings,
+      secrets: deps.secrets,
+      sync: deps.sync,
+      syncWarnings: deps.syncWarnings,
+      localDir: deps.localDir,
+      notes: deps.notes,
+      update: deps.versionCheck ? () => deps.versionCheck.notice() : void 0
+    });
+  }
   if (deps.catalog) registerCatalogTools(server, { catalog: deps.catalog });
   if (deps.inara) registerInaraTools(server, { inara: deps.inara });
   if (deps.edsm) registerEdsmTools(server, { edsm: deps.edsm });
@@ -46789,6 +48801,13 @@ function createServer2(deps) {
       currentShip: deps.currentShip,
       jumpRange: deps.jumpRange
     });
+    registerSystemTools(server, {
+      spansh: deps.spansh,
+      journal: deps.journal,
+      prefs: deps.prefs,
+      currentShip: deps.currentShip,
+      jumpRange: deps.jumpRange
+    });
   }
   if (deps.catalog && deps.spansh) {
     registerMaterialsTools(server, {
@@ -46825,7 +48844,12 @@ function createServer2(deps) {
   if (deps.capiAuth && deps.capi) {
     registerCapiTools(server, { capiAuth: deps.capiAuth, capi: deps.capi });
   }
-  if (deps.journal) registerJournalTools(server, { journal: deps.journal, catalog: deps.catalog });
+  if (deps.journal)
+    registerJournalTools(server, {
+      journal: deps.journal,
+      catalog: deps.catalog,
+      update: deps.versionCheck ? () => deps.versionCheck.notice() : void 0
+    });
   if (deps.journal) registerStationTools(server, { journal: deps.journal, catalog: deps.catalog });
   registerBuildTools(server, { catalog: deps.catalog });
   if (deps.ships) {
@@ -46843,7 +48867,9 @@ function createServer2(deps) {
 // src/index.ts
 async function main() {
   const config2 = loadConfig(process.env, defaultDirs());
-  const server = createServer2(buildDeps(config2));
+  const deps = buildDeps(config2);
+  deps.versionCheck?.start();
+  const server = createServer3(deps);
   await server.connect(new StdioServerTransport());
 }
 main().catch((err) => {