flatbread-cli 0.1.0 → 0.3.0

package/dist/flatbread.mjs

@@ -6,11 +6,11 @@ var __export = (target, all) => {
 };
 
 // src/index.ts
-import { spawn as spawn2 } from "node:child_process";
-import fs19 from "node:fs";
-import os7 from "node:os";
-import path18 from "node:path";
-import { fileURLToPath } from "node:url";
+import { spawn as spawn3 } from "node:child_process";
+import fs22 from "node:fs";
+import os8 from "node:os";
+import path21 from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // ../../node_modules/zod/v3/external.js
 var external_exports = {};
@@ -490,8 +490,8 @@ function getErrorMap() {
 
 // ../../node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path19, errorMaps, issueData } = params;
-  const fullPath = [...path19, ...issueData.path || []];
+  const { data, path: path22, errorMaps, issueData } = params;
+  const fullPath = [...path22, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -607,11 +607,11 @@ var errorUtil;
 
 // ../../node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path19, key) {
+  constructor(parent, value, path22, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path19;
+    this._path = path22;
     this._key = key;
   }
   get path() {
@@ -4340,6 +4340,15 @@ var VERDICT_WORDS = {
   "not-rerun": { short: "not re-run", phrase: "no test after the last edit" },
   "no-edits": { short: "no edits", phrase: null }
 };
+function treeWords(lineage) {
+  if (lineage?.dirtyFiles === void 0) return null;
+  const total = lineage.dirtyFiles.length + (lineage.dirtyFilesOmitted ?? 0);
+  if (lineage.commitNamed === true) {
+    if (total === 0) return "clean at that commit";
+    return total === 1 ? "1 file differs from that commit" : `${total} files differ from that commit`;
+  }
+  return total === 0 ? "clean tree" : `${total} uncommitted file${total === 1 ? "" : "s"}`;
+}
 function escapeRegExp(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
@@ -4375,8 +4384,8 @@ function firstLine(text2) {
 function labelOf(step, cwd) {
   const tool = step.tool;
   if (tool === void 0) return step.type;
-  const path19 = firstString(tool.input, FILE_PATH_KEYS);
-  if (path19 !== void 0) return `${tool.name} ${repoRelative(path19, cwd)}`;
+  const path22 = firstString(tool.input, FILE_PATH_KEYS);
+  if (path22 !== void 0) return `${tool.name} ${repoRelative(path22, cwd)}`;
   const other = firstString(tool.input, TARGET_KEYS);
   if (other !== void 0) return cut(`${tool.name}: ${repoRelative(firstLine(other), cwd)}`, BRIEF_LIMITS.quote);
   return tool.name;
@@ -4624,9 +4633,9 @@ function runDiagnostics(trace) {
       searches.set(key, found);
     }
   }
-  for (const [path19, entries] of reads) {
+  for (const [path22, entries] of reads) {
     const hit = densest(entries, WASTE_RULES.repeatedRead.times, WASTE_RULES.repeatedRead.windowMinutes * 6e4);
-    if (hit) waste.push({ kind: "repeated-read", path: path19, steps: hit, windowMinutes: WASTE_RULES.repeatedRead.windowMinutes });
+    if (hit) waste.push({ kind: "repeated-read", path: path22, steps: hit, windowMinutes: WASTE_RULES.repeatedRead.windowMinutes });
   }
   for (const { label, entries } of searches.values()) {
     const hit = densest(entries, WASTE_RULES.repeatedSearch.times, WASTE_RULES.repeatedSearch.windowMinutes * 6e4);
@@ -4704,19 +4713,19 @@ function filesOf(steps, cwd) {
   const patches = [];
   steps.forEach((step, index) => {
     if (!isSuccessfulEdit(step) || step.tool === void 0) return;
-    const path19 = repoRelative(firstString(step.tool.input, FILE_PATH_KEYS), cwd);
-    const file = files.get(path19) ?? { path: path19 };
+    const path22 = repoRelative(firstString(step.tool.input, FILE_PATH_KEYS), cwd);
+    const file = files.get(path22) ?? { path: path22 };
     if (step.diff !== void 0) {
       const counted = countPatch(step.diff.patch);
       file.added = (file.added ?? 0) + counted.added;
       file.removed = (file.removed ?? 0) + counted.removed;
-      patches.push({ path: path19, patch: repoRelative(step.diff.patch, cwd), step: step.stepNumber });
+      patches.push({ path: path22, patch: repoRelative(step.diff.patch, cwd), step: step.stepNumber });
     }
     const result = resultOf(steps, index);
     if (step.tool.name.toLowerCase() === "write" && result !== void 0 && /^File created successfully\b/.test(result.trim())) {
       file.created = true;
     }
-    files.set(path19, file);
+    files.set(path22, file);
   });
   return { files: [...files.values()], patches };
 }
@@ -4748,7 +4757,8 @@ function buildExecutionBrief(trace) {
     ...source.dirtyFiles !== void 0 ? { dirtyFiles: source.dirtyFiles } : {},
     ...source.dirtyFilesOmitted !== void 0 ? { dirtyFilesOmitted: source.dirtyFilesOmitted } : {},
     ...source.gitCapturedAt !== void 0 ? { capturedAt: source.gitCapturedAt } : {},
-    ...source.prUrl !== void 0 ? { prUrl: source.prUrl } : {}
+    ...source.prUrl !== void 0 ? { prUrl: source.prUrl } : {},
+    ...source.commitNamed === true ? { commitNamed: true } : {}
   };
   return {
     intent: {
@@ -4800,11 +4810,11 @@ var HARNESS_INFO = {
   antigravity: {
     id: "antigravity",
     label: "Google Antigravity",
-    formatLabel: "unknown",
-    confidence: "inferred",
-    implemented: false,
+    formatLabel: "IDE conversations/<id>.pb (Windsurf's encrypted trajectory)",
+    confidence: "documented",
+    implemented: true,
     humanTest: "A6",
-    note: "Detector only. The format is unpublished and unseen, so this adapter refuses rather than inventing a timeline."
+    note: "The IDE only, prompts and replies only. Read the way deja-vu reads Windsurf, which held on all nine IDE 1.23.2 conversations measured. Tool calls are undocumented and not read; the standalone Antigravity app is not read yet."
   },
   terminal: {
     id: "terminal",
@@ -4879,14 +4889,14 @@ var WHEN = {
   "no-edits": "in a run with no recorded edit"
 };
 function verificationLine(brief) {
-  const runs = brief.outcome.verification;
+  const runs2 = brief.outcome.verification;
   const verdict = brief.outcome.afterLastEdit;
-  if (runs.length === 0) {
+  if (runs2.length === 0) {
     return verdict === "no-edits" ? null : "Verification: no test run was recorded.";
   }
   const shown = [];
   for (const when of ["before-first-edit", "between-edits", "after-last-edit", "no-edits"]) {
-    const group = runs.filter((run) => run.when === when);
+    const group = runs2.filter((run) => run.when === when);
     const last = group[group.length - 1];
     if (last !== void 0) shown.push(last);
   }
@@ -4894,7 +4904,7 @@ function verificationLine(brief) {
     const result = run.result === "unknown" ? "ran (result not recorded)" : run.result;
     return `${run.command} ${result} ${WHEN[run.when]}${run.counts ? ` (${run.counts})` : ""}.`;
   });
-  const omitted = runs.length - shown.length;
+  const omitted = runs2.length - shown.length;
   if (omitted > 0) parts.push(`${omitted} earlier test run${omitted === 1 ? "" : "s"} not listed.`);
   if (verdict === "not-rerun") parts.push("Not re-run after the last edit.");
   return `Verification: ${parts.join(" ")}`;
@@ -4922,11 +4932,11 @@ function lineageLine(brief) {
   if (lineage === void 0) return null;
   const parts = [];
   if (lineage.branch !== void 0) parts.push(`branch ${lineage.branch}`);
-  if (lineage.commit !== void 0) parts.push(`commit ${lineage.commit.slice(0, 12)}`);
-  if (lineage.dirtyFiles !== void 0) {
-    const total = lineage.dirtyFiles.length + (lineage.dirtyFilesOmitted ?? 0);
-    parts.push(total === 0 ? "clean tree" : `${total} uncommitted file${total === 1 ? "" : "s"}`);
+  if (lineage.commit !== void 0) {
+    parts.push(`commit ${lineage.commit.slice(0, 12)}${lineage.commitNamed === true ? " (named with --commit)" : ""}`);
   }
+  const tree = treeWords(lineage);
+  if (tree !== null) parts.push(tree);
   if (lineage.prUrl !== void 0) parts.push(`PR ${lineage.prUrl}`);
   return parts.length === 0 ? null : `Git: ${parts.join(" \xB7 ")}`;
 }
@@ -5086,13 +5096,13 @@ function categorizeTrace(trace) {
     };
   }
   if (paths.length > 0) {
-    if (paths.every((path19) => matchesAny(path19, DOC_PATTERNS))) {
+    if (paths.every((path22) => matchesAny(path22, DOC_PATTERNS))) {
       return { category: "docs", evidence: [`all ${paths.length} touched path(s) are documentation`, ...paths.slice(0, 3)] };
     }
-    if (paths.every((path19) => matchesAny(path19, TEST_PATTERNS))) {
+    if (paths.every((path22) => matchesAny(path22, TEST_PATTERNS))) {
       return { category: "tests", evidence: [`all ${paths.length} touched path(s) are tests`, ...paths.slice(0, 3)] };
     }
-    if (paths.every((path19) => matchesAny(path19, INFRA_PATTERNS))) {
+    if (paths.every((path22) => matchesAny(path22, INFRA_PATTERNS))) {
       return { category: "infra", evidence: [`all ${paths.length} touched path(s) are build/CI/deploy config`, ...paths.slice(0, 3)] };
     }
   }
@@ -5259,9 +5269,39 @@ function searchTerms(q) {
 function rowSearchText(row) {
   return normalizeSearch(`${row.title} ${row.slug} ${row.harness} ${HARNESS_INFO[row.harness].label}`);
 }
+var VOWEL = /[aeiouy]/;
+var UNDOUBLED = /([b-df-hj-km-np-rtv-xz])\1$/;
+function stem(word) {
+  if (word.length < 4 || !/^[a-z]+$/.test(word)) return word;
+  const keep = (base) => base.length >= 3 && VOWEL.test(base) ? base : word;
+  const undouble = (base) => base.length >= 4 && UNDOUBLED.test(base) && !/(ll|ss|zz)$/.test(base) ? base.slice(0, -1) : base;
+  if (/[^aeiou]ies$/.test(word) || /[^aeiou]ied$/.test(word)) return keep(word.slice(0, -3) + "y");
+  if (word.endsWith("ing")) {
+    const base = word.slice(0, -3);
+    return base.length >= 3 && VOWEL.test(base) ? undouble(base) : word;
+  }
+  if (word.endsWith("ed") && !word.endsWith("eed")) {
+    const base = word.slice(0, -2);
+    return base.length >= 3 && VOWEL.test(base) ? undouble(base) : word;
+  }
+  if (/(?:ss|x|z|ch|sh)es$/.test(word)) return keep(word.slice(0, -2));
+  if (word.endsWith("s") && !/(?:ss|us|is)$/.test(word)) return keep(word.slice(0, -1));
+  return word;
+}
+function stemText(text2) {
+  return text2.split(/[^\p{L}\p{N}]+/u).filter((word) => word.length > 0).map(stem).join(" ");
+}
 function matchesSearch(row, q) {
-  const haystack = rowSearchText(row);
-  return searchTerms(q).every((term) => haystack.includes(term));
+  return matchesText(rowSearchText(row), q);
+}
+function matchesText(text2, q) {
+  const haystack = normalizeSearch(text2);
+  const stems = ` ${stemText(haystack)} `;
+  return searchTerms(q).every((term) => {
+    if (haystack.includes(term)) return true;
+    const stemmed = stemText(term);
+    return stemmed.length > 0 && stems.includes(stemmed);
+  });
 }
 
 // ../schema/src/index.ts
@@ -5362,6 +5402,12 @@ var TraceSourceSchema = external_exports.object({
   /** How many more dirty paths there were than `dirtyFiles` holds. Absent = none were left out. */
   dirtyFilesOmitted: external_exports.number().int().positive().optional(),
   gitCapturedAt: external_exports.string().optional(),
+  /**
+   * `flatbread share --commit [sha]` (P7.2): the person sharing NAMED `headCommitSha`, and
+   * `dirtyFiles` was measured against it - so an empty list means a clean tree AT THAT COMMIT.
+   * Absent = HEAD, read automatically.
+   */
+  commitNamed: external_exports.literal(true).optional(),
   /** `flatbread share --pr <url>`: the pull request this run belongs to, as the person sharing it said. */
   prUrl: external_exports.string().url().max(GIT_LIMITS.prUrl).regex(/^https:\/\//, "a PR link must be https").optional(),
   /** Absent on records written before Pass 6, which were all claude-code. */
@@ -5554,6 +5600,13 @@ var TraceRecordSchema = external_exports.object({
     ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["slug"], message: `slug "${record.slug}" is reserved` });
   }
 });
+function normalizeTitle(input) {
+  if (typeof input !== "string") return null;
+  const flat = input.replace(/[\u0000-\u001f\u007f]/g, " ").replace(/\s+/g, " ").trim();
+  if (flat.length === 0) return null;
+  if (flat.length > LIMITS.title) return null;
+  return flat;
+}
 var RecordSummarySchema = external_exports.object({
   slug: SlugSchema,
   title: external_exports.string(),
@@ -5656,6 +5709,9 @@ function claudeSettingsPath(env = process.env) {
   if (configDir) return path.join(configDir, "settings.json");
   return path.join(os.homedir(), ".claude", "settings.json");
 }
+function encodeCwd(cwd) {
+  return cwd.replace(/[^a-zA-Z0-9]/g, "-");
+}
 function isSubagentSessionFile(filePath) {
   const segments = filePath.split(/[\\/]/).filter((segment2) => segment2.length > 0);
   const base = segments[segments.length - 1] ?? "";
@@ -5991,50 +6047,282 @@ function buildTrace(input) {
 }
 
 // src/adapters/antigravity.ts
+import crypto from "node:crypto";
 import fs3 from "node:fs";
 import os2 from "node:os";
 import path3 from "node:path";
-function candidateStateDirs(env = process.env) {
-  const home = os2.homedir();
-  const dirs = [];
-  if (process.platform === "win32") {
-    const appData = env.APPDATA ?? path3.join(home, "AppData", "Roaming");
-    dirs.push(path3.join(appData, "Antigravity", "User"));
-    dirs.push(path3.join(appData, "Google", "Antigravity", "User"));
-  } else if (process.platform === "darwin") {
-    dirs.push(path3.join(home, "Library", "Application Support", "Antigravity", "User"));
-    dirs.push(path3.join(home, "Library", "Application Support", "Google", "Antigravity", "User"));
-  } else {
-    dirs.push(path3.join(home, ".config", "Antigravity", "User"));
-    dirs.push(path3.join(home, ".config", "Google", "Antigravity", "User"));
+import { fileURLToPath } from "node:url";
+var ANTIGRAVITY_ADAPTER_VERSION = 1;
+var KEY = Buffer.from("safeCodeiumworldKeYsecretBalloon");
+var NONCE = 12;
+var TAG = 16;
+var CONVERSATION = /[\\/]\.gemini[\\/]antigravity[^\\/]*[\\/]conversations[\\/][^\\/]+\.pb$/i;
+var PB_VARINT = 0;
+var PB_FIXED64 = 1;
+var PB_BYTES = 2;
+var PB_FIXED32 = 5;
+var Malformed = class extends Error {
+};
+function varint(b, at) {
+  let value = 0n;
+  let shift = 0n;
+  for (let i = at; i < b.length && shift <= 63n; i++) {
+    const byte = b[i];
+    value |= BigInt(byte & 127) << shift;
+    shift += 7n;
+    if ((byte & 128) === 0) return [value, i + 1];
+  }
+  throw new Malformed("malformed protobuf");
+}
+function pbFields(b) {
+  const out = [];
+  let i = 0;
+  while (i < b.length) {
+    const [key, afterKey] = varint(b, i);
+    i = afterKey;
+    const num2 = Number(key >> 3n);
+    const wire = Number(key & 7n);
+    if (num2 === 0) throw new Malformed("malformed protobuf");
+    let value = 0n;
+    let data = Buffer.alloc(0);
+    if (wire === PB_VARINT) {
+      [value, i] = varint(b, i);
+    } else if (wire === PB_FIXED64) {
+      if (i + 8 > b.length) throw new Malformed("malformed protobuf");
+      value = b.readBigUInt64LE(i);
+      i += 8;
+    } else if (wire === PB_FIXED32) {
+      if (i + 4 > b.length) throw new Malformed("malformed protobuf");
+      value = BigInt(b.readUInt32LE(i));
+      i += 4;
+    } else if (wire === PB_BYTES) {
+      const [length, afterLength] = varint(b, i);
+      if (length > BigInt(b.length - afterLength)) throw new Malformed("malformed protobuf");
+      data = b.subarray(afterLength, afterLength + Number(length));
+      i = afterLength + Number(length);
+    } else {
+      throw new Malformed("malformed protobuf");
+    }
+    out.push({ num: num2, wire, value, data });
+  }
+  return out;
+}
+function bytesField(fields, num2) {
+  return fields.find((f) => f.num === num2 && f.wire === PB_BYTES)?.data;
+}
+function pbString(b) {
+  return b === void 0 ? "" : b.toString("utf8").replaceAll("\0", "");
+}
+function pbTimestamp(b) {
+  if (b === void 0) return void 0;
+  let seconds = 0n;
+  let nanos = 0n;
+  for (const f of pbFields(b)) {
+    if (f.wire !== PB_VARINT) continue;
+    if (f.num === 1) seconds = BigInt.asIntN(64, f.value);
+    if (f.num === 2) nanos = BigInt.asIntN(32, f.value);
+  }
+  if (seconds === 0n && nanos === 0n) return void 0;
+  const ms = Number(seconds) * 1e3 + Math.floor(Number(nanos) / 1e6);
+  const date = new Date(ms);
+  return Number.isNaN(date.getTime()) ? void 0 : date.toISOString();
+}
+function openConversation(b) {
+  if (b.length < NONCE + TAG) return null;
+  try {
+    const decipher = crypto.createDecipheriv("aes-256-gcm", KEY, b.subarray(0, NONCE));
+    decipher.setAuthTag(b.subarray(b.length - TAG));
+    return Buffer.concat([decipher.update(b.subarray(NONCE, b.length - TAG)), decipher.final()]);
+  } catch {
+    return null;
+  }
+}
+function folderPath(uri) {
+  if (!uri.startsWith("file:")) return void 0;
+  try {
+    return fileURLToPath(uri);
+  } catch {
+    try {
+      return decodeURIComponent(new URL(uri).pathname) || void 0;
+    } catch {
+      return void 0;
+    }
+  }
+}
+function workspaceOf(metadata) {
+  if (metadata === void 0) return void 0;
+  for (const f of pbFields(metadata)) {
+    if (f.num !== 1 || f.wire !== PB_BYTES) continue;
+    const folder = folderPath(pbString(bytesField(pbFields(f.data), 1)));
+    if (folder !== void 0) return folder;
+  }
+  return void 0;
+}
+function tally(counts, key) {
+  counts.set(key, (counts.get(key) ?? 0) + 1);
+}
+function decodeTrajectory2(plain) {
+  const events = [];
+  const unread = /* @__PURE__ */ new Map();
+  let sessionId;
+  let cwd;
+  let steps = 0;
+  let clock;
+  for (const f of pbFields(plain)) {
+    if (f.wire === PB_BYTES && f.num === 6) {
+      sessionId = pbString(f.data) || sessionId;
+      continue;
+    }
+    if (f.wire === PB_BYTES && f.num === 7) {
+      cwd ??= workspaceOf(f.data);
+      clock ??= pbTimestamp(bytesField(pbFields(f.data), 2));
+      continue;
+    }
+    if (f.wire !== PB_BYTES || f.num !== 2) {
+      tally(unread, `trajectory field ${f.num}`);
+      continue;
+    }
+    steps++;
+    const step = pbFields(f.data);
+    const metadata = bytesField(step, 5);
+    const metaFields = metadata === void 0 ? [] : pbFields(metadata);
+    clock = pbTimestamp(bytesField(metaFields, 1)) ?? clock;
+    const completed = pbTimestamp(bytesField(metaFields, 8));
+    for (const s of step) {
+      if (s.num !== 5 && s.num !== 19 && s.num !== 20) tally(unread, `step field ${s.num}`);
+    }
+    const input = bytesField(step, 19);
+    if (input !== void 0) {
+      const fields = pbFields(input);
+      const text2 = pbString(bytesField(fields, 2)).trim() || pbString(bytesField(fields, 1)).trim();
+      if (text2) events.push({ kind: "prompt", ...clock ? { timestamp: clock } : {}, text: text2 });
+    }
+    const planner = bytesField(step, 20);
+    if (planner !== void 0) {
+      const fields = pbFields(planner);
+      const text2 = pbString(bytesField(fields, 1)).trim() || pbString(bytesField(fields, 8)).trim();
+      if (bytesField(fields, 3) !== void 0) tally(unread, "planner thinking");
+      const at = completed ?? clock;
+      if (text2) events.push({ kind: "text", ...at ? { timestamp: at } : {}, text: text2 });
+    }
+  }
+  if (cwd !== void 0 || sessionId !== void 0) {
+    events.unshift({ kind: "meta", ...sessionId ? { sessionId } : {}, ...cwd ? { cwd } : {} });
+  }
+  return { events, ...sessionId ? { sessionId } : {}, steps, unread };
+}
+function homeOf(env) {
+  return (process.platform === "win32" ? env.USERPROFILE : env.HOME) || os2.homedir();
+}
+function listConversations(env = process.env) {
+  const gemini = path3.join(homeOf(env), ".gemini");
+  let roots;
+  try {
+    roots = fs3.readdirSync(gemini).filter((name) => /^antigravity/i.test(name));
+  } catch {
+    return [];
+  }
+  const found = [];
+  for (const root of roots) {
+    const dir = path3.join(gemini, root, "conversations");
+    let names;
+    try {
+      names = fs3.readdirSync(dir);
+    } catch {
+      continue;
+    }
+    for (const name of names) {
+      if (!name.toLowerCase().endsWith(".pb")) continue;
+      const file = path3.join(dir, name);
+      try {
+        const stat = fs3.statSync(file);
+        if (stat.isFile()) found.push({ file, mtime: stat.mtimeMs });
+      } catch {
+        continue;
+      }
+    }
   }
-  return dirs;
+  return found.sort((a, b) => b.mtime - a.mtime).map((entry) => entry.file);
 }
+var REFUSAL_TEST = "A6";
 var antigravityAdapter = {
   id: "antigravity",
-  version: 0,
+  version: ANTIGRAVITY_ADAPTER_VERSION,
   async detect(input) {
-    void input;
-    return { score: 0, reason: "Antigravity's log format is unknown; this adapter cannot claim a file" };
+    if (CONVERSATION.test(input.path)) {
+      return { score: 85, reason: "a conversations/<id>.pb under ~/.gemini/antigravity" };
+    }
+    return { score: 0, reason: "not an Antigravity conversations/<id>.pb" };
   },
   async read(input) {
-    void input;
+    const plain = openConversation(await fs3.promises.readFile(input.path));
+    if (plain === null) {
+      return {
+        refused: true,
+        reason: `${path3.basename(input.path)} did not authenticate with the key Antigravity IDE 1.23.2 uses. A newer build may have changed the envelope; report its version via HUMAN-TESTS.md A6.`,
+        humanTest: REFUSAL_TEST
+      };
+    }
+    let trajectory;
+    try {
+      trajectory = decodeTrajectory2(plain);
+    } catch (error) {
+      if (!(error instanceof Malformed)) throw error;
+      return {
+        refused: true,
+        reason: `${path3.basename(input.path)} authenticated but is not the trajectory protobuf this reader knows.`,
+        humanTest: REFUSAL_TEST
+      };
+    }
+    const said = trajectory.events.filter((e) => e.kind === "prompt" || e.kind === "text").length;
+    if (said === 0) {
+      return {
+        refused: true,
+        reason: `${path3.basename(input.path)} has ${trajectory.steps} step(s) and no prompt or reply in the fields this reader knows.`,
+        humanTest: REFUSAL_TEST
+      };
+    }
+    const unreadFields = [...trajectory.unread].sort((a, b) => b[1] - a[1]).map(([field, count]) => `${field} x${count}`);
     return {
-      refused: true,
-      reason: "Antigravity's session format has never been observed. Writing a parser from no information would produce a plausible but fictional timeline. Send a sample session (see HUMAN-TESTS.md A6).",
-      humanTest: "A6"
+      events: trajectory.events,
+      capabilities: { tokens: "unavailable", filesChanged: "unavailable" },
+      sessionId: trajectory.sessionId ?? path3.basename(input.path, ".pb"),
+      unreadFields,
+      notes: [
+        `${trajectory.steps} step(s), ${said} prompt/reply event(s)`,
+        "tool calls, thinking and edits are not read: their step fields are undocumented",
+        "CONFIDENCE: documented (Windsurf's schema, measured on IDE 1.23.2). See HUMAN-TESTS.md A6."
+      ]
     };
   },
   discover(env) {
-    return candidateStateDirs(env).filter((dir) => fs3.existsSync(dir));
+    return listConversations(env);
   },
-  async describe() {
-    const lines2 = ["Antigravity support is a stub. It detects an install and refuses to parse."];
-    for (const dir of candidateStateDirs()) {
-      lines2.push(`  ${fs3.existsSync(dir) ? "FOUND  " : "absent "} ${dir}`);
+  async describe(input) {
+    const files = input ? [input.path] : listConversations();
+    const lines2 = [`conversations found: ${files.length}`];
+    for (const file of files.slice(0, 8)) lines2.push(`  ${file}`);
+    const target = files[0];
+    if (target === void 0) return lines2;
+    lines2.push("", `inspecting ${target}`);
+    let plain;
+    try {
+      plain = openConversation(await fs3.promises.readFile(target));
+    } catch (error) {
+      lines2.push(`  unreadable: ${error instanceof Error ? error.message : String(error)}`);
+      return lines2;
+    }
+    lines2.push(`  authenticated: ${plain === null ? "no" : "yes"}`);
+    if (plain === null) return lines2;
+    try {
+      const trajectory = decodeTrajectory2(plain);
+      lines2.push(`  steps: ${trajectory.steps}, prompt/reply events: ${trajectory.events.filter((e) => e.kind !== "meta").length}`);
+      for (const [field, count] of [...trajectory.unread].sort((a, b) => b[1] - a[1]).slice(0, 15)) {
+        lines2.push(`    ${String(count).padStart(6)}  ${field}`);
+      }
+    } catch {
+      lines2.push("  not the trajectory protobuf this reader knows");
     }
-    lines2.push("");
-    lines2.push("If one is FOUND, HUMAN-TESTS.md A6 lists exactly what to report back.");
     return lines2;
   }
 };
@@ -7347,8 +7635,8 @@ function isInsideDir(child, parent) {
 }
 function targetIndicatesDb(target, env) {
   if (isDbTarget(target)) return true;
-  const stem = path8.basename(target, ".json");
-  if (/^ses_[0-9a-zA-Z]+$/.test(stem)) return true;
+  const stem2 = path8.basename(target, ".json");
+  if (/^ses_[0-9a-zA-Z]+$/.test(stem2)) return true;
   const resolved = path8.resolve(target);
   for (const dir of [dataDir(env), storageDir(env)]) {
     if (resolved === path8.resolve(dir) || isInsideDir(resolved, dir)) return true;
@@ -7394,8 +7682,8 @@ async function resolveSource(target, env = process.env) {
   const wantsDb = isDbTarget(target) || dbExists(data) && targetIndicatesDb(target, env);
   if (wantsDb) {
     const explicit = isDbTarget(target) ? splitDbTarget(target) : { dbPath: dbPathFor(data), sessionId: void 0 };
-    const stem = path8.basename(target, ".json");
-    const sessionId = explicit.sessionId ?? (/^ses_[0-9a-zA-Z]+$/.test(stem) ? stem : void 0);
+    const stem2 = path8.basename(target, ".json");
+    const sessionId = explicit.sessionId ?? (/^ses_[0-9a-zA-Z]+$/.test(stem2) ? stem2 : void 0);
     const result = await readDbSession(path8.dirname(explicit.dbPath), sessionId);
     if (!("unavailable" in result)) {
       if (result.messages.length === 0) {
@@ -8459,8 +8747,8 @@ function safeSlug(slug) {
   if (slug.includes("..") || slug.length > 72) return null;
   return slug;
 }
-function isRecordStem(stem) {
-  return safeSlug(stem) !== null && SlugSchema.safeParse(stem).success;
+function isRecordStem(stem2) {
+  return safeSlug(stem2) !== null && SlugSchema.safeParse(stem2).success;
 }
 function readStoreRecords(dir) {
   if (!fs12.existsSync(dir)) return { records: [], unreadable: 0 };
@@ -8520,9 +8808,9 @@ function createFileStore(options) {
     async get(slug, getOptions = {}) {
       const filePath = fileFor(slug);
       if (filePath === null || !fs12.existsSync(filePath)) return { ok: false, reason: "not-found" };
-      const read = readRecord(filePath);
-      if (!read.ok) return { ok: false, reason: "unreadable", problem: read.problem };
-      const record = read.record;
+      const read2 = readRecord(filePath);
+      if (!read2.ok) return { ok: false, reason: "unreadable", problem: read2.problem };
+      const record = read2.record;
       const hasManageToken = manageTokenMatches(getOptions.manageToken, record.manageTokenHash);
       const viewer = { ...getOptions.viewer, hasManageToken };
       const allowed = canRead(record, viewer);
@@ -8534,10 +8822,10 @@ function createFileStore(options) {
       const summaries = [];
       for (const entry of fs12.readdirSync(dir, { withFileTypes: true })) {
         if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
-        const read = readRecord(path12.join(dir, entry.name));
-        if (!read.ok) continue;
-        if (!canList(read.record)) continue;
-        summaries.push(summarize(read.record));
+        const read2 = readRecord(path12.join(dir, entry.name));
+        if (!read2.ok) continue;
+        if (!canList(read2.record)) continue;
+        summaries.push(summarize(read2.record));
       }
       summaries.sort((a, b) => a.createdAt < b.createdAt ? 1 : a.createdAt > b.createdAt ? -1 : 0);
       return summaries;
@@ -8641,6 +8929,31 @@ function readGitLineage(cwd, options = {}) {
     gitCapturedAt: (options.now?.() ?? /* @__PURE__ */ new Date()).toISOString()
   };
 }
+function zList(output) {
+  return output === null ? null : output.split("\0").filter((entry) => entry.length > 0);
+}
+function bindCommit(cwd, rev, options = {}) {
+  const base = readGitLineage(cwd, options);
+  if (base === null || cwd === void 0) {
+    return { problem: `the session's directory (${cwd ?? "not recorded"}) is not a git work tree on this machine` };
+  }
+  const sha = git(cwd, ["rev-parse", "--verify", "-q", `${rev}^{commit}`], options)?.trim();
+  if (sha === void 0 || !/^[0-9a-f]{7,64}$/.test(sha)) return { problem: `"${rev}" is not a commit in ${cwd}` };
+  if (sha === base.headCommitSha) return { ...base, commitNamed: true };
+  const tracked = zList(git(cwd, ["diff", "--name-only", "-z", sha, "--"], options));
+  const untracked = zList(git(cwd, ["ls-files", "--others", "--exclude-standard", "-z"], options));
+  if (tracked === null || untracked === null) return { problem: `git could not compare the working tree with ${sha}` };
+  const dirty = [.../* @__PURE__ */ new Set([...tracked, ...untracked])];
+  const kept = dirty.slice(0, GIT_LIMITS.dirtyFiles);
+  const { dirtyFilesOmitted: _omitted, ...rest } = base;
+  return {
+    ...rest,
+    headCommitSha: sha,
+    dirtyFiles: kept,
+    ...dirty.length > kept.length ? { dirtyFilesOmitted: dirty.length - kept.length } : {},
+    commitNamed: true
+  };
+}
 function checkPrUrl(value) {
   let parsed;
   try {
@@ -8656,12 +8969,14 @@ function checkPrUrl(value) {
 function withLineage(trace, lineage, prUrl) {
   if (lineage === null && prUrl === void 0) return trace;
   const source = { ...trace.source };
-  const elsewhere = lineage !== null && source.gitBranch !== void 0 && lineage.gitBranch !== source.gitBranch;
+  const elsewhere = lineage !== null && lineage.commitNamed !== true && source.gitBranch !== void 0 && lineage.gitBranch !== source.gitBranch;
   if (lineage !== null && !elsewhere) {
     if (source.gitBranch === void 0 && lineage.gitBranch !== void 0) source.gitBranch = lineage.gitBranch;
     if (lineage.headCommitSha !== void 0) source.headCommitSha = lineage.headCommitSha;
     source.dirtyFiles = lineage.dirtyFiles;
     if (lineage.dirtyFilesOmitted !== void 0) source.dirtyFilesOmitted = lineage.dirtyFilesOmitted;
+    else delete source.dirtyFilesOmitted;
+    if (lineage.commitNamed === true) source.commitNamed = true;
     source.gitCapturedAt = lineage.gitCapturedAt;
   }
   if (prUrl !== void 0) source.prUrl = prUrl;
@@ -8669,7 +8984,7 @@ function withLineage(trace, lineage, prUrl) {
 }
 
 // src/auth.ts
-import crypto from "node:crypto";
+import crypto2 from "node:crypto";
 import fs15 from "node:fs";
 import os6 from "node:os";
 import path14 from "node:path";
@@ -8699,7 +9014,7 @@ function isAuthFailure(value) {
   return typeof value === "object" && value !== null && "ok" in value && value.ok === false;
 }
 function hashSecret(secret) {
-  return crypto.createHash("sha256").update(secret).digest("hex");
+  return crypto2.createHash("sha256").update(secret).digest("hex");
 }
 function apiUrlFrom(env = process.env) {
   const explicit = env["FLATBREAD_API_URL"]?.trim();
@@ -8712,7 +9027,7 @@ async function startCliLogin(options = {}) {
   const apiUrl = options.apiUrl ?? apiUrlFrom(env);
   const base = validateApiUrl(apiUrl);
   if (isAuthFailure(base)) return base;
-  const pollSecret = crypto.randomBytes(32).toString("hex");
+  const pollSecret = crypto2.randomBytes(32).toString("hex");
   const result = await postJson(
     `${base}/api/cli-login/start`,
     { poll_secret_hash: hashSecret(pollSecret) },
@@ -9503,65 +9818,105 @@ function renderMarked(value, matches) {
   return html;
 }
 var STYLE = `
-:root{--bg:#0f1115;--panel:#161a22;--line:#232936;--fg:#e6e9ef;--dim:#8b93a7;--hit:#3a2a12;--hitline:#c8892b;--ok:#2f9e63;--warn:#c85a54;--acc:#5b8def}
+:root{
+--canvas:#fafafa;--bg:#ffffff;--ivory:#fcfbf8;--surface:#f6f7f8;--inset:#f6f7f8;
+--line:rgba(226,232,240,.8);--line-soft:#eff0f2;--line-strong:#b9bec4;
+--fg:#23272c;--fg-2:rgba(35,39,44,.7);--fg-3:rgba(35,39,44,.56);--fg-lift:#2b3138;
+--fail-bg:#f6ece7;--fail-line:#c9755c;--fail-fg:#8a3b2a;
+--ok-bg:#eef1e8;--ok-line:#7f9a7a;--ok-fg:#3f5d43;
+--hold-bg:#f7f1e2;--hold-line:#c9a34a;--hold-fg:#7d601d;
+--intent-line:#d6d1c1;
+--shade:30,41,54;
+--shadow:0 1px 2px rgba(var(--shade),.04),0 10px 26px rgba(var(--shade),.08);
+--radius:10px;--radius-sm:6px;
+--sans:-apple-system,BlinkMacSystemFont,"Segoe UI Variable Text","Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif;
+--mono:ui-monospace,"SF Mono",SFMono-Regular,"Cascadia Mono","Segoe UI Mono","Roboto Mono",Menlo,Consolas,"Liberation Mono",monospace
+}
 *{box-sizing:border-box}
-body{margin:0;background:var(--bg);color:var(--fg);font:14px/1.55 ui-monospace,SFMono-Regular,Consolas,monospace}
-header{position:sticky;top:0;z-index:5;background:var(--panel);border-bottom:1px solid var(--line);padding:14px 20px}
-h1{margin:0 0 6px;font-size:16px;font-weight:600;letter-spacing:.01em}
-.meta{color:var(--dim);font-size:12px}
+html,body{margin:0}
+body{background:var(--canvas);color:var(--fg);font:14px/1.55 var(--sans);-webkit-font-smoothing:antialiased}
+code,pre,dd,.mono{font-family:var(--mono)}
+header{background:var(--bg);border-bottom:1px solid var(--line-soft)}
+.hin{max-width:1440px;margin:0 auto;padding:14px 28px 16px}
+.bar{display:flex;align-items:center;gap:10px;margin:0 0 12px}
+.wordmark{display:inline-flex;align-items:center;height:28px;padding:0 12px;border-radius:999px;background:var(--ivory);border:1px solid rgba(var(--shade),.08);box-shadow:inset 0 1px 0 #fff,0 1px 2px rgba(var(--shade),.05);font:600 13.5px/1 var(--mono);letter-spacing:-.01em;font-variant-ligatures:none}
+.crumb{color:var(--fg-3);font-size:12.5px}
+h1{margin:0 0 6px;font-size:20px;line-height:1.3;font-weight:600;letter-spacing:-.01em}
+.meta{color:var(--fg-3);font-size:12.5px;font-variant-numeric:tabular-nums}
 .meta b{color:var(--fg);font-weight:600}
-.wrap{display:grid;grid-template-columns:minmax(0,1fr) 380px;gap:0;align-items:start}
-main{padding:18px 20px 120px;min-width:0}
-aside{position:sticky;top:74px;max-height:calc(100vh - 74px);overflow:auto;border-left:1px solid var(--line);padding:16px;background:var(--panel)}
-.step{border:1px solid var(--line);border-radius:6px;margin:0 0 12px;background:var(--panel)}
-.step>.head{display:flex;gap:10px;align-items:center;padding:8px 12px;border-bottom:1px solid var(--line);font-size:12px;color:var(--dim)}
-.badge{border:1px solid var(--line);border-radius:999px;padding:1px 9px;color:var(--fg);font-size:11px}
-.badge.user_prompt{border-color:#3f6fd8;color:#9dbcff}
-.badge.assistant_text{border-color:#3f8f6f;color:#8fe0bb}
-.badge.assistant_thinking{border-color:#6a5acd;color:#c0b6ff}
-.badge.tool_call{border-color:#b08a2e;color:#ffd98a}
-.badge.tool_result{border-color:#4a5568;color:#c3cbdc}
-.badge.error_recovery{border-color:#c85a54;color:#ff9e99}
-pre{margin:0;padding:10px 12px;white-space:pre-wrap;word-break:break-word;font:inherit}
-.sub{padding:6px 12px;border-top:1px solid var(--line);color:var(--dim);font-size:11px;text-transform:uppercase;letter-spacing:.06em}
-dl{margin:0;padding:2px 12px 10px}
-dt{color:var(--dim);font-size:12px;margin-top:8px}
-dd{margin:2px 0 0;white-space:pre-wrap;word-break:break-word}
-mark.hit{background:var(--hit);color:#ffd98a;border-bottom:1px solid var(--hitline);border-radius:2px;padding:0 2px}
+.meta.path{font-family:var(--mono);font-size:11.5px;margin-top:2px;word-break:break-all}
+.wrap{max-width:1440px;margin:0 auto;padding:20px 28px 120px;display:grid;grid-template-columns:minmax(0,1fr) 360px;gap:24px;align-items:start}
+main{min-width:0}
+aside{position:sticky;top:16px;max-height:calc(100vh - 32px);overflow:auto;background:var(--bg);border:1px solid var(--line);border-radius:var(--radius);box-shadow:var(--shadow);padding:18px}
+.step{background:var(--bg);border:1px solid var(--line);border-radius:var(--radius);box-shadow:0 1px 2px rgba(var(--shade),.04);margin:0 0 10px;overflow:hidden}
+.step>.head{display:flex;gap:10px;align-items:baseline;padding:9px 14px 0;font-size:12px;color:var(--fg-3);font-variant-numeric:tabular-nums}
+.badge{font-weight:600;color:var(--fg-2);font-size:12px}
+.step.user_prompt{border-left:3px solid var(--intent-line)}
+.step.error_recovery{border-color:color-mix(in srgb,var(--fail-line) 45%,transparent);border-left:3px solid var(--fail-line)}
+.badge.error_recovery,.sub.err{color:var(--fail-fg)}
+pre{margin:0;padding:8px 14px 12px;white-space:pre-wrap;word-break:break-word;font:12.5px/1.6 var(--mono);color:var(--fg)}
+.step.user_prompt>pre,.step.assistant_text>pre{font:14px/1.6 var(--sans)}
+.sub{padding:8px 14px 0;border-top:1px solid var(--line-soft);color:var(--fg-3);font-size:11px;text-transform:uppercase;letter-spacing:.06em}
+.sub+pre,.sub+dl{background:var(--inset);margin:8px 14px 12px;padding:10px 12px;border-radius:var(--radius-sm)}
+dl{margin:0;padding:4px 14px 12px}
+dt{color:var(--fg-3);font-size:11.5px;margin-top:8px}
+dd{margin:2px 0 0;white-space:pre-wrap;word-break:break-word;font-size:12.5px}
+#trace-meta dd{font-family:var(--sans);font-size:13.5px}
+mark.hit{background:rgba(var(--shade),.08);box-shadow:inset 0 1px 1px rgba(var(--shade),.08);color:var(--fg-2);border-radius:4px;padding:0 4px;font-family:var(--mono);font-size:.9em}
 mark.hit .was{display:none}
-mark.hit.keep{background:transparent;color:inherit;border-bottom:1px dashed var(--warn)}
+mark.hit.keep{background:var(--hold-bg);box-shadow:none;color:var(--fg);border-bottom:1px dashed var(--hold-line);border-radius:2px;font-family:inherit;font-size:inherit}
 mark.hit.keep .tok{display:none}
 mark.hit.keep .was{display:inline}
-aside h2{margin:0 0 4px;font-size:13px}
-aside .note{color:var(--dim);font-size:12px;margin:0 0 12px}
-.row{display:grid;grid-template-columns:16px 58px minmax(0,1fr);gap:8px;align-items:start;padding:7px 8px;border:1px solid var(--line);border-radius:5px;margin-bottom:6px;cursor:pointer}
-.row:hover{border-color:var(--acc)}
-.row input{margin:3px 0 0}
-.state{font-size:11px;letter-spacing:.04em}
-.s-keep{display:none;color:var(--warn)}
-.s-red{color:var(--ok)}
-.row input:checked ~ .state .s-red{display:none}
-.row input:checked ~ .state .s-keep{display:inline}
-.row .rule{font-size:12px}
-.row .prev{color:var(--dim);font-size:11px;word-break:break-all}
-.row .times{color:var(--warn)}
-.keys{color:var(--dim);font-size:11px;margin:0 0 10px}
-.keys b{color:var(--fg);font-weight:600}
-.row .path{color:#5c6474;font-size:10px;word-break:break-all}
-fieldset{border:1px solid var(--line);border-radius:6px;margin:0 0 12px;padding:8px 10px}
-legend{color:var(--dim);font-size:11px;text-transform:uppercase;letter-spacing:.06em}
-label.vis{display:block;padding:3px 0}
-.warn{color:var(--warn);font-size:11px;margin:4px 0 0}
-.actions{display:flex;gap:8px;margin-top:10px}
-button{font:inherit;padding:9px 14px;border-radius:5px;border:1px solid var(--line);background:#1d2430;color:var(--fg);cursor:pointer}
-button.primary{background:var(--ok);border-color:var(--ok);color:#04140b;font-weight:600}
-button:hover{border-color:var(--acc)}
+aside h2{margin:0 0 4px;font-size:15px;font-weight:600}
+aside .note{color:var(--fg-3);font-size:12.5px;margin:0 0 12px}
+aside .note code{font-size:11.5px;background:var(--inset);padding:1px 4px;border-radius:4px}
 .tools{display:flex;gap:6px;margin:0 0 10px}
-.tools button{padding:4px 8px;font-size:11px}
-.done{max-width:760px;margin:12vh auto;padding:0 20px}
-.done code{display:block;background:var(--panel);border:1px solid var(--line);border-radius:6px;padding:12px;margin:12px 0;word-break:break-all}
-a{color:var(--acc)}
+.keys{color:var(--fg-3);font-size:12px;margin:0 0 14px}
+.keys b{display:inline-block;min-width:18px;padding:0 5px;border:1px solid rgba(var(--shade),.12);border-radius:999px;background:var(--bg);color:var(--fg);font:600 11px/16px var(--mono);text-align:center}
+fieldset{border:0;border-top:1px solid var(--line-soft);margin:0;padding:14px 0 12px}
+legend{float:left;width:100%;padding:0;margin:0 0 6px;color:var(--fg-3);font-size:11px;text-transform:uppercase;letter-spacing:.06em}
+legend+*{clear:left}
+input.title{width:100%;font:inherit;padding:8px 10px;margin:0 0 6px;border:1px solid rgba(var(--shade),.12);border-radius:var(--radius-sm);background:var(--ivory);color:var(--fg);box-shadow:inset 0 1px 0 #fff}
+input.title:focus{outline:none;background:#fff;border-color:var(--fg-3);box-shadow:0 0 0 3px rgba(var(--shade),.05)}
+label.vis{display:flex;align-items:center;gap:8px;padding:3px 0;cursor:pointer}
+input[type=radio],input[type=checkbox]{accent-color:var(--fg);margin:0}
+.warn{color:var(--fail-fg);font-size:12.5px;margin:6px 0 0}
+.actions{display:flex;gap:8px;padding:14px 0 16px;border-top:1px solid var(--line-soft)}
+button{display:inline-flex;align-items:center;font:500 12.5px/1 var(--sans);padding:9px 14px;border-radius:var(--radius-sm);border:1px solid var(--line-strong);background:var(--bg);color:var(--fg);cursor:pointer}
+button:hover{background:var(--surface)}
+button:focus-visible{outline:2px solid var(--fg);outline-offset:1px}
+button.primary{background:var(--fg);border-color:var(--fg);color:#fff}
+button.primary:hover{background:var(--fg-lift);border-color:var(--fg-lift)}
+.tools button{padding:5px 10px;font-size:12px}
+.row{display:grid;grid-template-columns:16px 52px minmax(0,1fr);gap:8px;align-items:start;padding:9px 10px;border:1px solid var(--line);border-radius:var(--radius-sm);margin-bottom:6px;cursor:pointer;background:var(--bg)}
+.row:hover{background:var(--surface)}
+.row:focus-within{border-color:var(--fg-3)}
+.row input{margin:3px 0 0}
+.state{font-size:11.5px;font-weight:600}
+.s-red{color:var(--fg-3)}
+.s-keep{display:none;color:var(--hold-fg)}
+.row input:checked~.state .s-red{display:none}
+.row input:checked~.state .s-keep{display:inline}
+.row:has(input:checked){background:var(--hold-bg);border-color:color-mix(in srgb,var(--hold-line) 50%,transparent)}
+.row .rule{font-size:13px;color:var(--fg)}
+.row .times{font-weight:600}
+.row .prev{color:var(--fg-2);font:11.5px/1.5 var(--mono);word-break:break-all}
+.row .path{color:var(--fg-3);font-size:11px;word-break:break-all}
+.done{max-width:620px;margin:14vh auto;padding:28px 30px;background:var(--bg);border:1px solid var(--line);border-radius:var(--radius);box-shadow:var(--shadow)}
+.done h1{font-size:20px}
+.done .meta{font-size:13.5px;color:var(--fg-2);margin:10px 0 0}
+.done code{display:block;background:var(--inset);border-radius:var(--radius-sm);padding:12px 14px;margin:14px 0;font-size:12.5px;word-break:break-all}
+a{color:var(--fg);text-underline-offset:2px}
+@media (max-width:960px){.wrap{grid-template-columns:minmax(0,1fr);padding:16px}aside{position:static;max-height:none;order:-1}.hin{padding:12px 16px}}
 `;
+var STEP_LABEL = {
+  user_prompt: "prompt",
+  assistant_text: "assistant",
+  assistant_thinking: "thinking",
+  tool_call: "tool call",
+  tool_result: "tool result",
+  error_recovery: "failure"
+};
 var SCRIPT = `
 (function(){
   var boxes = Array.prototype.slice.call(document.querySelectorAll('input[name="keep"]'));
@@ -9594,6 +9949,9 @@ var SCRIPT = `
     if (e.metaKey || e.ctrlKey || e.altKey) return;
     var tag = e.target && e.target.tagName;
     var key = e.key;
+    // TYPING IS NOT TRIAGE: j, k and space in the title field are letters. Enter submits the form
+    // the way any text field does, through the first submit button - Confirm.
+    if (tag === 'INPUT' && e.target.type === 'text') return;
     if (key === 'j' || key === 'ArrowDown') { e.preventDefault(); focusRow(cursor + 1); return; }
     if (key === 'k' || key === 'ArrowUp') { e.preventDefault(); focusRow(cursor - 1); return; }
     if (key === ' ' && cursor >= 0 && tag !== 'BUTTON') {
@@ -9665,14 +10023,14 @@ function renderReviewPage(input) {
     const base = `steps[${index}]`;
     const parts = [];
     parts.push(
-      `<div class="head"><span class="badge ${escapeHtml(step.type)}">${escapeHtml(step.type)}</span><span>#${step.stepNumber}</span><span>${escapeHtml(step.timestamp)}</span></div>`
+      `<div class="head"><span class="badge ${escapeHtml(step.type)}">${escapeHtml(STEP_LABEL[step.type] ?? step.type)}</span><span>#${step.stepNumber}</span><span>${escapeHtml(step.timestamp)}</span></div>`
     );
     parts.push(`<pre>${marked(`${base}.content`, step.content)}</pre>`);
     const tool = step.tool;
     if (tool) {
       const inputSlots = slots.filter((slot) => slot.fieldPath.startsWith(`${base}.tool.input`));
       parts.push(
-        `<div class="sub">tool ${escapeHtml(tool.name)}${tool.isError ? " &middot; errored" : ""}</div>`
+        `<div class="sub${tool.isError ? " err" : ""}">tool ${escapeHtml(tool.name)}${tool.isError ? " &middot; errored" : ""}</div>`
       );
       if (inputSlots.length > 0) {
         parts.push(
@@ -9692,7 +10050,7 @@ function renderReviewPage(input) {
         `<div class="sub">diff ${marked(`${base}.diff.filePath`, diff.filePath)}</div><pre>${marked(`${base}.diff.patch`, diff.patch)}</pre>`
       );
     }
-    return `<section class="step" id="${escapeHtml(base)}">${parts.join("")}</section>`;
+    return `<section class="step ${escapeHtml(step.type)}" id="${escapeHtml(base)}">${parts.join("")}</section>`;
   }).join("");
   const groups = groupMatches(matches);
   const rowsHtml = groups.length === 0 ? `<p class="note">No matches. Nothing will be rewritten.</p>` : groups.map((group) => {
@@ -9706,15 +10064,16 @@ function renderReviewPage(input) {
   const publicWarning = input.publishTo === void 0 ? "Visibility public: this draft records that choice, and the run becomes readable by anyone the moment it is uploaded. Continue?" : `Visibility public: confirming uploads this run to ${input.publishTo} where anyone with the link can read it. Continue?`;
   const destinationHtml = input.publishTo === void 0 ? `<p class="note">Local draft only. Confirm writes ${escapeHtml(input.draftPath ?? "a file in packages/cli/.tmp")} and nothing leaves this machine. The visibility above is stored in the draft. To upload a run, share it with <code>--publish</code> after <code>flatbread login</code>.</p>` : `<p class="warn">Confirm UPLOADS this run to ${escapeHtml(input.publishTo)} with the visibility selected above. Everything you KEEP below is uploaded as written.</p>`;
   const body = `
-<header>
+<header><div class="hin">
+  <div class="bar"><span class="wordmark">flatbread</span><span class="crumb">review before you share</span></div>
   <h1>${marked("title", trace.title)}</h1>
   <div class="meta">
-    <b>${escapeHtml(trace.model)}</b> &middot; ${trace.steps.length} steps &middot; ${toolCalls} tool calls &middot;
-    ${formatCount(trace.stats.filesChanged)} files changed &middot; ${trace.stats.errorCount} errors &middot;
-    ${Math.round(trace.stats.durationSeconds)}s &middot; <b>${matches.length}</b> redaction matches
+    <b>${escapeHtml(trace.model)}</b> &middot; ${plural2(trace.steps.length, "step")} &middot; ${plural2(toolCalls, "tool call")} &middot;
+    ${trace.stats.filesChanged === null ? `${formatCount(null)} files` : plural2(trace.stats.filesChanged, "file")} changed &middot; ${plural2(trace.stats.errorCount, "error")} &middot;
+    ${Math.round(trace.stats.durationSeconds)}s &middot; <b>${matches.length}</b> redaction match${matches.length === 1 ? "" : "es"}
   </div>
-  <div class="meta">${escapeHtml(sessionPath)}</div>
-</header>
+  <div class="meta path">${escapeHtml(sessionPath)}</div>
+</div></header>
 <form id="review" method="post" action="/confirm">
 <div class="wrap">
   <main>${metaHtml}${stepsHtml}</main>
@@ -9724,6 +10083,11 @@ function renderReviewPage(input) {
     Every match is redacted by default. Tick a row to KEEP the original text instead.</p>
     <div class="tools"><button id="keep-none" type="button">redact all</button><button id="keep-all" type="button">keep all</button></div>
     <p class="keys"><b>j</b>/<b>k</b> move &middot; <b>space</b> keep or redact &middot; <b>enter</b> confirm</p>
+    ${input.titleDraft === void 0 ? "" : `<fieldset>
+      <legend><label for="title">Title</label></legend>
+      <input class="title" id="title" name="title" type="text" required maxlength="${LIMITS.title}" value="${escapeHtml(input.titleDraft)}">
+      <p class="note">Change it here, or leave it. A secret typed into it is redacted.</p>
+    </fieldset>`}
     <fieldset>
       <legend>Visibility</legend>
       <label class="vis"><input type="radio" name="visibility" value="private" checked> private</label>
@@ -9742,13 +10106,14 @@ function renderReviewPage(input) {
 <script>var PUBLIC_WARNING=${JSON.stringify(publicWarning)};${SCRIPT}</script>`;
   return page(`Flatbread review - ${trace.title}`, body);
 }
-function renderDonePage(message, outputPath, publishTo) {
+function renderDonePage(message, outputPath, publishTo, keepsRun = false) {
   const network = publishTo === void 0 ? `<p class="meta">Nothing was uploaded. This file is on your machine only.</p>` : `<p class="meta">Uploading this run to ${escapeHtml(publishTo)} now. Your terminal says whether it arrived, and prints its link.</p>`;
   return page(
     "Flatbread - share draft written",
     `<div class="done"><h1>${escapeHtml(message)}</h1>
      <code>${escapeHtml(outputPath)}</code>
      ${network}
+     ${keepsRun ? `<p class="meta">That file holds only your latest share, and the next one replaces it. This run is also kept under its own ID, printed in your terminal: <code>flatbread pull &lt;id&gt;</code> prints it again, and <code>flatbread search --local</code> lists every run you have shared.</p>` : ""}
      <p class="meta"><strong>Go back to your terminal now.</strong> The manage token for this
      run is printed there, once, at the very bottom. It is the only way to open the run
      while it is private, and only its hash is stored, so nothing can print it again.</p>
@@ -9777,7 +10142,9 @@ async function readBody(req, limitBytes = 2 * 1024 * 1024) {
 function parseDecisionBody(body) {
   const form = new URLSearchParams(body);
   const parsedVisibility = VisibilitySchema.safeParse(form.get("visibility"));
+  const title = form.get("title");
   return {
+    ...title !== null ? { title: normalizeTitle(title) } : {},
     visibility: parsedVisibility.success ? parsedVisibility.data : "private",
     // ONE CHECKBOX MAY DECIDE MANY MATCHES. A grouped row carries every id it governs,
     // space-separated, so the browser sends one value and the caller still gets the flat
@@ -9787,12 +10154,11 @@ function parseDecisionBody(body) {
   };
 }
 async function listenOnFirstFreePort(server, ports) {
-  for (const port of ports) {
+  for (const port of [...ports, 0]) {
     const ok = await new Promise((resolve) => {
-      const onError = (error) => {
+      const onError = () => {
         server.removeListener("listening", onListening);
-        if (error.code === "EADDRINUSE" || error.code === "EACCES") resolve(false);
-        else resolve(false);
+        resolve(false);
       };
       const onListening = () => {
         server.removeListener("error", onError);
@@ -9852,10 +10218,26 @@ async function startReviewServer(options) {
       void (async () => {
         try {
           const body = await readBody(req);
-          const { visibility, keepIds } = parseDecisionBody(body);
-          const confirmed = { action: "confirm", visibility, keepIds };
+          const { visibility, keepIds, title } = parseDecisionBody(body);
+          if (title === null) {
+            send(
+              400,
+              page(
+                "Flatbread - title refused",
+                `<div class="done"><h1>That title cannot be used</h1><p class="meta">A title is 1-${LIMITS.title} characters. Go back, change it, and confirm again. Nothing was written.</p></div>`
+              )
+            );
+            return;
+          }
+          const changed = title !== void 0 && options.titleDraft !== void 0 && title !== normalizeTitle(options.titleDraft);
+          const confirmed = {
+            action: "confirm",
+            visibility,
+            keepIds,
+            ...changed ? { title } : {}
+          };
           const message = options.onConfirm ? await options.onConfirm(confirmed) : "";
-          send(200, renderDonePage("Share draft written", message, options.publishTo));
+          send(200, renderDonePage("Share draft written", message, options.publishTo, options.keepsRun === true));
           finish(confirmed);
         } catch (error) {
           send(500, page("Flatbread - error", `<div class="done"><h1>Could not write the share draft</h1><code>${escapeHtml(error instanceof Error ? error.message : String(error))}</code></div>`));
@@ -9890,6 +10272,16 @@ async function startReviewServer(options) {
 }
 
 // src/share.ts
+var spanKey = (match) => `${match.fieldPath}\0${match.start}\0${match.end}\0${match.original}`;
+function applyReview(trace, matches, keepIds, title) {
+  if (title === void 0 || title === trace.title) return applyRedactions(trace, matches, { keepIds });
+  const retitled = { ...trace, title };
+  const kept = new Set(keepIds);
+  const keptSpans = new Set(matches.filter((m) => kept.has(m.id) && m.fieldPath !== "title").map(spanKey));
+  const rescanned = scanTrace(retitled).matches;
+  const keep = rescanned.filter((m) => m.fieldPath !== "title" && keptSpans.has(spanKey(m))).map((m) => m.id);
+  return applyRedactions(retitled, rescanned, { keepIds: keep });
+}
 function openInBrowser(url) {
   try {
     if (process.platform === "win32") {
@@ -9999,6 +10391,7 @@ function reportPersist(outcome, options, log) {
   log(`  slug        ${outcome.slug}`);
   log(`  visibility  ${outcome.record.visibility}`);
   if (outcome.recordPath) log(`  record      ${outcome.recordPath}`);
+  log(`  again       flatbread pull ${outcome.slug}   (the next share replaces ${path15.basename(options.outputPath)}, not this record)`);
   log("");
   log(`open ${outcome.publish?.ok ? outcome.publish.url : `${base}/r/${outcome.slug}`}`);
   log("");
@@ -10064,17 +10457,22 @@ async function runShare(options) {
     if (parsed.humanTest) console.error(`  next step HUMAN-TESTS.md section ${parsed.humanTest}`);
     return { exitCode: 1, status: "not-found" };
   }
-  const trace = withLineage(
-    parsed.trace,
-    (options.readLineage ?? ((cwd) => readGitLineage(cwd)))(parsed.trace.source.cwd),
-    options.prUrl
-  );
-  for (const note of parsed.notes) log(`note: ${note}`);
-  if (options.parseOutputPath) {
-    FlatbreadTraceSchema.parse(trace);
-    fs16.mkdirSync(path15.dirname(options.parseOutputPath), { recursive: true });
-    fs16.writeFileSync(options.parseOutputPath, JSON.stringify(trace, null, 2) + "\n", "utf8");
+  const cwd = parsed.trace.source.cwd;
+  let lineage;
+  if (options.commit !== void 0) {
+    const bound = (options.bindCommit ?? ((dir, rev) => bindCommit(dir, rev)))(cwd, options.commit);
+    if ("problem" in bound) {
+      console.error(`--commit ${options.commit}: ${bound.problem}`);
+      console.error("Nothing was written. Run it from the session's repository, or leave --commit off.");
+      return { exitCode: 1, status: "bad-commit" };
+    }
+    lineage = bound;
+  } else {
+    lineage = (options.readLineage ?? ((dir) => readGitLineage(dir)))(cwd);
   }
+  const lined = withLineage(parsed.trace, lineage, options.prUrl);
+  const trace = options.title !== void 0 ? FlatbreadTraceSchema.parse({ ...lined, title: options.title }) : lined;
+  for (const note of parsed.notes) log(`note: ${note}`);
   const scan = scanTrace(trace);
   const byRule = /* @__PURE__ */ new Map();
   for (const match of scan.matches) byRule.set(match.rule, (byRule.get(match.rule) ?? 0) + 1);
@@ -10101,11 +10499,13 @@ async function runShare(options) {
       slots: scan.slots,
       sessionPath: target,
       draftPath: options.outputPath,
+      titleDraft: previewTitle,
+      keepsRun: options.persist !== false && (options.storeDir ?? resolveStoreDir()) !== null,
       ...isPublisher(reviewPublisher) ? { publishTo: reviewPublisher.description } : {},
       ...options.ports ? { ports: options.ports } : {},
       ...options.timeoutMs !== void 0 ? { timeoutMs: options.timeoutMs } : {},
       onConfirm: (decision2) => {
-        const applied2 = applyRedactions(trace, scan.matches, { keepIds: decision2.keepIds });
+        const applied2 = applyReview(trace, scan.matches, decision2.keepIds, decision2.title);
         const draft2 = buildDraft(applied2.trace, applied2.report, decision2.visibility);
         writeDraft(options.outputPath, draft2);
         written = draft2;
@@ -10114,9 +10514,9 @@ async function runShare(options) {
     });
     if (!session) {
       console.error(
-        `could not bind a review port (tried ${(options.ports ?? [4321, 4322, 4323, 4324, 4325]).join(", ")})`
+        `could not bind a review port on ${REVIEW_SERVER.host} (tried ${(options.ports ?? REVIEW_SERVER.ports).join(", ")}, then any port the OS would give)`
       );
-      console.error("Close whatever is using them, or run with --no-review.");
+      console.error("Loopback itself refused, so this machine needs a look; --no-review redacts everything without the page.");
       return { exitCode: 1, status: "port-unavailable" };
     }
     log(`  review at ${session.url}`);
@@ -10385,11 +10785,160 @@ function describeReadFailure(failure, what) {
 
 // src/mcp.ts
 import readline3 from "node:readline";
+
+// src/bucket.ts
+import { createHash as createHash2 } from "node:crypto";
+import fs18 from "node:fs";
+import path17 from "node:path";
+var BUCKET_INDEX_VERSION = 1;
+var BUCKET_INDEX_FILE = "index.json";
+var CAPTURE_LOG_FILE = "capture.log";
+var COMMIT_SESSION_WINDOW_MS = 2 * 60 * 60 * 1e3;
+function bucketDir(env = process.env) {
+  return path17.join(flatbreadHome(env), "bucket");
+}
+function bucketSlug(harness, sessionKey) {
+  return `local-${createHash2("sha256").update(`${harness}\0${sessionKey}`, "utf8").digest("hex").slice(0, 12)}`;
+}
+function rowOf(record) {
+  const sha = record.trace.source.headCommitSha;
+  return {
+    summary: summarize(record),
+    sessionPath: record.trace.source.sourcePath,
+    capturedAt: record.updatedAt,
+    ...record.trace.source.commitNamed === true && sha !== void 0 ? { commit: sha } : {}
+  };
+}
+function recordStems(dir) {
+  return fs18.readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length)).filter((stem2) => SlugSchema.safeParse(stem2).success).sort();
+}
+function writeAtomic(file, body) {
+  fs18.mkdirSync(path17.dirname(file), { recursive: true });
+  const temp = `${file}.${process.pid}.tmp`;
+  fs18.writeFileSync(temp, body, "utf8");
+  fs18.renameSync(temp, file);
+}
+var newestFirst = (rows) => [...rows].sort((a, b) => a.capturedAt < b.capturedAt ? 1 : a.capturedAt > b.capturedAt ? -1 : a.summary.slug < b.summary.slug ? -1 : 1);
+function readIndex(dir) {
+  try {
+    const parsed = JSON.parse(fs18.readFileSync(path17.join(dir, BUCKET_INDEX_FILE), "utf8"));
+    if (typeof parsed !== "object" || parsed === null) return null;
+    const { version, rows } = parsed;
+    if (version !== BUCKET_INDEX_VERSION || !Array.isArray(rows)) return null;
+    const out = [];
+    for (const row of rows) {
+      if (typeof row !== "object" || row === null) return null;
+      const { summary, sessionPath, capturedAt, commit } = row;
+      const parsedSummary = RecordSummarySchema.safeParse(summary);
+      if (!parsedSummary.success || typeof sessionPath !== "string" || typeof capturedAt !== "string") return null;
+      if (commit !== void 0 && typeof commit !== "string") return null;
+      out.push({ summary: parsedSummary.data, sessionPath, capturedAt, ...commit !== void 0 ? { commit } : {} });
+    }
+    return out;
+  } catch {
+    return null;
+  }
+}
+function writeIndex(dir, rows) {
+  writeAtomic(path17.join(dir, BUCKET_INDEX_FILE), JSON.stringify({ version: BUCKET_INDEX_VERSION, rows: newestFirst(rows) }, null, 2) + "\n");
+}
+function readBucket(dir) {
+  if (!fs18.existsSync(dir)) return { rows: [], rebuilt: false, unreadable: 0 };
+  const stems = recordStems(dir);
+  const indexed = readIndex(dir);
+  if (indexed !== null && JSON.stringify(indexed.map((row) => row.summary.slug).sort()) === JSON.stringify(stems)) {
+    return { rows: newestFirst(indexed), rebuilt: false, unreadable: 0 };
+  }
+  const { records, unreadable } = readStoreRecords(dir);
+  const rows = newestFirst(records.map(rowOf));
+  try {
+    writeIndex(dir, rows);
+  } catch {
+  }
+  return { rows, rebuilt: true, unreadable };
+}
+function readBucketRecord(dir, slug) {
+  if (!SlugSchema.safeParse(slug).success) return null;
+  try {
+    const parsed = TraceRecordSchema.safeParse(JSON.parse(fs18.readFileSync(path17.join(dir, `${slug}.json`), "utf8")));
+    return parsed.success ? parsed.data : null;
+  } catch {
+    return null;
+  }
+}
+function matchesQuery(summary, query) {
+  if (query.harness !== void 0 && summary.harness !== query.harness) return false;
+  if (query.category !== void 0 && summary.category !== query.category) return false;
+  if (query.onlyWithRecoveries === true && summary.failuresRecovered === 0) return false;
+  return matchesSearch(summary, query.query ?? "");
+}
+async function captureToBucket(options) {
+  const dir = options.dir ?? bucketDir(options.env);
+  const now = options.now ?? (/* @__PURE__ */ new Date()).toISOString();
+  const parsed = await parseWithHarness({ filePath: options.file, ...options.harness !== void 0 ? { harness: options.harness } : {} });
+  if (!parsed.ok) return { status: "refused", reason: `could not parse ${options.file}: ${parsed.reason}` };
+  const cwd = parsed.trace.source.cwd;
+  let lineage;
+  if (options.commit !== void 0) {
+    const bound = (options.bindCommit ?? ((at, rev) => bindCommit(at, rev)))(cwd, options.commit);
+    if ("problem" in bound) return { status: "refused", reason: `--commit ${options.commit}: ${bound.problem}` };
+    lineage = bound;
+  } else {
+    lineage = (options.readLineage ?? ((at) => readGitLineage(at)))(cwd);
+  }
+  const trace = withLineage(parsed.trace, lineage);
+  const scan = scanTrace(trace);
+  const applied = applyRedactions(trace, scan.matches, { keepIds: [] });
+  const sessionKey = trace.source.sessionId.length > 0 ? trace.source.sessionId : path17.resolve(options.file);
+  const slug = bucketSlug(parsed.harness, sessionKey);
+  const recordPath = path17.join(dir, `${slug}.json`);
+  const previous = readBucketRecord(dir, slug);
+  const commit = applied.trace.source.commitNamed === true ? applied.trace.source.headCommitSha : void 0;
+  const draft = ShareDraftSchema.parse({
+    schemaVersion: 1,
+    createdAt: previous?.createdAt ?? now,
+    trace: { ...applied.trace, visibility: "private" },
+    redaction: applied.report,
+    uploaded: false
+  });
+  const done = { slug, path: recordPath, steps: draft.trace.steps.length, redacted: draft.redaction.redactedCount, ...commit !== void 0 ? { commit } : {} };
+  if (previous !== null && previous.trace.steps.length === draft.trace.steps.length && previous.trace.source.headCommitSha === draft.trace.source.headCommitSha && previous.trace.source.commitNamed === draft.trace.source.commitNamed) {
+    return { status: "unchanged", ...done };
+  }
+  const record = buildRecord(draft, { slug, manageTokenHash: hashManageToken(mintManageToken()), now, origin: "local", visibility: "private" });
+  writeAtomic(recordPath, JSON.stringify(record, null, 2) + "\n");
+  const rows = readBucket(dir).rows.filter((row) => row.summary.slug !== slug);
+  writeIndex(dir, [...rows, rowOf(record)]);
+  return { status: "captured", ...done };
+}
+function sessionForRepo(repo, options = {}) {
+  const projects = getProjectsDir(options.env ?? process.env);
+  const folder = path17.join(projects, encodeCwd(path17.resolve(repo)));
+  const newest = listSessionFiles(folder)[0];
+  if (newest === void 0) return { problem: `no Claude Code session recorded for ${repo}` };
+  const age = (options.nowMs ?? Date.now()) - newest.mtimeMs;
+  const window = options.windowMs ?? COMMIT_SESSION_WINDOW_MS;
+  if (age > window) {
+    return { problem: `the newest session for ${repo} last moved ${Math.round(age / 6e4)} min ago, outside the ${Math.round(window / 6e4)} min window` };
+  }
+  return { file: newest.filePath };
+}
+function logCapture(dir, line, now = (/* @__PURE__ */ new Date()).toISOString()) {
+  try {
+    fs18.mkdirSync(dir, { recursive: true });
+    fs18.appendFileSync(path17.join(dir, CAPTURE_LOG_FILE), `${now} ${line.replace(/[\r\n]+/g, " ")}
+`, "utf8");
+  } catch {
+  }
+}
+
+// src/mcp.ts
 var MCP_PROTOCOL_VERSIONS = ["2025-06-18", "2025-03-26", "2024-11-05"];
-var MCP_SERVER_VERSION = "0.1.0";
-function defaultMcpDeps(storeDir2) {
+var MCP_SERVER_VERSION = "0.3.0";
+function defaultMcpDeps(storeDir2, bucketDir2) {
   return {
     storeDir: storeDir2,
+    bucketDir: bucketDir2,
     search: (query) => searchRemote(query, { client: "mcp" }),
     capsule: (ref) => fetchCapsule(ref, { client: "mcp" })
   };
@@ -10434,12 +10983,6 @@ function hitLine(hit) {
   if (hit.visibility !== "public") parts.push(hit.visibility);
   return `- ${parts.join(" \xB7 ")}`;
 }
-function matchesLocal(summary, query) {
-  if (query.harness !== void 0 && summary.harness !== query.harness) return false;
-  if (query.category !== void 0 && summary.category !== query.category) return false;
-  if (query.onlyWithRecoveries === true && summary.failuresRecovered === 0) return false;
-  return matchesSearch(summary, query.query ?? "");
-}
 function readQuery(args) {
   const query = {};
   if (args["query"] !== void 0) {
@@ -10467,42 +11010,75 @@ function readQuery(args) {
 function localRecords(deps) {
   return deps.storeDir === null ? { records: [], unreadable: 0 } : readStoreRecords(deps.storeDir);
 }
-async function searchTool(args, deps) {
-  const query = readQuery(args);
-  if (typeof query === "string") return text(query, true);
+var runs = (count) => `${count} matching run${count === 1 ? "" : "s"}`;
+function capturedLine(row) {
+  return `${hitLine(row.summary)} \xB7 captured ${row.capturedAt.slice(0, 10)}${row.commit !== void 0 ? ` at ${row.commit.slice(0, 12)}` : ""}`;
+}
+async function searchEverywhere(query, deps, options = {}) {
   const out = [];
   const local = localRecords(deps);
-  const localHits = local.records.map((record) => summarize(record)).filter((summary) => matchesLocal(summary, query));
+  const localHits = local.records.map((record) => summarize(record)).filter((summary) => matchesQuery(summary, query));
   if (deps.storeDir !== null) {
-    out.push(`This machine (${localHits.length} matching run${localHits.length === 1 ? "" : "s"}):`);
+    out.push(`This machine (${runs(localHits.length)}):`);
     for (const hit of localHits) out.push(hitLine(hit));
     if (local.unreadable > 0) out.push(`(${local.unreadable} local record file${local.unreadable === 1 ? "" : "s"} could not be read)`);
   }
+  const seen = new Set(localHits.map((hit) => hit.slug));
+  for (const record of local.records) {
+    const { harness, sessionId } = record.trace.source;
+    if (sessionId.length > 0 && localHits.some((hit) => hit.slug === record.slug)) seen.add(bucketSlug(harness, sessionId));
+  }
+  if (deps.bucketDir !== null) {
+    const bucket = readBucket(deps.bucketDir);
+    const captured = bucket.rows.filter((row) => !seen.has(row.summary.slug) && matchesQuery(row.summary, query));
+    if (out.length > 0) out.push("");
+    out.push(`Captured on this machine, not shared (${runs(captured.length)}):`);
+    for (const row of captured) {
+      out.push(capturedLine(row));
+      seen.add(row.summary.slug);
+    }
+    if (bucket.unreadable > 0) out.push(`(${bucket.unreadable} captured run file${bucket.unreadable === 1 ? "" : "s"} could not be read)`);
+  }
+  if (options.remote === false) {
+    if (out.length > 0) out.push("");
+    out.push("The site was not searched: --local");
+    return { lines: out, siteSearched: false };
+  }
   const remote = await deps.search(query);
   if (out.length > 0) out.push("");
   if (remote.ok) {
-    const seen = new Set(localHits.map((hit) => hit.slug));
     const fresh = remote.results.filter((hit) => !seen.has(hit.slug));
-    out.push(`${remote.site} (${fresh.length} matching run${fresh.length === 1 ? "" : "s"}):`);
+    out.push(`${remote.site} (${runs(fresh.length)}):`);
     for (const hit of fresh) out.push(hitLine(hit));
   } else {
     out.push(`The site was not searched: ${describeReadFailure(remote, "search")}`);
   }
-  out.push("", "Pass a run ID to flatbread_get_capsule for what that run learned.");
-  return text(out.join("\n"));
+  return { lines: out, siteSearched: remote.ok };
+}
+async function searchTool(args, deps) {
+  const query = readQuery(args);
+  if (typeof query === "string") return text(query, true);
+  const { lines: lines2 } = await searchEverywhere(query, deps);
+  return text([...lines2, "", "Pass a run ID to flatbread_get_capsule for what that run learned."].join("\n"));
+}
+async function readCapsule(ref, deps) {
+  if (ref.site === void 0) {
+    const stored = localRecords(deps).records.find((record) => record.slug === ref.slug);
+    if (stored !== void 0) return { ok: true, capsule: buildCapsule(stored.trace), from: "store" };
+    const captured = deps.bucketDir !== null ? readBucketRecord(deps.bucketDir, ref.slug) : null;
+    if (captured !== null) return { ok: true, capsule: buildCapsule(captured.trace), from: "bucket" };
+  }
+  const remote = await deps.capsule(ref);
+  return remote.ok ? { ok: true, capsule: remote.capsule, from: "site" } : remote;
 }
 async function capsuleTool(args, deps) {
   const raw = args["slug"];
   if (typeof raw !== "string") return text("slug must be a run ID or a /r/<id> link", true);
   const ref = parseRunRef(raw);
   if (ref === null) return text(`"${raw}" is not a run ID or a /r/<id> link`, true);
-  if (ref.site === void 0) {
-    const local = localRecords(deps).records.find((record) => record.slug === ref.slug);
-    if (local !== void 0) return text(buildCapsule(local.trace));
-  }
-  const remote = await deps.capsule(ref);
-  if (remote.ok) return text(remote.capsule);
-  return text(describeReadFailure(remote, `capsule ${ref.slug}`), true);
+  const read2 = await readCapsule(ref, deps);
+  if (read2.ok) return text(read2.capsule);
+  return text(describeReadFailure(read2, `capsule ${ref.slug}`), true);
 }
 async function handleMcpMessage(message, deps) {
   if (typeof message !== "object" || message === null || Array.isArray(message)) {
@@ -10551,7 +11127,7 @@ async function handleMcpMessage(message, deps) {
 }
 async function runMcpServer(deps, io) {
   const input = io?.input ?? process.stdin;
-  const write = io?.write ?? ((line) => process.stdout.write(line));
+  const write2 = io?.write ?? ((line) => process.stdout.write(line));
   const log = io?.log ?? ((line) => process.stderr.write(`${line}
 `));
   log(`flatbread mcp ${MCP_SERVER_VERSION} on stdio${deps.storeDir === null ? " (no local store)" : ` (local store ${deps.storeDir})`}`);
@@ -10564,12 +11140,12 @@ async function runMcpServer(deps, io) {
       try {
         message = JSON.parse(line);
       } catch {
-        write(`${JSON.stringify({ jsonrpc: "2.0", id: null, error: { code: -32700, message: "parse error" } })}
+        write2(`${JSON.stringify({ jsonrpc: "2.0", id: null, error: { code: -32700, message: "parse error" } })}
 `);
         return;
       }
       const reply = await handleMcpMessage(message, deps);
-      if (reply !== null) write(`${JSON.stringify(reply)}
+      if (reply !== null) write2(`${JSON.stringify(reply)}
 `);
     });
   }
@@ -10577,10 +11153,251 @@ async function runMcpServer(deps, io) {
   return 0;
 }
 
+// src/claude-mcp.ts
+import fs19 from "node:fs";
+import os7 from "node:os";
+import path18 from "node:path";
+var MCP_SERVER_NAME = "flatbread";
+function claudeUserConfigPath(env = process.env) {
+  const dir = env["CLAUDE_CONFIG_DIR"]?.trim();
+  return path18.join(dir ? dir : os7.homedir(), ".claude.json");
+}
+function mcpEntryFor(execPath, entryPath) {
+  return { type: "stdio", command: execPath, args: [entryPath, "mcp"] };
+}
+var isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+function runsFlatbreadMcp(entry) {
+  if (!isObject(entry) || !Array.isArray(entry["args"])) return false;
+  const words = [entry["command"], ...entry["args"]].filter((word) => typeof word === "string");
+  return words[words.length - 1] === "mcp" && words.some((word) => /flatbread/i.test(word));
+}
+var BOM = "\uFEFF";
+function readConfig(file) {
+  let raw;
+  try {
+    raw = fs19.readFileSync(file, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT") return { root: {}, raw: null };
+    return { problem: error.message };
+  }
+  const text2 = raw.startsWith(BOM) ? raw.slice(1) : raw;
+  if (text2.trim() === "") return { root: {}, raw };
+  let parsed;
+  try {
+    parsed = JSON.parse(text2);
+  } catch (error) {
+    return { problem: `not JSON (${error.message})` };
+  }
+  if (!isObject(parsed)) return { problem: "not a JSON object" };
+  if (parsed["mcpServers"] !== void 0 && !isObject(parsed["mcpServers"])) return { problem: "its mcpServers is not an object" };
+  return { root: parsed, raw };
+}
+function serializeLike(raw, root) {
+  let body = JSON.stringify(root, null, 2);
+  if (raw === null || raw.trimEnd() !== raw || raw.trim() === "") body += "\n";
+  if (raw !== null && raw.includes("\r\n")) body = body.replace(/\n/g, "\r\n");
+  if (raw !== null && raw.startsWith(BOM)) body = BOM + body;
+  return body;
+}
+function write(file, read2, next) {
+  if (read2.raw !== null) {
+    try {
+      fs19.accessSync(file, fs19.constants.W_OK);
+    } catch {
+      return `${file} is read-only, so it was left as it was`;
+    }
+    if (fs19.readFileSync(file, "utf8") !== read2.raw) return `${file} changed while setup ran (Claude Code writes it); run setup again`;
+    const backup = `${file}.flatbread.bak`;
+    if (!fs19.existsSync(backup)) fs19.copyFileSync(file, backup);
+  }
+  const mode = read2.raw !== null ? fs19.statSync(file).mode & 511 : 384;
+  fs19.mkdirSync(path18.dirname(file), { recursive: true });
+  const temp = `${file}.flatbread-${process.pid}.tmp`;
+  fs19.writeFileSync(temp, next, { encoding: "utf8", mode });
+  fs19.renameSync(temp, file);
+  return null;
+}
+function registerClaudeMcp(options) {
+  const { file, log } = options;
+  const read2 = readConfig(file);
+  if ("problem" in read2) {
+    log(`  mcp          refused: ${file}: ${read2.problem}`);
+    log("               Claude Code's own state lives there, so a file we cannot read is not one we rewrite.");
+    if (options.uninstall !== true) log(`               by hand: claude mcp add --scope user ${MCP_SERVER_NAME} -- "${options.execPath}" "${options.entryPath}" mcp`);
+    return 1;
+  }
+  const servers = isObject(read2.root["mcpServers"]) ? read2.root["mcpServers"] : void 0;
+  const current = servers?.[MCP_SERVER_NAME];
+  if (options.uninstall === true) {
+    if (current === void 0) {
+      log(`  mcp          no ${MCP_SERVER_NAME} server in ${file}`);
+      return 0;
+    }
+    if (!runsFlatbreadMcp(current)) {
+      log(`  mcp          ${file}: the ${MCP_SERVER_NAME} server there does not run flatbread, left alone`);
+      return 0;
+    }
+    if (options.dryRun === true) {
+      log(`  mcp          ${file}: would remove the ${MCP_SERVER_NAME} server`);
+      return 0;
+    }
+    const rest = { ...servers };
+    delete rest[MCP_SERVER_NAME];
+    const problem2 = write(file, read2, serializeLike(read2.raw, { ...read2.root, mcpServers: rest }));
+    if (problem2 !== null) {
+      log(`  mcp          refused: ${problem2}`);
+      return 1;
+    }
+    log(`  mcp          ${file}: removed the ${MCP_SERVER_NAME} server`);
+    const backup = `${file}.flatbread.bak`;
+    if (fs19.existsSync(backup)) log(`               ${backup} is the copy setup took before its first write; delete it when you like`);
+    return 0;
+  }
+  const entry = mcpEntryFor(options.execPath, options.entryPath);
+  if (current !== void 0 && !runsFlatbreadMcp(current)) {
+    log(`  mcp          refused: ${file} already has a server named ${MCP_SERVER_NAME} that does not run flatbread, left alone`);
+    return 1;
+  }
+  if (JSON.stringify(current) === JSON.stringify(entry)) {
+    log(`  mcp          ${file}: registered for every project, unchanged`);
+    return 0;
+  }
+  const verb = current === void 0 ? "register" : "update";
+  if (options.dryRun === true) {
+    log(`  mcp          ${file}: would ${verb} "${MCP_SERVER_NAME}": ${JSON.stringify(entry)}`);
+    return 0;
+  }
+  const root = { ...read2.root, mcpServers: { ...servers ?? {}, [MCP_SERVER_NAME]: entry } };
+  const problem = write(file, read2, serializeLike(read2.raw, root));
+  if (problem !== null) {
+    log(`  mcp          refused: ${problem}`);
+    return 1;
+  }
+  log(`  mcp          ${file}: ${verb === "register" ? "registered" : "updated"} for every project (user scope)`);
+  log("               restart Claude Code (or reload the VS Code window) so it starts the server");
+  return 0;
+}
+
+// src/git-hook.ts
+import fs20 from "node:fs";
+import path19 from "node:path";
+var POST_COMMIT_MARKER = "# flatbread post-commit hook - remove with: flatbread setup --uninstall";
+var CHAINED_HOOK = "post-commit.pre-flatbread";
+var sq = (value) => `'${value.replace(/\\/g, "/").replace(/'/g, "'\\''")}'`;
+function captureLine(execPath, entryPath) {
+  return `${sq(execPath)} ${sq(entryPath)} capture --commit "$(git rev-parse HEAD)" --repo "$(git rev-parse --show-toplevel)" --quiet >/dev/null 2>&1 &`;
+}
+function postCommitScript(execPath, entryPath) {
+  return [
+    "#!/bin/sh",
+    POST_COMMIT_MARKER,
+    "# Runs the hook that was here before, then records this commit against the newest agent session",
+    "# in this repository, on this machine only. It never changes the commit; it exits with the",
+    "# earlier hook's status. Off switch: FLATBREAD_HOOK_DISABLED=1",
+    "status=0",
+    `prior="$(dirname "$0")/${CHAINED_HOOK}"`,
+    'if [ -x "$prior" ]; then',
+    '  "$prior" "$@"',
+    "  status=$?",
+    "fi",
+    'if [ -z "$FLATBREAD_HOOK_DISABLED" ]; then',
+    `  ( ${captureLine(execPath, entryPath)} )`,
+    "fi",
+    'exit "$status"',
+    ""
+  ].join("\n");
+}
+var isOurs = (body) => body.includes(POST_COMMIT_MARKER);
+function hooksDirFor(cwd, options = {}) {
+  const top = git(cwd, ["rev-parse", "--show-toplevel"], options)?.trim();
+  if (top === void 0 || top.length === 0) return { ok: false, reason: "not-a-repo", detail: `${cwd} is not inside a git repository` };
+  const managed = git(top, ["config", "--show-scope", "--get", "core.hooksPath"], options)?.trim();
+  let machineHooksPath;
+  if (managed !== void 0 && managed.length > 0) {
+    const tab = managed.indexOf("	");
+    const scope = tab > 0 ? managed.slice(0, tab) : "local";
+    const value = tab > 0 ? managed.slice(tab + 1) : managed;
+    if (scope !== "system" && scope !== "global") {
+      return { ok: false, reason: "hooks-path", detail: `core.hooksPath is set to ${value} in this repository, so another tool owns its hooks` };
+    }
+    machineHooksPath = { scope, path: value };
+  }
+  const common = git(top, ["rev-parse", "--git-common-dir"], options)?.trim();
+  if (common === void 0 || common.length === 0) return { ok: false, reason: "unreadable", detail: `git could not name the git directory of ${top}` };
+  return { ok: true, repo: path19.resolve(top), dir: path19.resolve(top, common, "hooks"), ...machineHooksPath !== void 0 ? { machineHooksPath } : {} };
+}
+var read = (file) => {
+  try {
+    return fs20.readFileSync(file, "utf8");
+  } catch {
+    return null;
+  }
+};
+function installGitHook(dir, script, options = {}) {
+  const hook = path19.join(dir, "post-commit");
+  const chained = path19.join(dir, CHAINED_HOOK);
+  const current = read(hook);
+  const write2 = (lines2) => {
+    if (options.dryRun === true) return { code: 0, lines: [...lines2, "--dry-run: nothing was written"] };
+    fs20.mkdirSync(dir, { recursive: true });
+    if (current !== null && !isOurs(current)) fs20.renameSync(hook, chained);
+    fs20.writeFileSync(hook, script, { encoding: "utf8", mode: 493 });
+    fs20.chmodSync(hook, 493);
+    return { code: 0, lines: lines2 };
+  };
+  if (current === null) return write2([`post-commit  ${hook} (new)`]);
+  if (isOurs(current)) {
+    if (current === script) return { code: 0, lines: [`post-commit  ${hook}`, "already installed, unchanged"] };
+    return write2([`post-commit  ${hook}`, "updated the flatbread hook"]);
+  }
+  if (fs20.existsSync(chained)) {
+    return {
+      code: 1,
+      lines: [
+        `refused      ${hook}`,
+        `${chained} already exists, and post-commit is not ours. Neither file was touched.`,
+        "Move one of them yourself, then run setup again."
+      ]
+    };
+  }
+  return write2([
+    `post-commit  ${hook}`,
+    `your post-commit was kept as ${CHAINED_HOOK} and runs first, unchanged, with its exit status`
+  ]);
+}
+function uninstallGitHook(dir, options = {}) {
+  const hook = path19.join(dir, "post-commit");
+  const chained = path19.join(dir, CHAINED_HOOK);
+  const current = read(hook);
+  const hasChained = fs20.existsSync(chained);
+  const done = (lines2, act) => {
+    if (options.dryRun === true) return { code: 0, lines: [...lines2, "--dry-run: nothing was written"] };
+    act();
+    return { code: 0, lines: lines2 };
+  };
+  if (current !== null && !isOurs(current)) {
+    return {
+      code: 0,
+      lines: [
+        `post-commit  ${hook} is not ours, left alone`,
+        ...hasChained ? [`${chained} is still there; it is yours to keep or delete`] : []
+      ]
+    };
+  }
+  if (current === null && !hasChained) return { code: 0, lines: [`no flatbread post-commit in ${dir}`] };
+  if (hasChained) {
+    return done([`post-commit  ${hook}`, `restored your post-commit from ${CHAINED_HOOK}`], () => {
+      if (current !== null) fs20.rmSync(hook);
+      fs20.renameSync(chained, hook);
+    });
+  }
+  return done([`post-commit  ${hook}`, "removed the flatbread hook"], () => fs20.rmSync(hook));
+}
+
 // src/hook.ts
-import { spawnSync as spawnSync2 } from "node:child_process";
-import fs18 from "node:fs";
-import path17 from "node:path";
+import { spawn as spawn2, spawnSync as spawnSync2 } from "node:child_process";
+import fs21 from "node:fs";
+import path20 from "node:path";
 var HOOK_EVENTS = ["Stop", "SessionEnd"];
 var OFFER_AFTER_STOPS = 2;
 var MAX_TRACKED_SESSIONS = 50;
@@ -10590,14 +11407,14 @@ function emptyHookState() {
   return { version: HOOK_STATE_VERSION, sessions: {} };
 }
 function hookStatePath(env = process.env) {
-  return path17.join(flatbreadHome(env), "hook-state.json");
+  return path20.join(flatbreadHome(env), "hook-state.json");
 }
 function readHookState(env = process.env) {
   const file = hookStatePath(env);
-  if (!fs18.existsSync(file)) return { ok: true, state: emptyHookState(), present: false };
+  if (!fs21.existsSync(file)) return { ok: true, state: emptyHookState(), present: false };
   let raw;
   try {
-    raw = fs18.readFileSync(file, "utf8");
+    raw = fs21.readFileSync(file, "utf8");
   } catch (error) {
     return { ok: false, reason: "unreadable", detail: error.message };
   }
@@ -10640,9 +11457,9 @@ function pruneHookState(state, keep = MAX_TRACKED_SESSIONS) {
 }
 function writeHookState(state, env = process.env) {
   const dir = flatbreadHome(env);
-  fs18.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs21.mkdirSync(dir, { recursive: true, mode: 448 });
   const file = hookStatePath(env);
-  fs18.writeFileSync(file, JSON.stringify(pruneHookState(state), null, 2) + "\n", {
+  fs21.writeFileSync(file, JSON.stringify(pruneHookState(state), null, 2) + "\n", {
     encoding: "utf8",
     mode: 384
   });
@@ -10777,12 +11594,18 @@ function offerAfterFrom(env) {
   }
   return { value: parsed };
 }
+function spawnDetachedDefault(command, args) {
+  const child = spawn2(command, args, { detached: true, stdio: "ignore", windowsHide: true });
+  child.on("error", () => {
+  });
+  child.unref();
+}
 async function runHookNotify(io) {
   const env = io.env ?? process.env;
   const stdout = io.stdout ?? ((line) => process.stdout.write(line + "\n"));
   const stderr = io.stderr ?? ((line) => process.stderr.write(line + "\n"));
   const now = io.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-  const exists = io.exists ?? ((filePath) => fs18.existsSync(filePath));
+  const exists = io.exists ?? ((filePath) => fs21.existsSync(filePath));
   const execPath = io.execPath ?? process.execPath;
   const entryPath = io.entryPath ?? process.argv[1] ?? "";
   try {
@@ -10796,14 +11619,14 @@ async function runHookNotify(io) {
       stderr(`flatbread hook: NOT RETRIEVED (${parsed.detail})`);
       return 0;
     }
-    const read = readHookState(env);
-    if (!read.ok) {
-      stderr(`flatbread hook: NOT RETRIEVED (${read.reason}: ${read.detail}) at ${hookStatePath(env)}`);
+    const read2 = readHookState(env);
+    if (!read2.ok) {
+      stderr(`flatbread hook: NOT RETRIEVED (${read2.reason}: ${read2.detail}) at ${hookStatePath(env)}`);
       return 0;
     }
     const offerAfter = offerAfterFrom(env);
     if (offerAfter.ignored) stderr(`flatbread hook: ${offerAfter.ignored}, using ${OFFER_AFTER_STOPS}`);
-    const decision = decideHook(parsed.event, read.state, {
+    const decision = decideHook(parsed.event, read2.state, {
       now: now(),
       exists,
       offerAfter: offerAfter.value,
@@ -10811,7 +11634,7 @@ async function runHookNotify(io) {
       entryPath
     });
     let recorded = true;
-    if (decision.nextState !== read.state) {
+    if (decision.nextState !== read2.state) {
       try {
         writeHookState(decision.nextState, env);
       } catch (error) {
@@ -10819,6 +11642,11 @@ async function runHookNotify(io) {
         stderr(`flatbread hook: could not record state (${error.message})`);
       }
     }
+    const transcript = parsed.event.transcript_path;
+    if (io.capture === true && parsed.event.hook_event_name === "SessionEnd" && transcript !== void 0 && exists(transcript)) {
+      (io.spawnDetached ?? spawnDetachedDefault)(execPath, [entryPath, "capture", "--file", transcript, "--quiet"]);
+      stderr("flatbread hook: capturing this session into the local bucket, in the background");
+    }
     if (decision.speak && recorded) {
       stdout(JSON.stringify({ systemMessage: decision.systemMessage }));
       stderr(`flatbread hook: ${decision.why}`);
@@ -10839,7 +11667,7 @@ function hookHandlerFor(options) {
   const handler = {
     type: "command",
     command: options.execPath,
-    args: [options.entryPath, "hook", "notify"]
+    args: [options.entryPath, "hook", "notify", ...options.capture === true && options.event === "SessionEnd" ? ["--capture"] : []]
   };
   if (options.event === "Stop") handler.timeout = STOP_TIMEOUT_SECONDS;
   return handler;
@@ -10934,10 +11762,10 @@ function removeHookConfig(settings) {
   return { settings: root, removed };
 }
 function readSettingsFile(file) {
-  if (!fs18.existsSync(file)) return { present: false, file };
+  if (!fs21.existsSync(file)) return { present: false, file };
   let raw;
   try {
-    raw = fs18.readFileSync(file, "utf8");
+    raw = fs21.readFileSync(file, "utf8");
   } catch (error) {
     return { present: true, file, unreadable: error.message };
   }
@@ -10949,19 +11777,19 @@ function readSettingsFile(file) {
   }
 }
 function writeSettingsFile(file, settings) {
-  fs18.mkdirSync(path17.dirname(file), { recursive: true });
+  fs21.mkdirSync(path20.dirname(file), { recursive: true });
   const temp = `${file}.flatbread-${process.pid}.tmp`;
-  fs18.writeFileSync(temp, JSON.stringify(settings, null, 2) + "\n", "utf8");
-  fs18.renameSync(temp, file);
+  fs21.writeFileSync(temp, JSON.stringify(settings, null, 2) + "\n", "utf8");
+  fs21.renameSync(temp, file);
 }
-function handlersFor(execPath, entryPath) {
+function handlersFor(execPath, entryPath, capture = false) {
   return {
     Stop: hookHandlerFor({ execPath, entryPath, event: "Stop" }),
-    SessionEnd: hookHandlerFor({ execPath, entryPath, event: "SessionEnd" })
+    SessionEnd: hookHandlerFor({ execPath, entryPath, event: "SessionEnd", capture })
   };
 }
-function handlerBlockFor(execPath, entryPath) {
-  const handlers = handlersFor(execPath, entryPath);
+function handlerBlockFor(execPath, entryPath, capture = false) {
+  const handlers = handlersFor(execPath, entryPath, capture);
   const hooks = {};
   for (const event of HOOK_EVENTS) hooks[event] = [{ hooks: [handlers[event]] }];
   return JSON.stringify({ hooks }, null, 2);
@@ -10972,21 +11800,22 @@ function runHookInstall(options = {}) {
   const execPath = options.execPath ?? process.execPath;
   const entryPath = options.entryPath ?? process.argv[1] ?? "";
   const file = options.settingsPath ?? claudeSettingsPath(env);
-  const read = readSettingsFile(file);
-  if (read.present && "unreadable" in read) {
+  const capture = options.capture === true;
+  const read2 = readSettingsFile(file);
+  if (read2.present && "unreadable" in read2) {
     log("");
     log(`  refused      ${file}`);
-    log(`  ${read.unreadable}`);
+    log(`  ${read2.unreadable}`);
     log("  a settings file we cannot read is not one we will rewrite. Add this by hand:");
     log("");
-    for (const line of handlerBlockFor(execPath, entryPath).split("\n")) log(`  ${line}`);
+    for (const line of handlerBlockFor(execPath, entryPath, capture).split("\n")) log(`  ${line}`);
     log("");
     return 1;
   }
-  const current = read.present ? read.parsed : {};
+  const current = read2.present ? read2.parsed : {};
   let merged;
   try {
-    merged = mergeHookConfig(current, handlersFor(execPath, entryPath));
+    merged = mergeHookConfig(current, handlersFor(execPath, entryPath, capture));
   } catch (error) {
     log("");
     log(`  refused      ${file}`);
@@ -10995,7 +11824,7 @@ function runHookInstall(options = {}) {
     return 1;
   }
   log("");
-  log(`  settings     ${file}${read.present ? "" : " (new)"}`);
+  log(`  settings     ${file}${read2.present ? "" : " (new)"}`);
   log(`  command      "${execPath}" "${entryPath}" hook notify`);
   if (merged.changes.length === 0) {
     log("  already installed, unchanged");
@@ -11019,7 +11848,7 @@ function runHookInstall(options = {}) {
       log("  refused: nothing was written, because this command line does not work here.");
       log("  fix the command (or pass --no-probe if you know better), then install again:");
       log("");
-      for (const line of handlerBlockFor(execPath, entryPath).split("\n")) log(`  ${line}`);
+      for (const line of handlerBlockFor(execPath, entryPath, capture).split("\n")) log(`  ${line}`);
       log("");
       return 1;
     }
@@ -11048,7 +11877,9 @@ function runHookInstall(options = {}) {
     log("");
     return 1;
   }
-  log("  wrote it. Stop offers the share once per session; SessionEnd only records the end.");
+  log(
+    capture ? "  wrote it. Stop offers the share once per session; SessionEnd captures the run into the local bucket." : "  wrote it. Stop offers the share once per session; SessionEnd only records the end."
+  );
   log("  off switch: FLATBREAD_HOOK_DISABLED=1, or flatbread hook uninstall");
   log("");
   return 0;
@@ -11057,23 +11888,23 @@ function runHookUninstall(options = {}) {
   const env = options.env ?? process.env;
   const log = options.log ?? ((line) => console.log(line));
   const file = options.settingsPath ?? claudeSettingsPath(env);
-  const read = readSettingsFile(file);
+  const read2 = readSettingsFile(file);
   log("");
-  if (!read.present) {
+  if (!read2.present) {
     log(`  nothing to remove: ${file} does not exist`);
     log("");
     return 0;
   }
-  if ("unreadable" in read) {
+  if ("unreadable" in read2) {
     log(`  refused      ${file}`);
-    log(`  ${read.unreadable}`);
+    log(`  ${read2.unreadable}`);
     log("  remove the flatbread entries by hand rather than let us rewrite a file we cannot read");
     log("");
     return 1;
   }
   let result;
   try {
-    result = removeHookConfig(read.parsed);
+    result = removeHookConfig(read2.parsed);
   } catch (error) {
     log(`  refused      ${error instanceof Error ? error.message : String(error)}`);
     log("");
@@ -11084,6 +11915,13 @@ function runHookUninstall(options = {}) {
     log("");
     return 0;
   }
+  if (options.dryRun === true) {
+    log(`  settings     ${file}`);
+    for (const line of result.removed) log(`  ${line}`);
+    log("  --dry-run: nothing was written");
+    log("");
+    return 0;
+  }
   try {
     writeSettingsFile(file, result.settings);
   } catch (error) {
@@ -11100,8 +11938,8 @@ function runHookUninstall(options = {}) {
 function settingsCandidates(env, cwd) {
   return [
     { label: "user", file: claudeSettingsPath(env) },
-    { label: "project", file: path17.join(cwd, ".claude", "settings.json") },
-    { label: "local", file: path17.join(cwd, ".claude", "settings.local.json") }
+    { label: "project", file: path20.join(cwd, ".claude", "settings.json") },
+    { label: "local", file: path20.join(cwd, ".claude", "settings.local.json") }
   ];
 }
 function installedEventsIn(parsed, exists) {
@@ -11131,23 +11969,23 @@ function runHookStatus(options = {}) {
   const env = options.env ?? process.env;
   const log = options.log ?? ((line) => console.log(line));
   const cwd = options.cwd ?? process.cwd();
-  const exists = options.exists ?? ((filePath) => fs18.existsSync(filePath));
+  const exists = options.exists ?? ((filePath) => fs21.existsSync(filePath));
   const candidates = options.settingsPath === void 0 ? settingsCandidates(env, cwd) : [{ label: "settings", file: options.settingsPath }];
   log("");
   log("flatbread hook");
   log("");
   let installed = 0;
   for (const candidate of candidates) {
-    const read2 = readSettingsFile(candidate.file);
-    if (!read2.present) {
+    const read3 = readSettingsFile(candidate.file);
+    if (!read3.present) {
       log(`  ${candidate.label.padEnd(8)} ${candidate.file} (absent)`);
       continue;
     }
-    if ("unreadable" in read2) {
-      log(`  ${candidate.label.padEnd(8)} ${candidate.file} NOT RETRIEVED (${read2.unreadable})`);
+    if ("unreadable" in read3) {
+      log(`  ${candidate.label.padEnd(8)} ${candidate.file} NOT RETRIEVED (${read3.unreadable})`);
       continue;
     }
-    const found = installedEventsIn(read2.parsed, exists);
+    const found = installedEventsIn(read3.parsed, exists);
     installed += found.events.length;
     const summary = found.events.length === 0 ? "(no flatbread handler)" : found.events.join(", ");
     log(`  ${candidate.label.padEnd(8)} ${candidate.file} ${summary}`);
@@ -11171,15 +12009,15 @@ function runHookStatus(options = {}) {
     }
   }
   log("");
-  const read = readHookState(env);
-  if (!read.ok) {
-    log(`  state        NOT RETRIEVED (${read.reason}: ${read.detail})`);
+  const read2 = readHookState(env);
+  if (!read2.ok) {
+    log(`  state        NOT RETRIEVED (${read2.reason}: ${read2.detail})`);
     log(`               ${hookStatePath(env)}`);
     log("");
     return 1;
   }
-  const sessions = Object.entries(read.state.sessions);
-  log(`  state        ${hookStatePath(env)}${read.present ? "" : " (none yet)"}`);
+  const sessions = Object.entries(read2.state.sessions);
+  log(`  state        ${hookStatePath(env)}${read2.present ? "" : " (none yet)"}`);
   log(`  sessions     ${sessions.length}`);
   log(`  offered      ${sessions.filter(([, session]) => session.offeredAt !== void 0).length}`);
   const recent = [...sessions].sort((a, b) => b[1].lastSeenAt > a[1].lastSeenAt ? 1 : -1).slice(0, 5);
@@ -11251,8 +12089,92 @@ function probeHandler(handler, run = spawnSync2) {
   return { ok: true, detail: "ran, exited 0, printed nothing" };
 }
 
+// src/setup.ts
+function runSetup(options = {}) {
+  const env = options.env ?? process.env;
+  const log = options.log ?? ((line) => console.log(line));
+  const execPath = options.execPath ?? process.execPath;
+  const entryPath = options.entryPath ?? process.argv[1] ?? "";
+  const dryRun = options.dryRun === true;
+  const settings = options.settingsPath !== void 0 ? { settingsPath: options.settingsPath } : {};
+  if (options.uninstall !== true && /[\\/]_npx[\\/]/.test(entryPath)) {
+    log("");
+    log(`  refused: this flatbread runs from npx's cache (${entryPath}),`);
+    log("  which npm may clear - and a hook that names a missing file fails silently. Install it, then run setup:");
+    log("    npm install -g flatbread-cli");
+    log("    flatbread setup");
+    log("");
+    return 1;
+  }
+  log("");
+  log("Claude Code");
+  const claude = options.uninstall === true ? runHookUninstall({ env, log, dryRun, ...settings }) : runHookInstall({
+    env,
+    log,
+    execPath,
+    entryPath,
+    dryRun,
+    capture: true,
+    ...options.noProbe === true ? { noProbe: true } : {},
+    ...options.spawn !== void 0 ? { spawn: options.spawn } : {},
+    ...settings
+  });
+  let mcp = 0;
+  if (options.noMcp === true) {
+    log("  --no-mcp: Claude Code's MCP servers were not touched");
+  } else if (claude === 0 || options.uninstall === true) {
+    mcp = registerClaudeMcp({
+      file: options.claudeConfigPath ?? claudeUserConfigPath(env),
+      execPath,
+      entryPath,
+      uninstall: options.uninstall === true,
+      dryRun,
+      log
+    });
+  } else {
+    log("  mcp          not registered, because the hook step above was refused");
+  }
+  log("");
+  let git2 = 0;
+  log("git");
+  if (options.noGit === true) {
+    log("  --no-git: the post-commit hook was not touched");
+  } else {
+    const where = hooksDirFor(options.repo ?? process.cwd(), options.git !== void 0 ? { git: options.git } : {});
+    if (!where.ok) {
+      log(`  skipped      ${where.detail}`);
+      if (where.reason === "hooks-path" && options.uninstall !== true) {
+        log("  add this line to that post-commit yourself to capture commits:");
+        log(`    ${captureLine(execPath, entryPath)}`);
+      } else if (where.reason === "not-a-repo" && options.uninstall !== true) {
+        log("  run setup inside a repository to bind its commits to your sessions");
+      }
+      if (where.reason === "unreadable") git2 = 1;
+    } else {
+      const outcome = options.uninstall === true ? uninstallGitHook(where.dir, { dryRun }) : installGitHook(where.dir, postCommitScript(execPath, entryPath), { dryRun });
+      for (const line of outcome.lines) log(`  ${line}`);
+      if (where.machineHooksPath !== void 0 && options.uninstall !== true && outcome.code === 0) {
+        log(`  note         git runs ${where.machineHooksPath.path} first (core.hooksPath, ${where.machineHooksPath.scope} config).`);
+        log("               This hook fires only if that one runs the repository's own post-commit.");
+        log(`               After your next commit, ${bucketDir(env)}/capture.log says whether it did.`);
+      }
+      git2 = outcome.code;
+    }
+  }
+  log("");
+  if (options.uninstall === true) {
+    log(`  the bucket is left alone: ${bucketDir(env)}`);
+  } else {
+    log(`  captures go to ${bucketDir(env)}: redacted, private, never uploaded`);
+    log("  find them with: flatbread search <words>");
+    log("  share one with: flatbread share --file <its session>, which opens the review");
+  }
+  log("");
+  return claude !== 0 || mcp !== 0 || git2 !== 0 ? 1 : 0;
+}
+
 // src/login-server.ts
-import crypto2 from "node:crypto";
+import crypto3 from "node:crypto";
 import http2 from "node:http";
 function callbackOrigin(port) {
   return `http://127.0.0.1:${port}`;
@@ -11327,7 +12249,7 @@ function parseDelivery(raw, expectedState, nowSeconds) {
   }
   const given = Buffer.from(state, "utf8");
   const wanted = Buffer.from(expectedState, "utf8");
-  if (given.length !== wanted.length || !crypto2.timingSafeEqual(given, wanted)) {
+  if (given.length !== wanted.length || !crypto3.timingSafeEqual(given, wanted)) {
     return { ok: false, problem: "the callback state did not match" };
   }
   const sessionRaw = body["session"];
@@ -11375,7 +12297,7 @@ async function readBody2(req, limitBytes = 64 * 1024) {
 async function startLoginServer(options = {}) {
   const ports = options.ports ?? DEFAULT_LOGIN_PORTS;
   const now = options.now ?? (() => Math.floor(Date.now() / 1e3));
-  const state = options.state ?? crypto2.randomBytes(32).toString("hex");
+  const state = options.state ?? crypto3.randomBytes(32).toString("hex");
   let settle;
   const delivery = new Promise((resolve) => {
     settle = resolve;
@@ -11461,26 +12383,35 @@ async function bindFirst(server, ports) {
 }
 
 // src/index.ts
-var PACKAGE_ROOT = path18.resolve(path18.dirname(fileURLToPath(import.meta.url)), "..");
-var SOURCE_CHECKOUT = fs19.existsSync(path18.join(PACKAGE_ROOT, "src", "index.ts"));
-var TMP_DIR = process.env["FLATBREAD_TMP_DIR"]?.trim() || (SOURCE_CHECKOUT ? path18.join(PACKAGE_ROOT, ".tmp") : path18.join(os7.homedir(), ".flatbread"));
-var OUTPUT_PATH = path18.join(TMP_DIR, "last-parse.json");
-var SHARE_OUTPUT_PATH = path18.join(TMP_DIR, "last-share.json");
+var PACKAGE_ROOT = path21.resolve(path21.dirname(fileURLToPath2(import.meta.url)), "..");
+var SOURCE_CHECKOUT = fs22.existsSync(path21.join(PACKAGE_ROOT, "src", "index.ts"));
+var TMP_DIR = process.env["FLATBREAD_TMP_DIR"]?.trim() || (SOURCE_CHECKOUT ? path21.join(PACKAGE_ROOT, ".tmp") : path21.join(os8.homedir(), ".flatbread"));
+var OUTPUT_PATH = path21.join(TMP_DIR, "last-parse.json");
+var SHARE_OUTPUT_PATH = path21.join(TMP_DIR, "last-share.json");
 function storeDir() {
-  return resolveStoreDir() ?? (SOURCE_CHECKOUT ? null : path18.join(TMP_DIR, DEFAULT_STORE_DIRNAME));
+  return resolveStoreDir() ?? (SOURCE_CHECKOUT ? null : path21.join(TMP_DIR, DEFAULT_STORE_DIRNAME));
 }
 var USAGE = `flatbread - registry of AI agent runs
 
 Usage:
-  flatbread parse --file <path>         Parse a session log (harness auto-detected)
+  flatbread parse --file <path>         Parse a session log and print its brief. Writes nothing
   flatbread parse --latest              Parse the newest session for a harness
   flatbread share                       Review + sanitize the newest session
   flatbread share --file <path>          Review + sanitize a specific session
   flatbread view                        Write the brief and capsule, print the viewer URL
-  flatbread pull <id|url>               Print a run's Context Capsule
+  flatbread pull <id|url>               Print a run's Context Capsule: a run this machine shared or
+                                        captured is read here, anything else from the site
   flatbread pull <id|url> --out <file>  Write it to a file instead
   flatbread mcp                         MCP server on stdio: flatbread_search_traces and
                                         flatbread_get_capsule, for your coding agent
+  flatbread search <words>              Find runs: this machine's shared and captured ones, then
+                                        the site (the same answer the MCP server gives)
+  flatbread setup                       Auto-capture: the Claude Code hook, plus a chained git
+                                        post-commit in this repository, and the MCP server for
+                                        every Claude Code project. Captures stay local
+  flatbread setup --uninstall           Remove exactly what setup added
+  flatbread capture --file <path>       Capture one session into the local bucket (setup's hooks
+                                        run this; redacted, private, never uploaded)
   flatbread adapters                    List harness adapters and their confidence
   flatbread login                       Sign in through the website, the way npm does
   flatbread login --email <addr>        Sign in by email instead (see the note below)
@@ -11496,15 +12427,41 @@ Usage:
 Options for parse:
   --harness <id>                        Skip detection and name the harness.
                                         ${HARNESS_IDS.join(", ")}
+  --save                                Also write the raw (unredacted) trace where view and the
+                                        local viewer read it
+  --out <file>                          Write the raw trace to <file> instead
 
 Options for share:
   --harness <id>                        Skip detection and name the harness
   --publish                             Upload the run to your account (needs flatbread login)
   --pr <url>                            Link the pull request this run belongs to (https)
+  --title <text>                        The run's title (1-${LIMITS.title} characters). The review page
+                                        opens with it and can still change it
+  --commit [sha]                        Bind the run to a commit (bare --commit = HEAD) and record
+                                        whether the working tree was clean against it
   --no-review                           Redact every match, skip the browser (non-interactive)
   --no-open                             Start the review server but do not launch a browser
   -h, --help                            Show this message
 
+Options for search:
+  --harness <id>  --category <kind>     Only runs from that harness, or of that kind of job
+  --recovered                           Only runs where the agent recovered from a failure
+  --local                               This machine only; the site is not asked
+
+Options for setup:
+  --dry-run                             Say what would be written, write nothing
+  --uninstall                           Remove the handlers, the MCP server and the post-commit;
+                                        restore a post-commit hook setup had chained
+  --no-git                              Leave the repository's hooks alone
+  --no-mcp                              Leave Claude Code's MCP servers alone
+  --settings <path>  --no-probe         As for hook install
+
+Options for capture:
+  --commit [sha]                        Bind the capture to a commit (bare = HEAD)
+  --repo <dir>                          Without --file: the newest session of that repository,
+                                        if it moved in the last ${Math.round(COMMIT_SESSION_WINDOW_MS / 6e4)} minutes
+  --quiet                               Log to the bucket's capture.log and always exit 0 (hooks)
+
 Options for hook install and hook uninstall:
   --settings <path>                     Settings file to edit. Default: the user settings file
                                         (~/.claude/settings.json, or CLAUDE_CONFIG_DIR)
@@ -11519,15 +12476,19 @@ Options for adapters:
 Notes:
   parse and share record the git branch, HEAD commit and uncommitted file names when the
   session ran inside a git repository. Nothing else from git is read.
-  Parsed traces are written to ${path18.relative(process.cwd(), OUTPUT_PATH) || OUTPUT_PATH}
-  Share drafts are written to ${path18.relative(process.cwd(), SHARE_OUTPUT_PATH) || SHARE_OUTPUT_PATH}
+  parse --save writes ${path21.relative(process.cwd(), OUTPUT_PATH) || OUTPUT_PATH}
+  Share drafts are written to ${path21.relative(process.cwd(), SHARE_OUTPUT_PATH) || SHARE_OUTPUT_PATH}
+  (the latest only; every shared run is also kept under its ID, for search and pull)
   Every parsed run defaults to visibility "private".
   Nothing is uploaded unless you pass --publish, or set FLATBREAD_API_URL and
   FLATBREAD_API_TOKEN yourself. pull and mcp only read: public runs, your own when you
   are signed in, and a private run through its share link. The review UI listens on
-  127.0.0.1 only. Add the MCP server to Claude Code with:
-    claude mcp add flatbread -- npx -y flatbread-cli mcp
+  127.0.0.1 only, on 4321-4325 or, when all five are busy, a port the OS picks.
+  setup registers the MCP server in ~/.claude.json, for every project. By hand instead:
+    claude mcp add --scope user flatbread -- flatbread mcp
   The viewer is a separate dev server: npm run dev -w @flatbread/web
+  Captured runs live in ~/.flatbread/bucket (FLATBREAD_HOOK_DISABLED=1 stops every capture).
+  A capture is not a share: to publish one, run share --file on its session.
   The hook offers ONE LINE at the end of a turn and never uploads anything itself. Turn it
   off with FLATBREAD_HOOK_DISABLED=1, or change when it speaks with
   FLATBREAD_HOOK_OFFER_AFTER=<turns>. It records what it has seen in ~/.flatbread.
@@ -11548,6 +12509,15 @@ function parseArgv(argv) {
     const arg = argv[i];
     if (arg === "--latest") {
       args.latest = true;
+    } else if (arg === "--save") {
+      args.out = OUTPUT_PATH;
+    } else if (arg === "--out") {
+      const value = argv[i + 1];
+      if (value === void 0 || value.startsWith("--")) throw new Error("--out needs a file path");
+      args.out = path21.resolve(value);
+      i += 1;
+    } else if (arg !== void 0 && arg.startsWith("--out=")) {
+      args.out = path21.resolve(arg.slice("--out=".length));
     } else if (arg === "--harness") {
       const value = argv[i + 1];
       if (value === void 0 || value.startsWith("--")) {
@@ -11643,7 +12613,9 @@ function report(result, outputPath) {
   lines2.push("");
   lines2.push(...briefLines(trace));
   lines2.push("");
-  lines2.push(`  wrote ${outputPath}`);
+  lines2.push(
+    outputPath === void 0 ? `  wrote nothing. --save writes ${OUTPUT_PATH} for the viewer` : `  wrote ${outputPath}`
+  );
   lines2.push("");
   console.log(lines2.join("\n"));
 }
@@ -11666,12 +12638,12 @@ async function runParse(args) {
     target = found[0];
     console.log(`latest ${harness} session: ${target}`);
   } else if (args.file) {
-    target = path18.resolve(args.file);
-    if (!fs19.existsSync(target)) {
+    target = path21.resolve(args.file);
+    if (!fs22.existsSync(target)) {
       console.error(`file not found: ${target}`);
       return 1;
     }
-    if (!fs19.statSync(target).isFile()) {
+    if (!fs22.statSync(target).isFile()) {
       console.error(`not a file: ${target}`);
       return 1;
     }
@@ -11701,9 +12673,11 @@ async function runParse(args) {
   }
   const trace = withLineage(result.trace, readGitLineage(result.trace.source.cwd));
   FlatbreadTraceSchema.parse(trace);
-  fs19.mkdirSync(path18.dirname(OUTPUT_PATH), { recursive: true });
-  fs19.writeFileSync(OUTPUT_PATH, JSON.stringify(trace, null, 2) + "\n", "utf8");
-  report({ ...result, trace }, OUTPUT_PATH);
+  if (args.out !== void 0) {
+    fs22.mkdirSync(path21.dirname(args.out), { recursive: true });
+    fs22.writeFileSync(args.out, JSON.stringify(trace, null, 2) + "\n", "utf8");
+  }
+  report({ ...result, trace }, args.out);
   return 0;
 }
 function parseAdaptersArgv(argv) {
@@ -11765,8 +12739,8 @@ async function runAdapters(args) {
   }
   let input = null;
   if (args.file !== void 0) {
-    const resolved = path18.resolve(args.file);
-    if (!fs19.existsSync(resolved)) {
+    const resolved = path21.resolve(args.file);
+    if (!fs22.existsSync(resolved)) {
       console.error(`file not found: ${resolved}`);
       return 1;
     }
@@ -11780,6 +12754,16 @@ async function runAdapters(args) {
   console.log("");
   return 0;
 }
+var COMMIT_REV = /^[A-Za-z0-9][A-Za-z0-9._/~^@{}-]{0,199}$/;
+function checkCommitRev(value) {
+  if (!COMMIT_REV.test(value)) throw new Error(`--commit needs a commit SHA or ref, e.g. --commit HEAD (got "${value}")`);
+  return value;
+}
+function checkTitle(value) {
+  const title = normalizeTitle(value);
+  if (title === null) throw new Error(`--title must be 1-${LIMITS.title} characters`);
+  return title;
+}
 function parseShareArgv(argv) {
   const args = { noReview: false, open: true, publish: false };
   for (let i = 0; i < argv.length; i += 1) {
@@ -11807,6 +12791,23 @@ function parseShareArgv(argv) {
       i += 1;
     } else if (arg !== void 0 && arg.startsWith("--pr=")) {
       args.prUrl = checkPrUrl(arg.slice("--pr=".length));
+    } else if (arg === "--title") {
+      const value = argv[i + 1];
+      if (value === void 0 || value.startsWith("--")) throw new Error("--title needs the run's title, in quotes");
+      args.title = checkTitle(value);
+      i += 1;
+    } else if (arg !== void 0 && arg.startsWith("--title=")) {
+      args.title = checkTitle(arg.slice("--title=".length));
+    } else if (arg === "--commit") {
+      const value = argv[i + 1];
+      if (value === void 0 || value.startsWith("--")) {
+        args.commit = "HEAD";
+      } else {
+        args.commit = checkCommitRev(value);
+        i += 1;
+      }
+    } else if (arg !== void 0 && arg.startsWith("--commit=")) {
+      args.commit = checkCommitRev(arg.slice("--commit=".length));
     } else if (arg === "--file") {
       const value = argv[i + 1];
       if (value === void 0 || value.startsWith("--")) {
@@ -11960,7 +12961,7 @@ function tryOpenBrowser(url) {
     const windows = process.platform === "win32";
     const command = windows ? "cmd" : process.platform === "darwin" ? "open" : "xdg-open";
     const args = windows ? ["/c", "start", "", url] : [url];
-    const child = spawn2(command, args, { stdio: "ignore", detached: true, windowsHide: true });
+    const child = spawn3(command, args, { stdio: "ignore", detached: true, windowsHide: true });
     child.on("error", () => {
     });
     child.unref();
@@ -12065,7 +13066,7 @@ async function prompt(label) {
   });
 }
 var HOOK_SUBCOMMANDS = ["install", "status", "uninstall", "notify"];
-var CLI_ENTRY = fileURLToPath(import.meta.url);
+var CLI_ENTRY = fileURLToPath2(import.meta.url);
 function parseHookArgv(argv) {
   const [sub, ...rest] = argv;
   if (sub === void 0) {
@@ -12075,7 +13076,7 @@ function parseHookArgv(argv) {
   if (known === void 0) {
     throw new Error(`unknown hook subcommand "${sub}". Known: ${HOOK_SUBCOMMANDS.join(", ")}`);
   }
-  const args = { sub: known, dryRun: false, noProbe: false };
+  const args = { sub: known, dryRun: false, noProbe: false, capture: false };
   for (let i = 0; i < rest.length; i += 1) {
     const flag = rest[i];
     if (flag === "--settings") {
@@ -12093,13 +13094,17 @@ function parseHookArgv(argv) {
       args.noProbe = true;
       continue;
     }
+    if (flag === "--capture" && known === "notify") {
+      args.capture = true;
+      continue;
+    }
     throw new Error(`unknown option for hook ${known}: ${flag}`);
   }
   if (known !== "install" && args.noProbe) {
     throw new Error("--no-probe only means anything to hook install");
   }
   if (known === "notify" && (args.settings !== void 0 || args.dryRun)) {
-    throw new Error("hook notify takes no options: Claude Code runs it with the event on stdin");
+    throw new Error("hook notify takes only --capture: Claude Code runs it with the event on stdin");
   }
   if (known === "status" && args.dryRun) {
     throw new Error("hook status writes nothing, so --dry-run means nothing here");
@@ -12111,7 +13116,7 @@ function parseHookArgv(argv) {
 }
 async function runHookCommand(args) {
   if (args.sub === "notify") {
-    return runHookNotify({ readStdin: () => readAllStdin(), entryPath: CLI_ENTRY });
+    return runHookNotify({ readStdin: () => readAllStdin(), entryPath: CLI_ENTRY, capture: args.capture });
   }
   if (args.sub === "install") {
     return runHookInstall({
@@ -12154,13 +13159,13 @@ function parsePullArgv(argv) {
   if (ref === void 0) throw new Error("pull needs a run ID or a /r/<id> link, e.g. flatbread pull quiet-otter-4821");
   return { ref, ...out !== void 0 ? { out } : {} };
 }
-async function runPull(args) {
+async function runPull(args, deps = { ...defaultMcpDeps(storeDir(), bucketDir()), capsule: (ref) => fetchCapsule(ref) }) {
   const ref = parseRunRef(args.ref);
   if (ref === null) {
     console.error(`"${args.ref}" is not a run ID or a /r/<id> link`);
     return 1;
   }
-  const result = await fetchCapsule(ref);
+  const result = await readCapsule(ref, deps);
   if (!result.ok) {
     console.error(describeReadFailure(result, `could not pull ${ref.slug}`));
     return 1;
@@ -12169,19 +13174,148 @@ async function runPull(args) {
     process.stdout.write(result.capsule);
     return 0;
   }
-  const target = path18.resolve(args.out);
-  fs19.mkdirSync(path18.dirname(target), { recursive: true });
-  fs19.writeFileSync(target, result.capsule, "utf8");
-  console.error(`wrote ${target}`);
+  const target = path21.resolve(args.out);
+  fs22.mkdirSync(path21.dirname(target), { recursive: true });
+  fs22.writeFileSync(target, result.capsule, "utf8");
+  console.error(`wrote ${target}${result.from === "site" ? "" : ` (from this machine's ${result.from === "store" ? "shared runs" : "captured runs"})`}`);
   return 0;
 }
+function parseSearchArgv(argv) {
+  const query = {};
+  const words = [];
+  let local = false;
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    const valueOf = (flag) => {
+      if (arg.startsWith(`${flag}=`)) return arg.slice(flag.length + 1);
+      const value = argv[i + 1];
+      if (value === void 0 || value.startsWith("--")) throw new Error(`${flag} needs a value`);
+      i += 1;
+      return value;
+    };
+    if (arg === "--harness" || arg.startsWith("--harness=")) {
+      query.harness = toHarnessId(valueOf("--harness"));
+    } else if (arg === "--category" || arg.startsWith("--category=")) {
+      const value = valueOf("--category");
+      if (!TASK_CATEGORIES.includes(value)) throw new Error(`unknown --category "${value}". Known: ${TASK_CATEGORIES.join(", ")}`);
+      query.category = value;
+    } else if (arg === "--recovered") {
+      query.onlyWithRecoveries = true;
+    } else if (arg === "--local") {
+      local = true;
+    } else if (arg.startsWith("--")) {
+      throw new Error(`Unknown option for search: ${arg}`);
+    } else {
+      words.push(arg);
+    }
+  }
+  if (words.length > 0) query.query = words.join(" ");
+  return { query, local };
+}
+async function runSearch(argv, deps = defaultMcpDeps(storeDir(), bucketDir()), print = console.log) {
+  const { query, local } = parseSearchArgv(argv);
+  const { lines: lines2, siteSearched } = await searchEverywhere(query, deps, { remote: !local });
+  for (const line of lines2) print(line);
+  return local || siteSearched ? 0 : 1;
+}
+function parseCaptureArgv(argv) {
+  const args = { quiet: false };
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    const next = argv[i + 1];
+    if (arg === "--file" || arg === "--repo" || arg === "--harness") {
+      if (next === void 0 || next.startsWith("--")) throw new Error(`${arg} needs a value`);
+      if (arg === "--file") args.file = next;
+      else if (arg === "--repo") args.repo = next;
+      else args.harness = toHarnessId(next);
+      i += 1;
+    } else if (arg === "--commit") {
+      if (next === void 0 || next.startsWith("--")) {
+        args.commit = "HEAD";
+      } else {
+        args.commit = checkCommitRev(next);
+        i += 1;
+      }
+    } else if (arg.startsWith("--commit=")) {
+      args.commit = checkCommitRev(arg.slice("--commit=".length));
+    } else if (arg === "--quiet") {
+      args.quiet = true;
+    } else {
+      throw new Error(`Unknown option for capture: ${arg}`);
+    }
+  }
+  if (args.file !== void 0 && args.repo !== void 0) throw new Error("capture takes --file or --repo, not both");
+  return args;
+}
+async function runCapture(args, env = process.env) {
+  const dir = bucketDir(env);
+  const say = (line) => args.quiet ? logCapture(dir, line) : console.log(line);
+  try {
+    if (args.quiet && (env["FLATBREAD_HOOK_DISABLED"] ?? "").trim() !== "") {
+      say("skipped FLATBREAD_HOOK_DISABLED is set");
+      return 0;
+    }
+    let file = args.file;
+    if (file === void 0) {
+      const found = sessionForRepo(args.repo ?? process.cwd(), { env });
+      if ("problem" in found) {
+        say(`skipped ${found.problem}`);
+        return 0;
+      }
+      file = found.file;
+    }
+    const result = await captureToBucket({
+      file,
+      env,
+      dir,
+      ...args.harness !== void 0 ? { harness: args.harness } : {},
+      ...args.commit !== void 0 ? { commit: args.commit } : {}
+    });
+    if (result.status === "refused") {
+      say(`refused ${result.reason}`);
+      return args.quiet ? 0 : 1;
+    }
+    say(
+      `${result.status} ${result.slug} ${result.steps} steps, ${result.redacted} redacted` + (result.commit !== void 0 ? `, at ${result.commit.slice(0, 12)}` : "") + ` -> ${result.path}`
+    );
+    return 0;
+  } catch (error) {
+    say(`failed ${error instanceof Error ? error.message : String(error)}`);
+    return args.quiet ? 0 : 1;
+  }
+}
+function parseSetupArgv(argv) {
+  const args = {
+    dryRun: false,
+    uninstall: false,
+    noGit: false,
+    noMcp: false,
+    noProbe: false
+  };
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    if (arg === "--dry-run") args.dryRun = true;
+    else if (arg === "--uninstall") args.uninstall = true;
+    else if (arg === "--no-git") args.noGit = true;
+    else if (arg === "--no-mcp") args.noMcp = true;
+    else if (arg === "--no-probe") args.noProbe = true;
+    else if (arg === "--settings") {
+      const value = argv[i + 1];
+      if (value === void 0 || value.startsWith("--")) throw new Error("--settings needs a path");
+      args.settings = value;
+      i += 1;
+    } else throw new Error(`Unknown option for setup: ${arg}`);
+  }
+  if (args.uninstall && args.noProbe) throw new Error("--no-probe only means anything when installing");
+  return args;
+}
 async function main(argv) {
   const [command, ...rest] = argv;
   if (command === void 0 || command === "--help" || command === "-h" || command === "help") {
     console.log(USAGE);
     return command === void 0 ? 1 : 0;
   }
-  if (command !== "parse" && command !== "share" && command !== "view" && command !== "adapters" && command !== "login" && command !== "logout" && command !== "whoami" && command !== "hook" && command !== "pull" && command !== "mcp") {
+  if (command !== "parse" && command !== "share" && command !== "view" && command !== "adapters" && command !== "login" && command !== "logout" && command !== "whoami" && command !== "hook" && command !== "pull" && command !== "mcp" && command !== "search" && command !== "setup" && command !== "capture") {
     console.error(`Unknown command: ${command}`);
     console.error(USAGE);
     return 1;
@@ -12200,6 +13334,25 @@ async function main(argv) {
     }
     return runHookCommand(hookArgs);
   }
+  if (command === "search" || command === "setup" || command === "capture") {
+    try {
+      if (command === "search") return await runSearch(rest);
+      if (command === "capture") return await runCapture(parseCaptureArgv(rest));
+      const setup = parseSetupArgv(rest);
+      return runSetup({
+        entryPath: CLI_ENTRY,
+        dryRun: setup.dryRun,
+        uninstall: setup.uninstall,
+        noGit: setup.noGit,
+        noMcp: setup.noMcp,
+        noProbe: setup.noProbe,
+        ...setup.settings !== void 0 ? { settingsPath: setup.settings } : {}
+      });
+    } catch (error) {
+      console.error(error instanceof Error ? error.message : String(error));
+      return 1;
+    }
+  }
   if (command === "login") return runLogin(rest);
   if (command === "logout") return runLogout();
   if (command === "whoami") return runWhoami();
@@ -12218,7 +13371,7 @@ async function main(argv) {
       console.error(`mcp takes no options, got: ${rest.join(" ")}`);
       return 1;
     }
-    return runMcpServer(defaultMcpDeps(storeDir()));
+    return runMcpServer(defaultMcpDeps(storeDir(), bucketDir()));
   }
   if (command === "pull") {
     let pullArgs;
@@ -12251,10 +13404,11 @@ async function main(argv) {
       noReview: shareArgs.noReview,
       publish: shareArgs.publish,
       ...shareArgs.prUrl !== void 0 ? { prUrl: shareArgs.prUrl } : {},
+      ...shareArgs.title !== void 0 ? { title: shareArgs.title } : {},
+      ...shareArgs.commit !== void 0 ? { commit: shareArgs.commit } : {},
       ...storeDir() !== null ? { storeDir: storeDir() } : {},
       openBrowser: shareArgs.open && !shareArgs.noReview,
-      outputPath: SHARE_OUTPUT_PATH,
-      parseOutputPath: OUTPUT_PATH
+      outputPath: SHARE_OUTPUT_PATH
     });
     return result.exitCode;
   }
@@ -12272,12 +13426,12 @@ var invokedDirectly = (() => {
   if (entry === void 0) return false;
   const real = (file) => {
     try {
-      return fs19.realpathSync(file);
+      return fs22.realpathSync(file);
     } catch {
-      return path18.resolve(file);
+      return path21.resolve(file);
     }
   };
-  return real(entry) === real(fileURLToPath(import.meta.url));
+  return real(entry) === real(fileURLToPath2(import.meta.url));
 })();
 if (invokedDirectly) {
   main(process.argv.slice(2)).then((code) => {
@@ -12293,8 +13447,14 @@ export {
   TMP_DIR,
   main,
   openableUrl,
+  parseCaptureArgv,
   parsePullArgv,
+  parseSearchArgv,
+  parseSetupArgv,
+  runCapture,
   runLogin,
   runLogout,
+  runPull,
+  runSearch,
   runWhoami
 };